last executing test programs: 14m40.953216935s ago: executing program 2 (id=503): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000001000000000000000079123000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2c00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delqdisc={0x34, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="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", 0x155}, {&(0x7f0000000580)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000700)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000003100)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/24, 0x18}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/34, 0x22}], 0x3, &(0x7f0000001ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/62, 0x3e}, {&(0x7f0000002bc0)=""/111, 0x6f}, {&(0x7f0000002c40)=""/87, 0x57}, {&(0x7f0000002cc0)=""/70, 0x46}, {&(0x7f0000002d40)=""/173, 0xad}, {&(0x7f0000002e00)=""/236, 0xec}, {&(0x7f0000002f00)=""/69, 0x45}], 0x8, &(0x7f0000003000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x2, 0x400080a0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) socket$netlink(0x10, 0x3, 0xb) 14m37.774069995s ago: executing program 0 (id=506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000087ffffffffffffff000040ff010000fd0000000000000000000001ff020000000000000000000000000001ffffffff8cd9ec9b00000000000000006c010000000000000a000a"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14m37.578326467s ago: executing program 2 (id=508): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000012c0)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r10, 0x5) ioctl$sock_TIOCINQ(r10, 0x541b, 0x0) (async) ioctl$sock_TIOCINQ(r10, 0x541b, 0x0) sendto$packet(r8, &(0x7f0000001380)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000013c0)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m36.618225506s ago: executing program 0 (id=511): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14m32.644492051s ago: executing program 3 (id=513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000070000000000000040ff010000fd0000000000000000000001ff020000000000000000000000000001ffffffff8cd9ec9b00000000000000006c010000000000000a000a"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14m32.048110675s ago: executing program 2 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "d861bb99d1df3f8992a457c5d97dd5a5b5804ce8946b5d8b0fb1dc5d0e35fc81a63048e2163aebc369d1ab59"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000010500001400128009000100626f6e64"], 0x34}}, 0x0) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfa, 0x20000000}, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r9, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) 14m31.137173174s ago: executing program 3 (id=516): bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x9, 0x34d, 0x4a, 0x2000, 0x1, 0x6560000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x32600) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x25, 0x1, @void}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r1, 0x0, 0x0, 0x4000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@arena={0x21, 0x0, 0x0, 0xf, 0x60000, 0xffffffffffffffff, 0x241, '\x00', 0x0, r0, 0x4, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000477b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000140), 0x12) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) connect$x25(r4, &(0x7f0000000340)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) write(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x10, 0x9, 0xa, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x68, 0x0, 0x51, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0x94, 0x1, 0x0, [{@empty, 0xe}, {@loopback, 0x8}, {@local, 0x8}, {@rand_addr=0x64010100, 0xc}, {@broadcast, 0x7e8}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xf9}, {@rand_addr=0x64010100, 0x827}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x3}]}]}}}}}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x5, r5, 0x1, 0x8, 0x6, @random="43776398e373"}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m30.175684043s ago: executing program 4 (id=517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x600}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 14m29.001822189s ago: executing program 4 (id=518): socket$igmp(0x2, 0x3, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket(0x1e, 0x4, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) accept(r2, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x48045) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x5, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8}, [@nested={0x10, 0x36, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xcb}, @nested={0x4, 0x45}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r1], 0x7c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 14m28.999443156s ago: executing program 3 (id=519): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x401, 0x8, 0x2, 0x9, 0x100000000, 0x52, 0x352b, 0x4}, &(0x7f0000000240)={0x2, 0x7, 0x8000, 0xb9d0, 0x7fff, 0x1, 0x200, 0x7ff}, &(0x7f0000000280)={0x100000001, 0x0, 0xffffffff, 0x0, 0x7, 0x3, 0x6, 0x5}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3ff]}, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000080)=""/3, &(0x7f0000000100)=0x3) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 14m27.616173227s ago: executing program 3 (id=521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000095000007005fe6a00df0dd1fe6ec53f722295c0900"/44], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000108fdffffff0700000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c101a80"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xa, 0x17, 0x0, 0x1, [@generic="baed90061b74"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)={0x9a0, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x990, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}, @typed={0x9d, 0x75, 0x0, 0x0, @binary="059726e157eff1d55e75d263eeb8f7f33666ebe7f9827f60f3ad88f5da62054e36bc5e845e8b77d49b7658e38ed33494adc0353de9037b141e245220601deb5985c0ccc3a230efacd0e9f56a7d703ce4ef4bdb23cd808d90ef873b85320788b98da2f12fffd66f8b81c7a32539742b45cb995d9d37281ecec267263d5fb09b2573a08e03b04a3e4d7eab7567d706f47cd4065093cf5e764a84"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a96ae52bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd", @nested={0x7fd, 0x12e, 0x0, 0x1, [@nested={0x107, 0xe2, 0x0, 0x1, [@generic="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", @nested={0x4, 0x29}]}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r4}, @nested={0x1da, 0x56, 0x0, 0x1, [@typed={0x23, 0x5c, 0x0, 0x0, @binary="7384ff71ef1b5c4519162154145f57eff534c97918a47ec0604798b9e33113"}, @generic="879650e70c33f91a72d66408c1418b60bf75107b3c5e462bf3f2699a72cf3de5dd74d2932e07853e7435440006f5ac0d61664b7a502c86a3d449e91d1d7c1fa9a5cb409debea588883c7ee44aeb53081031ff78523293e28309a9bd1f5d9792df916c1802f2d3c48427286f228f3c7d600d155903dd5f2d3865168dcb50f7d632109906fadf85f26aedc01db304c056d16b702412690f9c5f1abe618d8ae58034aed4eaf89e007dcd7c76d02132e43712ff9e11247fe378bf772552b905c3bdd2b5b6f40e1897d4df0f2ba2c126493fa247a346b7617a730e2738c26d97efb0375692b8e5c0914b023", @typed={0x8, 0x90, 0x0, 0x0, @u32=0x40006}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xd7}, @nested={0x4, 0x23}, @generic="590762e580cdc3967ecd1159e1480e1fe00b3d305dd48fc5d109db695037b883d96f227f9203d1bc72095e96fd2c2340792966f5681662a3cfa20cf145472263094a7f9a2fd6ed3be0e962163ddb9967e88317682af197baffa542e9a657c8c768040db323451d989811f62325b1174d65f274ac758d672c9b2b85bfb712aa34224658529d7e208c3d39a3a2512b1f7da72e63462fdac5491b96353d50ea632ebe", @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x89}]}, @generic="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", @generic="e5a31b9905d936c4344aeaf6bca134bbb588ad215b09cb3d42714ad722bbf4f6385105d8a40b313be7de0f249e42e4e239af9e0cfe3a81d81c2262924b22096554ee653ca60c0cdd47c627a529d00fd3881bb3d5a52802fe9004ffecb1286cb55274959bdff0a67e662d6a", @generic="750ee4035619b52c2e26d0a6b2a171f4f39e6cbbabbfcd413c9a333e12eccdc4b66511574be08ceadf7de76a1200bb8b3abc6386232b664adb6a2d0b3363d677846dd95efd25c4b0def977bc22c3fffcdbf4c998ee31e0bbf51ad16cc3cc30be579e2f3e8030378418c1f4acd4851438dbd26dd73cee4f39988a4fe6c87701794a8b35b73415dd4a4bbb91eb5f120a20073867883e68301214c3d749b56d8a017d4629366100fb9a7f366cbab9278f71b40fb4b6234888bb9a87ad2a77f187c415fc581dd2d29c3a8afe4d40c05733be22f0206a0d739bc40c8ab38672994acefc7987d381680e627f163bdec353c96949383a7e83c93748f7a50a824a", @generic="32b635eca36b881bd090e17d6a4612b9e5f8264d", @nested={0x24b, 0x15b, 0x0, 0x1, [@nested={0x4, 0x34}, @nested={0x4, 0xfd}, @generic="48b9850b02a72124abefad8014b623a14bf388150dd05c5e82531fb2d01f8ed8eb0ecc742fb50c0d272ebb9d4063b7536ba0bee6275023d18054aa1ef04bd9bf299c93d37cf21d7370211281eebc66c05cb752757a418d461a5c0baa50cf84729eac31aca278c0007ebf0916a94a7808a21ed21df3a955f990bebba41e298b728b96b5ac10ed5988d8d4828138f2e3786d0e8db0438e0297f67d7f84250f17b3f74ec63d95d9b2451e023e4994187e9b5bd96de78c87e84a665439e11da36d87424427b36125d580f5fd25ffc1e7a0dfd20386391754596c02", @generic="083ac54877ba56b76ef0a10988f79b1ea7c45a2c82324948f6cb4c972d749eb1e6105d84fdea432214b9fd8d9412eeb2c48c9372014ab8160f0294d24d17a4fff4a9510391f271ef427849ad5bf76203b62639430419349d1ae2577e011bcc2759eb228494a83bf2253a3c", @generic="b9bc763c2c66a909197b3d8ef3d8ffaadd750711e7cd0b38217f80ada463be9ec9e5094ef548237ca6a968c43bc0fc59b3d3ae977b59", @generic="a389b77586b8e75deae39f5ac2f7a358a959e5736dc1b3a6f05974e132b10699dd970c0604114109b53b5924f5fe43095829f4ecbd66263aa5", @generic="aeae709c453142f5734ce49a63177ea36821c27b936e1a4d64f1a90dd9b6e530289a6d8a33648e46e13117006488db0c618301b8a4f82f48d5c8aae7bc88b537f6f08ebdfcce6965976629ee258568796be77c007f00d70cc6f7de4b29314856cabbf9f0c3995a49a3e77fcdd9ec9815d91e6282526cadbf5c6741ef8851e46e", @typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x119}]}, @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x2}]}]}]}, 0x9a0}], 0x1}, 0x0) unshare(0x400) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f00000004c0)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000580)=0x84) sendmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="a9", 0xfffd}], 0x20c}}], 0x2, 0x4000045) socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 14m27.50626335s ago: executing program 0 (id=522): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r3, 0x0, 0x1f, 0x40000120, 0x0, 0xfffffe91) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) 14m25.778329223s ago: executing program 4 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0xf319007f}, 0xf000000}, 0x48) 14m24.971731912s ago: executing program 2 (id=525): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000b0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20040010) 14m23.950848707s ago: executing program 3 (id=526): syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b700000000000000bf1600000000000079617000000000001501010000000000850000005f00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ec0)={r3, &(0x7f0000000dc0)="a919", &(0x7f0000000e80)=@udp, 0x2}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r9, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 14m22.961965856s ago: executing program 4 (id=527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000006c0)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764003c0002800800"], 0x558}}, 0x40) recvmsg(r4, &(0x7f0000000740)={&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000940)={0xa, 0xe22}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, 0x0, 0x0) bind$inet6(r8, &(0x7f00000009c0)={0xa, 0xe22, 0x8000, @empty}, 0x1c) sendmsg$tipc(r5, &(0x7f0000000a00)={0x0, 0xfffffff5, &(0x7f0000000a40)=[{&(0x7f0000000a80)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00), 0x1, &(0x7f0000000bc0)=""/190, 0xbe}, 0x30120) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xe, 0x4000000, 0x2}, 0x70bd28, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000cc0), 0x4) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af92347514f", 0x8a}], 0x1}, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 14m22.639443282s ago: executing program 0 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000c80)=ANY=[@ANYRES8=r0], 0x0, 0x37, 0x1e}, 0xffffffffffffff2f) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) (async) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae91faff0000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x1}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, 0x28, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000088f50180c2000003bbbbbbbbbbbb88a80000810020020800450c0020080000000011907800000000e0000001000017c30009a413b25bd34c899eaad69078a1050001"], 0x3a) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000a80)=0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, 0x0, 0x933, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcbe9}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000805) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000ac0)=@assoc_value, &(0x7f0000000b00)=0x8) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001400020025bd70010edbdf252a040000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc080) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000140)=0x3, 0x4) 14m22.460160263s ago: executing program 2 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005001b000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 14m20.553995865s ago: executing program 3 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x2, 0x420, 0xd90, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x0, 0x0}, 0x94) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r6, &(0x7f00000004c0)=@qipcrtr, &(0x7f0000000540)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000cc0)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000d00)='0', 0x1, 0x40000, &(0x7f0000000d40)={0x11, 0x6, r7, 0x1, 0x2, 0x6, @local}, 0x14) 14m20.413271658s ago: executing program 2 (id=531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x100000b3, 0x4) (async, rerun: 32) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0x4, 0x4, 0x209, 0x2, 0x1, 0xe39, 0x43342660, 0x4, r2}, 0x20) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x100000b3, 0x4) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000480)) (async) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="f2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="127d", 0x2}], 0x1}}], 0x2, 0x0) (async, rerun: 32) shutdown(r5, 0x1) (async, rerun: 32) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000000640)=""/4107, &(0x7f0000001680)=0x1012) (async, rerun: 32) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (rerun: 32) syz_emit_ethernet(0x1e, &(0x7f00000004c0)={@empty, @remote, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "86eb268c249ee08b"}}}}, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="de", 0x1}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001700)={'syzkaller0\x00', 0x2}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001740), r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x40, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000017c0)={'syzkaller0\x00', @multicast}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001800)={'syzkaller0\x00'}) 14m19.922299088s ago: executing program 4 (id=533): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x2, 0x3, 0x0, 0x2, 0x4, 0x6, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xe6f, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x8, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r0], &(0x7f0000000200)=[{0x4, 0x5, 0x5, 0x6}], 0x10, 0x3}, 0x94) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xa3, 0xdc, &(0x7f0000000440)="cc44315ff203705ef922cc659f9619bd739954da309f9491f07f4862a97637705192c46bcff8ce7a24595f0a6e869ffe59d5ed7cd8c1940989c8029c8d39470e55740bd783c54c47760fa94c94c4d562420d406d8310ea2629e069822ffeea3e816061b5800759230bb4db4ae7a5807049d7e036369c0055a6b7db3835bbb61925500cf2b738a55899c2d3dddf942283b6ca6ef157f287086664b8c3c9b9b1337879aa", &(0x7f0000000680)=""/220, 