last executing test programs: 2m59.353325385s ago: executing program 2 (id=48): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa2aaaaac772528a7e77845d86dd60ff00f500140600fee06f79cb853d8219000000000000aa35fd8bf0ff7f00000000000000000001000000000000000000000000000000f84562166b4c641c92ec8b561985cb332930e9d475b5a95cdbdec174bb626707f324e3f40cc3b27fe8d9"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x44}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10850}, 0x804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000c8010000090a010400000000000000ea0100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000218c0111800b00010074617267657400007c0102800400030008000240000000006b010100"], 0x210}}, 0x0) 2m59.23914974s ago: executing program 2 (id=51): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4045001}, 0x840) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0xaf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = accept4(r0, 0x0, &(0x7f0000000c00), 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_procs(r6, &(0x7f0000000c40)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000cc0)=0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000d00)=0x0) sendmsg$nl_generic(r8, &(0x7f0000001280)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000000d40)={0x4d8, 0x20, 0x4, 0x70bd25, 0x25dfdbfc, {0x1d}, [@typed={0xc, 0xf1, 0x0, 0x0, @u64=0x4}, @nested={0xce, 0x45, 0x0, 0x1, [@generic="7f711afd0c8859f3a6bd6435", @generic="0fb3a508e1beac6b81c437b569fb03a8ffe8adb8fc0076c8b93615565fd2b28e7e057999fc94da7f4eb853c1b89e100aeb63dc539c5e057bded6", @generic="a72889f94da64e60a3bba4f959bb466b8368758b0c5099b5e53d", @nested={0x4, 0x14}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r10}, @typed={0x8, 0xe2, 0x0, 0x0, @u32}, @generic="5b0af0e4df5ff12e9f00c57584278d5b5c4e0ccbf8e92009e060a2cb4d61295fea667e97595ec74302aca62b62e704eba0d7556779147fe6d0d425e6c60d8a4d1fa7df0ecf409454ce9de3b568f7e323df576db6ec32"]}, @typed={0x8, 0x60, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x24, 0x0, 0x0, @pid=r12}, @typed={0x8, 0x3a, 0x0, 0x0, @pid=r13}, @typed={0xc, 0xf5, 0x0, 0x0, @binary="3c32b5b772ed7b3a"}, @nested={0x3a5, 0xec, 0x0, 0x1, [@generic="600d6b7c2b43da7735028848c1876e642cda84bb80d168b0d196c538cfaf24a2c25b50966af588aa1a8628e5f71036cd495ac1c69327878ea89331f2e4f2049558a4fbf65b9acc2deed5ba5c3bf687ac1365e1200ea4e1e88c9f7407a5c91360b34d6527c54ce011f328d5e86627de97e77036e2c1bff36cf21503320220f5587feb4deb89a8561ce530f936810f27cb807cfb7323c17c2e3fd5fd177880120d06a94fc0c147db26136f84af9b2dd22b33763f89e8ca5d636edc75cf489dcd08bdccdd9c4e8519c934b67aa5934da97a77980f8d8254a7", @generic="80e8b1dd333457c466219edf426b46cb537ce27a05fe08ca2b9b745a7f495fbc06f4e64514ba89e2d0af237eb0d20be02e67f751d21c3b967701b73bf67f8016c035b4434ba61a95d6", @typed={0xc, 0x74, 0x0, 0x0, @u64}, @generic="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", @generic, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@local}, @generic="8af03735f9ce8df0e1807983c63a6b02326f6e86c0e24f63cd9a293d79ef77675acc1c7504973afd6f997c1d783a6a1bfe4a82c7477a5561f611beb966a11110ad0c7630fb172ecce19f0407efd1095ffcc59db786760b5b422ac98310d3dba1f471a778b7faeeb11cf579e8b7906f7fb3fe7cbba30df04b516690bcc23b39938af344e45c9ea0f9ee5b742ec894cf58db1c007612470af8aca5075a2dfdbdff07ea51", @typed={0xcf, 0x109, 0x0, 0x0, @binary="a04b45e94be99e7769f2a307bcda863d9a2fa1fc3b878c51a48be9e2311abe02a83d4d0efde8a3198b00d78237c8b77d610f3bc5d109c76a13c6b2fdb9e74d76b1bc49f39e4098a80692c142a2f98ae69d74e95b5d9e406e2b22d743f88810d0ce23d450f43bedb5d2059b0a5c53755de9b3047b4eb528d9a036ead6bfb57ba7b35eda4d3235394c7d4815b311f3009eead613b3505d827bdf46300ae0e669c6fa0bb0508d4bff7d74956a2f0600c1a187ea60a8e2a9bde4cf2471383ccf3453308867edf6f12dfb23015e"}]}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@mcast2}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000415) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000400000a010400000000000000000200000608000b40000000040d00010073797a30000000020900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m59.236574569s ago: executing program 3 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0xa4, 0x30, 0xb, 0x5, 0x0, {}, [{0x90, 0x1, [@m_ct={0x8c, 0x1, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x39, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "e1466b63d200"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e28dffb7f762772c7fc6ea179877297b"}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x2048000) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}}, 0x800) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x6, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a8d0aec4d69b5b96"}}, 0x48}}, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) recvmmsg$unix(r3, &(0x7f0000000b80)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000000500)=""/113, 0x71}], 0x6, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/186, 0xba}, {&(0x7f0000000700)=""/73, 0x49}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/87, 0x57}, {&(0x7f00000009c0)=""/37, 0x25}], 0x4, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x3, 0x0, &(0x7f0000000c40)={0x77359400}) 2m59.169819235s ago: executing program 4 (id=53): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 64) writev(r1, &(0x7f0000001980)=[{&(0x7f00000005c0)="87", 0x1}], 0x1) (rerun: 64) 2m59.06977614s ago: executing program 3 (id=55): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m58.972030308s ago: executing program 3 (id=56): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fe, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000340)=""/101, &(0x7f0000000080)=0x65) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x100000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket(0x2a, 0x80000, 0x7fff) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x15, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0xc800) socket$nl_route(0x10, 0x3, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ppoll(&(0x7f0000000280)=[{r6, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}}, 0x0) 2m58.366061298s ago: executing program 1 (id=61): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x0, 0x0, 0xe}, @initr0, @exit, @alu={0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0xe, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, r0, 0xce09f000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x0, 0x0, 0xe}, @initr0, @exit, @alu={0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0xe, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, r0, 0xce09f000) (async) 2m58.340550078s ago: executing program 1 (id=62): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x12043) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f0000001080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001100)="f4cc1171ac192c8cfa4e591da1291b940a5c1fc3931a25777ee4d841eee502bf9c72b077de30757ecf580df359dbcd17bcd6526146e2664620e3c090c9e0068786c0cc8d96c070e7d542450efc582fb00fa88f2d78598b647b6789a8dfa79f661bd920b54468e525902455f6e306b6e7aee2df79d2460a23d075b1846dda2bf9f4dffb52c993f65d884eae9b3d2c2a800dce125eaf870c76ac5a648f28cf43ef6a97dfe2fa4602eb6164bc7630a1c3280870996729eb34e42f9aa903300be6f18cf7dbe8", 0xc4}, {&(0x7f0000001200)="53f82b78cedf577de51711a877897075a4f73dcedd39eeaa2b5050c4a27b5266c10989a682e7253b58e5a162d36e4c2aec0697a5a2496b0438347716c32afd5a4c2ffb3d088ffcfe9d934ab5ace8de3791b1705e762ac7532e86e1dae2eba6fb304f80830cd6bc47849e8df3506f4838043cf1346e26ca35b75c5a7ce10809a66a5777f5ce41605257ae74bd09f6c1b3e034391595daa76a57077d2d97f266658e6962f6b4b1fc9bc7", 0xa9}, {&(0x7f00000012c0)="add89b36da42e5bf4ad84d1d92b22e09cea7243527cb4c2ce80c67254fe8d7aab2a6b94b31fadaefdf5d1475d6cb514bb05959860d50ec0b0f9d574385716e5d17b9a92a4a230646b89325e10459d798d8cec49f0bb681ca3cce7bf6d3c4a40c3524e1d240ae909ebb4e5610268a4fb043acb1995a81dae4e76a4943aac9ffc09bfa27caffa5b864e13308c71ce9bd789b768b712370ae0d1e9ea7531d9784d3faf382d730368b61f10c9966fcfa4e3776ac0e9e3dc6ae07322fb52a25c8c15d10844e14a00961a401abd0ff921fed9d84a0171cdf4c6f87474d413dd1c97911fe9319bd8d", 0xe5}, {&(0x7f00000013c0)="04f918244723c0e66923234ead2f8e56b6bef63b74b32740c0b118dee4", 0x1d}, {&(0x7f0000001400)="e59ab4bc383962e8c4de4e19053250d91825a564da68048f50b10d6b550a8bdcf5c812efab10b464417217a0207440e9ec378dc4857f5a7fc309e4be0275da94eab73cbe5f5f9123a2809ecebb6f79fc29be490c90e638506a1ed8e7708067063717f975ebb3bff6d5c81a3e5a8f5c2cdbe878d71df59cae60cab92846b4e56a0db6ad38ae42a8e1bae2fd132b63622f9583f630d08d8324a187ab6fa0be19b13d298598", 0xa4}, {&(0x7f00000014c0)="6dc42a9cd6cf5caf5a41488a7e7e0da3c6c1e721b3957b948c4020d9e07b768c63d862eb101e2aafe48c26e629e53481c00bd1cb042276f112d0b251797148df3d3bfced66ed882a16ac01f7b5b891d96ccf485ab5ff1e8d04817d1224c1558d092c67ad482d64f64e7aa1e1385ac52db2580c", 0x73}, {&(0x7f0000001540)="f767beffe25b5cc134e5e598595778c2cd00591e551a6a9d20cebe5b0326f7d55989d6c493a1e4cb02adf1722a6e7328656b8e46e752046fd0453ffc3db77811a12ec3d477dcdbbfbeef06f88f5400b3bcad4f129f", 0x55}, {&(0x7f00000015c0)="c35d729d8e134c39357f3b89ef5e4fa36f404c07ba51c77832c0f50765fa33aa1c9fbf9a630c473631aa1ac2bb65fa89a8265cf36626b6252288567fb920585d8420a892a5fcdd8460fb6aa89859b109cdbee67272807c35705f7cf68a", 0x5d}, {&(0x7f0000001640)="7a37275e002deab6d68f911794ee0312a3ac1d379642ef75d1840fb077066e11f61cda30bed31e9d79ea1b224667f4b007c94f18dde6987bae25c03436a738ed83b39e8d7b7b4d518e09f7f94ba174574762b2537028f69ec57eae0b40202c263b46e379b217e464cfea0453367a628e5e0738e17e51d42764b03f95bacf1697f2436ea38a0853e66a095129faa38b3dd2b9091d4a56bcab617a46e979dcb643c34e40b706faaa0b3e", 0xa9}], 0x9, 0x0, 0x0, 0x14}], 0x1, 0x4) r1 = socket$inet6(0xa, 0x805, 0x0) socket$phonet(0x23, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x22020600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=ANY=[@ANYBLOB="200000000424150dc4bf9096c84e06010100000000000000000200000008e002"], 0x20}}, 0x40000) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0xd) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000002900)=""/4078, &(0x7f00000000c0)=0xfee) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2m58.270795313s ago: executing program 4 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_deladdr={0x15, 0x15, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x18, 0x2d, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x5, 0x1}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r10, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) recvmmsg(r10, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r13 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40088a01, &(0x7f0000000000)=0x100) r14 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000040)={0x60000005}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82a201}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0c00080001000000000000000c00060000000000000000000c0002000600000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 2m58.263468861s ago: executing program 2 (id=64): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x23, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000500008801400078008000600230000000800050028ef6e012c00078028000500e90e08c9"], 0x88}}, 0x0) 2m58.098158673s ago: executing program 1 (id=66): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m58.069197248s ago: executing program 4 (id=67): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x118, 0x2c, 0x20, 0x70bd27, 0x25dfdbff, {0x5}, [@nested={0xfa, 0xe4, 0x0, 0x1, [@generic="0868ee56f701e4d542b3bdf9b2ecb15f5cab9f0d75d66fee1db1d756bcee10a12dd1163e56e2587d90d378fa05582aac0a0a550509b11fe19b052bfa1a9d63ab567b1b59cdebbba2ae7f3bea083ec2f4a4a91dcb0fdbe6d99de7b8e23b1b7432ef7e8079ad3afac8906867d0b5998c37145d2d41f088a24efb295bb57ebf239cdd47467e3c50e0a9e0363baa63a2e7c4fd0b73fc44fa5d5b13b8a07205d8ab3cfd4140a4b5df57ae62f004ebbc9881e2d5dcabd2b4cc66e39b5aad7f32e3c3943838e4e7dd09a2956955d4f8f16a47665297c7b4d4666e43cdfbadfb5a8eb6e5322143ca5c26bac92a3079ea50cad8c9134a900968e3"]}, @generic, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0xc800) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 2m58.035800822s ago: executing program 2 (id=68): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) (async) 2m57.954135351s ago: executing program 3 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xfffffce3, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x16, 0xa, 0x3, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000514030027bd7000fedbdf25080021"], 0x20}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m57.885909408s ago: executing program 4 (id=71): socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x860) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6030}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) setsockopt(r4, 0x1, 0x8, &(0x7f0000000200)="22aa915454c0dce047fc097d39e01adf08748b61606bc2138395ee43a5e333077d5d52bb4b3a02c521d6e866cef2", 0x2e) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="11e293d4452e2f380d63019c1d2b8e9785eb3dd1c600000076000000000000002700000000000000029e000000002000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 2m57.876344065s ago: executing program 1 (id=72): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436040000000000fdff000058000b482bca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c1000000fff00224e0000", 0x58}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x140, 0x12, 0x60a, 0x140, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x0, 0x804}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 2m57.738026408s ago: executing program 2 (id=73): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) (async) r1 = socket(0x28, 0x1, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000004c0)=0x80000001, 0x4) connect$packet(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @random="5ee0425eba97"}, 0x14) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="0310da421e5b29086f223b453ff0a8d8f80bcafbf61b71e2ba048a085edf41f0e68052354b22174bf88316d2e1e69fff0120324b4a6e0458148bc928c101982505f5e8bceff9881cd7caa2a38b1e584abf4d539a8c7014710f5054b00bba98fd0937d67021d2a5714b7c78c8bc58d8a7118d0c36be37da5df6ada2803a3a317b4a7005ed4f8cc76b9e93640a90a78a45370722674df0820ec5cd7ec400df84cd981f7f62218925cf2eecfae85d735325bb07ed2def845572f2bc2842eaccffa63780e4ed68e97871df5116defe551431404adffee059aafdfd3ed3f68f2e4d58c39226e7f161f994766c13bcf6c8df44aa6512"], 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="f0000000100020000000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000004e240000020000003b000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0a0101050000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000fcfffffffdffffff000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007bc0ab2081145ab7479bad9b890000000000000000000000000000000000000000000000000000000000003500"], 0xf0}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='initcall_level\x00', 0xffffffffffffffff, 0x0, 0xe}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r5, 0x0, 0x3, &(0x7f0000000180)='%/\x00'}, 0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000700)={0x0, 0x3}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r8, 0xb97f}, 0x8) unshare(0x4000400) (async) close(0xffffffffffffffff) (async) listen(0xffffffffffffffff, 0x0) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000800000021000000800000007fa88840ffdad3ffffffffff173aec87cba43f8441d0c724f100098bf8d233", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000c80)=ANY=[@ANYBLOB="1802000001ffffff00000000000004989a8200008500000017000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000029d2b7bf224dd0fab7d50e82fdb3b1fe10", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14010000", @ANYRES16=r7, @ANYBLOB="000025bd7000fbdbdf2501000000f40008801c00078008000600bc00000008000500280aaa76080005008ec5856224000780080006007e000000080000008500000008000600e0000000080006007e000000040007803c000780080006009f0000000800050000000000080005006525984508000500bd9d2023080005004db46a3b08000500096c6a090800050090b223784400078008000500bc41554a08000500fb2f882208000500f357e86f080006007c00000008000500f4b7140b08000600f2000000080005000343b84508000500bebb21392c00078008000500b6f4332d08000600bc00000008000500aef3f948080006008b000000080006009800000004000c8008000100000000006fb4967b6c77084caa79bbe96eea7fa3cbab876e852fb205c6d55ed941e7d740bae2b7826dac7300f9cc6e1c9ad2f48085e04424173bd0b297f5cc5b52ccf6535a196ce4c9cc5597fabc0132dd7af164a79c945dfa2a02d7a4d8d5106a200d6fd7e2361bf495e188a8f311a5166741e560a97ddacd0b7ea5b58462226184f51d534a66f4895e22aa1e9c285ac7958adb5a08cf792c58dee8bd8d2f38fe"], 0x114}, 0x1, 0x0, 0x0, 0x20048010}, 0x40000) (async) r11 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) 2m57.714140571s ago: executing program 3 (id=74): syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x0, 0x7}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe61}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe61}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = accept4(r0, 0x0, &(0x7f0000000200), 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x20008851, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x16) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x20008851, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x40, 0x800c, 0x28}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x40, 0x800c, 0x28, 0x0, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={r3, @in={{0x2, 0x4e21, @local}}, 0x439, 0x2, 0x0, 0x1, 0x4, 0x0, 0x6a}, 0x9c) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000007c0)="007c2ba1551e00a04c987392dd240181590a6e9e739b2b946114647c2ff5dbe4b5a8e5f4471603f0c3b18d877ac1f115831a1e9f297868d944d90b14b7c200767f9b0ceb11f6b90a03e875c3c552ca574a98b8f6b6d02078fd704db4f9fcc80f7fe863054194b9d99d", 0x69}], 0x1) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x40, @broadcast}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x9) r5 = socket(0x2b, 0x5, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x5, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000003b150f3f00ac54f05f620a0e2b3610ac3dba4bd545361344e088d8b0fc5b9adb67f48a28e408d32c30fae4ba277a4478711cf09ff551f588c184b254c5bfc4c82076295b29982cd846680a080137674f", @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf25150000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000003b150f3f00ac54f05f620a0e2b3610ac3dba4bd545361344e088d8b0fc5b9adb67f48a28e408d32c30fae4ba277a4478711cf09ff551f588c184b254c5bfc4c82076295b29982cd846680a080137674f", @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf25150000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='snd_soc_jack_irq\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='snd_soc_jack_irq\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r10, 0x0, 0x0, 0x0}, 0x30) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f0000000080)) 2m57.678535471s ago: executing program 1 (id=75): bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) unshare(0x600) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002640)=r2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000080)={0x1, 0x1e03, 0x33, &(0x7f0000000040)=""/51}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000047733757000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17fe, @void, @value}, 0x94) close(0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r7 = socket$inet6(0xa, 0x1, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in=@private=0xa010100, 0x0, 0x81b7, 0xfffc, 0x0, 0xa, 0x20}, {0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x65a, 0x8002}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe40b}}, 0xe8) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000d6000000000000009500007b000000007a000000180000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x2800, 0xf9000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x40}, 0x1, 0x2, 0x0, 