0x4, 0x0, 0xf8, 0x31, &(0x7f0000000780)="f3366d12a7cbad276525d4d37bbcfa9ccde3f7c40c3243c9f17fc448948890a6bc37dfebf17c21d7e0a70f84f9809c43b238b350eedbaa2c192d64728f0c7278a73946708157ff79e2ac75fa74cadafd73d6bf9e84be7a426aa3456c3d776101406e7bd11d678e4e1188c432e5e089ee29190c4e00ab5fa8bd71e821ecf281f9dcf0a9cb2632a7f127f6073babe1f25846859dfd81acd672bd0af377869ab1774cb5680bb7782df7f12c33df29b6ee8b3ff6af8c882903b7d043c1bd2e93ed358a6d22864fde2db9da7269dbcc26ac12424bbfb122505278b2f00e5944e998fabed4213b5c793a1fb75e5ab69bbf6c438d397761bd716907", &(0x7f0000000880)="73483d32d8d1efa6abecfbb90d060f08d90800000099b27a90b4164ed7429f20249b245bbf922b1cf06d97bfd23b364d0a", 0x4, 0x0, 0x7}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r2, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d7100"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r4, &(0x7f0000000580)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14m19.062486342s ago: executing program 0 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x51}, 0x90) 14m17.483962746s ago: executing program 4 (id=536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000095000007005fe6a00df0dd1fe6ec53f722295c0900"/44], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000108fdffffff0700000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c101a80"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xa, 0x17, 0x0, 0x1, [@generic="baed90061b74"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)={0x9a0, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x990, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}, @typed={0x9d, 0x75, 0x0, 0x0, @binary="059726e157eff1d55e75d263eeb8f7f33666ebe7f9827f60f3ad88f5da62054e36bc5e845e8b77d49b7658e38ed33494adc0353de9037b141e245220601deb5985c0ccc3a230efacd0e9f56a7d703ce4ef4bdb23cd808d90ef873b85320788b98da2f12fffd66f8b81c7a32539742b45cb995d9d37281ecec267263d5fb09b2573a08e03b04a3e4d7eab7567d706f47cd4065093cf5e764a84"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a96ae52bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd", @nested={0x7fd, 0x12e, 0x0, 0x1, [@nested={0x107, 0xe2, 0x0, 0x1, [@generic="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", @nested={0x4, 0x29}]}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r4}, @nested={0x1da, 0x56, 0x0, 0x1, [@typed={0x23, 0x5c, 0x0, 0x0, @binary="7384ff71ef1b5c4519162154145f57eff534c97918a47ec0604798b9e33113"}, @generic="879650e70c33f91a72d66408c1418b60bf75107b3c5e462bf3f2699a72cf3de5dd74d2932e07853e7435440006f5ac0d61664b7a502c86a3d449e91d1d7c1fa9a5cb409debea588883c7ee44aeb53081031ff78523293e28309a9bd1f5d9792df916c1802f2d3c48427286f228f3c7d600d155903dd5f2d3865168dcb50f7d632109906fadf85f26aedc01db304c056d16b702412690f9c5f1abe618d8ae58034aed4eaf89e007dcd7c76d02132e43712ff9e11247fe378bf772552b905c3bdd2b5b6f40e1897d4df0f2ba2c126493fa247a346b7617a730e2738c26d97efb0375692b8e5c0914b023", @typed={0x8, 0x90, 0x0, 0x0, @u32=0x40006}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xd7}, @nested={0x4, 0x23}, @generic="590762e580cdc3967ecd1159e1480e1fe00b3d305dd48fc5d109db695037b883d96f227f9203d1bc72095e96fd2c2340792966f5681662a3cfa20cf145472263094a7f9a2fd6ed3be0e962163ddb9967e88317682af197baffa542e9a657c8c768040db323451d989811f62325b1174d65f274ac758d672c9b2b85bfb712aa34224658529d7e208c3d39a3a2512b1f7da72e63462fdac5491b96353d50ea632ebe", @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x89}]}, @generic="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", @generic="e5a31b9905d936c4344aeaf6bca134bbb588ad215b09cb3d42714ad722bbf4f6385105d8a40b313be7de0f249e42e4e239af9e0cfe3a81d81c2262924b22096554ee653ca60c0cdd47c627a529d00fd3881bb3d5a52802fe9004ffecb1286cb55274959bdff0a67e662d6a", @generic="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", @generic="32b635eca36b881bd090e17d6a4612b9e5f8264d", @nested={0x24b, 0x15b, 0x0, 0x1, [@nested={0x4, 0x34}, @nested={0x4, 0xfd}, @generic="48b9850b02a72124abefad8014b623a14bf388150dd05c5e82531fb2d01f8ed8eb0ecc742fb50c0d272ebb9d4063b7536ba0bee6275023d18054aa1ef04bd9bf299c93d37cf21d7370211281eebc66c05cb752757a418d461a5c0baa50cf84729eac31aca278c0007ebf0916a94a7808a21ed21df3a955f990bebba41e298b728b96b5ac10ed5988d8d4828138f2e3786d0e8db0438e0297f67d7f84250f17b3f74ec63d95d9b2451e023e4994187e9b5bd96de78c87e84a665439e11da36d87424427b36125d580f5fd25ffc1e7a0dfd20386391754596c02", @generic="083ac54877ba56b76ef0a10988f79b1ea7c45a2c82324948f6cb4c972d749eb1e6105d84fdea432214b9fd8d9412eeb2c48c9372014ab8160f0294d24d17a4fff4a9510391f271ef427849ad5bf76203b62639430419349d1ae2577e011bcc2759eb228494a83bf2253a3c", @generic="b9bc763c2c66a909197b3d8ef3d8ffaadd750711e7cd0b38217f80ada463be9ec9e5094ef548237ca6a968c43bc0fc59b3d3ae977b59", @generic="a389b77586b8e75deae39f5ac2f7a358a959e5736dc1b3a6f05974e132b10699dd970c0604114109b53b5924f5fe43095829f4ecbd66263aa5", @generic="aeae709c453142f5734ce49a63177ea36821c27b936e1a4d64f1a90dd9b6e530289a6d8a33648e46e13117006488db0c618301b8a4f82f48d5c8aae7bc88b537f6f08ebdfcce6965976629ee258568796be77c007f00d70cc6f7de4b29314856cabbf9f0c3995a49a3e77fcdd9ec9815d91e6282526cadbf5c6741ef8851e46e", @typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x119}]}, @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x2}]}]}]}, 0x9a0}], 0x1}, 0x0) unshare(0x400) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f00000004c0)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000580)=0x84) sendmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="a9", 0xfffd}], 0x20c}}], 0x2, 0x4000045) socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 14m16.721937777s ago: executing program 0 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 14m5.219798394s ago: executing program 32 (id=531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x100000b3, 0x4) (async, rerun: 32) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0x4, 0x4, 0x209, 0x2, 0x1, 0xe39, 0x43342660, 0x4, r2}, 0x20) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x100000b3, 0x4) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000480)) (async) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="f2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="127d", 0x2}], 0x1}}], 0x2, 0x0) (async, rerun: 32) shutdown(r5, 0x1) (async, rerun: 32) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000000640)=""/4107, &(0x7f0000001680)=0x1012) (async, rerun: 32) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (rerun: 32) syz_emit_ethernet(0x1e, &(0x7f00000004c0)={@empty, @remote, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "86eb268c249ee08b"}}}}, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="de", 0x1}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001700)={'syzkaller0\x00', 0x2}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001740), r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x40, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000017c0)={'syzkaller0\x00', @multicast}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001800)={'syzkaller0\x00'}) 14m5.001450991s ago: executing program 33 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x2, 0x420, 0xd90, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x0, 0x0}, 0x94) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r6, &(0x7f00000004c0)=@qipcrtr, &(0x7f0000000540)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000cc0)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000d00)='0', 0x1, 0x40000, &(0x7f0000000d40)={0x11, 0x6, r7, 0x1, 0x2, 0x6, @local}, 0x14) 14m2.286131582s ago: executing program 34 (id=536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000095000007005fe6a00df0dd1fe6ec53f722295c0900"/44], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000108fdffffff0700000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c101a80"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xa, 0x17, 0x0, 0x1, [@generic="baed90061b74"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)={0x9a0, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x990, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}, @typed={0x9d, 0x75, 0x0, 0x0, @binary="059726e157eff1d55e75d263eeb8f7f33666ebe7f9827f60f3ad88f5da62054e36bc5e845e8b77d49b7658e38ed33494adc0353de9037b141e245220601deb5985c0ccc3a230efacd0e9f56a7d703ce4ef4bdb23cd808d90ef873b85320788b98da2f12fffd66f8b81c7a32539742b45cb995d9d37281ecec267263d5fb09b2573a08e03b04a3e4d7eab7567d706f47cd4065093cf5e764a84"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a96ae52bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1dd", @nested={0x7fd, 0x12e, 0x0, 0x1, [@nested={0x107, 0xe2, 0x0, 0x1, [@generic="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", @nested={0x4, 0x29}]}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r4}, @nested={0x1da, 0x56, 0x0, 0x1, [@typed={0x23, 0x5c, 0x0, 0x0, @binary="7384ff71ef1b5c4519162154145f57eff534c97918a47ec0604798b9e33113"}, @generic="879650e70c33f91a72d66408c1418b60bf75107b3c5e462bf3f2699a72cf3de5dd74d2932e07853e7435440006f5ac0d61664b7a502c86a3d449e91d1d7c1fa9a5cb409debea588883c7ee44aeb53081031ff78523293e28309a9bd1f5d9792df916c1802f2d3c48427286f228f3c7d600d155903dd5f2d3865168dcb50f7d632109906fadf85f26aedc01db304c056d16b702412690f9c5f1abe618d8ae58034aed4eaf89e007dcd7c76d02132e43712ff9e11247fe378bf772552b905c3bdd2b5b6f40e1897d4df0f2ba2c126493fa247a346b7617a730e2738c26d97efb0375692b8e5c0914b023", @typed={0x8, 0x90, 0x0, 0x0, @u32=0x40006}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xd7}, @nested={0x4, 0x23}, @generic="590762e580cdc3967ecd1159e1480e1fe00b3d305dd48fc5d109db695037b883d96f227f9203d1bc72095e96fd2c2340792966f5681662a3cfa20cf145472263094a7f9a2fd6ed3be0e962163ddb9967e88317682af197baffa542e9a657c8c768040db323451d989811f62325b1174d65f274ac758d672c9b2b85bfb712aa34224658529d7e208c3d39a3a2512b1f7da72e63462fdac5491b96353d50ea632ebe", @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x89}]}, @generic="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", @generic="e5a31b9905d936c4344aeaf6bca134bbb588ad215b09cb3d42714ad722bbf4f6385105d8a40b313be7de0f249e42e4e239af9e0cfe3a81d81c2262924b22096554ee653ca60c0cdd47c627a529d00fd3881bb3d5a52802fe9004ffecb1286cb55274959bdff0a67e662d6a", @generic="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", @generic="32b635eca36b881bd090e17d6a4612b9e5f8264d", @nested={0x24b, 0x15b, 0x0, 0x1, [@nested={0x4, 0x34}, @nested={0x4, 0xfd}, @generic="48b9850b02a72124abefad8014b623a14bf388150dd05c5e82531fb2d01f8ed8eb0ecc742fb50c0d272ebb9d4063b7536ba0bee6275023d18054aa1ef04bd9bf299c93d37cf21d7370211281eebc66c05cb752757a418d461a5c0baa50cf84729eac31aca278c0007ebf0916a94a7808a21ed21df3a955f990bebba41e298b728b96b5ac10ed5988d8d4828138f2e3786d0e8db0438e0297f67d7f84250f17b3f74ec63d95d9b2451e023e4994187e9b5bd96de78c87e84a665439e11da36d87424427b36125d580f5fd25ffc1e7a0dfd20386391754596c02", @generic="083ac54877ba56b76ef0a10988f79b1ea7c45a2c82324948f6cb4c972d749eb1e6105d84fdea432214b9fd8d9412eeb2c48c9372014ab8160f0294d24d17a4fff4a9510391f271ef427849ad5bf76203b62639430419349d1ae2577e011bcc2759eb228494a83bf2253a3c", @generic="b9bc763c2c66a909197b3d8ef3d8ffaadd750711e7cd0b38217f80ada463be9ec9e5094ef548237ca6a968c43bc0fc59b3d3ae977b59", @generic="a389b77586b8e75deae39f5ac2f7a358a959e5736dc1b3a6f05974e132b10699dd970c0604114109b53b5924f5fe43095829f4ecbd66263aa5", @generic="aeae709c453142f5734ce49a63177ea36821c27b936e1a4d64f1a90dd9b6e530289a6d8a33648e46e13117006488db0c618301b8a4f82f48d5c8aae7bc88b537f6f08ebdfcce6965976629ee258568796be77c007f00d70cc6f7de4b29314856cabbf9f0c3995a49a3e77fcdd9ec9815d91e6282526cadbf5c6741ef8851e46e", @typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x119}]}, @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x2}]}]}]}, 0x9a0}], 0x1}, 0x0) unshare(0x400) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f00000004c0)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000580)=0x84) sendmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="a9", 0xfffd}], 0x20c}}], 0x2, 0x4000045) socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 14m1.120537233s ago: executing program 35 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 13m17.164454139s ago: executing program 1 (id=558): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0xc000) 13m14.693543542s ago: executing program 1 (id=559): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf3f, 0x20bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0xf, 0xfff3}, {0x0, 0x1}, {0x4, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) unshare(0x40600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0xb, 0x70bd2c, 0xfffffffe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="897664", 0x3, 0x6044880, 0x0, 0x0) r4 = socket$inet6(0x10, 0x1, 0x2) sendto$inet6(r4, &(0x7f0000000140)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 13m12.040263254s ago: executing program 1 (id=560): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtclass={0x38, 0x28, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x6}, {0xffe0, 0xf}, {0xc, 0x9}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x0, 0x55}}]}, 0x38}}, 0x40) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x527e}}], 0x18}}], 0x1, 0x44000840) (async) sendmmsg$inet(r0, &(0x7f0000000100), 0x4000095, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000001040102000000000000000001000000d1e830f016d00292b6b3180600064000030000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x240480c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000041000701fafffffffedbdf25017c00000400428028000180100004bbae5e123a20b8d2a93521800a1400e700fc02000000000000000000000000000104000280dc46528d4444e03c8e689806b080f46a738cbf21ca8f111feb07bcbba2d691"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 13m10.925824427s ago: executing program 1 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="05840000008000002c0012800b00010062726964676500001c000280080032000100000008000100140000400800050001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x40081) 13m8.413574472s ago: executing program 1 (id=562): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000f80)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x3, 0x6, &(0x7f00000010c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000001140)='GPL\x00'}, 0x94) 13m7.565638832s ago: executing program 1 (id=563): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x8, 0x6, 0xe01, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x810) ioctl$sock_proto_private(r0, 0x8b21, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private1, @local, {[@routing={0x2b, 0x0, 0x0, 0x1}]}}}}}, 0x0) 12m51.933176403s ago: executing program 36 (id=563): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x8, 0x6, 0xe01, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x810) ioctl$sock_proto_private(r0, 0x8b21, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private1, @local, {[@routing={0x2b, 0x0, 0x0, 0x1}]}}}}}, 0x0) 4.157376939s ago: executing program 8 (id=3397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000cc0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000380)='./file0\x00', r2, 0x4000, r2}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x5, 0xe2, &(0x7f0000000740)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840), 0x2}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x7ff, 0x0}, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x18, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1c, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd4f, 0x0, 0x0, 0x0, 0xd79}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xba62}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, &(0x7f0000000540), 0x41100, 0xc, '\x00', 0x0, @fallback=0x25, r5, 0x8, &(0x7f0000000880)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000b80)=[0x1, 0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff, r8], &(0x7f0000000bc0)=[{0x1, 0x2, 0xf, 0x8}, {0x5, 