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="95a7891a86ff3ecd2f8d1bbc3a46613e05dfefe351ea93af39e36a1e251ec265a1d780f125fe", @ANYRES16=r9, @ANYBLOB="000728bd7000fedbdf250500000005000200070000000500070002000000050002000500000008000500040000004400018008000300030000000800030001000000140002007866726d30000000000000000000000008000300020000001400020076657468305f746f5f7465616d00000005000600d3000000"], 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m57.657873133s ago: executing program 4 (id=76): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x4, 0x7}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0xc1df, 0x4e24, 0x644, 0x2, 0xa0, 0x20, 0x2e}, {0x8, 0x3, 0x100, 0x80000000, 0x4, 0xab, 0x0, 0x8000000000000001}, {0x596896db, 0xfffffffffffffffc, 0x3, 0x45c9}, 0x8, 0x6e6bb0, 0x1, 0x1, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x2, 0x2, 0xf0, 0x400000, 0x0, 0x8b}}, 0xe8) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010102, @private=0xa010101}, 0x10) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x24, &(0x7f0000000200), 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10002008}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast2}, &(0x7f0000000280)=0xc) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x81, 0x2, @vifc_lcl_ifindex=r5, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000000)=0x5, 0x12) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r4, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, 0x0) (async) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r12}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080)={r9, 0x2}, 0x1a) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r9, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @local, 0x8}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000240)=0x10) 2m57.450816877s ago: executing program 3 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x300, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000500008801400078008000600230000000800050028ef6e012c00078028000500e90e08c9"], 0x88}}, 0x0) 2m57.311214695s ago: executing program 32 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x300, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000500008801400078008000600230000000800050028ef6e012c00078028000500e90e08c9"], 0x88}}, 0x0) 2m57.185226124s ago: executing program 1 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/160, 0xa0}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041aeeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x2f) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400e3ff030000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="000000000303000000ffff00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x34, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x8d8, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x0, 0xffe0}, {0x0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x880, 0x2, [@TCA_CGROUP_POLICE={0x87c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x76}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x161, 0x6, 0x3, {0xa0, 0x0, 0x1, 0x749, 0x7, 0x5}, {0xff, 0x1, 0xed19, 0x7, 0x100, 0x1}, 0x100, 0xffff, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x10, 0x81, 0x4, 0x10000, 0xffff, 0x40, 0x3, 0x9, 0x3, 0x712a33aa, 0x9, 0x789, 0x80000001, 0xff, 0x5, 0x5, 0xb1, 0xc75, 0x4, 0x3, 0x5, 0x6, 0x10, 0x800, 0x8, 0xd102, 0xb720, 0xb898, 0xf, 0x9, 0xfc, 0x3, 0x200, 0x10000, 0x5, 0x0, 0x6, 0xf25b, 0x2, 0x9, 0x80, 0x4, 0x10, 0xff, 0x6, 0x8, 0x67, 0x7, 0x4, 0xfffff801, 0x7, 0x0, 0x1000, 0x40, 0xa, 0x8, 0xa, 0x7, 0x0, 0x3, 0xffff, 0x400000, 0x6, 0x6, 0x9, 0xed00, 0x8, 0x200, 0x9, 0x9, 0x2, 0x1, 0x2, 0x0, 0x9, 0x10000, 0x8833, 0x1, 0x6, 0x2, 0x3c293848, 0x0, 0x0, 0x2, 0x8, 0x168, 0xfffffff7, 0x4, 0x7, 0x101, 0x3a, 0x10, 0x40, 0x3, 0xf297, 0x6, 0x7fffffff, 0x6, 0x2, 0x401, 0xfffffb92, 0xfffffff7, 0xffffffff, 0xeb, 0x6, 0x3, 0x9, 0xfffffe01, 0x4, 0x6, 0x0, 0x8000, 0xb9, 0x96b6, 0xcfe63e0, 0x6, 0x3054, 0x0, 0x7a, 0xdb, 0x4, 0x1, 0x1b3, 0xfffffffa, 0x0, 0x0, 0x5, 0xb, 0x5, 0x5, 0xfffff001, 0xae, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x80, 0x9, 0xa, 0x6, 0x5, 0x7fffffff, 0x80, 0x8, 0x6, 0xbba, 0x8, 0x1, 0x1ff, 0x1, 0x0, 0x2, 0x400, 0x6, 0x4, 0x401, 0x2, 0x1c000, 0xffff, 0x8, 0x2, 0x800, 0x80000000, 0x4, 0x1, 0x0, 0xff, 0x2, 0x9, 0x9, 0x9, 0x1000, 0x5, 0xfffffffb, 0x400000f, 0x3, 0x7802, 0xc7, 0x7fffffff, 0x390, 0xffff, 0x7fff, 0x0, 0x7fff, 0x7, 0x2000000, 0x755, 0x200, 0x0, 0x1, 0xffffffff, 0x2975, 0x2, 0x1, 0x8, 0x9, 0xc39, 0x0, 0x5, 0x5, 0x1000, 0x6649000, 0x7, 0x3ff, 0xf, 0x1, 0x1, 0xf61d, 0x4, 0x2, 0x7, 0x7, 0x1, 0x7, 0xffff04e5, 0x1a9d333b, 0x0, 0x3, 0x101, 0x0, 0x1, 0x1000, 0x50, 0x6, 0xedf, 0x6, 0x3, 0x5, 0x1, 0x3, 0xff4, 0x1, 0x2, 0x1, 0x7ecf3c66, 0x201, 0xad, 0x2, 0x1, 0x6115800, 0x5, 0xd3, 0x7, 0x4, 0x8, 0x7, 0xe75, 0x4, 0x8, 0x7, 0xffffff29, 0x7, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xee, 0xf, 0x2, 0x80000000, 0x10001, 0x8, 0x4, 0x3, 0x5, 0x0, 0x0, 0x8, 0x1, 0x90f, 0x6, 0x6, 0x2, 0x80000000, 0xe0000000, 0xf5, 0x7, 0x9, 0x4, 0x5, 0x4, 0x6, 0x9, 0x7, 0x1, 0x796, 0x3, 0x0, 0xe, 0x9, 0x707, 0x1e0f, 0x2, 0x2, 0x6, 0xff, 0x5, 0x800, 0x3, 0x29, 0x80000, 0x0, 0xb, 0x9, 0x0, 0x6, 0xffffffff, 0x200, 0x8, 0x5542edf3, 0x34cd2858, 0x2, 0x1, 0xfff, 0x6ef, 0x2, 0x7fb1, 0x80000000, 0xb, 0x6, 0x7, 0xfffffe00, 0x43, 0x5710, 0x3ff, 0x5, 0x3ff, 0x80, 0x357a, 0x6, 0xfffffff9, 0x5, 0x9, 0x4, 0x7, 0x7fff, 0x6, 0x9, 0x7, 0xfffffff9, 0x57d2, 0x8001, 0x0, 0x3, 0x7, 0x5, 0x7, 0xc, 0x17, 0x1, 0x4, 0x1, 0x8, 0x65af, 0x6, 0xd475edd, 0x3, 0x80, 0x8, 0x0, 0x4, 0x3, 0x66fe3473, 0x7, 0x80000001, 0x2f880, 0xe, 0x7, 0x7, 0x3eaa, 0xf0fd, 0xb0d6e4a, 0x7, 0x7fff, 0x5, 0x2, 0x7fffffff, 0x6, 0x97, 0xffffffff, 0xdb9, 0x4, 0x902, 0x80000000, 0x7, 0x68f, 0x6, 0x6, 0x9, 0x4, 0x5, 0x4, 0xffffffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x7fffffff, 0x1, 0x2, 0xc, 0x3, 0x8, 0x3, 0x5, 0x6, 0xa1, 0x0, 0x1000, 0x100, 0x9, 0x9, 0xc, 0x3, 0x4, 0xfffffff8, 0xa1, 0x401, 0x4, 0x8, 0x2, 0xc92, 0x3, 0xa4, 0x0, 0xd5a1, 0xd, 0x18b, 0x3, 0x1, 0x246e, 0x4, 0x0, 0x9, 0x0, 0x6, 0x6, 0xa4, 0x9, 0x8, 0x9, 0xffffff81, 0x289, 0x7, 0x8110, 0x9, 0x784b, 0x1, 0x5, 0xb3a0, 0xffffffff, 0x3e4, 0x240, 0x9, 0xfffffffa, 0x5, 0x3, 0x7, 0x2, 0x8, 0x2d66, 0x1000, 0x8, 0x8, 0x9, 0x9cf, 0x9, 0x9, 0x7, 0x8, 0x7, 0x1000, 0xffffffff, 0x0, 0xa, 0x6, 0x800, 0x9, 0x4, 0x4, 0x8, 0x14aa, 0x4, 0x9, 0x7, 0xffffff00, 0x0, 0x2, 0x10, 0x8000, 0x2, 0x1, 0x4, 0x5d09, 0x5, 0x7, 0x8076, 0x0, 0xfffffff8, 0x4, 0xffff, 0xffff, 0x3, 0x8, 0x1, 0x800, 0x0, 0x7fff, 0x5d6, 0x97, 0x3]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x8d8}, 0x1, 0x4000000, 0x0, 0x2e2777c0fed9991d}, 0x44000) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="040800000000f8ffc10400000001072800000003088e1e03070000000000000000040000000000004d0100000000000008000000000000000001000401090502025dc20400000004"], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) 2m57.184525305s ago: executing program 2 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000b639909cc91f0572", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) recvfrom$unix(r1, &(0x7f0000000140)=""/99, 0x63, 0x142, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYBLOB, @ANYRESDEC], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x3f5, 0x20, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24044005}, 0x40010) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m56.743195961s ago: executing program 33 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/160, 0xa0}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041aeeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x2f) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400e3ff030000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="000000000303000000ffff00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x34, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x8d8, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x0, 0xffe0}, {0x0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x880, 0x2, [@TCA_CGROUP_POLICE={0x87c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x76}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x161, 0x6, 0x3, {0xa0, 0x0, 0x1, 0x749, 0x7, 0x5}, {0xff, 0x1, 0xed19, 0x7, 0x100, 0x1}, 0x100, 0xffff, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x10, 0x81, 0x4, 0x10000, 0xffff, 0x40, 0x3, 0x9, 0x3, 0x712a33aa, 0x9, 0x789, 0x80000001, 0xff, 0x5, 0x5, 0xb1, 0xc75, 0x4, 0x3, 0x5, 0x6, 0x10, 0x800, 0x8, 0xd102, 0xb720, 0xb898, 0xf, 0x9, 0xfc, 0x3, 0x200, 0x10000, 0x5, 0x0, 0x6, 0xf25b, 0x2, 0x9, 0x80, 0x4, 0x10, 0xff, 0x6, 0x8, 0x67, 0x7, 0x4, 0xfffff801, 0x7, 0x0, 0x1000, 0x40, 0xa, 0x8, 0xa, 0x7, 0x0, 0x3, 0xffff, 0x400000, 0x6, 0x6, 0x9, 0xed00, 0x8, 0x200, 0x9, 0x9, 0x2, 0x1, 0x2, 0x0, 0x9, 0x10000, 0x8833, 0x1, 0x6, 0x2, 0x3c293848, 0x0, 0x0, 0x2, 0x8, 0x168, 0xfffffff7, 0x4, 0x7, 0x101, 0x3a, 0x10, 0x40, 0x3, 0xf297, 0x6, 0x7fffffff, 0x6, 0x2, 0x401, 0xfffffb92, 0xfffffff7, 0xffffffff, 0xeb, 0x6, 0x3, 0x9, 0xfffffe01, 0x4, 0x6, 0x0, 0x8000, 0xb9, 0x96b6, 0xcfe63e0, 0x6, 0x3054, 0x0, 0x7a, 0xdb, 0x4, 0x1, 0x1b3, 0xfffffffa, 0x0, 0x0, 0x5, 0xb, 0x5, 0x5, 0xfffff001, 0xae, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x80, 0x9, 0xa, 0x6, 0x5, 0x7fffffff, 0x80, 0x8, 0x6, 0xbba, 0x8, 0x1, 0x1ff, 0x1, 0x0, 0x2, 0x400, 0x6, 0x4, 0x401, 0x2, 0x1c000, 0xffff, 0x8, 0x2, 0x800, 0x80000000, 0x4, 0x1, 0x0, 0xff, 0x2, 0x9, 0x9, 0x9, 0x1000, 0x5, 0xfffffffb, 0x400000f, 0x3, 0x7802, 0xc7, 0x7fffffff, 0x390, 0xffff, 0x7fff, 0x0, 0x7fff, 0x7, 0x2000000, 0x755, 0x200, 0x0, 0x1, 0xffffffff, 0x2975, 0x2, 0x1, 0x8, 0x9, 0xc39, 0x0, 0x5, 0x5, 0x1000, 0x6649000, 0x7, 0x3ff, 0xf, 0x1, 0x1, 0xf61d, 0x4, 0x2, 0x7, 0x7, 0x1, 0x7, 0xffff04e5, 0x1a9d333b, 0x0, 0x3, 0x101, 0x0, 0x1, 0x1000, 0x50, 0x6, 0xedf, 0x6, 0x3, 0x5, 0x1, 0x3, 0xff4, 0x1, 0x2, 0x1, 0x7ecf3c66, 0x201, 0xad, 0x2, 0x1, 0x6115800, 0x5, 0xd3, 0x7, 0x4, 0x8, 0x7, 0xe75, 0x4, 0x8, 0x7, 0xffffff29, 0x7, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xee, 0xf, 0x2, 0x80000000, 0x10001, 0x8, 0x4, 0x3, 0x5, 0x0, 0x0, 0x8, 0x1, 0x90f, 0x6, 0x6, 0x2, 0x80000000, 0xe0000000, 0xf5, 0x7, 0x9, 0x4, 0x5, 0x4, 0x6, 0x9, 0x7, 0x1, 0x796, 0x3, 0x0, 0xe, 0x9, 0x707, 0x1e0f, 0x2, 0x2, 0x6, 0xff, 0x5, 0x800, 0x3, 0x29, 0x80000, 0x0, 0xb, 0x9, 0x0, 0x6, 0xffffffff, 0x200, 0x8, 0x5542edf3, 0x34cd2858, 0x2, 0x1, 0xfff, 0x6ef, 0x2, 0x7fb1, 0x80000000, 0xb, 0x6, 0x7, 0xfffffe00, 0x43, 0x5710, 0x3ff, 0x5, 0x3ff, 0x80, 0x357a, 0x6, 0xfffffff9, 0x5, 0x9, 0x4, 0x7, 0x7fff, 0x6, 0x9, 0x7, 0xfffffff9, 0x57d2, 0x8001, 0x0, 0x3, 0x7, 0x5, 0x7, 0xc, 0x17, 0x1, 0x4, 0x1, 0x8, 0x65af, 0x6, 0xd475edd, 0x3, 0x80, 0x8, 0x0, 0x4, 0x3, 0x66fe3473, 0x7, 0x80000001, 0x2f880, 0xe, 0x7, 0x7, 0x3eaa, 0xf0fd, 0xb0d6e4a, 0x7, 0x7fff, 0x5, 0x2, 0x7fffffff, 0x6, 0x97, 0xffffffff, 0xdb9, 0x4, 0x902, 0x80000000, 0x7, 0x68f, 0x6, 0x6, 0x9, 0x4, 0x5, 0x4, 0xffffffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x7fffffff, 0x1, 0x2, 0xc, 0x3, 0x8, 0x3, 0x5, 0x6, 0xa1, 0x0, 0x1000, 0x100, 0x9, 0x9, 0xc, 0x3, 0x4, 0xfffffff8, 0xa1, 0x401, 0x4, 0x8, 0x2, 0xc92, 0x3, 0xa4, 0x0, 0xd5a1, 0xd, 0x18b, 0x3, 0x1, 0x246e, 0x4, 0x0, 0x9, 0x0, 0x6, 0x6, 0xa4, 0x9, 0x8, 0x9, 0xffffff81, 0x289, 0x7, 0x8110, 0x9, 0x784b, 0x1, 0x5, 0xb3a0, 0xffffffff, 0x3e4, 0x240, 0x9, 0xfffffffa, 0x5, 0x3, 0x7, 0x2, 0x8, 0x2d66, 0x1000, 0x8, 0x8, 0x9, 0x9cf, 0x9, 0x9, 0x7, 0x8, 0x7, 0x1000, 0xffffffff, 0x0, 0xa, 0x6, 0x800, 0x9, 0x4, 0x4, 0x8, 0x14aa, 0x4, 0x9, 0x7, 0xffffff00, 0x0, 0x2, 0x10, 0x8000, 0x2, 0x1, 0x4, 0x5d09, 0x5, 0x7, 0x8076, 0x0, 0xfffffff8, 0x4, 0xffff, 0xffff, 0x3, 0x8, 0x1, 0x800, 0x0, 0x7fff, 0x5d6, 0x97, 0x3]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x8d8}, 0x1, 0x4000000, 0x0, 0x2e2777c0fed9991d}, 0x44000) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="040800000000f8ffc10400000001072800000003088e1e03070000000000000000040000000000004d0100000000000008000000000000000001000401090502025dc20400000004"], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) 2m56.702066202s ago: executing program 34 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000b639909cc91f0572", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) recvfrom$unix(r1, &(0x7f0000000140)=""/99, 0x63, 0x142, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYBLOB, @ANYRESDEC], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x3f5, 0x20, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24044005}, 0x40010) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m56.7017851s ago: executing program 4 (id=84): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000791093000000000062000000000000009500000000000000f42f9c31907ae9d028cc75e61c7db26519a29dc2b33043b3ce1030f95253523819600952532ad7c4604f25e5c2543ac6bce5e6f98728be9c7bb2cc7a54207d268d3dedde707e17cdf77b17dbf58a6d959826b7a4d74e7fec21e721fa0a815d02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x8}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getuid() socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000850000005f00000018000000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r7}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x5c, r10, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xae}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x28000044) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000040)) 2m56.606362301s ago: executing program 35 (id=84): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000791093000000000062000000000000009500000000000000f42f9c31907ae9d028cc75e61c7db26519a29dc2b33043b3ce1030f95253523819600952532ad7c4604f25e5c2543ac6bce5e6f98728be9c7bb2cc7a54207d268d3dedde707e17cdf77b17dbf58a6d959826b7a4d74e7fec21e721fa0a815d02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x8}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getuid() socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000850000005f00000018000000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r7}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x5c, r10, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xae}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x28000044) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000040)) 2.164566496s ago: executing program 7 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000024000100010000000000000000000000060003006649"], 0x35}}, 0x8004) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x6, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x71) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 1.270116815s ago: executing program 6 (id=2052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) 1.269891214s ago: executing program 8 (id=2053): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r2) 1.143589023s ago: executing program 7 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x20008, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f0000000bc0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.127441899s ago: executing program 0 (id=2055): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000f908008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 986.111013ms ago: executing program 6 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 939.52222ms ago: executing program 8 (id=2057): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001780)="a6690f4f0b66", 0x6}], 0x1}, 0x840) 895.921571ms ago: executing program 5 (id=2058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x144000, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) 822.076057ms ago: executing program 0 (id=2059): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 798.0601ms ago: executing program 5 (id=2060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r1}, 0xc) 790.303757ms ago: executing program 7 (id=2061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) 743.549596ms ago: executing program 6 (id=2062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9bfde4fd7462ac98, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), &(0x7f0000000900)=r3}, 0x20) 682.184359ms ago: executing program 0 (id=2063): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 636.655607ms ago: executing program 5 (id=2064): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 595.577285ms ago: executing program 8 (id=2065): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 502.181366ms ago: executing program 7 (id=2066): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 501.947237ms ago: executing program 0 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 501.746885ms ago: executing program 6 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 475.413872ms ago: executing program 5 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 456.087644ms ago: executing program 7 (id=2070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 338.181042ms ago: executing program 8 (id=2071): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000001380)="9b8933730c1bd27efc340c97618c0fcc"}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 337.970817ms ago: executing program 6 (id=2072): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800083}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) 286.309497ms ago: executing program 5 (id=2073): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 265.324502ms ago: executing program 0 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 182.057838ms ago: executing program 8 (id=2075): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 147.668431ms ago: executing program 8 (id=2076): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800083}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 130.567205ms ago: executing program 0 (id=2077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 38.044887ms ago: executing program 7 (id=2078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x3b, &(0x7f0000000280)=""/59, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x6, 0x7e05}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x4, 0xa, 0x7}, {0x1, 0x3, 0x6, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x3, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r1, r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 24.415686ms ago: executing program 5 (id=2079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 0s ago: executing program 6 (id=2080): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 24469][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.844077][ T8166] RSP: 002b:00007fb63bbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.852499][ T8166] RAX: ffffffffffffffda RBX: 00007fb63af75fa0 RCX: 00007fb63ad85d29 [ 122.860478][ T8166] RDX: 0000000020000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 122.868453][ T8166] RBP: 00007fb63bbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.876420][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.884388][ T8166] R13: 0000000000000000 R14: 00007fb63af75fa0 R15: 00007ffc9773ecf8 [ 122.892373][ T8166] [ 122.982682][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 122.994867][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.021382][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.039819][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.049153][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.088910][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.117116][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.134205][ T8176] netlink: 52 bytes leftover after parsing attributes in process `syz.7.502'. [ 123.358364][ T8189] tun0: tun_chr_ioctl cmd 1074025675 [ 123.368154][ T8189] tun0: persist disabled [ 123.415953][ T8189] netlink: 'syz.5.506': attribute type 15 has an invalid length. [ 123.485756][ T8206] netlink: 'syz.0.512': attribute type 3 has an invalid length. [ 123.844514][ T8227] openvswitch: netlink: IP tunnel dst address not specified [ 124.315897][ T8263] Cannot find add_set index 32768 as target [ 124.494412][ T8273] netlink: 'syz.7.532': attribute type 1 has an invalid length. [ 124.661484][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 124.706456][ T8279] netlink: 'syz.8.536': attribute type 39 has