0x4, 0x7, 0x3}, {0x3, 0x2, 0x5, 0xc}, {0x1, 0x2, 0xb, 0x9}], 0x10, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.081509866s ago: executing program 8 (id=3404): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="e72a2c1a7d85d90b178f9aa18bbbed406ae83b730c368c8ecd7d37783e17efffa31c853784ee335e1002ad26eb82bed6f22cb10be76d623356983295b9b9a6710a2e54e33c4d47717bea7fe3be88a335000b8ee6ab35ddf2a0ae0bf8c8b695ebb9de23ff0915263a75b31584fccb08680ff6cb5116b2d02e143b0c504c17b38df980af6fbc858ccabcb0df3a5fd0e6f80a79d3541856fcf1c5eb31f7e028a03e0281a567c439be1aba6681800c5b1e", @ANYRESHEX=r2, @ANYRES64=r3, @ANYRES8, @ANYRESDEC], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$tun(r6, &(0x7f0000000600)=ANY=[], 0xffe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000a300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000980)='cgroup.procs\x00', 0x2, 0x0) preadv(r13, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r14 = openat$cgroup_procs(r12, &(0x7f0000000a80)='tasks\x00', 0x2, 0x0) preadv(r14, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/142, 0x8e}], 0x1, 0x4, 0x3) sendfile(r13, r13, 0x0, 0x10001) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) 2.411793514s ago: executing program 6 (id=3408): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="85100000040000009500800000000000180000000000000000000000000000029500a2ff0000000085100000fcffffff95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 2.402792264s ago: executing program 9 (id=3409): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0xfffffedf, 0x10, &(0x7f0000001240)={0x0, 0x0, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 2.371801193s ago: executing program 6 (id=3410): close(0x3) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x40}}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/104, 0x47, 0x68, 0x0, 0xfffffffb, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x5, 0x4, 0x3}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) close(0x3) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x177f}], 0x1, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xa055}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 2.26155313s ago: executing program 5 (id=3411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x154, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2905}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x47}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd}]}]}, @NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4321}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff5b45}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}]}, 0x154}, 0x1, 0x0, 0x0, 0x4048041}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000207030000000000000000000a0000010900010073797a31000000000c00064000000000010018470c000340000000000000100004000780"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000280)={&(0x7f00000002c0)={0x1d, r5}, 0x10, &(0x7f0000000680)={&(0x7f00000006c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x4, 0x0, "36e932da564405cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7e, 0x9, 0x2, @remote, @private1, 0x8, 0x20, 0x7f, 0xff88}}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000800)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000840)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000880)={r8, 0x1, 0x6, @multicast}, 0xfe97) sendmsg$nl_route(r3, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f00000008c0)=@bridge_setlink={0x854, 0x13, 0x800, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x5000}, [@IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINK_NETNSID={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_VFINFO_LIST={0x808, 0x16, 0x0, 0x1, [{0x144, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x59f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x490b, 0x49b}}, @IFLA_VF_MAC={0x28, 0x1, {0xc6b5, @remote}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x401, 0xd7, 0x8000, 0x88a8}}, {0x14, 0x1, {0x5, 0xb8c, 0x0, 0x8100}}, {0x14, 0x1, {0x800, 0x486, 0xfffffff1, 0x8100}}, {0x14, 0x1, {0xb825, 0x472, 0x8, 0x88a8}}, {0x14, 0x1, {0x5, 0x6fd, 0x1, 0x88a8}}, {0x14, 0x1, {0x0, 0xfd, 0x1, 0x8100}}, {0x14, 0x1, {0x3f8, 0xd18, 0xa81, 0x8100}}, {0x14, 0x1, {0x3, 0xe0e, 0x7}}, {0x14, 0x1, {0x8c0000, 0x95a, 0x8, 0x8100}}, {0x14, 0x1, {0xfffff749, 0x31b, 0x40, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xff}}]}, {0xe8, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x1}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x5, 0x3, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9ee, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x7, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8001, 0x8}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xc35, 0x3, 0x8100}}, {0x14, 0x1, {0xcbd, 0xfc2, 0x1, 0x88a8}}, {0x14, 0x1, {0x8, 0x9a2, 0x798a, 0x8100}}, {0x14, 0x1, {0x1000, 0x22, 0x5, 0x8100}}, {0x14, 0x1, {0x9, 0x2df, 0x80, 0x88a8}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x2f7}}]}, {0xdc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000001, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xd75c}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfff, 0x4a0, 0x2, 0x8100}}, {0x14, 0x1, {0x0, 0xc72, 0x7ff, 0x8100}}, {0x14, 0x1, {0x7, 0x802, 0x6, 0x8100}}, {0x14, 0x1, {0x6, 0x91a, 0xf788, 0x88a8}}, {0x14, 0x1, {0x6, 0xabf, 0x7fffffff, 0x8100}}, {0x14, 0x1, {0x1, 0xfc9, 0x8001, 0x8100}}, {0x14, 0x1, {0x3, 0x473, 0x4, 0x8100}}, {0x14, 0x1, {0x4, 0x3, 0x6, 0x88a8}}, {0x14, 0x1, {0x3, 0xe93, 0x3, 0x88a8}}]}]}, {0xac, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x100, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x101, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffffffb}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @random="ec83b9f9c88a"}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x41, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x800, 0x540, 0xc}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xb26}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}]}, {0x1a0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x6}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x23c, 0x0, 0x8100}}, {0x14, 0x1, {0x4, 0x963, 0xffff, 0x88a8}}, {0x14, 0x1, {0x2, 0xf22, 0xc, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x5e2, 0x7}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xccb, 0x6, 0x88a8}}, {0x14, 0x1, {0x3, 0xabb, 0x64, 0x8100}}, {0x14, 0x1, {0xff, 0x3f5, 0x3, 0x88a8}}, {0x14, 0x1, {0x1, 0x2f0, 0xd, 0x88a8}}, {0x14, 0x1, {0x0, 0x28a, 0x2, 0x88a8}}, {0x14, 0x1, {0x9f5, 0xb6c, 0x2, 0x8100}}, {0x14, 0x1, {0x9d5, 0xa76, 0x0, 0x8100}}, {0x14, 0x1, {0x811a, 0x58e, 0x7, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xde7, 0x0, 0x8100}}, {0x14, 0x1, {0xb86d, 0x713, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x9, 0xb2b, 0x4, 0x88a8}}, {0x14, 0x1, {0x7, 0x200, 0x1, 0x8100}}, {0x14, 0x1, {0x9, 0xbf4, 0x6, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x101}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fff, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xfffffff7}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x88b, 0x9, 0x8100}}, {0x14, 0x1, {0x9, 0x59b, 0x6, 0x88a8}}, {0x14, 0x1, {0x5cd, 0x43, 0x9, 0x88a8}}, {0x14, 0x1, {0xff, 0xfc7, 0x29, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x2, 0x4}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x35, 0xe14, 0x5, 0x88a8}}, {0x14, 0x1, {0x1, 0x106, 0x8, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x4}}]}, {0x124, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x56a}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x60000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x2}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xadf, 0xe, 0x88a8}}, {0x14, 0x1, {0x1, 0xca2, 0xff, 0x8100}}, {0x14, 0x1, {0x3, 0xfe9, 0x9, 0x88a8}}, {0x14, 0x1, {0x401, 0xb22, 0x3, 0x8100}}, {0x14, 0x1, {0x194000, 0x916, 0x10001, 0x8100}}, {0x14, 0x1, {0x8, 0x84, 0x3}}, {0x14, 0x1, {0x81, 0x434, 0x1, 0x8100}}, {0x14, 0x1, {0x7ff, 0xc35, 0xa336, 0x88a8}}, {0x14, 0x1, {0x1, 0x947, 0x2, 0x88a8}}, {0x14, 0x1, {0x3, 0xeba, 0x1, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x6ae, 0x3, 0x8100}}]}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10a7, 0xc, 0x5, 0x88a8}}, {0x14, 0x1, {0x3, 0x7da, 0x5, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x6d2, 0xe}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x28000, 0x5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x80, 0xa9a1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffff8, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xf9c}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2000, 0xffff}}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x854}, 0x1, 0x0, 0x0, 0x54}, 0x0) 2.197771319s ago: executing program 6 (id=3412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2903fcfffffffedbdf25160000000c000600010000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=@tcp, 0x1}, 0x20) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r3, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c030) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x19, 0x10, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x0, 0xff, 0x4, 0x0, 0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x110) syz_emit_ethernet(0x86, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe000000000000000000000000ffffd535249479e2392a7509f7b85bf5a2bbfe8000000000000000000000000000aa03029078000000006002081000001100fc010000000000000000000000298c03000000000000000000000000000000007f00000000000000052f000100000000fbfc4efb727e72f90e19b22516370256a12e1ebe29d93334e6c65d87dac8798abefc74cd812c8bf3e2dc54915649bf997f6290330307901c170fa3021dba6d332abc2dd00b751d11d5dbe996229b2a3765b357ed4ef3e61169fa7a517c3f3bee17feeec290d77d"], 0x0) 2.182813179s ago: executing program 9 (id=3413): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x168, 0x12, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x81, 0x5, 0x3, 0xe, 0x10, 0x3}}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000180)=""/81, 0x51}], 0x2, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)=""/37, 0x25}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/70, 0x46}, {&(0x7f0000002bc0)=""/25, 0x19}, {&(0x7f0000002c00)=""/253, 0xfd}], 0x6, &(0x7f0000002d80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x3, 0x2002, 0x0) 1.974213102s ago: executing program 6 (id=3415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x1c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x0, 0x100000000}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000300000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.956549102s ago: executing program 9 (id=3416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x3, 0x3, 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000540)=[{&(0x7f0000000580)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="fc", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000000000000000000ff"], 0x18}], 0x1, 0x4000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x2c, &(0x7f0000000680)=0x5, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000300), 0x4) sendmsg$kcm(r8, &(0x7f0000000380)={&(0x7f00000003c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f7f0c39b0372346", 0x2d}, {&(0x7f00000009c0)="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", 0xf2e}], 0x2}, 0x48800) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) splice(r5, 0x0, r6, &(0x7f0000000340)=0x9, 0x200000000005, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x18, r10}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x18, r10}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="9400040070696d3672656730000000000000000008000500080000000a00e800ffffffffffff0000"], 0x44}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000500)={0x1, 'bridge_slave_1\x00', {}, 0x6}) 1.825465514s ago: executing program 8 (id=3417): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x1, 0x3, 0x204, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_PAYLOAD={0x46, 0xa, "c7a828954fd3c38019fa8984562398449b53d74dc59ac8b5a244f106ca9a699a13e408f1f6ebc696d868231e774f8988f19e25f84da4634d3fe62889e78f9ef6d439"}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}]}]}, 0x68}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x1, 0x3, 0x204, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_PAYLOAD={0x46, 0xa, "c7a828954fd3c38019fa8984562398449b53d74dc59ac8b5a244f106ca9a699a13e408f1f6ebc696d868231e774f8988f19e25f84da4634d3fe62889e78f9ef6d439"}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}]}]}, 0x68}}, 0x4000) (async) 1.818452344s ago: executing program 5 (id=3418): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)={@map=r2, r3, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[], 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r6, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffffea"], 0xd4}}, 0x4000840) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xd}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x60}}, 0x0) 1.677545376s ago: executing program 7 (id=3420): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.628506045s ago: executing program 6 (id=3421): socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000530404002cbd7000fedbdf2580efe07ed8229a0bc0aad3b1526d6f61c0df6c61fb5b120be0964e57285b4f35b84e55e0007ea381a2a6c5806d6177819bde25d2809a7c5cb7bcd4d38d162e93c40c7b369400c6dd126cf82ccca06aaf244c72951fed45f0e82f45969a9303de46e099f0576c33bac5046a23b9cc62d158dec0b969808c4f4b09a8684aa8866b8ac590de8e01081d8f213c9a819bc9dd81effe9fb9a4ced92fb8070000016a73def41375f0cfd0523a8c7a8e93d29058c2ef11725c000019f1bf5b285d249a1eba94c38a8ca311dece6e1b1ec56718f0b7666c988d29872f5aba811f7ff9316692590054f0938b3f"], 0x54}, 0x1, 0x0, 0x0, 0x24004881}, 0x4008880) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 1.598556999s ago: executing program 7 (id=3422): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000001014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020"], 0xc8}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x46, &(0x7f0000000000)='team0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000000028e9689c5d3c999fffb702000008000000b70300000200000085000000060000008500"/96], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000a00)={'mangle\x00'}, &(0x7f0000000a40)=0x24) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x2, 0x3, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x9, 0x1, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), 0xfffffffb, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000d80), 0x1000, r7}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000e00)={0x0, 0xffffffffffffff34, &(0x7f0000000e40)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ec0)=0xfffffffffffffeb7) sendmsg$nl_route(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000001040)={@multicast2, @local}, 0xc) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001080)={@multicast1=0xe0000300, @local}, 0x8) 1.281348957s ago: executing program 5 (id=3423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100000000004000df25037c00001800018025"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e591c2199cf1fae5505"}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000420001000000000000000000030100000f0000001200010000112233445566778899aabb0800000004000280100003800c000280080001004e"], 0x40}}, 0x0) 1.057954418s ago: executing program 8 (id=3424): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}}, 0xc010) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r3, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, &(0x7f0000000400), &(0x7f0000000440)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x13, &(0x7f0000000d40)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe0000f000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000e00)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000e40)=""/222}, 0x78) 991.765204ms ago: executing program 7 (id=3425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2903fcfffffffedbdf25160000000c000600010000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=@tcp, 0x1}, 0x20) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r3, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c030) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x19, 0x10, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x0, 0xff, 0x4, 0x0, 0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x110) syz_emit_ethernet(0x86, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe000000000000000000000000ffffd535249479e2392a7509f7b85bf5a2bbfe8000000000000000000000000000aa03029078000000006002081000001100fc010000000000000000000000298c03000000000000000000000000000000007f00000000000000052f000100000000fbfc4efb727e72f90e19b22516370256a12e1ebe29d93334e6c65d87dac8798abefc74cd812c8bf3e2dc54915649bf997f6290330307901c170fa3021dba6d332abc2dd00b751d11d5dbe996229b2a3765b357ed4ef3e61169fa7a517c3f3bee17feeec290d77d"], 0x0) 789.505571ms ago: executing program 9 (id=3426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x14, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0xfb}]}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x1a025, 0x1703}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x90d4}, 0x4000020) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 787.998491ms ago: executing program 5 (id=3427): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100000012020000ffffffff0000", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x1}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@newtfilter={0x14b8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0xfff3}, {0x10, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1488, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_POLICE={0x1474, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x4, 0x5, 0x44a, {0xd, 0x1, 0x6, 0x3, 0xffff, 0x7}, {0x1, 0x1, 0x0, 0x4451, 0x4, 0x6}, 0x6, 0x38000000, 0x44d}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x9, 0x2, 0xf, 0x0, 0x8, 0x4, 0x403a, 0x9, 0x7fffffff, 0x4e3e, 0xf295, 0x3ff, 0x7, 0x0, 0x8, 0x6, 0x3, 0x80000000, 0x7c, 0x8, 0x0, 0x1, 0x80000000, 0x8, 0x10, 0x7, 0x2, 0x3c75, 0x2, 0x5, 0x5, 0x6, 0x1ff, 0x6, 0x81, 0x0, 0xa2, 0x2, 0x80, 0x3, 0x2, 0x2, 0x74, 0x1, 0x800, 0x1, 0x9, 0x4, 0x8, 0x42, 0x5, 0x3800, 0x8, 0xffffff42, 0x5, 0x1, 0x0, 0x81, 0x5, 0x4, 0x8, 0xa, 0x10000, 0x8, 0x2, 0x10, 0xfffff000, 0x8, 0x1, 0x0, 0x0, 0x5, 0x0, 0x101, 0x8f, 0xfffffffb, 0x4, 0xffff, 0x800, 0x1, 0xfffffffb, 0x157e2220, 0x3b7c, 0x7, 0xb22, 0x9, 0xffff, 0x101, 0x6, 0x7, 0x2, 0xfffffff9, 0x6, 0x0, 0x6, 0xe000, 0x9, 0x5, 0x101, 0x5, 0x1, 0x8, 0x80, 0x5, 0x5, 0xff, 0x9, 0x600, 0x8, 0x4, 0xe35e, 0x9, 0x1, 0x0, 0x2, 0x10000, 0x3, 0x4, 0x4, 0x0, 0x6, 0xffffffff, 0x2, 0xa, 0x9eba, 0xe01, 0x2, 0xd, 0x1000, 0x6, 0x0, 0x8, 0x6, 0x8, 0xffff0001, 0x7fffffff, 0x3, 0x9, 0x9, 0x7, 0xb6, 0x3, 0xeccb, 0x7fffffff, 0x7, 0x3, 0x3, 0x34, 0x9, 0x19f91594, 0x2, 0x5, 0x7ff, 0x7, 0xc, 0x9b, 0x8d, 0x400, 0x9, 0x1, 0x5, 0x8, 0x9, 0xd4, 0x0, 0x38000000, 0x2, 0x4, 0xfffffffc, 0x7, 0x5, 0x2, 0x501, 0x0, 0x80, 0x0, 0x6, 0x754, 0x2e04, 0x0, 0x8001, 0x7, 0x6c0, 0x6, 0xffff, 0x21bb, 0x8, 0x0, 0x9a49, 0x8, 0x40, 0x6, 0x24000, 0x7, 0x2, 0x70000000, 0x3, 0x5, 0x6, 0x9, 0x1, 0x1, 0x3ff, 0xffffffff, 0x8, 0x3, 0x9, 0x7f, 0xa, 0x0, 0x1, 0x5, 0x1, 0x7, 0x101, 0x1d, 0x1a, 0x8, 0x80000000, 0x2, 0x0, 0x8, 0x2, 0x7, 0x3f, 0x8, 0x0, 0x500, 0x1, 0x3, 0xc81, 0x3, 0x100, 0xd, 0x6, 0x2, 0xd0f, 0x1, 0x6, 0xffffffc9, 0x6, 0x6, 0x6, 0x3, 0x400, 0x1, 0x101, 0x1, 0xb0, 0x80, 0x0, 0x6627, 0x7, 0x348a2a30]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x7ff, 0x6, 0x7, 0x89fb, 0x4, 0xfffffe01, 0x4, 0x4, 0x0, 0x0, 0xe, 0xd, 0x7f, 0x8, 0xfffff124, 0x6, 0x1, 0x4, 0x3ff, 0x4c41, 0xb, 0x0, 0x5, 0x642e, 0x7, 0x7, 0x8, 0x101, 0x2, 0x52, 0x6504, 0x7, 0x7, 0x1400, 0x6, 0x100, 0x990, 0x9, 0x100, 0x7, 0xb6, 0x400, 0x8, 0x8, 0xfffffff8, 0xc483, 0x8, 0x0, 0x5, 0x80, 0x8, 0x8, 0x5, 0xffff982e, 0x4, 0x9814, 0x9, 0x5, 0x1, 0xb866, 0x2, 0x2, 0x8, 0x7, 0x9, 0x4, 0x7, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x80000000, 0x9, 0x500, 0x1, 0x8, 0x3e0a, 0x500000, 0x8, 0x7, 0x7, 0x1, 0xf6, 0x0, 0xfffffffe, 0x3, 0x8, 0x6, 0xb, 0x4bf, 0x9bb, 0xc8b2, 0xfb, 0xfffffff9, 0x6b, 0x6, 0x80000001, 0x3, 0x4954, 0x0, 0x6, 0x7ab, 0x0, 0xb5, 0x10000, 0x6, 0xffffffff, 0xffffffff, 0x9, 0x8, 0x1, 0xffffff34, 0x7, 0x8, 0x3, 0x6, 0x7, 0x4b, 0x0, 0x2, 0x7ff, 0xfffff000, 0x3, 0x7fffffff, 0x4, 0x4, 0x1ff, 0xfffffbaa, 0x800, 0xd5, 0x9, 0x8, 0xdd3b, 0xe0000, 0x3, 0x2, 0x1, 0x9, 0x8000, 0x2, 0x6, 0x1, 0x411, 0x2b0, 0x322, 0x9, 0x91, 0x1, 0x4, 0x3, 0x1, 0x3, 0x60000, 0x0, 0x5, 0xfffffffd, 0x10001, 0x8, 0x5, 0x2, 0xb8a, 0x0, 0x7, 0xa, 0x9, 0x3ff, 0x7fff, 0x9, 0x6e, 0x5, 0x2, 0x4, 0x1, 0x9, 0x10000, 0x1, 0x6, 0x1ff, 0x3, 0x4, 0x200, 0x6, 0x7, 0x1ff, 0x2, 0x3, 0x8, 0x100, 0x101, 0x0, 0xbd3b, 0x10, 0x9, 0x2, 0x4, 0x5c3, 0xa, 0x1, 0x0, 0x7fffffff, 0x23, 0x9, 0x3, 0x7ff, 0x2, 0x7, 0x0, 0x4, 0x9, 0x7, 0xad, 0x6, 0x2, 0x9, 0x10000, 0x4, 0xe60a, 0x4, 0x8, 0x0, 0x5e3b, 0x5, 0x8, 0x3, 0x6, 0xfffffff7, 0x85c, 0xfffffffa, 0x3, 0x1, 0x8, 0x6, 0x58, 0x28, 0x8, 0x3, 0x6, 0xf, 0x6, 0x8, 0x4, 0x4, 0x68, 0x536b, 0xff, 0x4, 0x5, 0x2ae1a712, 0x8, 0x3ff, 0x80000000, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x5c, 0x3, 0x8, 0xcdd, 0x1, 0x7, 0xffffffaa, 0x881, 0x9, 0x9, 0x177, 0xfffffffd, 0xfffffffd, 0x80000000, 0xff, 0xffff, 0x40, 0x8, 0xce2a, 0x1, 0x7, 0x5, 0xffff, 0xd75, 0x6, 0x80000001, 0x5, 0x9, 0x5, 0x60000, 0x66a, 0x0, 0x9, 0x2, 0x5, 0x5, 0x81, 0xffffff1f, 0x3, 0x2, 0xfffffff8, 0x3, 0x1, 0x3, 0x0, 0x400, 0x6, 0x40, 0x6, 0xfb6, 0x37a, 0x5, 0x7fff, 0x4, 0x1, 0x0, 0x8, 0x8000, 0x8, 0xd180, 0xf, 0x2, 0x4, 0x9, 0x5, 0x0, 0x7, 0x7, 0x5, 0x8, 0x7, 0x100, 0xfffffc01, 0x4, 0x5, 0x7, 0x7f, 0x8, 0x7, 0x9, 0x4, 0x401, 0x4, 0x8, 0x2, 0x3, 0xe542, 0xfffffeb5, 0x1b, 0xa, 0x4, 0x6, 0x8, 0x4, 0x101, 0x8001, 0xfffffff9, 0x8, 0x51b, 0x0, 0x434d, 0xfffffff7, 0x80, 0x5, 0x0, 0x5, 0x7, 0x1, 0x7, 0x9, 0x9, 0xd, 0x2, 0x5, 0x8000, 0x7fff, 0xdf65, 0x6, 0x8, 0xfffffff9, 0x5, 0x10000, 0x9, 0xffffffc0, 0x3, 0x354, 0x3, 0x2, 0x6, 0x80, 0x6d1, 0x8, 0x6, 0xfffffffb, 0x9, 0xfff, 0x8, 0x8, 0x1, 0x7, 0x4, 0x81a, 0x9d2b, 0xf, 0x2, 0x7, 0x5cd3, 0x6, 0x6, 0x7, 0x6, 0x2, 0xffffffff, 0x7, 0x6, 0x0, 0xa1, 0xd4, 0x1, 0x9, 0x9, 0x40ea, 0x5, 0x5, 0x4, 0xfffffffb, 0x7, 0x5, 0xd4, 0x2, 0x3, 0x5, 0x2, 0x7, 0x8, 0x0, 0x8, 0xfdd, 0x3, 0x5, 0x0, 0x8, 0x3, 0x0, 0x5, 0x6567, 0xd8fd, 0x8001, 0x7, 0xe, 0x1, 0x7, 0xaf, 0x100, 0x2, 0x402, 0x800, 0x8, 0x2, 0x2, 0x100, 0x9, 0x7, 0x9, 0xfffff34b, 0x4, 0xffffffff, 0x8000, 0x0, 0x0, 0x8, 0x3, 0x2, 0x7, 0x0, 0x6, 0xfffffffa, 0x5, 0x7fffffff, 0x1, 0x9, 0x7, 0x8, 0xfffffffa, 0x0, 0x1ff, 0xc97, 0x40, 0x9, 0x101, 0x7079, 0xee, 0x200, 0x5, 0x4ad, 0x401, 0xa28c, 0x4, 0x3, 0x2, 0x6, 0x1ff, 0x0, 0x0, 0x4b1, 0x5, 0x75a5, 0x0, 0x0, 0x4, 0x5, 0x0, 0x93, 0x7, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0xb3a, 0x8000, 0x6094, 0x6, 0x8, 0x200000, 0x9, 0x101, 0xb, 0x86c2, 0x2, 0x9, 0x9030, 0x1, 0x76c, 0x42cf7b31, 0xda3, 0x9, 0x7, 0x3cb2a96a, 0x80000001, 0xfffffffd, 0x1122ca06, 0xb66b, 0x3, 0x3be, 0x0, 0x6, 0x6, 0xc09, 0x16d1, 0xc, 0xa3c, 0x6, 0x1, 0x3, 0x3, 0x402b, 0x233b, 0x2, 0x4, 0x10000, 0xfffffffd, 0x0, 0xe66, 0x1, 0x6, 0x7, 0x8, 0x3b, 0x81, 0x8, 0x7ff, 0x8bf, 0x2, 0x6, 0x1, 0x8, 0x3, 0x401, 0x1ff, 0x1000, 0x8, 0x10000, 0x3, 0xb, 0x1, 0x3, 0x3, 0x2b, 0x3, 0x100, 0x8, 0xfffffff0, 0x8, 0x9, 0x7, 0x6, 0x1, 0x3, 0x3dd, 0x5, 0x6, 0xa, 0x0, 0x55, 0x2, 0x3, 0xffff5c04, 0x6, 0xfffffe2a, 0x7, 0x8001, 0x200, 0xb, 0x40, 0x8000, 0x5, 0x3, 0x6, 0x80, 0x453, 0x2, 0x7ff, 0x4546b347, 0x0, 0x200, 0x5, 0x3088, 0x3, 0x0, 0xfffffff2, 0x4, 0x5, 0x2b5, 0x3, 0x1c, 0x3, 0x48, 0x2, 0x8, 0x6578ef01, 0x3186, 0x5, 0x5, 0x2, 0x41, 0x6, 0x6, 0x3, 0xfffffff9, 0x6, 0xd, 0x200, 0x0, 0x4, 0x81, 0x6, 0x2, 0xffffff01, 0x8, 0x1, 0x9, 0x6, 0xdb0, 0x6, 0x40ea5b3d, 0x9, 0xfffffff7, 0x80000000, 0x6, 0x7f, 0x4, 0xd80, 0x7, 0x4, 0x10000, 0x8, 0x8d, 0x7f, 0x7fff, 0xd, 0x68c, 0x5, 0xb9, 0x4, 0x100, 0x401, 0x8, 0xe88f, 0x9, 0x2, 0xc3f, 0x5, 0x80000001, 0x1, 0x4, 0x7463d6f0, 0x10001, 0x8, 0x80, 0xffff, 0x9, 0x34, 0x0, 0x3b7d, 0x4, 0xfffffff7, 0x5, 0x32, 0x7, 0x2d8, 0x6, 0x4, 0x7, 0x401, 0x3, 0xb, 0x81, 0x0, 0x6, 0x4, 0x1000, 0x5, 0x1000, 0x7e, 0x3, 0x1ff, 0x2, 0x5234dbbf, 0xfffffff8, 0x4, 0x8, 0xffffffff, 0x200, 0xfaa4, 0x10000, 0x1, 0xb0a, 0x1, 0x6, 0x9, 0x0, 0x8, 0x0, 0x3ff, 0x899, 0x2, 0xe, 0x6, 0x81e6, 0x1, 0x5f88, 0x16c1fccb, 0x473c, 0x1ff, 0x1, 0x192, 0x4, 0x1, 0x60, 0x8, 0x5, 0xffffffcb, 0x400, 0x9, 0x1, 0x7, 0x3, 0x8, 0xcd87, 0x8d, 0x598, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0xa3d, 0x2, 0x2, 0x2, 0x2, 0x3b, 0x6, 0x6, 0x0, 0x944, 0x0, 0x9, 0x5, 0xa2fb, 0x1, 0x3, 0x3ff, 0x8, 0x7, 0xc, 0xa, 0x4b42, 0x9, 0x5, 0x7fffffff, 0x5, 0x10, 0xffffff00, 0x1, 0x3, 0x7fffffff, 0x7ff, 0x5, 0x1af, 0xc, 0x8, 0xbe, 0x6, 0x8, 0x5, 0xe, 0xfc15, 0x4, 0xc, 0x30c, 0xfff, 0x80000000, 0x16a, 0x30, 0x0, 0x7ab8, 0x0, 0x9, 0x1, 0x3, 0x7f, 0x100, 0x32f4, 0xc95e, 0x3, 0x5, 0x1, 0x4, 0xffff, 0x5, 0x4, 0x5, 0x2, 0x7fff, 0x200, 0xda, 0x9, 0x1, 0xf47a, 0x80000001, 0x7, 0xab, 0xb0a, 0x2, 0x7, 0x3, 0x6, 0x7ff, 0x7, 0xfffffffe, 0xd0c, 0xa0, 0xfff, 0x9, 0x4, 0xd, 0x3, 0x101, 0x4, 0x35, 0x5, 0x5, 0x5, 0x15e, 0xa0, 0x2, 0x0, 0x200, 0x9, 0xfffffff8, 0x2, 0x1, 0x3, 0x6, 0x6c7, 0x5d6, 0x3ffc, 0x5, 0x9, 0x7aa6, 0xfff, 0x5, 0x3, 0xe0, 0x2, 0xca3, 0xe, 0x0, 0x40, 0x1f1d9b27, 0x0, 0xfffffff7, 0x6a6, 0x8, 0x8, 0xfff, 0x1ff, 0x261, 0xf3, 0x65, 0x1ff, 0x8000, 0x4, 0x10, 0x7f0707ef, 0x1, 0x9, 0x1, 0xd5, 0xd42, 0x1000, 0x1, 0x80000001, 0x5e452c8c, 0x7, 0x5, 0x2, 0x9, 0x0, 0xd569, 0x40, 0x800, 0x0, 0x10001, 0x9, 0x8, 0x2, 0x101, 0x7, 0x2, 0x9, 0x6, 0x8dec, 0x1, 0x8001, 0x6, 0x4, 0xaf, 0x5, 0x2, 0xee, 0x4, 0x7fffffff, 0x5, 0x8, 0x1, 0x6, 0x4, 0x1, 0xffffffff, 0x2, 0x7, 0x0, 0x7, 0x9d2, 0xfffffff8, 0x72, 0xe70a, 0x972, 0x5, 0x3, 0x7f, 0x1, 0x4, 0x3, 0x3fffc0, 0x9, 0xfffff981, 0x10, 0x40, 0x7fffffff, 0x2, 0x4, 0xbe, 0xfffffff7, 0xffffffff, 0x7fff, 0x7, 0x9, 0xa23, 0xfffffffe, 0x7ff, 0x5, 0x81, 0x7, 0xff, 0x6a1d, 0x8, 0x33e6, 0x1, 0x8, 0x7, 0x4, 0x5a, 0x7f, 0xfffffffc, 0xfffffffb, 0x9, 0x7, 0xa, 0x5, 0x9f60, 0x44b5acd5, 0x1, 0x21c4, 0x200, 0x8, 0x580, 0xfffffffa, 0x0, 0x81, 0x6, 0x9, 0x2, 0xfffffff9, 0x1ff, 0x3, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x14b8}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r11) sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000002a2493c3a288daf6697a478005", @ANYRES16=r12, @ANYBLOB="01000000000000000000020000000900010073797a3000000000140002006c6f00"/46], 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="741300002b5b997251db3caa712010f514130be55a4d4136b87a30c1508286017ea1ef92cc8c303ec40c056193e159fefd64a1a817a70c5a2612560540195eb92b1fb93551f1107902915263debdc77d0ad0dc327d45cfa41d7fb61ea3573f26a1c6cc70e86bdeae67322139d4c27cf00b8629f99ed19e59feeac6ace4628bb7a3c71f0e", @ANYRES16=r12, @ANYBLOB="00042bbd7000fcdbdf250100000014000200636169663000000000000000000000000900030073797a300000000014000200697036677265746170300000000000000900030073797a30000000001400020070696d726567000000000000000000000900030073797a3100000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) 703.479616ms ago: executing program 7 (id=3428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, 0x0, 0x52}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x1d, &(0x7f0000000140)=ANY=[], 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 695.997697ms ago: executing program 8 (id=3429): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x8}) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) (async) close(r3) 445.690348ms ago: executing program 9 (id=3430): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000904fcff", 0x58}], 0x1) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000904fcff", 0x58}], 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) 353.012422ms ago: executing program 7 (id=3431): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffffffffffffc, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffffffffffffc, 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) (async) 244.278088ms ago: executing program 5 (id=3432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 137.270282ms ago: executing program 8 (id=3433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000a40)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000dc0)={&(0x7f0000000e00)=@xdp={0x2c, 0x8, r8, 0x1b}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='z', 0x14}], 0x1}, 0x4011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x1e]}}, 0x0, 0x39, 0x0, 0x1, 0x3}, 0x28) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301"], 0x428}}, 0x40088) r13 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x74, 0x2c, 0x601, 0x70bd29, 0x0, {0x0, 0x0, 0x2000, r14, {}, {0xfff1, 0xffff}, {0x300, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000007, 0x7, 0x9c5, 0x6, {0x4, 0x1, 0x10, 0x800, 0x4}, {0x0, 0x0, 0xffff, 0x3, 0x9, 0x2}, 0x7, 0x3, 0x4}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 134.475204ms ago: executing program 9 (id=3434): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}}, 0x14}}, 0x10000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000840)={0x0, 0xfffffffffffffd36, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000600)={r9, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000640)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000680)={r9, 0x1, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe8, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000", @ANYRES16=r11, @ANYBLOB="0100feffffff02000000010000000400048008000200010000000800010002000000040008805c000c801c000b80080009002f82371d08000a00243d000008000a0085fb000014000b8088000a00a802000008000a00e63d000014000b8008000900ee2524f8"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) 88.72077ms ago: executing program 7 (id=3435): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000001c0)="dc", 0x1) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x24000094) 69.395461ms ago: executing program 6 (id=3436): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)=ANY=[@ANYRES64=r0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="e6d1f6679fb25c5fc01120c715f21e284450fbf42253866f589ad007", 0x1c}, {&(0x7f0000000200)="fd3a01d9337af6c2838f9b711466249a07a454bc035337b8522a33c9fda0c0d92e36150475877650012d77a8fc051a08e643312b6894d1c6df848f658da529033dea53b997927b57393ea58eb7d41cb816a20af3037ddc523fa648ccba7f2f998355bc98a10c9965f15fcd2da0580f0f7222a52d3e62bf27015a6dc6a8a797a58e98c3985ed95939be4fa39f2ca5485728bbc11539f101cba8d0e3cc131f34b4ed02172450f0b0da", 0xa8}, {&(0x7f00000002c0)="5d80feb15a8d4a9f748789d81b42232da018ae69d89ea2a3c9739e10763b1d131c3ee9ebfab1c3a2ae6b67b7142fe295375474affcf07a65567678b99a05020ded938477e6cc761a037f1cd07e820241f52e5f39a8bd8f441b77343cd3685254a4a4126d382d386821b7fa1f11e84b87e105e0e9cefaaffedf427bd8dfed150daa6cc67b1123be6127228e8d7b8bc7e2606dd4b2e4a5e7421d3dfa45c0ff7d1bafebbef463e3119a9e17", 0xaa}, {&(0x7f0000000440)="bd4fcef88c2eaa5e249eb2abe97c7c46e4a672c886c10845a869b6dcaff680af5886b9b2cf9bd64b47bb7dc78077e710a73e6f55585fd91cc62182ac8e50e65c36e26e3851", 0x45}, {&(0x7f00000004c0)="b8aee49a5673992678f357c2e095b13df532ede297815f112cd0a503262c8ee10cebbe2e19edf95787fa7928e9405e0aab3cfcda4b8afd20bd511e3debc98a722002d8f8f0807aac25c1bde5273455ebc9998b002d7240e4456f067e0c66c62224bf2b703ba70bf2d4f8a30552339f8c84d18cf3412859dbba8b5274b568dc1b095ade1c97f7f5b5c8c6d5eaec3b9ce8a97660f2db28f5e337409181b518994d22c89867", 0xa4}, {0x0}, {&(0x7f00000005c0)="d3586d7722f2a7d3efa2f9da6086810cbb5bf0ba45c61ff9baa5525a29b9bb922dada8ae787738a70b516ed24e92ba1999493a47eb0110eb", 0x38}], 0x7, 0xf) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x32600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000071"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='&'], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000840)={r3, &(0x7f0000000880)='&', &(0x7f00000008c0)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000940)={r3, &(0x7f0000000980), &(0x7f00000009c0)=""/76}, 0x20) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) 0s ago: executing program 5 (id=3437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) listen(r0, 0xfffffff8) (async) listen(r0, 0xfffffff8) kernel console output (not intermixed with test programs): l Trace: [ 893.253034][T16993] [ 893.253042][T16993] dump_stack_lvl+0xe8/0x150 [ 893.253073][T16993] should_fail_ex+0x410/0x560 [ 893.253103][T16993] prepare_alloc_pages+0x223/0x600 [ 893.253162][T16993] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 893.253189][T16993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 893.253216][T16993] ? __pfx_policy_nodemask+0x10/0x10 [ 893.253253][T16993] alloc_pages_mpol+0x21e/0x390 [ 893.253281][T16993] ? batadv_hash_new+0xb9/0x290 [ 893.253307][T16993] ___kmalloc_large_node+0x4f/0x120 [ 893.253331][T16993] __kmalloc_large_node_noprof+0x18/0x90 [ 893.253354][T16993] __kmalloc_noprof+0x3fb/0x720 [ 893.253374][T16993] ? __kmalloc_noprof+0x1ab/0x720 [ 893.253391][T16993] ? batadv_hash_new+0x7b/0x290 [ 893.253412][T16993] ? batadv_hash_new+0xb9/0x290 [ 893.253443][T16993] batadv_hash_new+0xb9/0x290 [ 893.253473][T16993] batadv_originator_init+0x54/0x1d0 [ 893.253557][T16993] batadv_mesh_init+0x39c/0x660 [ 893.253584][T16993] batadv_meshif_init_late+0x979/0xdd0 [ 893.253618][T16993] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 893.253645][T16993] ? __kmalloc_cache_noprof+0x14d/0x600 [ 893.253663][T16993] ? register_netdevice+0x58d/0x2280 [ 893.253697][T16993] ? register_netdevice+0x58d/0x2280 [ 893.253731][T16993] register_netdevice+0x6b3/0x2280 [ 893.253766][T16993] ? __kvmalloc_node_noprof+0x345/0x820 [ 893.253788][T16993] ? alloc_netdev_mqs+0xd5b/0x1240 [ 893.253812][T16993] ? __pfx_register_netdevice+0x10/0x10 [ 893.253839][T16993] ? validate_linkmsg+0x809/0xa50 [ 893.253867][T16993] ? rtnl_create_link+0xa04/0xd70 [ 893.253886][T16993] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 893.253914][T16993] rtnl_newlink_create+0x305/0x7b0 [ 893.253948][T16993] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 893.253981][T16993] ? __pfx___mutex_lock+0x10/0x10 [ 893.254017][T16993] ? ns_capable+0x89/0xe0 [ 893.254046][T16993] rtnl_newlink+0x167a/0x1c30 [ 893.254087][T16993] ? __pfx_rtnl_newlink+0x10/0x10 [ 893.254117][T16993] ? __lock_acquire+0x747/0x2de0 [ 893.254140][T16993] ? __lock_acquire+0x747/0x2de0 [ 893.254168][T16993] ? __lock_acquire+0x747/0x2de0 [ 893.254203][T16993] ? lock_acquire+0x115/0x350 [ 893.254231][T16993] ? lock_acquire+0x115/0x350 [ 893.254262][T16993] ? __lock_acquire+0x747/0x2de0 [ 893.254285][T16993] ? is_bpf_text_address+0x292/0x2b0 [ 893.254322][T16993] ? kernel_text_address+0xa5/0xe0 [ 893.254349][T16993] ? __kernel_text_address+0xd/0x30 [ 893.254367][T16993] ? unwind_get_return_address+0x4d/0x90 [ 893.254422][T16993] ? __pfx_rtnl_newlink+0x10/0x10 [ 893.254445][T16993] rtnetlink_rcv_msg+0x802/0xc00 [ 893.254473][T16993] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 893.254496][T16993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 893.254522][T16993] ? __lock_acquire+0x747/0x2de0 [ 893.254555][T16993] netlink_rcv_skb+0x226/0x4a0 [ 893.254578][T16993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 893.254610][T16993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 893.254644][T16993] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.254664][T16993] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.254698][T16993] netlink_unicast+0x8ef/0xa80 [ 893.254744][T16993] netlink_sendmsg+0x813/0xb40 [ 893.254776][T16993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.254805][T16993] ? apparmor_socket_sendmsg+0x98/0x360 [ 893.254833][T16993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.254852][T16993] sock_sendmsg_nosec+0x14e/0x190 [ 893.254876][T16993] ____sys_sendmsg+0x54e/0x850 [ 893.254908][T16993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.254944][T16993] ? import_iovec+0x73/0xa0 [ 893.254975][T16993] ___sys_sendmsg+0x2a5/0x360 [ 893.254999][T16993] ? __lock_acquire+0x747/0x2de0 [ 893.255023][T16993] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.255088][T16993] ? __fget_files+0x2a/0x420 [ 893.255114][T16993] ? __fget_files+0x3a2/0x420 [ 893.255152][T16993] __x64_sys_sendmsg+0x1b1/0x290 [ 893.255181][T16993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.255231][T16993] do_syscall_64+0x166/0x520 [ 893.255255][T16993] ? trace_irq_disable+0x3b/0x140 [ 893.255274][T16993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.255293][T16993] ? clear_bhb_loop+0x70/0xc0 [ 893.255316][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.255334][T16993] RIP: 0033:0x7f057739f559 [ 893.255351][T16993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.255366][T16993] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.255386][T16993] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 893.255399][T16993] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 893.255411][T16993] RBP: 00007f0578321090 R08: 0000000000000000 R09: 0000000000000000 [ 893.255422][T16993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.255433][T16993] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 893.255465][T16993] [ 893.837339][T17018] xt_LOG: level 115 >= 8 [ 894.709005][T17044] __nla_validate_parse: 37 callbacks suppressed [ 894.709025][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2349'. [ 894.709492][T17044] FAULT_INJECTION: forcing a failure. [ 894.709492][T17044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 894.709519][T17044] CPU: 0 UID: 0 PID: 17044 Comm: syz.6.2349 Not tainted syzkaller #0 PREEMPT(full) [ 894.709538][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 894.709549][T17044] Call Trace: [ 894.709556][T17044] [ 894.709563][T17044] dump_stack_lvl+0xe8/0x150 [ 894.709594][T17044] should_fail_ex+0x410/0x560 [ 894.709635][T17044] prepare_alloc_pages+0x223/0x600 [ 894.709664][T17044] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 894.709691][T17044] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.709719][T17044] ? __pfx_policy_nodemask+0x10/0x10 [ 894.709755][T17044] alloc_pages_mpol+0x21e/0x390 [ 894.709784][T17044] ? batadv_hash_new+0xb9/0x290 [ 894.709808][T17044] ___kmalloc_large_node+0x4f/0x120 [ 894.709830][T17044] __kmalloc_large_node_noprof+0x18/0x90 [ 894.709853][T17044] __kmalloc_noprof+0x3fb/0x720 [ 894.709872][T17044] ? __kmalloc_noprof+0x1ab/0x720 [ 894.709890][T17044] ? batadv_hash_new+0x7b/0x290 [ 894.709911][T17044] ? batadv_hash_new+0xb9/0x290 [ 894.709941][T17044] batadv_hash_new+0xb9/0x290 [ 894.709970][T17044] batadv_originator_init+0x54/0x1d0 [ 894.709994][T17044] batadv_mesh_init+0x39c/0x660 [ 894.710021][T17044] batadv_meshif_init_late+0x979/0xdd0 [ 894.710054][T17044] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 894.710080][T17044] ? __kmalloc_cache_noprof+0x14d/0x600 [ 894.710099][T17044] ? register_netdevice+0x58d/0x2280 [ 894.710125][T17044] ? register_netdevice+0x58d/0x2280 [ 894.710158][T17044] register_netdevice+0x6b3/0x2280 [ 894.710192][T17044] ? __kvmalloc_node_noprof+0x345/0x820 [ 894.710214][T17044] ? alloc_netdev_mqs+0xd5b/0x1240 [ 894.710237][T17044] ? __pfx_register_netdevice+0x10/0x10 [ 894.710264][T17044] ? validate_linkmsg+0x809/0xa50 [ 894.710292][T17044] ? rtnl_create_link+0xa04/0xd70 [ 894.710312][T17044] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 894.710340][T17044] rtnl_newlink_create+0x305/0x7b0 [ 894.710371][T17044] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 894.710401][T17044] ? __pfx___mutex_lock+0x10/0x10 [ 894.710437][T17044] ? ns_capable+0x89/0xe0 [ 894.710465][T17044] rtnl_newlink+0x167a/0x1c30 [ 894.710506][T17044] ? __pfx_rtnl_newlink+0x10/0x10 [ 894.710528][T17044] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 894.710547][T17044] ? netlink_deliver_tap+0x19c/0x1b0 [ 894.710564][T17044] ? netlink_unicast+0x8c1/0xa80 [ 894.710589][T17044] ? netlink_sendmsg+0x813/0xb40 [ 894.710607][T17044] ? sock_sendmsg_nosec+0x14e/0x190 [ 894.710631][T17044] ? ____sys_sendmsg+0x54e/0x850 [ 894.710654][T17044] ? ___sys_sendmsg+0x2a5/0x360 [ 894.710677][T17044] ? __x64_sys_sendmsg+0x1b1/0x290 [ 894.710700][T17044] ? do_syscall_64+0x166/0x520 [ 894.710723][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.710781][T17044] ? kasan_quarantine_put+0xbb/0x1f0 [ 894.710802][T17044] ? lockdep_hardirqs_on+0x7b/0x110 [ 894.710829][T17044] ? nlmon_xmit+0xb0/0x100 [ 894.710853][T17044] ? kmem_cache_free+0x182/0x650 [ 894.710882][T17044] ? __lock_acquire+0x747/0x2de0 [ 894.710911][T17044] ? __dev_queue_xmit+0x29b/0x3920 [ 894.710932][T17044] ? __local_bh_enable_ip+0xd6/0x140 [ 894.710956][T17044] ? lockdep_hardirqs_on+0x7b/0x110 [ 894.711008][T17044] ? __pfx_rtnl_newlink+0x10/0x10 [ 894.711030][T17044] rtnetlink_rcv_msg+0x802/0xc00 [ 894.711056][T17044] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 894.711079][T17044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 894.711106][T17044] ? __copy_skb_header+0xa3/0x4a0 [ 894.711143][T17044] netlink_rcv_skb+0x226/0x4a0 [ 894.711163][T17044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 894.711189][T17044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 894.711220][T17044] ? netlink_deliver_tap+0x2e/0x1b0 [ 894.711239][T17044] ? netlink_deliver_tap+0x2e/0x1b0 [ 894.711263][T17044] netlink_unicast+0x8ef/0xa80 [ 894.711306][T17044] netlink_sendmsg+0x813/0xb40 [ 894.711335][T17044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.711364][T17044] ? apparmor_socket_sendmsg+0x98/0x360 [ 894.711391][T17044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.711410][T17044] sock_sendmsg_nosec+0x14e/0x190 [ 894.711432][T17044] ____sys_sendmsg+0x54e/0x850 [ 894.711461][T17044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.711495][T17044] ? import_iovec+0x73/0xa0 [ 894.711526][T17044] ___sys_sendmsg+0x2a5/0x360 [ 894.711550][T17044] ? __lock_acquire+0x747/0x2de0 [ 894.711589][T17044] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.711659][T17044] ? __fget_files+0x2a/0x420 [ 894.711685][T17044] ? __fget_files+0x3a2/0x420 [ 894.711722][T17044] __x64_sys_sendmsg+0x1b1/0x290 [ 894.711751][T17044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.711800][T17044] do_syscall_64+0x166/0x520 [ 894.711824][T17044] ? trace_irq_disable+0x3b/0x140 [ 894.711844][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.711862][T17044] ? clear_bhb_loop+0x70/0xc0 [ 894.711885][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.711903][T17044] RIP: 0033:0x7faade59f559 [ 894.711921][T17044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.711936][T17044] RSP: 002b:00007faadf47b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.711956][T17044] RAX: ffffffffffffffda RBX: 00007faade826090 RCX: 00007faade59f559 [ 894.711969][T17044] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 894.711980][T17044] RBP: 00007faadf47b090 R08: 0000000000000000 R09: 0000000000000000 [ 894.711991][T17044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 894.712002][T17044] R13: 00007faade826128 R14: 00007faade826090 R15: 00007fffd4ee2128 [ 894.712034][T17044] [ 894.792621][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2351'. [ 894.896315][T17041] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2350'. [ 894.971047][T17043] bridge0: port 2(batadv2) entered blocking state [ 894.974030][T17043] bridge0: port 2(batadv2) entered disabled state [ 894.974769][T17043] batadv2: entered allmulticast mode [ 894.989738][T17043] batadv2: entered promiscuous mode [ 895.028265][T17053] veth1_to_bridge: left promiscuous mode [ 895.060355][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.119473][T17048] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2354'. [ 895.200983][T17061] netlink: 'syz.5.2356': attribute type 1 has an invalid length. [ 895.321755][T17061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 895.343272][T17060] macvlan2: entered promiscuous mode [ 895.343292][T17060] macvlan2: entered allmulticast mode [ 895.345724][T17060] bond2: entered promiscuous mode [ 895.346845][T17060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 895.406951][T17060] bond2: left promiscuous mode [ 895.419998][ T7788] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 895.420014][ T7788] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 895.677774][T17052] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 895.901050][T17094] Bluetooth: MGMT ver 1.23 [ 895.909272][T17094] Bluetooth: MGMT ver 1.23 [ 896.052440][T17108] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2370'. [ 896.145493][T17115] netlink: 'syz.8.2373': attribute type 2 has an invalid length. [ 896.147730][T17117] IPVS: set_ctl: invalid protocol: 0 172.20.20.16:20002 [ 896.271489][T17113] netlink: 'syz.7.2372': attribute type 1 has an invalid length. [ 896.271510][T17113] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2372'. [ 896.421422][T17129] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2377'. [ 896.492556][T17138] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2377'. [ 896.521658][T17126] bond9: option min_links: invalid value (18446744073709551612) [ 896.521679][T17126] bond9: option min_links: allowed values 0 - 2147483647 [ 896.539569][T17126] bond9 (unregistering): Released all slaves [ 896.587218][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2372'. [ 896.962213][T17160] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2384'. [ 896.977368][T17160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.104768][T17171] tipc: Enabled bearer , priority 0 [ 897.105344][T17171] syzkaller0: entered promiscuous mode [ 897.105362][T17171] syzkaller0: entered allmulticast mode [ 897.141197][T17171] tipc: Resetting bearer [ 897.142496][T17170] tipc: Resetting bearer [ 897.172580][T17170] tipc: Disabling bearer [ 897.270044][T17173] block nbd8: Unsupported socket: should be TCP or UNIX. [ 897.337763][T17179] erspan1: entered promiscuous mode [ 897.543778][T17191] netlink: 'syz.8.2395': attribute type 10 has an invalid length. [ 897.558819][T17191] geneve4: entered promiscuous mode [ 897.558837][T17191] geneve4: entered allmulticast mode [ 897.606698][T17197] Unknown options in mask 6 [ 897.613693][T17193] netlink: 'syz.7.2396': attribute type 8 has an invalid length. [ 897.881057][T17203] hsr_slave_1: left promiscuous mode [ 898.160573][T17218] netlink: 'syz.7.2404': attribute type 11 has an invalid length. [ 898.197312][T17221] ip_tables: iptables: counters copy to user failed while replacing table [ 898.309557][T17228] xt_hashlimit: size too large, truncated to 1048576 [ 898.437534][T17248] lo: MTU not usable for tipc bearer [ 898.437569][T17248] tipc: Enabling of bearer rejected, failed to enable media [ 899.434495][T17290] netlink: 'syz.8.2425': attribute type 1 has an invalid length. [ 899.477114][T17295] netlink: 'syz.7.2426': attribute type 1 has an invalid length. [ 899.486571][T17290] bond9: entered promiscuous mode [ 899.486929][T17290] 8021q: adding VLAN 0 to HW filter on device bond9 [ 899.521799][T17295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.863602][T17309] syzkaller0: entered promiscuous mode [ 899.863623][T17309] syzkaller0: entered allmulticast mode [ 899.929708][T17314] netlink: 'syz.9.2431': attribute type 2 has an invalid length. [ 899.929732][T17314] __nla_validate_parse: 20 callbacks suppressed [ 899.929742][T17314] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2431'. [ 900.129392][T17319] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.193502][T17319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 900.193532][T17319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.196875][T17319] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 900.238203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.238307][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.247502][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.247599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.304107][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2434'. [ 