an invalid length. [ 124.742756][ T8283] hsr_slave_0: left promiscuous mode [ 124.750790][ T8283] hsr_slave_1: left promiscuous mode [ 125.591900][ T8332] FAULT_INJECTION: forcing a failure. [ 125.591900][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.605872][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.0.551 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 125.616494][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 125.626579][ T8332] Call Trace: [ 125.629855][ T8332] [ 125.632772][ T8332] dump_stack_lvl+0x241/0x360 [ 125.637445][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.642634][ T8332] ? __pfx__printk+0x10/0x10 [ 125.647213][ T8332] ? __pfx_lock_release+0x10/0x10 [ 125.652228][ T8332] should_fail_ex+0x3b0/0x4e0 [ 125.656898][ T8332] _copy_from_iter+0x1e9/0x1c20 [ 125.661755][ T8332] ? __virt_addr_valid+0x183/0x530 [ 125.666986][ T8332] ? __alloc_skb+0x28f/0x440 [ 125.671587][ T8332] ? __pfx__copy_from_iter+0x10/0x10 [ 125.676865][ T8332] ? __virt_addr_valid+0x183/0x530 [ 125.681971][ T8332] ? __virt_addr_valid+0x183/0x530 [ 125.687068][ T8332] ? __virt_addr_valid+0x45f/0x530 [ 125.692166][ T8332] ? __phys_addr_symbol+0x2f/0x70 [ 125.697180][ T8332] ? __check_object_size+0x47a/0x730 [ 125.702458][ T8332] netlink_sendmsg+0x73d/0xcb0 [ 125.707245][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.712535][ T8332] ? aa_sock_msg_perm+0x91/0x160 [ 125.717495][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.722784][ T8332] __sock_sendmsg+0x221/0x270 [ 125.727455][ T8332] ____sys_sendmsg+0x52a/0x7e0 [ 125.732214][ T8332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.737487][ T8332] ? __fget_files+0x2a/0x410 [ 125.742085][ T8332] ? __fget_files+0x2a/0x410 [ 125.746676][ T8332] __sys_sendmsg+0x269/0x350 [ 125.751261][ T8332] ? __pfx_lock_release+0x10/0x10 [ 125.756282][ T8332] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.761415][ T8332] ? __pfx_vfs_write+0x10/0x10 [ 125.766223][ T8332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.772562][ T8332] ? do_syscall_64+0x100/0x230 [ 125.777344][ T8332] ? do_syscall_64+0xb6/0x230 [ 125.782009][ T8332] do_syscall_64+0xf3/0x230 [ 125.786545][ T8332] ? clear_bhb_loop+0x35/0x90 [ 125.791210][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.797086][ T8332] RIP: 0033:0x7f9013d85d29 [ 125.801513][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.821121][ T8332] RSP: 002b:00007f9014bc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.829549][ T8332] RAX: ffffffffffffffda RBX: 00007f9013f75fa0 RCX: 00007f9013d85d29 [ 125.837525][ T8332] RDX: 0000000020000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 125.845485][ T8332] RBP: 00007f9014bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 125.853535][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.861503][ T8332] R13: 0000000000000000 R14: 00007f9013f75fa0 R15: 00007ffd8f476588 [ 125.869496][ T8332] [ 126.029623][ T6666] batadv1: left promiscuous mode [ 126.239055][ T8350] smc: net device wg0 applied user defined pnetid SYZ0 [ 126.279387][ T8350] __nla_validate_parse: 40 callbacks suppressed [ 126.279407][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.7.559'. [ 126.301133][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.562'. [ 126.312230][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.562'. [ 126.383196][ T8350] netlink: 'syz.7.559': attribute type 39 has an invalid length. [ 126.407703][ T8366] gre1: entered promiscuous mode [ 126.437138][ T8366] gre1: entered allmulticast mode [ 126.504088][ T8350] smc: removing net device wg0 with user defined pnetid SYZ0 [ 126.635369][ T8372] ªªªªªª9: renamed from vlan0 (while UP) [ 126.657016][ T8366] syz.0.563 (8366) used greatest stack depth: 18704 bytes left [ 126.830264][ T8376] IPv6: Can't replace route, no match found [ 126.918171][ T8387] netlink: 3 bytes leftover after parsing attributes in process `syz.7.570'. [ 126.927121][ T8387] 0ªX¹¦À: renamed from caif0 [ 127.018261][ T8387] 0ªX¹¦À: entered allmulticast mode [ 127.023609][ T8387] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 127.072538][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 127.334129][ T8407] netlink: 'syz.6.575': attribute type 4 has an invalid length. [ 127.362409][ T8407] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.575'. [ 127.722963][ T8422] netlink: 'syz.7.581': attribute type 10 has an invalid length. [ 128.056120][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 128.883663][ T8467] netlink: 'syz.5.595': attribute type 10 has an invalid length. [ 128.899902][ T8467] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.595'. [ 128.916368][ T8461] netlink: 'syz.6.592': attribute type 21 has an invalid length. [ 128.924949][ T8467] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.933472][ T8461] netlink: 128 bytes leftover after parsing attributes in process `syz.6.592'. [ 128.958053][ T8461] netlink: 'syz.6.592': attribute type 4 has an invalid length. [ 128.983554][ T8461] netlink: 'syz.6.592': attribute type 5 has an invalid length. [ 129.001701][ T8461] netlink: 3 bytes leftover after parsing attributes in process `syz.6.592'. [ 129.175204][ T8477] xt_cgroup: invalid path, errno=-2 [ 129.218880][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 129.821478][ T8516] IPv6: sit1: Disabled Multicast RS [ 129.999146][ T8526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 130.269977][ T8534] netlink: 'syz.6.615': attribute type 13 has an invalid length. [ 130.598880][ T8543] nbd: device at index 7 is going down [ 130.944026][ T8566] IPv6: Can't replace route, no match found [ 130.982402][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.990671][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.011645][ T8570] FAULT_INJECTION: forcing a failure. [ 131.011645][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 131.041384][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.6.627 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 131.052009][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.062088][ T8570] Call Trace: [ 131.065383][ T8570] [ 131.068329][ T8570] dump_stack_lvl+0x241/0x360 [ 131.073035][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.078259][ T8570] ? __pfx__printk+0x10/0x10 [ 131.082875][ T8570] ? __kmalloc_noprof+0xb5/0x4c0 [ 131.087836][ T8570] ? __pfx___might_resched+0x10/0x10 [ 131.093141][ T8570] ? aa_get_newest_label+0xff/0x6f0 [ 131.098356][ T8570] should_fail_ex+0x3b0/0x4e0 [ 131.103043][ T8570] should_failslab+0xac/0x100 [ 131.107720][ T8570] __kmalloc_noprof+0xdd/0x4c0 [ 131.112486][ T8570] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 131.118723][ T8570] ? apparmor_capable+0x13b/0x1b0 [ 131.123754][ T8570] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 131.129826][ T8570] genl_rcv_msg+0x802/0xec0 [ 131.134336][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.139379][ T8570] ? __pfx_lock_acquire+0x10/0x10 [ 131.144399][ T8570] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 131.149773][ T8570] ? __pfx_nl80211_del_key+0x10/0x10 [ 131.155051][ T8570] ? __pfx_nl80211_post_doit+0x10/0x10 [ 131.160508][ T8570] ? __pfx___might_resched+0x10/0x10 [ 131.165795][ T8570] netlink_rcv_skb+0x1e3/0x430 [ 131.170557][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.175580][ T8570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.180870][ T8570] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 131.186334][ T8570] genl_rcv+0x28/0x40 [ 131.190315][ T8570] netlink_unicast+0x7f6/0x990 [ 131.195261][ T8570] ? __pfx_netlink_unicast+0x10/0x10 [ 131.200551][ T8570] ? __virt_addr_valid+0x45f/0x530 [ 131.205660][ T8570] ? __phys_addr_symbol+0x2f/0x70 [ 131.210682][ T8570] ? __check_object_size+0x47a/0x730 [ 131.215966][ T8570] netlink_sendmsg+0x8e4/0xcb0 [ 131.220744][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.226033][ T8570] ? aa_sock_msg_perm+0x91/0x160 [ 131.230972][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.236256][ T8570] __sock_sendmsg+0x221/0x270 [ 131.240937][ T8570] ____sys_sendmsg+0x52a/0x7e0 [ 131.245707][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.251000][ T8570] ? __fget_files+0x2a/0x410 [ 131.255589][ T8570] ? __fget_files+0x2a/0x410 [ 131.260184][ T8570] __sys_sendmsg+0x269/0x350 [ 131.264771][ T8570] ? __pfx_lock_release+0x10/0x10 [ 131.269794][ T8570] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.274911][ T8570] ? __pfx_vfs_write+0x10/0x10 [ 131.279687][ T8570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.286013][ T8570] ? do_syscall_64+0x100/0x230 [ 131.290776][ T8570] ? do_syscall_64+0xb6/0x230 [ 131.295448][ T8570] do_syscall_64+0xf3/0x230 [ 131.299948][ T8570] ? clear_bhb_loop+0x35/0x90 [ 131.304627][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.310514][ T8570] RIP: 0033:0x7fa5e0b85d29 [ 131.314924][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.334608][ T8570] RSP: 002b:00007fa5e1998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.343021][ T8570] RAX: ffffffffffffffda RBX: 00007fa5e0d75fa0 RCX: 00007fa5e0b85d29 [ 131.350990][ T8570] RDX: 0000000020000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 131.358957][ T8570] RBP: 00007fa5e1998090 R08: 0000000000000000 R09: 0000000000000000 [ 131.366925][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.374888][ T8570] R13: 0000000000000000 R14: 00007fa5e0d75fa0 R15: 00007ffd46e58c38 [ 131.382864][ T8570] [ 131.511593][ T8578] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 131.557205][ T8579] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 131.621065][ T8582] __nla_validate_parse: 8 callbacks suppressed [ 131.621083][ T8582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.630'. [ 131.731615][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.632'. [ 131.743490][ T8586] netlink: 'syz.6.632': attribute type 1 has an invalid length. [ 131.751548][ T8586] netlink: 'syz.6.632': attribute type 2 has an invalid length. [ 131.760555][ T8586] netlink: 'syz.6.632': attribute type 2 has an invalid length. [ 132.070237][ T8605] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 132.080777][ T8605] syz_tun: entered promiscuous mode [ 132.088085][ T8609] x_tables: ip_tables: osf match: only valid for protocol 6 [ 132.248947][ T8616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.642'. [ 132.263474][ T8619] syzkaller1: entered promiscuous mode [ 132.269141][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.643'. [ 132.312504][ T8619] syzkaller1: entered allmulticast mode [ 132.348339][ T8619] sctp: [Deprecated]: syz.7.641 (pid 8619) Use of int in maxseg socket option. [ 132.348339][ T8619] Use struct sctp_assoc_value instead [ 132.524480][ T8624] lo speed is unknown, defaulting to 1000 [ 132.559141][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 132.646627][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.646'. [ 132.725860][ T8637] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.742748][ T8637] netlink: 1 bytes leftover after parsing attributes in process `syz.6.650'. [ 132.948756][ T8645] x_tables: duplicate underflow at hook 2 [ 132.987689][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.131315][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.8.656'. [ 133.141731][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.658'. [ 133.263991][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.7.660'. [ 133.514938][ T8676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.776603][ T8685] FAULT_INJECTION: forcing a failure. [ 133.776603][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 133.798003][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.8.666 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 133.808631][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 133.818712][ T8685] Call Trace: [ 133.822011][ T8685] [ 133.824963][ T8685] dump_stack_lvl+0x241/0x360 [ 133.829673][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.834904][ T8685] ? __pfx__printk+0x10/0x10 [ 133.839543][ T8685] ? ref_tracker_alloc+0x332/0x490 [ 133.844679][ T8685] should_fail_ex+0x3b0/0x4e0 [ 133.849387][ T8685] should_failslab+0xac/0x100 [ 133.854086][ T8685] ? skb_clone+0x20c/0x390 [ 133.858526][ T8685] kmem_cache_alloc_noprof+0x70/0x380 [ 133.863919][ T8685] skb_clone+0x20c/0x390 [ 133.868179][ T8685] __netlink_deliver_tap+0x3cc/0x7f0 [ 133.873485][ T8685] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.878685][ T8685] netlink_deliver_tap+0x19d/0x1b0 [ 133.883793][ T8685] netlink_sendskb+0x68/0x140 [ 133.888471][ T8685] netlink_unicast+0x39d/0x990 [ 133.893251][ T8685] ? __pfx_netlink_unicast+0x10/0x10 [ 133.898550][ T8685] netlink_rcv_skb+0x262/0x430 [ 133.903309][ T8685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.908330][ T8685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.913618][ T8685] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 133.919168][ T8685] genl_rcv+0x28/0x40 [ 133.923144][ T8685] netlink_unicast+0x7f6/0x990 [ 133.927914][ T8685] ? __pfx_netlink_unicast+0x10/0x10 [ 133.934763][ T8685] ? __virt_addr_valid+0x45f/0x530 [ 133.939871][ T8685] ? __phys_addr_symbol+0x2f/0x70 [ 133.944890][ T8685] ? __check_object_size+0x47a/0x730 [ 133.950174][ T8685] netlink_sendmsg+0x8e4/0xcb0 [ 133.954944][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.960224][ T8685] ? aa_sock_msg_perm+0x91/0x160 [ 133.965158][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.970449][ T8685] __sock_sendmsg+0x221/0x270 [ 133.975125][ T8685] ____sys_sendmsg+0x52a/0x7e0 [ 133.979889][ T8685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.985166][ T8685] ? __fget_files+0x2a/0x410 [ 133.989756][ T8685] ? __fget_files+0x2a/0x410 [ 133.994350][ T8685] __sys_sendmsg+0x269/0x350 [ 133.998941][ T8685] ? __pfx_lock_release+0x10/0x10 [ 134.003969][ T8685] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.009083][ T8685] ? __pfx_vfs_write+0x10/0x10 [ 134.013859][ T8685] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.020184][ T8685] ? do_syscall_64+0x100/0x230 [ 134.024945][ T8685] ? do_syscall_64+0xb6/0x230 [ 134.029619][ T8685] do_syscall_64+0xf3/0x230 [ 134.034114][ T8685] ? clear_bhb_loop+0x35/0x90 [ 134.038797][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.044700][ T8685] RIP: 0033:0x7faa4ab85d29 [ 134.049115][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.068717][ T8685] RSP: 002b:00007faa4b97a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.077128][ T8685] RAX: ffffffffffffffda RBX: 00007faa4ad75fa0 RCX: 00007faa4ab85d29 [ 134.085094][ T8685] RDX: 0000000020000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 134.093057][ T8685] RBP: 00007faa4b97a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.101028][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.108993][ T8685] R13: 0000000000000000 R14: 00007faa4ad75fa0 R15: 00007ffffac0d388 [ 134.116971][ T8685] [ 134.229414][ T8690] netlink: 'syz.6.670': attribute type 21 has an invalid length. [ 134.237299][ T8690] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.762168][ T8724] FAULT_INJECTION: forcing a failure. [ 134.762168][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.775926][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.6.681 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 134.786551][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 134.791192][ T8726] xt_TCPMSS: Only works on TCP SYN packets [ 134.796607][ T8724] Call Trace: [ 134.796640][ T8724] [ 134.796650][ T8724] dump_stack_lvl+0x241/0x360 [ 134.813354][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.818587][ T8724] ? __pfx__printk+0x10/0x10 [ 134.823205][ T8724] ? __pfx_lock_release+0x10/0x10 [ 134.828257][ T8724] ? __lock_acquire+0x1397/0x2100 [ 134.833324][ T8724] should_fail_ex+0x3b0/0x4e0 [ 134.838034][ T8724] _copy_from_user+0x2f/0xc0 [ 134.842647][ T8724] kstrtouint_from_user+0xc6/0x190 [ 134.847759][ T8724] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 134.853480][ T8724] ? __pfx_lock_acquire+0x10/0x10 [ 134.858510][ T8724] proc_fail_nth_write+0xaa/0x2d0 [ 134.863530][ T8724] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 134.869422][ T8724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.875052][ T8724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.880683][ T8724] vfs_write+0x2a3/0xd30 [ 134.884928][ T8724] ? __pfx_vfs_write+0x10/0x10 [ 134.889689][ T8724] ? __fget_files+0x2a/0x410 [ 134.894278][ T8724] ? __fget_files+0x395/0x410 [ 134.898953][ T8724] ? __fget_files+0x2a/0x410 [ 134.903545][ T8724] ksys_write+0x18f/0x2b0 [ 134.907874][ T8724] ? __pfx_ksys_write+0x10/0x10 [ 134.912720][ T8724] ? do_syscall_64+0x100/0x230 [ 134.917485][ T8724] ? do_syscall_64+0xb6/0x230 [ 134.922162][ T8724] do_syscall_64+0xf3/0x230 [ 134.926667][ T8724] ? clear_bhb_loop+0x35/0x90 [ 134.931344][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.937232][ T8724] RIP: 0033:0x7fa5e0b847df [ 134.941639][ T8724] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 134.961239][ T8724] RSP: 002b:00007fa5e1998030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 134.969651][ T8724] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa5e0b847df [ 134.977613][ T8724] RDX: 0000000000000001 RSI: 00007fa5e19980a0 RDI: 0000000000000004 [ 134.985580][ T8724] RBP: 00007fa5e1998090 R08: 0000000000000000 R09: 0000000000000000 [ 134.993544][ T8724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 135.001506][ T8724] R13: 0000000000000000 R14: 00007fa5e0d75fa0 R15: 00007ffd46e58c38 [ 135.009573][ T8724] [ 135.253349][ T8740] pimreg: entered allmulticast mode [ 135.283461][ T8740] pimreg: left allmulticast mode [ 135.284344][ T8737] ax25_connect(): syz.0.684 uses autobind, please contact jreuter@yaina.de [ 135.488800][ T8748] delete_channel: no stack [ 135.989897][ T8768] xt_CT: No such helper "netbios-ns" [ 136.102124][ T8780] lo speed is unknown, defaulting to 1000 [ 136.491029][ T8792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.605368][ T8851] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 137.633033][ T8850] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 137.682089][ T8860] __nla_validate_parse: 8 callbacks suppressed [ 137.682107][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 137.760272][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'. [ 137.853463][ T8868] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.720'. [ 137.863836][ T8868] openvswitch: netlink: Missing key (keys=40, expected=80) [ 137.964330][ T81] IPVS: starting estimator thread 0... [ 138.057962][ T8873] IPVS: using max 24 ests per chain, 57600 per kthread [ 138.333729][ T8887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.341075][ T8887] IPv6: NLM_F_CREATE should be set when creating new route [ 138.348321][ T8887] IPv6: NLM_F_CREATE should be set when creating new route [ 138.392350][ T8889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'. [ 138.415009][ T8889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'. [ 138.454567][ T8891] lo speed is unknown, defaulting to 1000 [ 138.821252][ T8902] netlink: 2 bytes leftover after parsing attributes in process `syz.8.731'. [ 138.981293][ T81] IPVS: starting estimator thread 0... [ 139.025692][ T8915] team0: entered promiscuous mode [ 139.057179][ T8915] team_slave_0: entered promiscuous mode [ 139.063516][ T8915] team_slave_1: entered promiscuous mode [ 139.067357][ T8905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.140351][ T8915] team0: left promiscuous mode [ 139.154685][ T8915] team_slave_0: left promiscuous mode [ 139.170746][ T8917] IPVS: using max 19 ests per chain, 45600 per kthread [ 139.185476][ T8915] team_slave_1: left promiscuous mode [ 139.302399][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.740'. [ 139.360451][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 139.797327][ T6346] IPVS: starting estimator thread 0... [ 139.888015][ T8962] IPVS: using max 24 ests per chain, 57600 per kthread [ 140.029539][ T9] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 140.322632][ T8989] delete_channel: no stack [ 140.513629][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 140.537444][ T9001] netlink: 22 bytes leftover after parsing attributes in process `syz.5.760'. [ 140.581077][ T9012] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 140.711968][ T9014] netlink: 'syz.5.763': attribute type 21 has an invalid length. [ 140.786131][ T9019] veth1_macvtap: left promiscuous mode [ 140.798958][ T9019] macsec0: entered allmulticast mode [ 140.839335][ T9019] veth1_macvtap: entered promiscuous mode [ 140.845114][ T9019] veth1_macvtap: entered allmulticast mode [ 140.888184][ T9019] macsec0: left allmulticast mode [ 140.918053][ T9019] veth1_macvtap: left allmulticast mode [ 140.921462][ T9022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 141.023060][ T9024] netlink: 'syz.8.766': attribute type 4 has an invalid length. [ 141.509176][ T9034] xt_hashlimit: size too large, truncated to 1048576 [ 141.589003][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.479031][ T9064] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 142.851682][ T9072] __nla_validate_parse: 8 callbacks suppressed [ 142.851709][ T9072] netlink: 48 bytes leftover after parsing attributes in process `syz.6.779'. [ 143.214809][ T9064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.447727][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 143.498814][ T9079] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 143.507624][ T9079] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 143.540302][ T9083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.612173][ T9085] netlink: 'syz.8.782': attribute type 2 has an invalid length. [ 143.635897][ T9085] netlink: 'syz.8.782': attribute type 4 has an invalid length. [ 144.079408][ T9095] syzkaller1: entered promiscuous mode [ 144.098579][ T9095] syzkaller1: entered allmulticast mode [ 144.113542][ T9090] sit0: entered promiscuous mode [ 144.133560][ T9090] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 144.157017][ T9090] netlink: 1 bytes leftover after parsing attributes in process `syz.0.784'. [ 144.436793][ T9104] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.464954][ T9104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.521916][ T9104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.592262][ T9104] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.626297][ T9104] geneve2: entered promiscuous mode [ 144.656503][ T9104] geneve2: entered allmulticast mode [ 144.698753][ T9104] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.740755][ T9104] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.772864][ T9104] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.814895][ T9104] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.236676][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 145.760459][ T9128] lo speed is unknown, defaulting to 1000 [ 145.966655][ T9141] netlink: 72 bytes leftover after parsing attributes in process `syz.8.799'. [ 145.986367][ T9141] netlink: 72 bytes leftover after parsing attributes in process `syz.8.799'. [ 146.200915][ T9149] netlink: 'syz.8.801': attribute type 1 has an invalid length. [ 147.233072][ T9127] netlink: 'syz.7.794': attribute type 39 has an invalid length. [ 148.619447][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 148.671467][ T9168] syz.6.803[9168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.671566][ T9168] syz.6.803[9168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.698832][ T9168] syz.6.803[9168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.738884][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.803'. [ 148.841706][ T5837] Bluetooth: hci3: link tx timeout [ 148.850764][ T5837] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.860599][ T5837] Bluetooth: hci3: link tx timeout [ 148.865782][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.944066][ T9175] netlink: 'syz.0.807': attribute type 7 has an invalid length. [ 149.025025][ T9175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.807'. [ 149.331352][ T9193] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 149.363783][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.393374][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.414866][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.474993][ T9193] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.779974][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.826340][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.860249][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.894667][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.928905][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 149.959415][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 150.008034][ T9193] syzkaller0 speed is unknown, defaulting to 1000 [ 150.233622][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'. [ 150.362288][ T9213] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 150.376993][ T9213] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 150.816995][ T9230] lo speed is unknown, defaulting to 1000 [ 150.850759][ T9230] syzkaller0 speed is unknown, defaulting to 1000 [ 150.916565][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 151.249301][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.827'. [ 151.342157][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.6.828'. [ 151.843837][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.7.834'. [ 152.016301][ T9275] netlink: 'syz.0.835': attribute type 10 has an invalid length. [ 152.051911][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.837'. [ 152.213094][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 152.246215][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 152.252885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.260787][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.268633][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.276507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.284368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.292264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.300105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.308002][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.315821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.323722][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.331577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.339481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.347313][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.355219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.363067][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.370965][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.378810][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.386677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.394540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.402464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.410327][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.418227][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.426041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.433940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.441793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.449687][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.457512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.465409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.473257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.481149][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.488995][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.496927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.504776][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.512699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.520547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.528530][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.536350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.544253][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.552108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.560013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.567864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.575732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.583594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.591504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.599358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.607236][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.615094][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.622998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.630851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.638759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.646582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.654487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.662336][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.670237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.678086][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.685957][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.693802][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.701714][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.709559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.717425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.725276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.733169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.741019][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.748927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.756748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.764650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.772507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.780403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.788255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.796122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.803979][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.811876][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.819722][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.827601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.835468][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.844550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.852419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.860324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.868177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.876058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.883920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.891819][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.899662][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.907531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.915383][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.923302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.931164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.939058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.946882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.954793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.962643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 152.970552][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 152.978402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 153.055725][ T9287] netlink: 132 bytes leftover after parsing attributes in process `syz.6.840'. [ 153.230346][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 153.642340][ T9322] __nla_validate_parse: 2 callbacks suppressed [ 153.642361][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.851'. [ 153.718339][ T9324] netlink: 132 bytes leftover after parsing attributes in process `syz.7.852'. [ 154.331218][ T9330] bridge_slave_0: left allmulticast mode [ 154.336925][ T9330] bridge_slave_0: left promiscuous mode [ 154.361953][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.382401][ T9330] bridge_slave_1: left allmulticast mode [ 154.396422][ T9330] bridge_slave_1: left promiscuous mode [ 154.415545][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.548767][ T9330] bond0: (slave bond_slave_0): Releasing backup interface [ 154.622876][ T9330] bond0: (slave bond_slave_1): Releasing backup interface [ 154.755322][ T9330] team0: Port device team_slave_0 removed [ 154.792246][ T9330] team0: Port device team_slave_1 removed [ 154.805619][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.831541][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.847651][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.855386][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.909143][ T9331] team0: Mode changed to "loadbalance" [ 155.349056][ T9367] syz.6.862[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.349150][ T9367] syz.6.862[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.416070][ T9367] syz.6.862[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.576460][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.7.863'. [ 155.619088][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.865'. [ 155.677741][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.866'. [ 155.848102][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.867'. [ 155.877978][ T9383] netlink: 28 bytes leftover after parsing attributes in process `syz.7.867'. [ 156.270010][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.422616][ T9401] sctp: [Deprecated]: syz.7.873 (pid 9401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.422616][ T9401] Use struct sctp_sack_info instead [ 156.699287][ T9409] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 156.706975][ T9409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.876'. [ 156.730528][ T9411] tipc: Started in network mode [ 156.735445][ T9411] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.770061][ T9411] tipc: Enabled bearer , priority 10 [ 157.176596][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.215901][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.465079][ T9413] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.481722][ T9413] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.497558][ T9413] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.517607][ T9413] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.936577][ T9315] Set syz1 is full, maxelem 65536 reached [ 158.146178][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.175771][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.884'. [ 158.185864][ T9419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.214562][ T9420] netlink: 'syz.7.878': attribute type 15 has an invalid length. [ 158.259693][ T6346] tipc: Node number set to 2886997162 [ 158.273190][ T9430] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 158.556879][ T9447] raw_sendmsg: syz.5.885 forgot to set AF_INET. Fix it! [ 158.740464][ T9460] netlink: 'syz.6.892': attribute type 1 has an invalid length. [ 158.748737][ T9460] __nla_validate_parse: 2 callbacks suppressed [ 158.748750][ T9460] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.892'. [ 158.785061][ T9460] IPVS: Error connecting to the multicast addr [ 159.094562][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'. [ 159.586515][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.904'. [ 159.801232][ T9519] ebt_limit: overflow, try lower: 570423552/2483027968 [ 160.009548][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 160.026083][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.913'. [ 160.121372][ T9538] set match dimension is over the limit! [ 160.167350][ T9538] macvlan0: left allmulticast mode [ 160.200120][ T9538] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.224656][ T9538] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.244515][ T9538] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.267043][ T9538] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.340621][ T9545] siw: device registration error -23 [ 160.405742][ T9548] lo speed is unknown, defaulting to 1000 [ 160.451514][ T9548] syzkaller0 speed is unknown, defaulting to 1000 [ 160.549112][ T9551] netlink: ct family unspecified [ 160.564363][ T9551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.568414][ T9555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.605204][ T9555] netlink: 112 bytes leftover after parsing attributes in process `syz.6.921'. [ 160.717912][ T9562] openvswitch: netlink: Message has 1247 unknown bytes. [ 160.725792][ T9562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.921144][ T9566] netlink: 212 bytes leftover after parsing attributes in process `syz.6.925'. [ 160.964072][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.7.928'. [ 160.975808][ T9572] xt_HMARK: spi-set and port-set can't be combined [ 160.978878][ T9566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.986286][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.926'. [ 161.012813][ T9566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 161.022898][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.918'. [ 161.196098][ T9581] netlink: 'syz.7.931': attribute type 21 has an invalid length. [ 161.230590][ T9580] lo speed is unknown, defaulting to 1000 [ 161.282401][ T9580] syzkaller0 speed is unknown, defaulting to 1000 [ 161.301678][ T9587] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 161.330488][ T9588] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 162.648958][ T9637] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 162.722012][ T9641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.893552][ T9644] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 163.311519][ T9674] Unknown status report in ack skb [ 163.345870][ T9678] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 163.421441][ T9677] erspan1: entered promiscuous mode [ 163.439875][ T9677] erspan1: entered allmulticast mode [ 163.696713][ T9695] netlink: 'syz.8.965': attribute type 2 has an invalid length. [ 163.749616][ T9695] Tq€: entered promiscuous mode [ 163.949599][ T9703] batadv_slave_1: entered promiscuous mode [ 163.958229][ T9703] __nla_validate_parse: 22 callbacks suppressed [ 163.958246][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.967'. [ 163.987567][ T9702] vxcan3: entered allmulticast mode [ 164.044708][ T9707] netlink: 104 bytes leftover after parsing attributes in process `syz.0.969'. [ 164.355059][ T9725] IPVS: set_ctl: invalid protocol: 11612 172.30.1.6:20003 [ 164.492224][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.975'. [ 164.525669][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.977'. [ 164.536938][ T9741] syzkaller0: entered allmulticast mode [ 164.601464][ T9741] syzkaller0 (unregistering): left allmulticast mode [ 164.694934][ T9745] vlan3: entered promiscuous mode [ 164.707458][ T9745] batadv0: entered promiscuous mode [ 164.730593][ T9745] batadv0: left promiscuous mode [ 164.770650][ T9740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.977'. [ 164.782486][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 164.793653][ T9754] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢}•zR3âëp(@Ož [ 164.803451][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 164.894790][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.8.983'. [ 164.923531][ T9763] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 165.000254][ T9759] lo speed is unknown, defaulting to 1000 [ 165.007197][ T9759] syzkaller0 speed is unknown, defaulting to 1000 [ 165.025235][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 165.581326][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.983'. [ 166.128792][ T9816] Bluetooth: MGMT ver 1.23 [ 166.206910][ T9816] netlink: zone id is out of range [ 166.212871][ T9819] netlink: 'syz.6.1002': attribute type 1 has an invalid length. [ 166.220906][ T9816] netlink: zone id is out of range [ 166.240020][ T9816] netlink: del zone limit has 8 unknown bytes [ 166.723642][ T9845] netlink: 'syz.6.1010': attribute type 49 has an invalid length. [ 167.178973][ T9877] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.501985][ T9891] netlink: 'syz.5.1025': attribute type 16 has an invalid length. [ 167.526458][ T9891] netlink: 'syz.5.1025': attribute type 17 has an invalid length. [ 167.848042][ T9903] netlink: 'syz.0.1028': attribute type 10 has an invalid length. [ 168.988763][ T9940] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.000736][ T9945] __nla_validate_parse: 10 callbacks suppressed [ 169.000757][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1042'. [ 169.138404][ T9944] bond2: entered promiscuous mode [ 169.181436][ T9944] bond2: entered allmulticast mode [ 169.213170][ T9944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.291040][ T9940] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.460062][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1048'. [ 169.473072][ T9940] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.485962][ T9964] netlink: 'syz.6.1049': attribute type 1 has an invalid length. [ 169.494424][ T9964] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1049'. [ 169.567058][ T9940] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.772593][ T9940] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.849974][ T9940] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.889133][ T9940] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.905857][ T9940] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.920588][ T9972] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 169.960129][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1052'. [ 170.195656][ T9981] netlink: 'syz.0.1054': attribute type 10 has an invalid length. [ 170.493796][ T9988] lo speed is unknown, defaulting to 1000 [ 170.554529][ T9988] syzkaller0 speed is unknown, defaulting to 1000 [ 170.608090][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 170.627267][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 171.023940][ T9996] vlan3: entered allmulticast mode [ 171.050085][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1063'. [ 171.073710][ T9996] vlan1: entered allmulticast mode [ 171.103125][ T9996] vlan1: left allmulticast mode [ 171.678878][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1064'. [ 171.855241][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1069'. [ 171.865718][T10025] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1067'. [ 172.243504][T10036] batadv_slave_0: entered allmulticast mode [ 172.465569][T10043] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.182666][T10081] Cannot find set identified by id 0 to match [ 174.116187][T10136] set match dimension is over the limit! [ 174.623506][T10142] __nla_validate_parse: 6 callbacks suppressed [ 174.623527][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 175.942233][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 175.977640][T10137] pim6reg: entered allmulticast mode [ 175.994414][T10138] pim6reg: left allmulticast mode [ 176.168666][T10155] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 176.178189][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1109'. [ 176.217297][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1109'. [ 176.231617][T10158] netlink: 'syz.6.1109': attribute type 4 has an invalid length. [ 176.262555][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1109'. [ 176.320214][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1109'. [ 176.337147][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1112'. [ 176.338368][T10158] netlink: 'syz.6.1109': attribute type 4 has an invalid length. [ 176.360409][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1113'. [ 176.521026][T10180] sctp: [Deprecated]: syz.0.1116 (pid 10180) Use of int in max_burst socket option. [ 176.521026][T10180] Use struct sctp_assoc_value instead [ 176.538302][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1118'. [ 176.625259][T10183] netlink: 1264 bytes leftover after parsing attributes in process `syz.6.1117'. [ 176.725349][T10187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'. [ 177.210516][T10209] bond1 (unregistering): Released all slaves [ 177.278949][T10210] bond1 (unregistering): Released all slaves [ 177.336693][T10216] lo speed is unknown, defaulting to 1000 [ 177.346674][T10216] syzkaller0 speed is unknown, defaulting to 1000 [ 177.794875][T10219] lo speed is unknown, defaulting to 1000 [ 177.828918][T10219] syzkaller0 speed is unknown, defaulting to 1000 [ 179.647080][T10323] __nla_validate_parse: 13 callbacks suppressed [ 179.647110][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1165'. [ 179.745603][T10329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1168'. [ 179.809344][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1170'. [ 179.957230][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 180.171810][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 180.181704][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 180.291493][T10352] tipc: Enabling of bearer rejected, failed to enable media [ 180.530965][T10362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1180'. [ 180.600926][T10364] netlink: set zone limit has 8 unknown bytes [ 180.880901][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1187'. [ 180.923328][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1187'. [ 180.980497][T10384] netlink: 'syz.5.1188': attribute type 29 has an invalid length. [ 181.043960][T10389] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1190'. [ 181.151315][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 182.179557][T10448] syzkaller1: entered promiscuous mode [ 182.185080][T10448] syzkaller1: entered allmulticast mode [ 182.531555][T10460] lo speed is unknown, defaulting to 1000 [ 182.547200][T10460] syzkaller0 speed is unknown, defaulting to 1000 [ 183.014350][T10479] bridge3: entered promiscuous mode [ 183.052165][T10479] macsec1: entered promiscuous mode [ 183.058149][T10479] macsec1: entered allmulticast mode [ 183.063589][T10479] bridge3: entered allmulticast mode [ 183.075242][T10479] bridge3: port 1(macsec1) entered blocking state [ 183.107357][T10479] bridge3: port 1(macsec1) entered disabled state [ 183.144265][T10479] bridge3: left allmulticast mode [ 183.151111][T10479] bridge3: left promiscuous mode [ 183.303455][T10460] lo speed is unknown, defaulting to 1000 [ 183.317690][T10460] syzkaller0 speed is unknown, defaulting to 1000 [ 183.337397][T10498] netlink: 'syz.8.1230': attribute type 1 has an invalid length. [ 183.477185][T10498] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 183.714696][T10526] tipc: Started in network mode [ 183.720445][T10526] tipc: Node identity 7f, cluster identity 4711 [ 183.726794][T10526] tipc: Node number set to 127 [ 183.736036][T10526] xt_hashlimit: size too large, truncated to 1048576 [ 184.265363][T10557] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 184.302204][T10557] bond0: (slave bridge0): Releasing backup interface [ 184.310445][T10557] bridge0: port 3(macvlan1) entered disabled state [ 184.317128][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.324379][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.336152][ T25] IPVS: starting estimator thread 0... [ 184.351370][T10557] bond0: (slave team0): Releasing backup interface [ 184.402952][T10557] bridge_slave_0: left allmulticast mode [ 184.417450][T10557] bridge_slave_0: left promiscuous mode [ 184.427031][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.438261][T10558] IPVS: using max 24 ests per chain, 57600 per kthread [ 184.445973][T10557] bridge_slave_1: left allmulticast mode [ 184.451762][T10557] bridge_slave_1: left promiscuous mode [ 184.457385][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.467649][T10557] bond0: (slave bond_slave_0): Releasing backup interface [ 184.483575][T10557] bond0: (slave bond_slave_1): Releasing backup interface [ 184.534090][T10557] team0: Port device team_slave_0 removed [ 184.548428][T10557] team0: Port device team_slave_1 removed [ 184.554773][T10557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.566760][T10557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.575172][T10557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.591393][T10557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.604585][T10557] macvlan1: left allmulticast mode [ 184.611056][T10557] veth1_vlan: left allmulticast mode [ 184.616474][T10557] macvlan1: left promiscuous mode [ 184.622528][T10557] bridge0: port 3(macvlan1) entered disabled state [ 184.639362][T10557] batman_adv: batadv0: Removing interface: bridge1 [ 184.647180][T10559] team0: Mode changed to "random" [ 184.705626][T10567] tipc: Enabled bearer , priority 0 [ 184.863057][T10578] vlan0: entered allmulticast mode [ 184.871950][T10578] bridge0: entered allmulticast mode [ 184.893467][T10578] bridge0: left allmulticast mode [ 185.222405][T10594] lo speed is unknown, defaulting to 1000 [ 185.230410][T10594] syzkaller0 speed is unknown, defaulting to 1000 [ 185.564343][T10620] __nla_validate_parse: 6 callbacks suppressed [ 185.564362][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1268'. [ 185.583451][T10617] netlink: 'syz.7.1267': attribute type 1 has an invalid length. [ 185.633965][T10621] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1264'. [ 186.277558][T10648] xt_TCPMSS: Only works on TCP SYN packets [ 186.912002][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1287'. [ 186.919934][T10680] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.931540][T10680] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.941451][T10680] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.950499][T10680] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.962210][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1287'. [ 186.978194][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1287'. [ 187.275059][T10702] macsec1: entered promiscuous mode [ 187.280952][T10702] macsec1: entered allmulticast mode [ 187.497328][T10671] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 187.638402][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 187.651442][T10717] lo speed is unknown, defaulting to 1000 [ 187.659008][T10717] syzkaller0 speed is unknown, defaulting to 1000 [ 187.796514][T10729] pim6reg: entered allmulticast mode [ 187.830650][T10723] pim6reg: left allmulticast mode [ 187.917684][T10730] syzkaller1: entered promiscuous mode [ 187.925533][T10730] syzkaller1: entered allmulticast mode [ 187.953559][T10729] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 188.268883][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 188.294190][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 188.689842][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 188.726726][T10770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.734091][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 188.741439][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 188.744322][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 188.762432][T10774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.403661][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 190.029185][T10826] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 190.662742][T10861] lo speed is unknown, defaulting to 1000 [ 190.676364][T10861] syzkaller0 speed is unknown, defaulting to 1000 [ 190.688514][T10864] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 190.709863][T10864] __nla_validate_parse: 5 callbacks suppressed [ 190.709881][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'. [ 190.736525][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'. [ 191.076610][T10882] lo speed is unknown, defaulting to 1000 [ 191.100626][T10882] syzkaller0 speed is unknown, defaulting to 1000 [ 191.127658][T10886] netlink: 'syz.7.1351': attribute type 1 has an invalid length. [ 191.187608][T10886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.229262][T10890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.261230][T10890] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 191.296632][T10890] bond1: (slave vcan1): Error -95 calling set_mac_address [ 191.380400][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 191.649806][T10898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.665345][T10898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.675079][T10898] bond0 (unregistering): Released all slaves [ 191.697338][T10902] netlink: 'syz.8.1356': attribute type 4 has an invalid length. [ 192.251962][T10937] vlan0: entered promiscuous mode [ 192.270647][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 192.289428][T10937] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 192.422505][T10946] siw: device registration error -23 [ 192.440362][T10946] siw: device registration error -23 [ 192.447145][T10946] siw: device registration error -23 [ 192.469689][T10948] netlink: 'syz.8.1371': attribute type 4 has an invalid length. [ 192.472727][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'. [ 192.486915][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'. [ 192.550722][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1371'. [ 192.955595][T10956] lo speed is unknown, defaulting to 1000 [ 192.976174][T10956] syzkaller0 speed is unknown, defaulting to 1000 [ 193.498562][T10979] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1381'. [ 193.576977][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1382'. [ 193.603299][T10981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1382'. [ 194.036802][T11014] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 194.131154][T11016] netlink: ct family unspecified [ 194.155142][T11016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.267138][T11024] smc: net device bond0 applied user defined pnetid SYZ0 [ 194.374325][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1397'. [ 194.384020][T11028] netlink: 'syz.6.1397': attribute type 1 has an invalid length. [ 194.424235][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452472][ T5848] block nbd0: Receive control failed (result -107) [ 194.680101][T11048] sit0: entered promiscuous mode [ 194.701726][T11048] netlink: 'syz.6.1403': attribute type 1 has an invalid length. [ 194.995120][T11061] netlink: 'syz.8.1409': attribute type 11 has an invalid length. [ 195.012145][T11061] netlink: 'syz.8.1409': attribute type 5 has an invalid length. [ 195.044095][T11061] syz.8.1409[11061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.044188][T11061] syz.8.1409[11061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.097035][T11061] syz.8.1409[11061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.393017][T11084] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 195.440871][T11084] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 195.460194][T11086] lo speed is unknown, defaulting to 1000 [ 195.498956][T11086] syzkaller0 speed is unknown, defaulting to 1000 [ 195.618358][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 195.625023][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 195.649494][T11101] FAULT_INJECTION: forcing a failure. [ 195.649494][T11101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.678008][T11101] CPU: 0 UID: 0 PID: 11101 Comm: syz.0.1423 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 195.688790][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 195.698844][T11101] Call Trace: [ 195.702116][T11101] [ 195.705041][T11101] dump_stack_lvl+0x241/0x360 [ 195.709738][T11101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.714936][T11101] ? __pfx__printk+0x10/0x10 [ 195.719529][T11101] ? __pfx_lock_release+0x10/0x10 [ 195.724558][T11101] should_fail_ex+0x3b0/0x4e0 [ 195.729243][T11101] _copy_from_user+0x2f/0xc0 [ 195.733841][T11101] copy_msghdr_from_user+0xae/0x680 [ 195.739051][T11101] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.744863][T11101] ? __fget_files+0x2a/0x410 [ 195.749459][T11101] ? __fget_files+0x2a/0x410 [ 195.754058][T11101] __sys_sendmsg+0x209/0x350 [ 195.758645][T11101] ? __pfx_lock_release+0x10/0x10 [ 195.763667][T11101] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.768781][T11101] ? __pfx_vfs_write+0x10/0x10 [ 195.773556][T11101] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.779882][T11101] ? do_syscall_64+0x100/0x230 [ 195.784643][T11101] ? do_syscall_64+0xb6/0x230 [ 195.789318][T11101] do_syscall_64+0xf3/0x230 [ 195.793821][T11101] ? clear_bhb_loop+0x35/0x90 [ 195.798506][T11101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.804394][T11101] RIP: 0033:0x7f9013d85d29 [ 195.808812][T11101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.828408][T11101] RSP: 002b:00007f9014bc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.836814][T11101] RAX: ffffffffffffffda RBX: 00007f9013f75fa0 RCX: 00007f9013d85d29 [ 195.844782][T11101] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 195.852751][T11101] RBP: 00007f9014bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 195.860715][T11101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.868681][T11101] R13: 0000000000000000 R14: 00007f9013f75fa0 R15: 00007ffd8f476588 [ 195.876657][T11101] [ 195.956089][T11108] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 196.033388][T11113] __nla_validate_parse: 3 callbacks suppressed [ 196.033409][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 196.150447][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 196.395377][T11126] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1048576) [ 196.405968][T11126] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 196.500237][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.506541][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 196.649800][T11137] FAULT_INJECTION: forcing a failure. [ 196.649800][T11137] name failslab, interval 1, probability 0, space 0, times 0 [ 196.662888][T11137] CPU: 0 UID: 0 PID: 11137 Comm: syz.7.1436 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 196.673688][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 196.683763][T11137] Call Trace: [ 196.687056][T11137] [ 196.690008][T11137] dump_stack_lvl+0x241/0x360 [ 196.694720][T11137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.699949][T11137] ? __pfx__printk+0x10/0x10 [ 196.704562][T11137] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 196.710585][T11137] ? __pfx___might_resched+0x10/0x10 [ 196.715899][T11137] should_fail_ex+0x3b0/0x4e0 [ 196.720612][T11137] should_failslab+0xac/0x100 [ 196.725310][T11137] kmem_cache_alloc_node_noprof+0x77/0x380 [ 196.731140][T11137] ? __alloc_skb+0x1c3/0x440 [ 196.735752][T11137] __alloc_skb+0x1c3/0x440 [ 196.740193][T11137] ? __pfx___alloc_skb+0x10/0x10 [ 196.745155][T11137] ? netlink_autobind+0xd6/0x2f0 [ 196.750114][T11137] ? netlink_autobind+0x2b0/0x2f0 [ 196.755161][T11137] netlink_sendmsg+0x638/0xcb0 [ 196.759954][T11137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.765253][T11137] ? aa_sock_msg_perm+0x91/0x160 [ 196.770215][T11137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.775519][T11137] __sock_sendmsg+0x221/0x270 [ 196.780227][T11137] ____sys_sendmsg+0x52a/0x7e0 [ 196.785024][T11137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.790343][T11137] ? __fget_files+0x2a/0x410 [ 196.794941][T11137] ? __fget_files+0x2a/0x410 [ 196.799568][T11137] __sys_sendmsg+0x269/0x350 [ 196.804163][T11137] ? __pfx_lock_release+0x10/0x10 [ 196.809188][T11137] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.814304][T11137] ? __pfx_vfs_write+0x10/0x10 [ 196.819092][T11137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.825416][T11137] ? do_syscall_64+0x100/0x230 [ 196.830179][T11137] ? do_syscall_64+0xb6/0x230 [ 196.834854][T11137] do_syscall_64+0xf3/0x230 [ 196.839354][T11137] ? clear_bhb_loop+0x35/0x90 [ 196.844030][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.849933][T11137] RIP: 0033:0x7f502e985d29 [ 196.854345][T11137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.873950][T11137] RSP: 002b:00007f502f812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.882366][T11137] RAX: ffffffffffffffda RBX: 00007f502eb75fa0 RCX: 00007f502e985d29 [ 196.890337][T11137] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 196.898303][T11137] RBP: 00007f502f812090 R08: 0000000000000000 R09: 0000000000000000 [ 196.906266][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.914231][T11137] R13: 0000000000000000 R14: 00007f502eb75fa0 R15: 00007ffca9f91fc8 [ 196.922215][T11137] [ 197.071643][T11138] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 197.142239][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1438'. [ 197.357191][T11158] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 197.380720][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 197.381597][T11156] Unsupported ieee802154 address type: 0 [ 197.653149][T11174] syzkaller1: entered allmulticast mode [ 197.691879][T11178] gretap1: entered allmulticast mode [ 197.725911][T11178] bridge0: port 1(gretap1) entered blocking state [ 197.746915][T11178] bridge0: port 1(gretap1) entered disabled state [ 197.783842][T11178] gretap1: entered promiscuous mode [ 197.946012][T11188] bridge4: entered promiscuous mode [ 197.953295][T11188] bridge4: entered allmulticast mode [ 197.967074][T11188] team0: Port device bridge4 added [ 197.977120][T11188] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 198.073775][T11198] bridge0: port 4(ip6gretap0) entered blocking state [ 198.086645][T11198] bridge0: port 4(ip6gretap0) entered disabled state [ 198.095617][T11198] ip6gretap0: entered allmulticast mode [ 198.105452][T11198] ip6gretap0: entered promiscuous mode [ 198.176876][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1452'. [ 198.213490][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'. [ 198.686524][T11234] FAULT_INJECTION: forcing a failure. [ 198.686524][T11234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.699914][T11234] CPU: 0 UID: 0 PID: 11234 Comm: syz.7.1462 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 198.710701][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 198.720773][T11234] Call Trace: [ 198.724069][T11234] [ 198.727010][T11234] dump_stack_lvl+0x241/0x360 [ 198.731688][T11234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.736879][T11234] ? __pfx__printk+0x10/0x10 [ 198.741464][T11234] ? __pfx_lock_release+0x10/0x10 [ 198.746499][T11234] should_fail_ex+0x3b0/0x4e0 [ 198.751208][T11234] _copy_from_iter+0x1e9/0x1c20 [ 198.756079][T11234] ? __virt_addr_valid+0x183/0x530 [ 198.761214][T11234] ? __alloc_skb+0x28f/0x440 [ 198.765802][T11234] ? __pfx__copy_from_iter+0x10/0x10 [ 198.771096][T11234] ? __virt_addr_valid+0x183/0x530 [ 198.776203][T11234] ? __virt_addr_valid+0x183/0x530 [ 198.781311][T11234] ? __virt_addr_valid+0x45f/0x530 [ 198.786417][T11234] ? __phys_addr_symbol+0x2f/0x70 [ 198.791442][T11234] ? __check_object_size+0x47a/0x730 [ 198.796726][T11234] netlink_sendmsg+0x73d/0xcb0 [ 198.801501][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.806783][T11234] ? aa_sock_msg_perm+0x91/0x160 [ 198.811723][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.817003][T11234] __sock_sendmsg+0x221/0x270 [ 198.821683][T11234] ____sys_sendmsg+0x52a/0x7e0 [ 198.826451][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.831736][T11234] ? __fget_files+0x2a/0x410 [ 198.836325][T11234] ? __fget_files+0x2a/0x410 [ 198.840917][T11234] __sys_sendmsg+0x269/0x350 [ 198.845500][T11234] ? __pfx_lock_release+0x10/0x10 [ 198.850521][T11234] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.855634][T11234] ? __pfx_vfs_write+0x10/0x10 [ 198.860409][T11234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.866736][T11234] ? do_syscall_64+0x100/0x230 [ 198.871497][T11234] ? do_syscall_64+0xb6/0x230 [ 198.876168][T11234] do_syscall_64+0xf3/0x230 [ 198.880665][T11234] ? clear_bhb_loop+0x35/0x90 [ 198.885342][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.891233][T11234] RIP: 0033:0x7f502e985d29 [ 198.895643][T11234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.915243][T11234] RSP: 002b:00007f502f812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.923655][T11234] RAX: ffffffffffffffda RBX: 00007f502eb75fa0 RCX: 00007f502e985d29 [ 198.931623][T11234] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 198.939586][T11234] RBP: 00007f502f812090 R08: 0000000000000000 R09: 0000000000000000 [ 198.947548][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.955511][T11234] R13: 0000000000000000 R14: 00007f502eb75fa0 R15: 00007ffca9f91fc8 [ 198.963490][T11234] [ 199.114772][T11240] bond_slave_1: invalid flags given to default FDB implementation [ 199.139039][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 199.181449][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1467'. [ 199.334707][T11252] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 199.481663][T11252] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 199.597109][T11252] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 199.639816][T11272] FAULT_INJECTION: forcing a failure. [ 199.639816][T11272] name failslab, interval 1, probability 0, space 0, times 0 [ 199.666775][T11272] CPU: 1 UID: 0 PID: 11272 Comm: syz.5.1474 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 199.677579][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 199.687646][T11272] Call Trace: [ 199.690935][T11272] [ 199.693882][T11272] dump_stack_lvl+0x241/0x360 [ 199.698587][T11272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.703815][T11272] ? __pfx__printk+0x10/0x10 [ 199.708446][T11272] should_fail_ex+0x3b0/0x4e0 [ 199.713147][T11272] should_failslab+0xac/0x100 [ 199.717852][T11272] ? skb_clone+0x20c/0x390 [ 199.722289][T11272] kmem_cache_alloc_noprof+0x70/0x380 [ 199.727688][T11272] skb_clone+0x20c/0x390 [ 199.731947][T11272] __netlink_deliver_tap+0x3cc/0x7f0 [ 199.737257][T11272] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.742475][T11272] netlink_deliver_tap+0x19d/0x1b0 [ 199.747599][T11272] netlink_unicast+0x7c4/0x990 [ 199.752391][T11272] ? __pfx_netlink_unicast+0x10/0x10 [ 199.757703][T11272] ? __virt_addr_valid+0x45f/0x530 [ 199.762836][T11272] ? __phys_addr_symbol+0x2f/0x70 [ 199.767877][T11272] ? __check_object_size+0x47a/0x730 [ 199.773185][T11272] netlink_sendmsg+0x8e4/0xcb0 [ 199.777972][T11272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.783276][T11272] ? aa_sock_msg_perm+0x91/0x160 [ 199.788274][T11272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.793569][T11272] __sock_sendmsg+0x221/0x270 [ 199.798268][T11272] ____sys_sendmsg+0x52a/0x7e0 [ 199.803055][T11272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.808349][T11272] ? __fget_files+0x2a/0x410 [ 199.812956][T11272] ? __fget_files+0x2a/0x410 [ 199.817567][T11272] __sys_sendmsg+0x269/0x350 [ 199.822166][T11272] ? __pfx_lock_release+0x10/0x10 [ 199.827210][T11272] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.832343][T11272] ? __pfx_vfs_write+0x10/0x10 [ 199.837140][T11272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.843486][T11272] ? do_syscall_64+0x100/0x230 [ 199.848266][T11272] ? do_syscall_64+0xb6/0x230 [ 199.852956][T11272] do_syscall_64+0xf3/0x230 [ 199.857468][T11272] ? clear_bhb_loop+0x35/0x90 [ 199.862160][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.868061][T11272] RIP: 0033:0x7fb63ad85d29 [ 199.872485][T11272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.892100][T11272] RSP: 002b:00007fb63bbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.900616][T11272] RAX: ffffffffffffffda RBX: 00007fb63af75fa0 RCX: 00007fb63ad85d29 [ 199.908685][T11272] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 199.916670][T11272] RBP: 00007fb63bbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 199.924649][T11272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.932627][T11272] R13: 0000000000000000 R14: 00007fb63af75fa0 R15: 00007ffc9773ecf8 [ 199.940627][T11272] [ 200.024731][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 200.051795][T11252] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 200.163827][T11252] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.200576][T11252] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.226151][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 200.236797][T11252] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.272337][T11252] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.943977][T11321] FAULT_INJECTION: forcing a failure. [ 200.943977][T11321] name failslab, interval 1, probability 0, space 0, times 0 [ 200.977881][T11321] CPU: 1 UID: 0 PID: 11321 Comm: syz.7.1492 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 200.988717][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 200.998796][T11321] Call Trace: [ 201.002097][T11321] [ 201.005038][T11321] dump_stack_lvl+0x241/0x360 [ 201.009746][T11321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.014967][T11321] ? __pfx__printk+0x10/0x10 [ 201.019582][T11321] ? __kmalloc_noprof+0xb5/0x4c0 [ 201.024543][T11321] ? __pfx___might_resched+0x10/0x10 [ 201.029853][T11321] ? aa_get_newest_label+0xff/0x6f0 [ 201.035076][T11321] should_fail_ex+0x3b0/0x4e0 [ 201.039790][T11321] should_failslab+0xac/0x100 [ 201.044496][T11321] __kmalloc_noprof+0xdd/0x4c0 [ 201.049283][T11321] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 201.055546][T11321] ? apparmor_capable+0x13b/0x1b0 [ 201.060605][T11321] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 201.066703][T11321] genl_rcv_msg+0x802/0xec0 [ 201.071244][T11321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.076292][T11321] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 201.082217][T11321] ? __pfx_lock_acquire+0x10/0x10 [ 201.087241][T11321] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 201.092615][T11321] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 201.098071][T11321] ? __pfx_nl80211_post_doit+0x10/0x10 [ 201.103526][T11321] ? __pfx___might_resched+0x10/0x10 [ 201.108825][T11321] netlink_rcv_skb+0x1e3/0x430 [ 201.113585][T11321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.118608][T11321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.123901][T11321] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 201.129380][T11321] genl_rcv+0x28/0x40 [ 201.133365][T11321] netlink_unicast+0x7f6/0x990 [ 201.138136][T11321] ? __pfx_netlink_unicast+0x10/0x10 [ 201.143426][T11321] ? __virt_addr_valid+0x45f/0x530 [ 201.148545][T11321] ? __phys_addr_symbol+0x2f/0x70 [ 201.153580][T11321] ? __check_object_size+0x47a/0x730 [ 201.158871][T11321] netlink_sendmsg+0x8e4/0xcb0 [ 201.163641][T11321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.168928][T11321] ? aa_sock_msg_perm+0x91/0x160 [ 201.173870][T11321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.179153][T11321] __sock_sendmsg+0x221/0x270 [ 201.183833][T11321] ____sys_sendmsg+0x52a/0x7e0 [ 201.188610][T11321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.193888][T11321] ? __fget_files+0x2a/0x410 [ 201.198478][T11321] ? __fget_files+0x2a/0x410 [ 201.203070][T11321] __sys_sendmsg+0x269/0x350 [ 201.207654][T11321] ? __pfx_lock_release+0x10/0x10 [ 201.212677][T11321] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.217794][T11321] ? __pfx_vfs_write+0x10/0x10 [ 201.222585][T11321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.228912][T11321] ? do_syscall_64+0x100/0x230 [ 201.233673][T11321] ? do_syscall_64+0xb6/0x230 [ 201.238346][T11321] do_syscall_64+0xf3/0x230 [ 201.242843][T11321] ? clear_bhb_loop+0x35/0x90 [ 201.247518][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.253435][T11321] RIP: 0033:0x7f502e985d29 [ 201.257851][T11321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.277461][T11321] RSP: 002b:00007f502f812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.285885][T11321] RAX: ffffffffffffffda RBX: 00007f502eb75fa0 RCX: 00007f502e985d29 [ 201.293856][T11321] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 201.301831][T11321] RBP: 00007f502f812090 R08: 0000000000000000 R09: 0000000000000000 [ 201.309812][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.317799][T11321] R13: 0000000000000000 R14: 00007f502eb75fa0 R15: 00007ffca9f91fc8 [ 201.325800][T11321] [ 201.369187][T11325] syz.6.1493[11325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.369286][T11325] syz.6.1493[11325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.398178][T11325] syz.6.1493[11325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.447039][T11328] __nla_validate_parse: 7 callbacks suppressed [ 201.447061][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1495'. [ 201.447360][T11329] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 201.489652][T11329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1496'. [ 201.654463][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1498'. [ 201.746562][T11341] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1500'. [ 201.893040][T11348] FAULT_INJECTION: forcing a failure. [ 201.893040][T11348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.913957][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1504'. [ 201.917978][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.6.1503 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 201.933681][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 201.943751][T11348] Call Trace: [ 201.947051][T11348] [ 201.949999][T11348] dump_stack_lvl+0x241/0x360 [ 201.954686][T11348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.959893][T11348] ? __pfx__printk+0x10/0x10 [ 201.964485][T11348] ? snprintf+0xda/0x120 [ 201.968729][T11348] should_fail_ex+0x3b0/0x4e0 [ 201.973410][T11348] _copy_to_user+0x31/0xb0 [ 201.977830][T11348] simple_read_from_buffer+0xca/0x150 [ 201.983207][T11348] proc_fail_nth_read+0x1e9/0x250 [ 201.988236][T11348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.993782][T11348] ? rw_verify_area+0x55e/0x6f0 [ 201.998635][T11348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.004180][T11348] vfs_read+0x1fc/0xb70 [ 202.008332][T11348] ? __pfx___mutex_lock+0x10/0x10 [ 202.013352][T11348] ? __pfx_vfs_read+0x10/0x10 [ 202.018024][T11348] ? __fget_files+0x2a/0x410 [ 202.022613][T11348] ? __fget_files+0x395/0x410 [ 202.027284][T11348] ? __fget_files+0x2a/0x410 [ 202.031971][T11348] ksys_read+0x18f/0x2b0 [ 202.036211][T11348] ? __pfx_ksys_read+0x10/0x10 [ 202.040972][T11348] ? do_syscall_64+0x100/0x230 [ 202.045732][T11348] ? do_syscall_64+0xb6/0x230 [ 202.050408][T11348] do_syscall_64+0xf3/0x230 [ 202.054947][T11348] ? clear_bhb_loop+0x35/0x90 [ 202.059628][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.065516][T11348] RIP: 0033:0x7fa5e0b8473c [ 202.069929][T11348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.089533][T11348] RSP: 002b:00007fa5e1998030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.097976][T11348] RAX: ffffffffffffffda RBX: 00007fa5e0d75fa0 RCX: 00007fa5e0b8473c [ 202.105957][T11348] RDX: 000000000000000f RSI: 00007fa5e19980a0 RDI: 0000000000000005 [ 202.114012][T11348] RBP: 00007fa5e1998090 R08: 0000000000000000 R09: 0000000000000000 [ 202.121980][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.129945][T11348] R13: 0000000000000000 R14: 00007fa5e0d75fa0 R15: 00007ffd46e58c38 [ 202.137926][T11348] [ 202.166421][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1506'. [ 202.175980][T11355] FAULT_INJECTION: forcing a failure. [ 202.175980][T11355] name failslab, interval 1, probability 0, space 0, times 0 [ 202.190484][T11353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1505'. [ 202.200194][T11355] CPU: 0 UID: 0 PID: 11355 Comm: syz.8.1506 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 202.208719][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1503'. [ 202.210961][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 202.230130][T11355] Call Trace: [ 202.233425][T11355] [ 202.236373][T11355] dump_stack_lvl+0x241/0x360 [ 202.241079][T11355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.246305][T11355] ? __pfx__printk+0x10/0x10 [ 202.250918][T11355] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 202.256921][T11355] ? __pfx___might_resched+0x10/0x10 [ 202.262231][T11355] should_fail_ex+0x3b0/0x4e0 [ 202.266939][T11355] should_failslab+0xac/0x100 [ 202.271647][T11355] kmem_cache_alloc_node_noprof+0x77/0x380 [ 202.277475][T11355] ? __alloc_skb+0x1c3/0x440 [ 202.282091][T11355] __alloc_skb+0x1c3/0x440 [ 202.286531][T11355] ? __pfx___alloc_skb+0x10/0x10 [ 202.291489][T11355] ? netlink_ack_tlv_len+0x6e/0x200 [ 202.296720][T11355] netlink_ack+0x145/0xa50 [ 202.301167][T11355] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 202.306566][T11355] ? __pfx_nl80211_post_doit+0x10/0x10 [ 202.312053][T11355] ? __pfx___might_resched+0x10/0x10 [ 202.317373][T11355] netlink_rcv_skb+0x262/0x430 [ 202.322178][T11355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.327211][T11355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.332508][T11355] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 202.337975][T11355] genl_rcv+0x28/0x40 [ 202.341979][T11355] netlink_unicast+0x7f6/0x990 [ 202.346772][T11355] ? __pfx_netlink_unicast+0x10/0x10 [ 202.352069][T11355] ? __virt_addr_valid+0x45f/0x530 [ 202.357189][T11355] ? __phys_addr_symbol+0x2f/0x70 [ 202.362221][T11355] ? __check_object_size+0x47a/0x730 [ 202.367514][T11355] netlink_sendmsg+0x8e4/0xcb0 [ 202.372289][T11355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.377575][T11355] ? aa_sock_msg_perm+0x91/0x160 [ 202.382512][T11355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.387789][T11355] __sock_sendmsg+0x221/0x270 [ 202.392478][T11355] ____sys_sendmsg+0x52a/0x7e0 [ 202.397249][T11355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.402558][T11355] ? __fget_files+0x2a/0x410 [ 202.407156][T11355] ? __fget_files+0x2a/0x410 [ 202.411758][T11355] __sys_sendmsg+0x269/0x350 [ 202.416345][T11355] ? __pfx_lock_release+0x10/0x10 [ 202.421368][T11355] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.426487][T11355] ? __pfx_vfs_write+0x10/0x10 [ 202.431266][T11355] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.437591][T11355] ? do_syscall_64+0x100/0x230 [ 202.442354][T11355] ? do_syscall_64+0xb6/0x230 [ 202.447051][T11355] do_syscall_64+0xf3/0x230 [ 202.451549][T11355] ? clear_bhb_loop+0x35/0x90 [ 202.456226][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.462115][T11355] RIP: 0033:0x7faa4ab85d29 [ 202.466534][T11355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.486132][T11355] RSP: 002b:00007faa4b97a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.494542][T11355] RAX: ffffffffffffffda RBX: 00007faa4ad75fa0 RCX: 00007faa4ab85d29 [ 202.502514][T11355] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 202.510485][T11355] RBP: 00007faa4b97a090 R08: 0000000000000000 R09: 0000000000000000 [ 202.518454][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.526423][T11355] R13: 0000000000000000 R14: 00007faa4ad75fa0 R15: 00007ffffac0d388 [ 202.534428][T11355] [ 202.619806][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1509'. [ 202.640364][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1507'. [ 202.732568][T11357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.037425][T11417] Cannot find add_set index 3 as target [ 205.180557][T11423] lo speed is unknown, defaulting to 1000 [ 205.186877][T11423] syzkaller0 speed is unknown, defaulting to 1000 [ 205.515675][T11438] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.089297][T11462] xt_HMARK: spi-set and port-set can't be combined [ 206.500833][T11485] __nla_validate_parse: 17 callbacks suppressed [ 206.500850][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1549'. [ 206.520457][T11485] FAULT_INJECTION: forcing a failure. [ 206.520457][T11485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.541334][T11485] CPU: 0 UID: 0 PID: 11485 Comm: syz.7.1549 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 206.552141][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 206.562226][T11485] Call Trace: [ 206.565517][T11485] [ 206.568461][T11485] dump_stack_lvl+0x241/0x360 [ 206.573176][T11485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.578404][T11485] ? __pfx__printk+0x10/0x10 [ 206.583030][T11485] ? snprintf+0xda/0x120 [ 206.587299][T11485] should_fail_ex+0x3b0/0x4e0 [ 206.592012][T11485] _copy_to_user+0x31/0xb0 [ 206.596458][T11485] simple_read_from_buffer+0xca/0x150 [ 206.601860][T11485] proc_fail_nth_read+0x1e9/0x250 [ 206.606911][T11485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.612484][T11485] ? rw_verify_area+0x55e/0x6f0 [ 206.617359][T11485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.622930][T11485] vfs_read+0x1fc/0xb70 [ 206.627119][T11485] ? __pfx___mutex_lock+0x10/0x10 [ 206.632175][T11485] ? __pfx_vfs_read+0x10/0x10 [ 206.636873][T11485] ? __fget_files+0x2a/0x410 [ 206.641505][T11485] ? __fget_files+0x395/0x410 [ 206.646205][T11485] ? __fget_files+0x2a/0x410 [ 206.650829][T11485] ksys_read+0x18f/0x2b0 [ 206.655093][T11485] ? __pfx_ksys_read+0x10/0x10 [ 206.659878][T11485] ? do_syscall_64+0x100/0x230 [ 206.664667][T11485] ? do_syscall_64+0xb6/0x230 [ 206.669369][T11485] do_syscall_64+0xf3/0x230 [ 206.673898][T11485] ? clear_bhb_loop+0x35/0x90 [ 206.678598][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.684500][T11485] RIP: 0033:0x7f502e98473c [ 206.688917][T11485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.708530][T11485] RSP: 002b:00007f502f812030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.716949][T11485] RAX: ffffffffffffffda RBX: 00007f502eb75fa0 RCX: 00007f502e98473c [ 206.724921][T11485] RDX: 000000000000000f RSI: 00007f502f8120a0 RDI: 0000000000000006 [ 206.732890][T11485] RBP: 00007f502f812090 R08: 0000000000000000 R09: 0000000000000000 [ 206.740864][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.748841][T11485] R13: 0000000000000000 R14: 00007f502eb75fa0 R15: 00007ffca9f91fc8 [ 206.756836][T11485] [ 206.772943][T11486] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 206.814239][T11486] tap0: tun_chr_ioctl cmd 2147767507 [ 207.038721][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1552'. [ 207.834315][T11521] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 207.843145][T11521] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 207.924893][T11518] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1559'. [ 207.958880][T11523] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1562'. [ 207.992732][T11525] lo speed is unknown, defaulting to 1000 [ 208.004207][T11525] syzkaller0 speed is unknown, defaulting to 1000 [ 208.052954][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.064703][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.081026][T11527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.082813][T11529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.620549][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1567'. [ 209.397305][T11589] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1576'. [ 209.470493][T11593] netlink: 'syz.8.1579': attribute type 1 has an invalid length. [ 209.590514][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1579'. [ 209.613881][T11598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.644130][T11598] bond3: (slave bond4): making interface the new active one [ 209.663432][T11598] bond3: (slave bond4): Enslaving as an active interface with an up link [ 209.686135][T11600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1582'. [ 209.866319][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1586'. [ 210.024693][T11615] lo speed is unknown, defaulting to 1000 [ 210.121766][T11615] syzkaller0 speed is unknown, defaulting to 1000 [ 210.308202][T11628] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1588'. [ 210.405377][T11640] netlink: 'syz.0.1593': attribute type 3 has an invalid length. [ 210.603871][T11615] IPVS: You probably need to specify IP address on multicast interface. [ 210.633236][T11615] IPVS: Error connecting to the multicast addr [ 210.666160][T11656] netlink: 'syz.6.1598': attribute type 2 has an invalid length. [ 210.939455][T11667] vlan3: entered promiscuous mode [ 211.427149][T11695] lo speed is unknown, defaulting to 1000 [ 211.444797][T11695] syzkaller0 speed is unknown, defaulting to 1000 [ 211.483666][T11702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.555909][T11693] netlink: 'syz.8.1609': attribute type 1 has an invalid length. [ 212.078766][T11719] __nla_validate_parse: 6 callbacks suppressed [ 212.078785][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 212.291179][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1619'. [ 212.779262][T11744] sctp: [Deprecated]: syz.5.1625 (pid 11744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.779262][T11744] Use struct sctp_sack_info instead [ 212.815113][T11744] netlink: 'syz.5.1625': attribute type 1 has an invalid length. [ 212.872789][T11752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1628'. [ 212.956392][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1629'. [ 213.227306][T11768] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 213.245848][T11768] macsec1: entered promiscuous mode [ 213.255214][T11768] macsec1: entered allmulticast mode [ 213.260726][T11768] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 213.425970][T11781] x_tables: duplicate underflow at hook 1 [ 213.624616][T11797] x_tables: duplicate underflow at hook 1 [ 213.880643][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1641'. [ 213.919022][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1647'. [ 213.928816][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1647'. [ 213.950014][T11810] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1648'. [ 214.205554][T11833] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1654'. [ 214.533500][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1661'. [ 214.575744][T11852] netlink: 'syz.8.1659': attribute type 25 has an invalid length. [ 214.829390][T11866] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 214.858226][T11868] lo speed is unknown, defaulting to 1000 [ 214.875462][T11868] syzkaller0 speed is unknown, defaulting to 1000 [ 215.348031][T11888] x_tables: duplicate underflow at hook 1 [ 215.516285][T11897] bridge2: entered promiscuous mode [ 215.534321][T11897] bridge2: entered allmulticast mode [ 215.545523][T11897] team0: Port device bridge2 added [ 215.555533][T11897] netlink: 'syz.8.1679': attribute type 10 has an invalid length. [ 215.568390][T11897] bridge0: port 3(ip6gretap0) entered blocking state [ 215.575145][T11897] bridge0: port 3(ip6gretap0) entered disabled state [ 215.582118][T11897] ip6gretap0: entered allmulticast mode [ 215.594985][T11897] ip6gretap0: entered promiscuous mode [ 215.611465][T11897] bridge0: port 3(ip6gretap0) entered blocking state [ 215.618215][T11897] bridge0: port 3(ip6gretap0) entered forwarding state [ 215.900065][T11905] lo speed is unknown, defaulting to 1000 [ 215.907014][T11905] syzkaller0 speed is unknown, defaulting to 1000 [ 215.907634][T11908] veth0_to_bridge: entered promiscuous mode [ 216.023788][T11912] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 216.044053][T11912] macsec0: entered promiscuous mode [ 216.058649][T11912] macsec0: entered allmulticast mode [ 216.063985][T11912] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 216.096923][T11917] netlink: 'syz.0.1686': attribute type 3 has an invalid length. [ 216.125987][T11919] x_tables: duplicate underflow at hook 1 [ 216.172325][T11917] netlink: 'syz.0.1686': attribute type 3 has an invalid length. [ 216.298170][T11924] netlink: 'syz.7.1687': attribute type 1 has an invalid length. [ 216.393011][T11924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.471814][T11928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.485955][T11928] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 216.516762][T11928] bond2: (slave vcan1): Error -95 calling set_mac_address [ 216.537408][T11905] sctp: [Deprecated]: syz.8.1681 (pid 11905) Use of int in maxseg socket option. [ 216.537408][T11905] Use struct sctp_assoc_value instead [ 216.600960][T11931] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 216.616659][T11931] bond2: (slave batadv2): making interface the new active one [ 216.625002][T11931] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 216.649061][T11904] veth0_to_bridge: left promiscuous mode [ 216.724939][T11938] netlink: 'syz.6.1692': attribute type 1 has an invalid length. [ 217.212553][T11951] lo speed is unknown, defaulting to 1000 [ 217.219238][T11952] __nla_validate_parse: 11 callbacks suppressed [ 217.219256][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1698'. [ 217.272272][T11951] syzkaller0 speed is unknown, defaulting to 1000 [ 217.316913][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1699'. [ 217.400577][T11956] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 218.050962][T11980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1702'. [ 218.122462][T11964] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 218.157409][T11964] macsec1: entered promiscuous mode [ 218.194982][T11964] macsec1: entered allmulticast mode [ 218.218172][T11964] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 218.239505][T11992] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1706'. [ 218.256308][T11990] pim6reg1: entered promiscuous mode [ 218.279407][T11990] pim6reg1: entered allmulticast mode [ 218.518865][T12002] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1709'. [ 218.562922][T12009] veth1_to_team: mtu greater than device maximum [ 218.706472][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1713'. [ 218.841044][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1720'. [ 219.195650][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1727'. [ 219.271574][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1729'. [ 219.583719][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1733'. [ 219.949744][T12098] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 219.976580][T12096] IPv6: addrconf: prefix option has invalid lifetime [ 220.155235][T12105] lo speed is unknown, defaulting to 1000 [ 220.199198][T12105] syzkaller0 speed is unknown, defaulting to 1000 [ 220.257374][T12116] gtp0: entered promiscuous mode [ 220.262800][T12116] gtp0: entered allmulticast mode [ 221.265973][T12152] vlan0: entered promiscuous mode [ 221.278039][T12152] erspan0: entered promiscuous mode [ 221.577088][T12173] ip6gretap0: left allmulticast mode [ 221.591282][T12173] ip6gretap0: left promiscuous mode [ 221.598131][T12173] bridge0: port 3(ip6gretap0) entered disabled state [ 221.612844][T12173] bridge_slave_0: left allmulticast mode [ 221.628245][T12173] bridge_slave_0: left promiscuous mode [ 221.634123][T12173] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.643870][T12173] bridge_slave_1: left allmulticast mode [ 221.652467][T12173] bridge_slave_1: left promiscuous mode [ 221.658643][T12173] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.671431][T12173] bond0: (slave bond_slave_0): Releasing backup interface [ 221.702929][T12173] bond0: (slave bond_slave_1): Releasing backup interface [ 221.730113][T12173] team0: Port device team_slave_0 removed [ 221.747652][T12173] team0: Port device team_slave_1 removed [ 221.769923][T12173] bond2: (slave ip6gretap1): Releasing backup interface [ 221.835262][T12173] bond3: (slave bond4): Releasing backup interface [ 221.917659][T12173] team0: Port device bridge2 removed [ 222.015490][T12177] team0: Mode changed to "loadbalance" [ 222.062757][T12180] lo speed is unknown, defaulting to 1000 [ 222.091556][T12180] syzkaller0 speed is unknown, defaulting to 1000 [ 222.374927][T12217] __nla_validate_parse: 19 callbacks suppressed [ 222.374946][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 222.483450][T12217] tap0: tun_chr_ioctl cmd 2147767507 [ 222.500249][T12217] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.540795][T12215] netlink: 'syz.7.1777': attribute type 3 has an invalid length. [ 222.583472][T12221] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1778'. [ 222.615948][T12233] netlink: 'syz.6.1779': attribute type 10 has an invalid length. [ 222.684206][T12233] bridge0: port 1(gretap1) entered blocking state [ 222.690820][T12233] bridge0: port 1(gretap1) entered listening state [ 222.704134][T12233] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.996601][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1787'. [ 223.540866][T12278] xt_cgroup: invalid path, errno=-2 [ 223.683693][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1796'. [ 223.776506][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1793'. [ 224.015338][T12296] lo speed is unknown, defaulting to 1000 [ 224.022548][T12296] syzkaller0 speed is unknown, defaulting to 1000 [ 224.279768][T12303] lo speed is unknown, defaulting to 1000 [ 224.286460][T12303] syzkaller0 speed is unknown, defaulting to 1000 [ 224.499333][T12307] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1802'. [ 224.529850][T12307] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 224.694597][T12307] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 224.859598][T12307] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.019769][T12307] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.199204][T12307] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.305342][T12307] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.353144][T12307] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.402301][T12307] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.442325][T12334] lo speed is unknown, defaulting to 1000 [ 225.558250][T12334] syzkaller0 speed is unknown, defaulting to 1000 [ 225.731424][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1816'. [ 225.773615][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1812'. [ 225.902656][T12354] syz.5.1817[12354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.902756][T12354] syz.5.1817[12354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.965494][T12354] syz.5.1817[12354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.178126][T12361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1820'. [ 226.253091][T12365] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1821'. [ 226.327773][T12367] netlink: 'syz.0.1822': attribute type 2 has an invalid length. [ 227.381398][T12411] __nla_validate_parse: 9 callbacks suppressed [ 227.381417][T12411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1836'. [ 227.498931][T12422] netlink: 'syz.8.1841': attribute type 4 has an invalid length. [ 227.506702][T12422] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1841'. [ 227.516292][T12422] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 227.728314][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 227.731267][T12432] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.1844'. [ 227.774925][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1844'. [ 228.063085][T12440] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1847'. [ 228.082633][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 228.225168][T12442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1849'. [ 228.279500][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 228.417964][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 228.610945][T12455] netlink: 'syz.0.1852': attribute type 10 has an invalid length. [ 228.622001][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1854'. [ 229.297718][T12493] netlink: 'syz.8.1863': attribute type 1 has an invalid length. [ 229.306141][T12490] netem: invalid attributes len -16 [ 229.312198][T12490] netem: change failed [ 229.634522][T12502] syzkaller0: entered promiscuous mode [ 229.658234][T12502] syzkaller0: entered allmulticast mode [ 229.843630][T12505] vlan0: entered promiscuous mode [ 229.866993][T12505] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 232.016113][T12532] netlink: 'syz.6.1874': attribute type 2 has an invalid length. [ 232.040584][T12532] netlink: 'syz.6.1874': attribute type 9 has an invalid length. [ 232.457078][T12554] veth0_to_team: entered promiscuous mode [ 232.466152][T12554] veth0_to_team: entered allmulticast mode [ 232.481374][T12554] __nla_validate_parse: 9 callbacks suppressed [ 232.481386][T12554] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1883'. [ 232.540332][T12566] pimreg3: entered allmulticast mode [ 232.607040][T12554] tap0: tun_chr_ioctl cmd 1074025677 [ 232.635595][T12554] tap0: linktype set to 0 [ 232.642996][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 232.668395][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1889'. [ 232.748303][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1891'. [ 232.765362][T12580] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 232.774143][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1891'. [ 232.787287][T12580] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 232.965465][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1896'. [ 233.074716][T12604] netlink: 'syz.6.1899': attribute type 10 has an invalid length. [ 233.171811][T12604] veth0_vlan: left promiscuous mode [ 233.211813][T12604] veth0_vlan: entered promiscuous mode [ 233.223495][T12612] x_tables: duplicate entry at hook 2 [ 233.258411][T12604] team0: Device veth0_vlan failed to register rx_handler [ 233.292684][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1903'. [ 233.397770][T12604] syz.6.1899 (12604) used greatest stack depth: 18192 bytes left [ 234.054949][T12664] netlink: 'syz.6.1916': attribute type 11 has an invalid length. [ 234.072728][T12654] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.221451][T12654] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.253728][T12671] netlink: 'syz.0.1918': attribute type 13 has an invalid length. [ 234.320207][T12671] veth1_macvtap: left promiscuous mode [ 234.329378][T12671] macsec0: entered allmulticast mode [ 234.399113][T12654] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.414361][T12671] veth1_macvtap: entered promiscuous mode [ 234.420478][T12671] veth1_macvtap: entered allmulticast mode [ 234.426377][T12671] macsec0: left allmulticast mode [ 234.431902][T12671] veth1_macvtap: left allmulticast mode [ 234.444622][T12680] lo speed is unknown, defaulting to 1000 [ 234.464219][T12682] siw: device registration error -23 [ 234.502690][T12654] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.518133][T12680] lo speed is unknown, defaulting to 1000 [ 234.524368][T12680] lo speed is unknown, defaulting to 1000 [ 234.542037][T12680] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 234.596942][T12680] lo speed is unknown, defaulting to 1000 [ 234.610524][T12680] lo speed is unknown, defaulting to 1000 [ 234.623830][T12654] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.633675][T12680] lo speed is unknown, defaulting to 1000 [ 234.643310][T12680] lo speed is unknown, defaulting to 1000 [ 234.658052][T12654] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.668159][T12680] lo speed is unknown, defaulting to 1000 [ 234.682357][T12654] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.691862][T12680] lo speed is unknown, defaulting to 1000 [ 234.702913][T12654] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.713280][T12680] lo speed is unknown, defaulting to 1000 [ 234.833345][T12693] sctp: [Deprecated]: syz.7.1924 (pid 12693) Use of int in maxseg socket option. [ 234.833345][T12693] Use struct sctp_assoc_value instead [ 234.988971][T12705] SET target dimension over the limit! [ 234.997034][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1929'. [ 235.045873][T12670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.179115][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1931'. [ 235.797236][T12743] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1939'. [ 235.956132][T12746] netlink: 'syz.6.1943': attribute type 1 has an invalid length. [ 236.019245][T12752] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 236.036296][T12746] netlink: 'syz.6.1943': attribute type 8 has an invalid length. [ 236.044597][T12752] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 236.634505][T12788] netlink: zone id is out of range [ 236.641513][T12788] netlink: zone id is out of range [ 236.646764][T12788] netlink: zone id is out of range [ 236.653750][T12788] netlink: zone id is out of range [ 236.660359][T12788] netlink: zone id is out of range [ 236.665699][T12788] netlink: zone id is out of range [ 236.675860][T12788] netlink: zone id is out of range [ 236.684710][T12788] netlink: zone id is out of range [ 236.698548][T12788] netlink: zone id is out of range [ 236.711114][T12788] netlink: zone id is out of range [ 236.723329][T12790] syzkaller0: entered promiscuous mode [ 236.737019][T12790] syzkaller0: entered allmulticast mode [ 236.763493][T12790] netlink: 'syz.6.1954': attribute type 4 has an invalid length. [ 236.995632][T12808] netlink: 'syz.7.1958': attribute type 1 has an invalid length. [ 237.011302][T12808] netlink: 'syz.7.1958': attribute type 2 has an invalid length. [ 237.083538][T12806] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 237.282186][T12825] tipc: Enabled bearer , priority 10 [ 237.679251][T12849] __nla_validate_parse: 6 callbacks suppressed [ 237.679272][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1971'. [ 237.757853][T12853] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1973'. [ 237.849208][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1975'. [ 237.875882][T12863] netlink: 'syz.7.1975': attribute type 1 has an invalid length. [ 237.930884][T12864] bridge6: entered promiscuous mode [ 237.936274][T12864] bridge6: entered allmulticast mode [ 237.943529][ C0] bridge0: port 1(gretap1) entered learning state [ 238.113708][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1979'. [ 238.137479][T12878] geneve2: entered promiscuous mode [ 238.163388][T12878] geneve2: entered allmulticast mode [ 238.203479][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 238.227746][T12883] ip6gretap0: left allmulticast mode [ 238.241925][T12883] ip6gretap0: left promiscuous mode [ 238.247283][T12883] bridge0: port 4(ip6gretap0) entered disabled state [ 238.293657][T12883] team0: left allmulticast mode [ 238.305183][T12883] team_slave_0: left allmulticast mode [ 238.327209][T12883] team_slave_1: left allmulticast mode [ 238.352594][T12883] team0: left promiscuous mode [ 238.357414][T12883] team_slave_0: left promiscuous mode [ 238.392748][T12883] team_slave_1: left promiscuous mode [ 238.427033][T12883] bridge0: port 3(team0) entered disabled state [ 238.440327][T12883] bridge_slave_1: left allmulticast mode [ 238.446876][T12883] bridge_slave_1: left promiscuous mode [ 238.453512][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.469718][T12883] bridge_slave_0: left allmulticast mode [ 238.475395][T12883] bridge_slave_0: left promiscuous mode [ 238.490944][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.542040][T12894] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1985'. [ 238.722085][T12899] lo speed is unknown, defaulting to 1000 [ 238.737596][T12899] syzkaller0 speed is unknown, defaulting to 1000 [ 238.751221][T12899] lo speed is unknown, defaulting to 1000 [ 239.441125][T12896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.530455][T12932] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1996'. [ 239.553087][T12932] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1996'. [ 239.587460][T12932] netlink: 'syz.8.1996': attribute type 1 has an invalid length. [ 239.611940][T12940] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1999'. [ 239.636815][T12940] xt_l2tp: wrong L2TP version: 0 [ 239.840669][T12952] netlink: 'syz.6.2001': attribute type 5 has an invalid length. [ 240.168142][T12974] lo speed is unknown, defaulting to 1000 [ 240.190461][T12974] syzkaller0 speed is unknown, defaulting to 1000 [ 240.218335][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2008'. [ 240.239467][T12974] lo speed is unknown, defaulting to 1000 [ 240.258527][T12977] dummy0: entered promiscuous mode [ 240.265282][T12977] macvtap1: entered promiscuous mode [ 240.273262][T12977] macvtap1: entered allmulticast mode [ 240.279876][T12977] dummy0: entered allmulticast mode [ 240.489950][T12985] GUP no longer grows the stack in syz.8.2010 (12985): 20004000-20005000 (20002000) [ 240.530203][T12985] CPU: 0 UID: 0 PID: 12985 Comm: syz.8.2010 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 240.541016][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 240.551116][T12985] Call Trace: [ 240.554416][T12985] [ 240.557372][T12985] dump_stack_lvl+0x241/0x360 [ 240.562091][T12985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.567330][T12985] ? __pfx__printk+0x10/0x10 [ 240.571955][T12985] ? find_vma+0xf9/0x170 [ 240.576242][T12985] __get_user_pages+0x4385/0x49e0 [ 240.581318][T12985] ? __pfx_lock_acquire+0x10/0x10 [ 240.586377][T12985] ? mark_lock+0x9a/0x360 [ 240.590746][T12985] ? __lock_acquire+0x1397/0x2100 [ 240.595821][T12985] ? __pfx___get_user_pages+0x10/0x10 [ 240.601230][T12985] ? __gup_longterm_locked+0xd2f/0x17f0 [ 240.606806][T12985] ? __pfx_down_read_killable+0x10/0x10 [ 240.612380][T12985] ? __pfx_lock_acquire+0x10/0x10 [ 240.617432][T12985] ? try_get_folio+0xf1/0x6f0 [ 240.622139][T12985] ? __pfx_lock_release+0x10/0x10 [ 240.627206][T12985] __gup_longterm_locked+0xe64/0x17f0 [ 240.632620][T12985] ? mark_lock+0x9a/0x360 [ 240.636981][T12985] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.642996][T12985] ? __pfx___gup_longterm_locked+0x10/0x10 [ 240.648828][T12985] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.655195][T12985] ? gup_fast_fallback+0x207e/0x29c0 [ 240.660509][T12985] gup_fast_fallback+0x2266/0x29c0 [ 240.665677][T12985] ? __pfx_gup_fast_fallback+0x10/0x10 [ 240.671220][T12985] ? __mutex_trylock_common+0x183/0x2e0 [ 240.676798][T12985] ? __pfx___might_resched+0x10/0x10 [ 240.682110][T12985] ? is_valid_gup_args+0x124/0x200 [ 240.687254][T12985] get_user_pages_fast+0xcc/0x160 [ 240.692305][T12985] ? __pfx_get_user_pages_fast+0x10/0x10 [ 240.697953][T12985] ? rcu_is_watching+0x15/0xb0 [ 240.702746][T12985] ? trace_contention_end+0x3c/0x120 [ 240.708062][T12985] ? __mutex_lock+0x37f/0xee0 [ 240.712765][T12985] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 240.718529][T12985] iov_iter_get_pages2+0xcf/0x130 [ 240.723594][T12985] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 240.729274][T12985] __se_sys_vmsplice+0x740/0x1490 [ 240.734342][T12985] ? __lock_acquire+0x1397/0x2100 [ 240.739409][T12985] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 240.744898][T12985] ? __pfx_futex_wait+0x10/0x10 [ 240.749817][T12985] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.755839][T12985] ? do_syscall_64+0x100/0x230 [ 240.760631][T12985] ? do_syscall_64+0xb6/0x230 [ 240.765339][T12985] do_syscall_64+0xf3/0x230 [ 240.769864][T12985] ? clear_bhb_loop+0x35/0x90 [ 240.774577][T12985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.780496][T12985] RIP: 0033:0x7faa4ab85d29 [ 240.784950][T12985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.804584][T12985] RSP: 002b:00007faa4b97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 240.813034][T12985] RAX: ffffffffffffffda RBX: 00007faa4ad75fa0 RCX: 00007faa4ab85d29 [ 240.821031][T12985] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000008 [ 240.829026][T12985] RBP: 00007faa4ac01a20 R08: 0000000000000000 R09: 0000000000000000 [ 240.837020][T12985] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 240.845011][T12985] R13: 0000000000000000 R14: 00007faa4ad75fa0 R15: 00007ffffac0d388 [ 240.853025][T12985] [ 240.863223][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 241.225807][T12997] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.304995][T12999] xt_cgroup: xt_cgroup: no path or classid specified [ 241.374450][T12996] netlink: 'syz.6.2012': attribute type 2 has an invalid length. [ 241.397288][T12996] : entered promiscuous mode [ 241.744328][T13021] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.783821][T13024] lo speed is unknown, defaulting to 1000 [ 241.800822][T13024] syzkaller0 speed is unknown, defaulting to 1000 [ 241.812172][T13024] lo speed is unknown, defaulting to 1000 [ 241.818326][T13027] lo speed is unknown, defaulting to 1000 [ 241.882718][T13021] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.926488][T13027] syzkaller0 speed is unknown, defaulting to 1000 [ 242.045392][T13021] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.070347][T13039] Cannot find del_set index 4 as target [ 242.097045][T13027] lo speed is unknown, defaulting to 1000 [ 242.180108][T13036] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 242.272745][T13021] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.482139][T13021] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.533026][T13053] lo speed is unknown, defaulting to 1000 [ 242.546068][T13021] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.601259][T13021] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.629490][T13053] syzkaller0 speed is unknown, defaulting to 1000 [ 242.636942][T13053] lo speed is unknown, defaulting to 1000 [ 242.650659][T13021] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.794495][T13057] netlink: 'syz.0.2030': attribute type 11 has an invalid length. [ 242.834102][T13057] __nla_validate_parse: 7 callbacks suppressed [ 242.834124][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 242.958093][T13057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'. [ 242.998488][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 243.032295][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2032'. [ 243.141968][T13066] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2032'. [ 243.267265][T13074] xt_cgroup: invalid path, errno=-2 [ 243.427849][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2036'. [ 243.508458][T13080] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.2037'. [ 243.666534][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2038'. [ 243.691341][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2040'. [ 243.728398][T13086] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2040'. [ 245.369795][T13153] pim6reg1: entered promiscuous mode [ 245.405708][T13153] pim6reg1: entered allmulticast mode [ 245.694456][T13169] ------------[ cut here ]------------ [ 245.699995][T13169] Please remove unsupported % in format string [ 245.707028][T13169] WARNING: CPU: 0 PID: 13169 at lib/vsprintf.c:2704 format_decode+0x1193/0x1bb0 [ 245.716139][T13169] Modules linked in: [ 245.720092][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.7.2078 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 245.730928][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 245.741046][T13169] RIP: 0010:format_decode+0x1193/0x1bb0 [ 245.746628][T13169] Code: a5 d8 f5 c6 05 d0 90 3d 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 60 fa 31 8d e8 5e 4e 99 f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 245.766301][T13169] RSP: 0018:ffffc9000d28f5c0 EFLAGS: 00010246 [ 245.772442][T13169] RAX: daf12306dc756100 RBX: 0000000000000000 RCX: 0000000000080000 [ 245.780502][T13169] RDX: ffffc900049a2000 RSI: 00000000000041c7 RDI: 00000000000041c8 [ 245.788547][T13169] RBP: ffffc9000d28f6b0 R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 245.796547][T13169] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 1ffff92001a51f1d [ 245.804595][T13169] R13: ffffc9000d28f8ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 245.812640][T13169] FS: 00007f502f8126c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 245.821638][T13169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.828291][T13169] CR2: ffffffffdfa50000 CR3: 000000005a774000 CR4: 00000000003526f0 [ 245.836285][T13169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.844319][T13169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.852359][T13169] Call Trace: [ 245.855652][T13169] [ 245.858637][T13169] ? __warn+0x165/0x4d0 [ 245.862819][T13169] ? format_decode+0x1193/0x1bb0 [ 245.867827][T13169] ? report_bug+0x2b3/0x500 [ 245.872364][T13169] ? format_decode+0x1193/0x1bb0 [ 245.877349][T13169] ? handle_bug+0x60/0x90 [ 245.881738][T13169] ? exc_invalid_op+0x1a/0x50 [ 245.886437][T13169] ? asm_exc_invalid_op+0x1a/0x20 [ 245.891531][T13169] ? __warn_printk+0x292/0x360 [ 245.896355][T13169] ? format_decode+0x1193/0x1bb0 [ 245.901375][T13169] ? __pfx_format_decode+0x10/0x10 [ 245.906520][T13169] ? bstr_printf+0x721/0x1210 [ 245.911273][T13169] bstr_printf+0x137/0x1210 [ 245.915816][T13169] ? __pfx_bstr_printf+0x10/0x10 [ 245.920818][T13169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.927170][T13169] ? bpf_trace_printk+0x115/0x230 [ 245.932269][T13169] bpf_trace_printk+0x1a1/0x230 [ 245.937165][T13169] ? ktime_get+0x114/0x1f0 [ 245.941646][T13169] ? __pfx_bpf_trace_printk+0x10/0x10 [ 245.947039][T13169] ? ktime_get+0x114/0x1f0 [ 245.951509][T13169] ? bpf_test_run+0x370/0xa90 [ 245.956227][T13169] ? read_tsc+0x9/0x20 [ 245.960360][T13169] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 245.965840][T13169] bpf_test_run+0x4f0/0xa90 [ 245.970409][T13169] ? bpf_test_run+0x370/0xa90 [ 245.975120][T13169] ? __pfx_bpf_test_run+0x10/0x10 [ 245.980234][T13169] ? __pfx_eth_type_trans+0x10/0x10 [ 245.985468][T13169] ? convert___skb_to_skb+0x41/0x620 [ 245.990815][T13169] bpf_prog_test_run_skb+0xca2/0x1820 [ 245.996227][T13169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.002097][T13169] ? __fget_files+0x2a/0x410 [ 246.006716][T13169] ? fput+0x21b/0x290 [ 246.010765][T13169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.016602][T13169] bpf_prog_test_run+0x2e4/0x360 [ 246.021618][T13169] __sys_bpf+0x48d/0x810 [ 246.025889][T13169] ? __pfx___sys_bpf+0x10/0x10 [ 246.030726][T13169] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.036739][T13169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.043113][T13169] ? do_syscall_64+0x100/0x230 [ 246.047917][T13169] __x64_sys_bpf+0x7c/0x90 [ 246.052364][T13169] do_syscall_64+0xf3/0x230 [ 246.056886][T13169] ? clear_bhb_loop+0x35/0x90 [ 246.061608][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.067513][T13169] RIP: 0033:0x7f502e985d29 [ 246.071998][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.091660][T13169] RSP: 002b:00007f502f812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.100137][T13169] RAX: ffffffffffffffda RBX: 00007f502eb75fa0 RCX: 00007f502e985d29 [ 246.108166][T13169] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 246.116232][T13169] RBP: 00007f502ea01a20 R08: 0000000000000000 R09: 0000000000000000 [ 246.124229][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.132239][T13169] R13: 0000000000000000 R14: 00007f502eb75fa0 R15: 00007ffca9f91fc8 [ 246.140289][T13169] [ 246.143344][T13169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.150628][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.7.2078 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 246.161382][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 246.171432][T13169] Call Trace: [ 246.174704][T13169] [ 246.177630][T13169] dump_stack_lvl+0x241/0x360 [ 246.182311][T13169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.187506][T13169] ? __pfx__printk+0x10/0x10 [ 246.192095][T13169] ? _printk+0xd5/0x120 [ 246.196249][T13169] ? __init_begin+0x41000/0x41000 [ 246.201273][T13169] ? vscnprintf+0x5d/0x90 [ 246.205606][T13169] panic+0x349/0x880 [ 246.209505][T13169] ? __warn+0x174/0x4d0 [ 246.213666][T13169] ? __pfx_panic+0x10/0x10 [ 246.218093][T13169] __warn+0x344/0x4d0 [ 246.222071][T13169] ? format_decode+0x1193/0x1bb0 [ 246.227012][T13169] report_bug+0x2b3/0x500 [ 246.231344][T13169] ? format_decode+0x1193/0x1bb0 [ 246.236287][T13169] handle_bug+0x60/0x90 [ 246.240437][T13169] exc_invalid_op+0x1a/0x50 [ 246.244944][T13169] asm_exc_invalid_op+0x1a/0x20 [ 246.249794][T13169] RIP: 0010:format_decode+0x1193/0x1bb0 [ 246.255340][T13169] Code: a5 d8 f5 c6 05 d0 90 3d 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 60 fa 31 8d e8 5e 4e 99 f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 246.274941][T13169] RSP: 0018:ffffc9000d28f5c0 EFLAGS: 00010246 [ 246.281004][T13169] RAX: daf12306dc756100 RBX: 0000000000000000 RCX: 0000000000080000 [ 246.288968][T13169] RDX: ffffc900049a2000 RSI: 00000000000041c7 RDI: 00000000000041c8 [ 246.296930][T13169] RBP: ffffc9000d28f6b0 R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 246.304895][T13169] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 1ffff92001a51f1d [ 246.312868][T13169] R13: ffffc9000d28f8ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 246.320841][T13169] ? __warn_printk+0x292/0x360 [ 246.325618][T13169] ? __pfx_format_decode+0x10/0x10 [ 246.330732][T13169] ? bstr_printf+0x721/0x1210 [ 246.335413][T13169] bstr_printf+0x137/0x1210 [ 246.339921][T13169] ? __pfx_bstr_printf+0x10/0x10 [ 246.344854][T13169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.351176][T13169] ? bpf_trace_printk+0x115/0x230 [ 246.356198][T13169] bpf_trace_printk+0x1a1/0x230 [ 246.361137][T13169] ? ktime_get+0x114/0x1f0 [ 246.365547][T13169] ? __pfx_bpf_trace_printk+0x10/0x10 [ 246.370913][T13169] ? ktime_get+0x114/0x1f0 [ 246.375320][T13169] ? bpf_test_run+0x370/0xa90 [ 246.379993][T13169] ? read_tsc+0x9/0x20 [ 246.384059][T13169] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 246.389516][T13169] bpf_test_run+0x4f0/0xa90 [ 246.394017][T13169] ? bpf_test_run+0x370/0xa90 [ 246.398703][T13169] ? __pfx_bpf_test_run+0x10/0x10 [ 246.403736][T13169] ? __pfx_eth_type_trans+0x10/0x10 [ 246.408935][T13169] ? convert___skb_to_skb+0x41/0x620 [ 246.414220][T13169] bpf_prog_test_run_skb+0xca2/0x1820 [ 246.419602][T13169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.425400][T13169] ? __fget_files+0x2a/0x410 [ 246.429997][T13169] ? fput+0x21b/0x290 [ 246.433975][T13169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.439780][T13169] bpf_prog_test_run+0x2e4/0x360 [ 246.444716][T13169] __sys_bpf+0x48d/0x810 [ 246.448956][T13169] ? __pfx___sys_bpf+0x10/0x10 [ 246.453721][T13169] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.459697][T13169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.466019][T13169] ? do_syscall_64+0x100/0x230 [ 246.470781][T13169] __x64_sys_bpf+0x7c/0x90 [ 246.475197][T13169] do_syscall_64+0xf3/0x230 [ 246.479695][T13169] ? clear_bhb_loop+0x35/0x90 [ 246.484370][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.490259][T13169] RIP: 0033:0x7f502e985d29 [ 246.494685][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.514303][T13169] RSP: 002b:00007f502f812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.522724][T13169] RAX: ffffffffffffffda RBX: 00007f502eb75fa0 RCX: 00007f502e985d29 [ 246.530694][T13169] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 246.538666][T13169] RBP: 00007f502ea01a20 R08: 0000000000000000 R09: 0000000000000000 [ 246.546648][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.554621][T13169] R13: 0000000000000000 R14: 00007f502eb75fa0 R15: 00007ffca9f91fc8 [ 246.562617][T13169] [ 246.565874][T13169] Kernel Offset: disabled [ 246.570185][T13169] Rebooting in 86400 seconds..