900.339626][T17326] FAULT_INJECTION: forcing a failure. [ 900.339626][T17326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 900.339664][T17326] CPU: 1 UID: 0 PID: 17326 Comm: syz.6.2434 Not tainted syzkaller #0 PREEMPT(full) [ 900.339684][T17326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 900.339694][T17326] Call Trace: [ 900.339702][T17326] [ 900.339710][T17326] dump_stack_lvl+0xe8/0x150 [ 900.339741][T17326] should_fail_ex+0x410/0x560 [ 900.339774][T17326] prepare_alloc_pages+0x223/0x600 [ 900.339801][T17326] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 900.339828][T17326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 900.339853][T17326] ? __pfx_policy_nodemask+0x10/0x10 [ 900.339888][T17326] alloc_pages_mpol+0x21e/0x390 [ 900.339916][T17326] ? batadv_hash_new+0xb9/0x290 [ 900.339941][T17326] ___kmalloc_large_node+0x4f/0x120 [ 900.339963][T17326] __kmalloc_large_node_noprof+0x18/0x90 [ 900.339987][T17326] __kmalloc_noprof+0x3fb/0x720 [ 900.340006][T17326] ? __kmalloc_noprof+0x1ab/0x720 [ 900.340022][T17326] ? batadv_hash_new+0x7b/0x290 [ 900.340042][T17326] ? batadv_hash_new+0xb9/0x290 [ 900.340071][T17326] batadv_hash_new+0xb9/0x290 [ 900.340101][T17326] batadv_tt_init+0x54/0x2a0 [ 900.340193][T17326] batadv_mesh_init+0x3b7/0x660 [ 900.340219][T17326] batadv_meshif_init_late+0x979/0xdd0 [ 900.340252][T17326] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 900.340277][T17326] ? __kmalloc_cache_noprof+0x14d/0x600 [ 900.340296][T17326] ? register_netdevice+0x58d/0x2280 [ 900.340322][T17326] ? register_netdevice+0x58d/0x2280 [ 900.340355][T17326] register_netdevice+0x6b3/0x2280 [ 900.340389][T17326] ? __kvmalloc_node_noprof+0x345/0x820 [ 900.340412][T17326] ? alloc_netdev_mqs+0xd5b/0x1240 [ 900.340435][T17326] ? __pfx_register_netdevice+0x10/0x10 [ 900.340461][T17326] ? validate_linkmsg+0x809/0xa50 [ 900.340488][T17326] ? rtnl_create_link+0xa04/0xd70 [ 900.340508][T17326] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 900.340537][T17326] rtnl_newlink_create+0x305/0x7b0 [ 900.340570][T17326] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 900.340600][T17326] ? __pfx___mutex_lock+0x10/0x10 [ 900.340636][T17326] ? ns_capable+0x89/0xe0 [ 900.340675][T17326] rtnl_newlink+0x167a/0x1c30 [ 900.340706][T17326] ? __pfx_rtnl_newlink+0x10/0x10 [ 900.340723][T17326] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 900.340738][T17326] ? netlink_deliver_tap+0x19c/0x1b0 [ 900.340752][T17326] ? netlink_unicast+0x8c1/0xa80 [ 900.340771][T17326] ? netlink_sendmsg+0x813/0xb40 [ 900.340785][T17326] ? sock_sendmsg_nosec+0x14e/0x190 [ 900.340799][T17326] ? ____sys_sendmsg+0x54e/0x850 [ 900.340817][T17326] ? ___sys_sendmsg+0x2a5/0x360 [ 900.340834][T17326] ? __x64_sys_sendmsg+0x1b1/0x290 [ 900.340852][T17326] ? do_syscall_64+0x166/0x520 [ 900.340870][T17326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.340914][T17326] ? kasan_quarantine_put+0xbb/0x1f0 [ 900.340930][T17326] ? lockdep_hardirqs_on+0x7b/0x110 [ 900.340953][T17326] ? nlmon_xmit+0xb0/0x100 [ 900.340971][T17326] ? kmem_cache_free+0x182/0x650 [ 900.340993][T17326] ? __lock_acquire+0x747/0x2de0 [ 900.341015][T17326] ? __dev_queue_xmit+0x29b/0x3920 [ 900.341031][T17326] ? __local_bh_enable_ip+0xd6/0x140 [ 900.341049][T17326] ? lockdep_hardirqs_on+0x7b/0x110 [ 900.341089][T17326] ? __pfx_rtnl_newlink+0x10/0x10 [ 900.341106][T17326] rtnetlink_rcv_msg+0x802/0xc00 [ 900.341128][T17326] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 900.341145][T17326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 900.341167][T17326] ? __copy_skb_header+0xa3/0x4a0 [ 900.341196][T17326] netlink_rcv_skb+0x226/0x4a0 [ 900.341214][T17326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 900.341235][T17326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 900.341269][T17326] netlink_unicast+0x8ef/0xa80 [ 900.341305][T17326] netlink_sendmsg+0x813/0xb40 [ 900.341328][T17326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.341351][T17326] ? apparmor_socket_sendmsg+0x98/0x360 [ 900.341372][T17326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.341386][T17326] sock_sendmsg_nosec+0x14e/0x190 [ 900.341404][T17326] ____sys_sendmsg+0x54e/0x850 [ 900.341428][T17326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.341455][T17326] ? import_iovec+0x73/0xa0 [ 900.341480][T17326] ___sys_sendmsg+0x2a5/0x360 [ 900.341498][T17326] ? __lock_acquire+0x747/0x2de0 [ 900.341517][T17326] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.341565][T17326] ? __fget_files+0x2a/0x420 [ 900.341589][T17326] ? __fget_files+0x3a2/0x420 [ 900.341619][T17326] __x64_sys_sendmsg+0x1b1/0x290 [ 900.341641][T17326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.341683][T17326] do_syscall_64+0x166/0x520 [ 900.341701][T17326] ? trace_irq_disable+0x3b/0x140 [ 900.341716][T17326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.341731][T17326] ? clear_bhb_loop+0x70/0xc0 [ 900.341749][T17326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.341763][T17326] RIP: 0033:0x7faade59f559 [ 900.341777][T17326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.341790][T17326] RSP: 002b:00007faadf49c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.341806][T17326] RAX: ffffffffffffffda RBX: 00007faade825fa0 RCX: 00007faade59f559 [ 900.341816][T17326] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 900.341825][T17326] RBP: 00007faadf49c090 R08: 0000000000000000 R09: 0000000000000000 [ 900.341834][T17326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.341842][T17326] R13: 00007faade826038 R14: 00007faade825fa0 R15: 00007fffd4ee2128 [ 900.341867][T17326] [ 900.855469][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2438'. [ 901.148189][T17350] syzkaller1: entered promiscuous mode [ 901.148213][T17350] syzkaller1: entered allmulticast mode [ 901.213338][T17355] ip_tables: iptables: counters copy to user failed while replacing table [ 901.477594][T17364] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2447'. [ 901.479566][T17364] FAULT_INJECTION: forcing a failure. [ 901.479566][T17364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 901.479593][T17364] CPU: 1 UID: 0 PID: 17364 Comm: syz.7.2447 Not tainted syzkaller #0 PREEMPT(full) [ 901.479613][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 901.479623][T17364] Call Trace: [ 901.479630][T17364] [ 901.479638][T17364] dump_stack_lvl+0xe8/0x150 [ 901.479669][T17364] should_fail_ex+0x410/0x560 [ 901.479699][T17364] prepare_alloc_pages+0x223/0x600 [ 901.479727][T17364] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 901.479758][T17364] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 901.479783][T17364] ? __pfx_policy_nodemask+0x10/0x10 [ 901.479817][T17364] alloc_pages_mpol+0x21e/0x390 [ 901.479844][T17364] ? batadv_hash_new+0xb9/0x290 [ 901.479870][T17364] ___kmalloc_large_node+0x4f/0x120 [ 901.479894][T17364] __kmalloc_large_node_noprof+0x18/0x90 [ 901.479917][T17364] __kmalloc_noprof+0x3fb/0x720 [ 901.479937][T17364] ? __kmalloc_noprof+0x1ab/0x720 [ 901.479955][T17364] ? batadv_hash_new+0x7b/0x290 [ 901.479977][T17364] ? batadv_hash_new+0xb9/0x290 [ 901.480007][T17364] batadv_hash_new+0xb9/0x290 [ 901.480034][T17364] batadv_tt_init+0xbc/0x2a0 [ 901.480057][T17364] batadv_mesh_init+0x3b7/0x660 [ 901.480083][T17364] batadv_meshif_init_late+0x979/0xdd0 [ 901.480124][T17364] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 901.480151][T17364] ? __kmalloc_cache_noprof+0x14d/0x600 [ 901.480169][T17364] ? register_netdevice+0x58d/0x2280 [ 901.480196][T17364] ? register_netdevice+0x58d/0x2280 [ 901.480230][T17364] register_netdevice+0x6b3/0x2280 [ 901.480265][T17364] ? __kvmalloc_node_noprof+0x345/0x820 [ 901.480287][T17364] ? alloc_netdev_mqs+0xd5b/0x1240 [ 901.480311][T17364] ? __pfx_register_netdevice+0x10/0x10 [ 901.480337][T17364] ? validate_linkmsg+0x809/0xa50 [ 901.480364][T17364] ? rtnl_create_link+0xa04/0xd70 [ 901.480385][T17364] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 901.480414][T17364] rtnl_newlink_create+0x305/0x7b0 [ 901.480438][T17364] ? lockdep_hardirqs_on+0x7b/0x110 [ 901.480470][T17364] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 901.480499][T17364] ? __pfx___mutex_lock+0x10/0x10 [ 901.480535][T17364] ? ns_capable+0x89/0xe0 [ 901.480563][T17364] rtnl_newlink+0x167a/0x1c30 [ 901.480604][T17364] ? __pfx_rtnl_newlink+0x10/0x10 [ 901.480625][T17364] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 901.480644][T17364] ? netlink_deliver_tap+0x19c/0x1b0 [ 901.480662][T17364] ? netlink_unicast+0x8c1/0xa80 [ 901.480686][T17364] ? netlink_sendmsg+0x813/0xb40 [ 901.480705][T17364] ? sock_sendmsg_nosec+0x14e/0x190 [ 901.480723][T17364] ? ____sys_sendmsg+0x54e/0x850 [ 901.480745][T17364] ? ___sys_sendmsg+0x2a5/0x360 [ 901.480767][T17364] ? __x64_sys_sendmsg+0x1b1/0x290 [ 901.480789][T17364] ? do_syscall_64+0x166/0x520 [ 901.480812][T17364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.480869][T17364] ? kasan_quarantine_put+0xbb/0x1f0 [ 901.480890][T17364] ? lockdep_hardirqs_on+0x7b/0x110 [ 901.480918][T17364] ? nlmon_xmit+0xb0/0x100 [ 901.480940][T17364] ? kmem_cache_free+0x182/0x650 [ 901.480970][T17364] ? __lock_acquire+0x747/0x2de0 [ 901.480998][T17364] ? __dev_queue_xmit+0x29b/0x3920 [ 901.481019][T17364] ? __local_bh_enable_ip+0xd6/0x140 [ 901.481042][T17364] ? lockdep_hardirqs_on+0x7b/0x110 [ 901.481093][T17364] ? __pfx_rtnl_newlink+0x10/0x10 [ 901.481121][T17364] rtnetlink_rcv_msg+0x802/0xc00 [ 901.481149][T17364] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 901.481172][T17364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 901.481199][T17364] ? __copy_skb_header+0xa3/0x4a0 [ 901.481237][T17364] netlink_rcv_skb+0x226/0x4a0 [ 901.481258][T17364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 901.481284][T17364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 901.481318][T17364] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.481337][T17364] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.481364][T17364] netlink_unicast+0x8ef/0xa80 [ 901.481410][T17364] netlink_sendmsg+0x813/0xb40 [ 901.481440][T17364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.481470][T17364] ? apparmor_socket_sendmsg+0x98/0x360 [ 901.481496][T17364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.481516][T17364] sock_sendmsg_nosec+0x14e/0x190 [ 901.481538][T17364] ____sys_sendmsg+0x54e/0x850 [ 901.481569][T17364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.481604][T17364] ? import_iovec+0x73/0xa0 [ 901.481633][T17364] ___sys_sendmsg+0x2a5/0x360 [ 901.481658][T17364] ? __lock_acquire+0x747/0x2de0 [ 901.481682][T17364] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.481745][T17364] ? __fget_files+0x2a/0x420 [ 901.481770][T17364] ? __fget_files+0x3a2/0x420 [ 901.481804][T17364] __x64_sys_sendmsg+0x1b1/0x290 [ 901.481832][T17364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.481881][T17364] do_syscall_64+0x166/0x520 [ 901.481903][T17364] ? trace_irq_disable+0x3b/0x140 [ 901.481923][T17364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.481940][T17364] ? clear_bhb_loop+0x70/0xc0 [ 901.481963][T17364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.481982][T17364] RIP: 0033:0x7f057739f559 [ 901.481999][T17364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.482015][T17364] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.482034][T17364] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 901.482048][T17364] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 901.482060][T17364] RBP: 00007f0578321090 R08: 0000000000000000 R09: 0000000000000000 [ 901.482071][T17364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.482082][T17364] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 901.482120][T17364] [ 901.659098][T17365] netlink: 'syz.9.2448': attribute type 7 has an invalid length. [ 901.957554][T17374] netlink: 'syz.8.2451': attribute type 1 has an invalid length. [ 902.252350][T17383] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2454'. [ 902.538046][T17392] sctp: [Deprecated]: syz.7.2457 (pid 17392) Use of int in maxseg socket option. [ 902.538046][T17392] Use struct sctp_assoc_value instead [ 902.592858][T17390] tipc: Enabled bearer , priority 0 [ 902.704265][T17392] syzkaller0: entered promiscuous mode [ 902.704289][T17392] syzkaller0: entered allmulticast mode [ 902.740911][T17387] syzkaller0: MTU not usable for tipc bearer [ 902.740931][T17387] tipc: Disabling bearer [ 902.745761][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2457'. [ 902.745780][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2457'. [ 902.745802][T17392] netlink: 'syz.7.2457': attribute type 11 has an invalid length. [ 902.745814][T17392] netlink: 'syz.7.2457': attribute type 13 has an invalid length. [ 902.909592][T17408] netlink: 'syz.9.2461': attribute type 1 has an invalid length. [ 903.070386][T17406] netlink: 'syz.5.2462': attribute type 10 has an invalid length. [ 903.072947][T17408] bond3: entered promiscuous mode [ 903.073347][T17408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 903.081777][T17414] netlink: 'syz.6.2463': attribute type 1 has an invalid length. [ 903.081793][T17414] netlink: 'syz.6.2463': attribute type 12 has an invalid length. [ 903.081805][T17414] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2463'. [ 903.084625][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'. [ 903.157404][T17410] ipvlan2: entered allmulticast mode [ 903.157425][T17410] bond3: entered allmulticast mode [ 903.374841][T17429] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2465'. [ 905.296012][T17406] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 905.422264][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2469'. [ 905.734103][T17450] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 905.770853][T17450] bond11: (slave lo): Enslaving as an active interface with an up link [ 905.850775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.877014][T17450] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 905.924440][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2473'. [ 906.085611][T17460] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2475'. [ 906.109177][T17460] syzkaller0: entered promiscuous mode [ 906.109197][T17460] syzkaller0: entered allmulticast mode [ 906.207285][T17466] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2476'. [ 906.309029][T17470] netlink: 'syz.6.2478': attribute type 1 has an invalid length. [ 906.361641][T17470] 8021q: adding VLAN 0 to HW filter on device bond10 [ 906.405918][T17479] IPVS: length: 4096 != 24 [ 906.495189][T17470] bond10: (slave geneve2): making interface the new active one [ 906.499388][T17470] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 906.631649][T17470] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2478'. [ 906.631673][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2478'. [ 906.631686][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2478'. [ 906.788882][T17501] netlink: 'syz.6.2478': attribute type 39 has an invalid length. [ 906.820950][T17500] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 906.856620][T17504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 906.943424][T17512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2490'. [ 907.048062][T17512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 907.092490][T17511] macvtap2: entered allmulticast mode [ 907.162426][T17512] bond11: (slave sit1): refused to change device type [ 907.265697][T17538] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.268195][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2495'. [ 907.300719][T17540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 907.302331][T17540] batman_adv: batadv0: Adding interface: gretap1 [ 907.302344][T17540] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.302472][T17540] batman_adv: batadv0: Interface activated: gretap1 [ 907.617606][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2500'. [ 907.668955][T17556] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 908.077412][T17562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.658829][T17573] netlink: 'syz.8.2503': attribute type 1 has an invalid length. [ 908.668228][T17574] netlink: 'syz.6.2505': attribute type 9 has an invalid length. [ 908.668245][T17574] netlink: 'syz.6.2505': attribute type 4 has an invalid length. [ 908.761956][T17573] bond12: entered promiscuous mode [ 908.763951][T17573] 8021q: adding VLAN 0 to HW filter on device bond12 [ 908.809064][T17573] bond12: entered allmulticast mode [ 908.977746][T17573] bond12: (slave bridge3): making interface the new active one [ 908.977770][T17573] bridge3: entered promiscuous mode [ 908.977937][T17573] bridge3: entered allmulticast mode [ 909.014332][T17573] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 909.644362][T17613] geneve0: entered promiscuous mode [ 909.703181][T17611] --map-set only usable from mangle table [ 912.742246][T17639] netlink: 'syz.6.2521': attribute type 1 has an invalid length. [ 912.837098][T17643] __nla_validate_parse: 5 callbacks suppressed [ 912.837117][T17643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2521'. [ 912.842242][T17639] bond11: entered promiscuous mode [ 912.845885][T17639] 8021q: adding VLAN 0 to HW filter on device bond11 [ 912.926321][T17643] bond11: entered allmulticast mode [ 912.959233][T17642] syzkaller0: entered promiscuous mode [ 912.959442][T17642] syzkaller0: entered allmulticast mode [ 913.032860][T17639] bond11: (slave bridge9): making interface the new active one [ 913.032884][T17639] bridge9: entered promiscuous mode [ 913.033053][T17639] bridge9: entered allmulticast mode [ 913.034760][T17639] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 913.137564][T17653] FAULT_INJECTION: forcing a failure. [ 913.137564][T17653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.137599][T17653] CPU: 1 UID: 0 PID: 17653 Comm: syz.8.2526 Not tainted syzkaller #0 PREEMPT(full) [ 913.137642][T17653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 913.137665][T17653] Call Trace: [ 913.137680][T17653] [ 913.137688][T17653] dump_stack_lvl+0xe8/0x150 [ 913.137726][T17653] should_fail_ex+0x410/0x560 [ 913.137757][T17653] _copy_from_user+0x2d/0xb0 [ 913.137786][T17653] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 913.137814][T17653] map_update_elem+0x644/0xa80 [ 913.137846][T17653] __sys_bpf+0xb06/0xd90 [ 913.137876][T17653] ? __pfx___sys_bpf+0x10/0x10 [ 913.137909][T17653] ? __fget_files+0x2a/0x420 [ 913.137954][T17653] ? ksys_write+0x242/0x270 [ 913.137975][T17653] ? __pfx_ksys_write+0x10/0x10 [ 913.138000][T17653] __x64_sys_bpf+0xba/0xd0 [ 913.138023][T17653] do_syscall_64+0x166/0x520 [ 913.138047][T17653] ? trace_irq_disable+0x3b/0x140 [ 913.138067][T17653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.138086][T17653] ? clear_bhb_loop+0x70/0xc0 [ 913.138109][T17653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.138127][T17653] RIP: 0033:0x7f0685d9f559 [ 913.138144][T17653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.138159][T17653] RSP: 002b:00007f0686c4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.138179][T17653] RAX: ffffffffffffffda RBX: 00007f0686026090 RCX: 00007f0685d9f559 [ 913.138192][T17653] RDX: 0000000000000020 RSI: 0000200000000bc0 RDI: 0000000000000002 [ 913.138205][T17653] RBP: 00007f0686c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 913.138216][T17653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.138227][T17653] R13: 00007f0686026128 R14: 00007f0686026090 R15: 00007fffc9e08cd8 [ 913.138258][T17653] [ 913.272405][T17644] tipc: Enabled bearer , priority 0 [ 913.329725][T17640] tipc: Resetting bearer [ 913.558832][T17640] tipc: Disabling bearer [ 913.629049][T17661] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2528'. [ 913.694967][T17664] bridge0: port 1(ip6gretap0) entered blocking state [ 913.695130][T17664] bridge0: port 1(ip6gretap0) entered disabled state [ 913.695255][T17664] ip6gretap0: entered allmulticast mode [ 913.724719][T17664] ip6gretap0: entered promiscuous mode [ 913.774375][T17664] bridge0: port 1(ip6gretap0) entered blocking state [ 913.774504][T17664] bridge0: port 1(ip6gretap0) entered forwarding state [ 913.844007][T17665] syzkaller1: entered promiscuous mode [ 913.844188][T17665] syzkaller1: entered allmulticast mode [ 914.115656][T17678] FAULT_INJECTION: forcing a failure. [ 914.115656][T17678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.115701][T17678] CPU: 0 UID: 0 PID: 17678 Comm: syz.5.2533 Not tainted syzkaller #0 PREEMPT(full) [ 914.115722][T17678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 914.115734][T17678] Call Trace: [ 914.115741][T17678] [ 914.115749][T17678] dump_stack_lvl+0xe8/0x150 [ 914.115780][T17678] should_fail_ex+0x410/0x560 [ 914.115810][T17678] _copy_from_iter+0x1d3/0x1660 [ 914.115836][T17678] ? __alloc_skb+0x27a/0x7a0 [ 914.115860][T17678] ? __alloc_skb+0x27a/0x7a0 [ 914.115884][T17678] ? __alloc_skb+0x27a/0x7a0 [ 914.115907][T17678] ? __pfx__copy_from_iter+0x10/0x10 [ 914.115929][T17678] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 914.115949][T17678] ? __alloc_skb+0x27a/0x7a0 [ 914.115969][T17678] ? __alloc_skb+0x27a/0x7a0 [ 914.115997][T17678] ? netlink_sendmsg+0x650/0xb40 [ 914.116017][T17678] ? skb_put+0x112/0x210 [ 914.116043][T17678] netlink_sendmsg+0x6c0/0xb40 [ 914.116072][T17678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.116100][T17678] ? apparmor_socket_sendmsg+0x98/0x360 [ 914.116127][T17678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.116151][T17678] sock_sendmsg_nosec+0x14e/0x190 [ 914.116175][T17678] ____sys_sendmsg+0x54e/0x850 [ 914.116206][T17678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.116241][T17678] ? import_iovec+0x73/0xa0 [ 914.116271][T17678] ___sys_sendmsg+0x2a5/0x360 [ 914.116295][T17678] ? __lock_acquire+0x747/0x2de0 [ 914.116320][T17678] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.116381][T17678] ? __fget_files+0x2a/0x420 [ 914.116407][T17678] ? __fget_files+0x3a2/0x420 [ 914.116444][T17678] __x64_sys_sendmsg+0x1b1/0x290 [ 914.116472][T17678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.116519][T17678] do_syscall_64+0x166/0x520 [ 914.116544][T17678] ? trace_irq_disable+0x3b/0x140 [ 914.116562][T17678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.116582][T17678] ? clear_bhb_loop+0x70/0xc0 [ 914.116605][T17678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.116623][T17678] RIP: 0033:0x7f7ec4d9f559 [ 914.116640][T17678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.116655][T17678] RSP: 002b:00007f7ec5c06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.116675][T17678] RAX: ffffffffffffffda RBX: 00007f7ec5025fa0 RCX: 00007f7ec4d9f559 [ 914.116688][T17678] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 914.116700][T17678] RBP: 00007f7ec5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 914.116712][T17678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.116723][T17678] R13: 00007f7ec5026038 R14: 00007f7ec5025fa0 R15: 00007ffe56c965c8 [ 914.116756][T17678] [ 915.310791][T17736] FAULT_INJECTION: forcing a failure. [ 915.310791][T17736] name failslab, interval 1, probability 0, space 0, times 0 [ 915.310822][T17736] CPU: 0 UID: 0 PID: 17736 Comm: syz.7.2548 Not tainted syzkaller #0 PREEMPT(full) [ 915.310842][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 915.310853][T17736] Call Trace: [ 915.310860][T17736] [ 915.310868][T17736] dump_stack_lvl+0xe8/0x150 [ 915.310899][T17736] should_fail_ex+0x410/0x560 [ 915.310930][T17736] should_failslab+0xa8/0x100 [ 915.310953][T17736] ? skb_clone+0x212/0x3a0 [ 915.310978][T17736] kmem_cache_alloc_noprof+0xa1/0x600 [ 915.310999][T17736] ? skb_clone+0x212/0x3a0 [ 915.311030][T17736] skb_clone+0x212/0x3a0 [ 915.311058][T17736] __netlink_deliver_tap+0x355/0x6e0 [ 915.311090][T17736] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.311110][T17736] netlink_deliver_tap+0x19c/0x1b0 [ 915.311129][T17736] netlink_unicast+0x8c1/0xa80 [ 915.311173][T17736] netlink_sendmsg+0x813/0xb40 [ 915.311201][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.311229][T17736] ? apparmor_socket_sendmsg+0x98/0x360 [ 915.311258][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.311277][T17736] sock_sendmsg_nosec+0x14e/0x190 [ 915.311299][T17736] ____sys_sendmsg+0x54e/0x850 [ 915.311331][T17736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.311366][T17736] ? import_iovec+0x73/0xa0 [ 915.311397][T17736] ___sys_sendmsg+0x2a5/0x360 [ 915.311420][T17736] ? __lock_acquire+0x747/0x2de0 [ 915.311444][T17736] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.311502][T17736] ? __fget_files+0x2a/0x420 [ 915.311527][T17736] ? __fget_files+0x3a2/0x420 [ 915.311562][T17736] __x64_sys_sendmsg+0x1b1/0x290 [ 915.311591][T17736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.311647][T17736] do_syscall_64+0x166/0x520 [ 915.311671][T17736] ? trace_irq_disable+0x3b/0x140 [ 915.311690][T17736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.311709][T17736] ? clear_bhb_loop+0x70/0xc0 [ 915.311732][T17736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.311751][T17736] RIP: 0033:0x7f057739f559 [ 915.311768][T17736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.311783][T17736] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.311804][T17736] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 915.311817][T17736] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 915.311828][T17736] RBP: 00007f0578321090 R08: 0000000000000000 R09: 0000000000000000 [ 915.311840][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.311851][T17736] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 915.311883][T17736] [ 915.314268][T17736] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2548'. [ 916.050101][T17750] ip6gretap2: entered allmulticast mode [ 916.123541][T17750] batman_adv: batadv0: Adding interface: ip6gretap2 [ 916.123559][T17750] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.123587][T17750] batman_adv: batadv0: Interface activated: ip6gretap2 [ 916.299984][T17761] netlink: 'syz.8.2557': attribute type 1 has an invalid length. [ 916.428209][T17763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2557'. [ 916.508292][T17761] bond13: entered promiscuous mode [ 916.515409][T17761] 8021q: adding VLAN 0 to HW filter on device bond13 [ 916.530742][T17763] bond13: entered allmulticast mode [ 916.656532][T17761] bond13: (slave bridge4): making interface the new active one [ 916.656556][T17761] bridge4: entered promiscuous mode [ 916.681851][T17761] bridge4: entered allmulticast mode [ 916.716459][T17761] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 916.879243][T17777] syzkaller0: entered promiscuous mode [ 916.879265][T17777] syzkaller0: entered allmulticast mode [ 917.196406][T17777] tipc: Enabled bearer , priority 0 [ 917.215799][T17776] tipc: Resetting bearer [ 917.413802][T17776] tipc: Disabling bearer [ 918.231714][T17867] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.360159][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 918.623231][T17881] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2571'. [ 918.643756][T17882] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2571'. [ 918.735450][T17886] netlink: 'syz.5.2572': attribute type 1 has an invalid length. [ 918.804144][T17879] GUP no longer grows the stack in syz.7.2570 (17879): 200000003000-20000000a000 (200000001000) [ 918.804179][T17879] CPU: 0 UID: 0 PID: 17879 Comm: syz.7.2570 Not tainted syzkaller #0 PREEMPT(full) [ 918.804200][T17879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 918.804212][T17879] Call Trace: [ 918.804220][T17879] [ 918.804228][T17879] dump_stack_lvl+0xe8/0x150 [ 918.804263][T17879] __get_user_pages+0x23b6/0x2750 [ 918.804330][T17879] ? lock_acquire+0x115/0x350 [ 918.804368][T17879] ? __gup_longterm_locked+0xc3b/0x15c0 [ 918.804411][T17879] __gup_longterm_locked+0xd52/0x15c0 [ 918.804441][T17879] ? lock_acquire+0x115/0x350 [ 918.804478][T17879] gup_fast_fallback+0x1d92/0x20e0 [ 918.804543][T17879] ? __pfx_gup_fast_fallback+0x10/0x10 [ 918.804573][T17879] ? lock_acquire+0x115/0x350 [ 918.804591][T17879] ? is_valid_gup_args+0x11f/0x200 [ 918.804621][T17879] ? get_user_pages_fast+0x4d/0xb0 [ 918.804650][T17879] __iov_iter_get_pages_alloc+0x378/0xa40 [ 918.804686][T17879] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 918.804713][T17879] iov_iter_get_pages2+0x5e/0xa0 [ 918.804745][T17879] __se_sys_vmsplice+0x7b5/0x1660 [ 918.804787][T17879] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 918.804807][T17879] ? __pfx_futex_wait+0x10/0x10 [ 918.804910][T17879] do_syscall_64+0x166/0x520 [ 918.804937][T17879] ? trace_irq_disable+0x3b/0x140 [ 918.804957][T17879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.804977][T17879] ? clear_bhb_loop+0x70/0xc0 [ 918.805002][T17879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.805022][T17879] RIP: 0033:0x7f057739f559 [ 918.805040][T17879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.805056][T17879] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 918.805077][T17879] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 918.805091][T17879] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000009 [ 918.805103][T17879] RBP: 00007f0577436b20 R08: 0000000000000000 R09: 0000000000000000 [ 918.805116][T17879] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 918.805127][T17879] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 918.805161][T17879] [ 918.807696][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2570'. [ 919.087318][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2572'. [ 919.113940][T17891] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 919.373100][T17886] bond3: entered promiscuous mode [ 919.386929][T17886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 919.431428][T17892] bond3: entered allmulticast mode [ 919.477419][T17908] bond3: (slave bridge2): making interface the new active one [ 919.477443][T17908] bridge2: entered promiscuous mode [ 919.477603][T17908] bridge2: entered allmulticast mode [ 919.479163][T17908] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 920.221485][T17936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2581'. [ 920.221520][T17936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2581'. [ 920.367976][T17939] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2584'. [ 920.367999][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2584'. [ 920.368011][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2584'. [ 920.499236][T17946] netlink: 'syz.6.2587': attribute type 1 has an invalid length. [ 920.626453][T17946] bond12: entered promiscuous mode [ 920.635457][T17946] 8021q: adding VLAN 0 to HW filter on device bond12 [ 920.636433][T17948] bond12: entered allmulticast mode [ 920.638424][T17943] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 920.681423][T17944] syzkaller0: entered promiscuous mode [ 920.681573][T17944] syzkaller0: entered allmulticast mode [ 920.756914][T17946] bond12: (slave bridge10): making interface the new active one [ 920.759144][T17946] bridge10: entered promiscuous mode [ 920.760282][T17946] bridge10: entered allmulticast mode [ 920.789282][T17950] x_tables: duplicate underflow at hook 1 [ 920.799032][T17946] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 920.806734][T17944] tipc: Enabled bearer , priority 0 [ 920.901486][T17940] tipc: Resetting bearer [ 920.959129][T17940] tipc: Disabling bearer [ 921.926825][T17991] netlink: 'syz.9.2600': attribute type 1 has an invalid length. [ 922.067016][T17991] bond12: entered promiscuous mode [ 922.067448][T17991] 8021q: adding VLAN 0 to HW filter on device bond12 [ 922.118490][T17998] bond12: entered allmulticast mode [ 922.228444][T17991] bond12: (slave bridge8): making interface the new active one [ 922.228467][T17991] bridge8: entered promiscuous mode [ 922.228628][T17991] bridge8: entered allmulticast mode [ 922.253010][T17991] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 922.355056][T18015] FAULT_INJECTION: forcing a failure. [ 922.355056][T18015] name failslab, interval 1, probability 0, space 0, times 0 [ 922.355091][T18015] CPU: 0 UID: 0 PID: 18015 Comm: syz.9.2604 Not tainted syzkaller #0 PREEMPT(full) [ 922.355111][T18015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 922.355130][T18015] Call Trace: [ 922.355137][T18015] [ 922.355146][T18015] dump_stack_lvl+0xe8/0x150 [ 922.355178][T18015] should_fail_ex+0x410/0x560 [ 922.355211][T18015] should_failslab+0xa8/0x100 [ 922.355235][T18015] ? skb_clone+0x212/0x3a0 [ 922.355262][T18015] kmem_cache_alloc_noprof+0xa1/0x600 [ 922.355285][T18015] ? skb_clone+0x212/0x3a0 [ 922.355318][T18015] skb_clone+0x212/0x3a0 [ 922.355349][T18015] __netlink_deliver_tap+0x355/0x6e0 [ 922.355382][T18015] ? netlink_deliver_tap+0x2e/0x1b0 [ 922.355404][T18015] netlink_deliver_tap+0x19c/0x1b0 [ 922.355426][T18015] netlink_sendskb+0x68/0x140 [ 922.355456][T18015] netlink_rcv_skb+0x2a4/0x4a0 [ 922.355478][T18015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 922.355505][T18015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 922.355542][T18015] ? down_read+0x2be/0x330 [ 922.355574][T18015] genl_rcv+0x28/0x40 [ 922.355596][T18015] netlink_unicast+0x8ef/0xa80 [ 922.355642][T18015] netlink_sendmsg+0x813/0xb40 [ 922.355672][T18015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.355702][T18015] ? apparmor_socket_sendmsg+0x98/0x360 [ 922.355729][T18015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.355749][T18015] sock_sendmsg_nosec+0x14e/0x190 [ 922.355773][T18015] ____sys_sendmsg+0x54e/0x850 [ 922.355805][T18015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.355841][T18015] ? import_iovec+0x73/0xa0 [ 922.355873][T18015] ___sys_sendmsg+0x2a5/0x360 [ 922.355897][T18015] ? __lock_acquire+0x747/0x2de0 [ 922.355921][T18015] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.355986][T18015] ? __fget_files+0x2a/0x420 [ 922.356012][T18015] ? __fget_files+0x3a2/0x420 [ 922.356049][T18015] __x64_sys_sendmsg+0x1b1/0x290 [ 922.356081][T18015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 922.356137][T18015] do_syscall_64+0x166/0x520 [ 922.356161][T18015] ? trace_irq_disable+0x3b/0x140 [ 922.356180][T18015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.356204][T18015] ? clear_bhb_loop+0x70/0xc0 [ 922.356228][T18015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.356246][T18015] RIP: 0033:0x7fd7d8d9f559 [ 922.356264][T18015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.356279][T18015] RSP: 002b:00007fd7d9c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.356299][T18015] RAX: ffffffffffffffda RBX: 00007fd7d9025fa0 RCX: 00007fd7d8d9f559 [ 922.356313][T18015] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 922.356325][T18015] RBP: 00007fd7d9c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 922.356336][T18015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.356347][T18015] R13: 00007fd7d9026038 R14: 00007fd7d9025fa0 R15: 00007fff5bb09278 [ 922.356380][T18015] [ 922.970112][ T4935] Bluetooth: hci1: command 0x0406 tx timeout [ 923.081943][T18035] tipc: Invalid UDP bearer configuration [ 923.081987][T18035] tipc: Enabling of bearer rejected, failed to enable media [ 923.354930][T18045] netlink: 'syz.8.2611': attribute type 4 has an invalid length. [ 923.753025][T18050] batman_adv: batadv0: Adding interface: syzkaller0 [ 923.753044][T18050] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.758287][T18050] batman_adv: batadv0: Interface activated: syzkaller0 [ 923.774026][T18050] __nla_validate_parse: 8 callbacks suppressed [ 923.774041][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 924.069858][T18050] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 924.263561][T18048] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 924.449523][T18065] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2616'. [ 924.474902][T18048] batman_adv: batadv0: Removing interface: syzkaller0 [ 924.476617][T18068] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2614'. [ 924.519069][T18059] tc_dump_action: action bad kind [ 924.783473][T18072] netlink: 'syz.7.2618': attribute type 1 has an invalid length. [ 925.503021][T18105] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 925.531083][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 925.531104][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2630'. [ 925.540292][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2628'. [ 925.651651][T18105] 8021q: adding VLAN 0 to HW filter on device bond13 [ 925.977699][T18125] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 926.425399][T18138] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 926.599349][T18138] bond11 (unregistering): Released all slaves [ 926.699561][T18141] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2637'. [ 927.799246][T18171] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2650'. [ 928.652404][T18199] ip6t_hbh: Not strict - not implemented [ 928.927083][T18212] syzkaller0: entered promiscuous mode [ 928.927105][T18212] syzkaller0: entered allmulticast mode [ 929.030342][T18211] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2659'. [ 929.070663][T18211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2659'. [ 929.088451][T18220] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2663'. [ 930.219498][T18260] netlink: 'syz.5.2674': attribute type 1 has an invalid length. [ 930.545329][T18260] bond4: entered promiscuous mode [ 930.545746][T18260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 930.691153][T18260] bond4: (slave bridge3): making interface the new active one [ 930.691177][T18260] bridge3: entered promiscuous mode [ 930.692796][ T30] audit: type=1107 audit(1792583093.650:8): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 930.693260][T18260] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 931.164055][T18293] tc_dump_action: action bad kind [ 931.437932][T18308] netlink: 952 bytes leftover after parsing attributes in process `syz.9.2687'. [ 931.453554][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.485031][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2687'. [ 931.485062][T18308] netlink: 'syz.9.2687': attribute type 11 has an invalid length. [ 931.561879][T18312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2689'. [ 931.658402][T18314] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2690'. [ 931.681973][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2687'. [ 931.682004][T18308] netlink: 'syz.9.2687': attribute type 11 has an invalid length. [ 931.842525][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2693'. [ 931.842547][T18322] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2693'. [ 932.618891][T18337] bond11: Removing last arp target with arp_interval on [ 933.185045][T18353] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.552780][T18388] netlink: 'syz.8.2714': attribute type 1 has an invalid length. [ 933.773142][T18388] bond14: entered promiscuous mode [ 933.784427][T18388] 8021q: adding VLAN 0 to HW filter on device bond14 [ 933.787894][T18390] bond14: entered allmulticast mode [ 933.906629][T18388] bond14: (slave bridge5): making interface the new active one [ 933.906655][T18388] bridge5: entered promiscuous mode [ 933.911528][T18388] bridge5: entered allmulticast mode [ 933.918520][T18388] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 933.942105][T18401] openvswitch: netlink: Message has 8 unknown bytes. [ 934.290263][T18422] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 934.337459][T18420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.348093][T18425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 934.375347][T18420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.393532][T18420] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 934.394184][T18420] bridge0: left promiscuous mode [ 934.394532][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.397385][T18420] bond0 (unregistering): Released all slaves [ 934.758538][T18439] batadv_slave_0: entered promiscuous mode [ 934.800558][T18441] __nla_validate_parse: 7 callbacks suppressed [ 934.800577][T18441] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2730'. [ 934.846429][T18445] netlink: 'syz.8.2732': attribute type 62 has an invalid length. [ 935.177776][T18457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 935.280143][T18438] batadv_slave_0: left promiscuous mode [ 935.291011][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.299526][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.506050][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2739'. [ 935.609975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.760915][T18463] 8021q: adding VLAN 0 to HW filter on device bond12 [ 935.885687][T18479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.930113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.937948][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.233505][T18497] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº| [ 936.271053][T18500] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2748'. [ 936.436167][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2747'. [ 936.643390][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2749'. [ 936.730844][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2749'. [ 936.730867][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2749'. [ 936.793199][T18513] netlink: 'syz.8.2749': attribute type 4 has an invalid length. [ 936.793220][T18513] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2749'. [ 936.928777][T18488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 936.929314][T18489] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 936.957544][T18495] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 936.971724][T18513] .`: renamed from bond0 [ 937.093055][T18525] netlink: 'syz.7.2752': attribute type 1 has an invalid length. [ 937.597986][T18530] syzkaller1: entered promiscuous mode [ 937.598009][T18530] syzkaller1: entered allmulticast mode [ 937.626610][T18541] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2757'. [ 938.076531][T18558] xt_hashlimit: size too large, truncated to 1048576 [ 938.095816][T18561] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2763'. [ 938.147884][T18563] netlink: 'syz.9.2764': attribute type 1 has an invalid length. [ 938.359679][T18562] veth9: entered allmulticast mode [ 938.933960][T18583] netlink: 'syz.9.2767': attribute type 21 has an invalid length. [ 939.135811][T14395] net_ratelimit: 8 callbacks suppressed [ 939.135830][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.425113][T18589] ip_tables: iptables: counters copy to user failed while replacing table [ 939.629927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.692793][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.416453][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.649902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.790531][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.624177][ T7788] netdevsim netdevsim5 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 941.624210][ T7788] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.624245][ T7788] netdevsim netdevsim5 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 941.624268][ T7788] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.624301][ T7788] netdevsim netdevsim5 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 941.624322][ T7788] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.649875][T14395] netdevsim netdevsim5 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 941.649905][T14395] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.694198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.900352][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.938180][T18634] __nla_validate_parse: 2 callbacks suppressed [ 941.938198][T18634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2779'. [ 941.975975][T18634] veth0_macvtap: left promiscuous mode [ 942.130385][T18640] netlink: 140 bytes leftover after parsing attributes in process `syz.9.2781'. [ 942.181869][T18639] netlink: 'syz.7.2782': attribute type 2 has an invalid length. [ 942.185379][T18639] netlink: 'syz.7.2782': attribute type 1 has an invalid length. [ 942.331864][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.352731][T18639] 8021q: adding VLAN 0 to HW filter on device bond13 [ 942.443030][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2778'. [ 943.713343][ T5617] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 943.728624][ T5617] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 943.736084][ T5617] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 943.736110][ T5617] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 943.931985][T18688] x_tables: unsorted entry at hook 4 [ 943.984569][T18690] 8021q: VLANs not supported on ip_vti0 [ 944.299285][T18699] netlink: 'syz.6.2797': attribute type 1 has an invalid length. [ 944.426425][T18699] 8021q: adding VLAN 0 to HW filter on device bond13 [ 944.446468][T18703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.449497][T18703] bond13: (slave batadv0): making interface the new active one [ 944.466422][T18703] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 944.526535][T18712] net_ratelimit: 3 callbacks suppressed [ 944.526555][T18712] ip_tables: iptables: counters copy to user failed while replacing table [ 944.617456][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2799'. [ 944.726395][T18720] netlink: 'syz.5.2802': attribute type 1 has an invalid length. [ 945.260809][T18699] bond13 (unregistering): (slave batadv0): Releasing active interface [ 945.277567][T18699] bond13 (unregistering): Released all slaves [ 945.538186][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.563445][T18720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 945.627040][T18726] bond5: (slave veth9): Enslaving as an active interface with a down link [ 945.634172][T18729] syz_tun: entered allmulticast mode [ 945.649610][T18729] bond5: (slave syz_tun): making interface the new active one [ 945.658701][T18729] syz_tun: entered promiscuous mode [ 945.658982][T18729] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 945.659524][T18730] lo: left promiscuous mode [ 945.674873][T18730] tunl0: left promiscuous mode [ 945.675302][T18730] gre0: left promiscuous mode [ 945.675641][T18730] gretap0: left promiscuous mode [ 945.675961][T18730] erspan0: left promiscuous mode [ 945.678984][T18730] ip_vti0: left promiscuous mode [ 945.679366][T18730] ip6_vti0: left promiscuous mode [ 945.683198][T18730] sit0: left promiscuous mode [ 945.683560][T18730] ip6tnl0: left promiscuous mode [ 945.689945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.700036][T18730] ip6gre0: left promiscuous mode [ 945.700393][T18730] ip6gretap0: left promiscuous mode [ 945.702200][T18730] vcan0: left promiscuous mode [ 945.704407][T18730] team0: left promiscuous mode [ 945.704716][T18730] dummy0: left promiscuous mode [ 945.711927][T18730] nlmon0: left promiscuous mode [ 945.717575][T18730] veth1: left promiscuous mode [ 945.717993][T18730] wg0: left promiscuous mode [ 945.718365][T18730] wg1: left promiscuous mode [ 945.722454][T18730] wg2: left promiscuous mode [ 945.724073][T18730] veth0_to_bridge: left promiscuous mode [ 945.727317][T18730] veth1_to_bridge: left promiscuous mode [ 945.733180][T18730] bond_slave_0: left promiscuous mode [ 945.738198][T18730] veth1_to_bond: left promiscuous mode [ 945.738622][T18730] bond_slave_1: left promiscuous mode [ 945.747231][T18730] veth0_to_team: left promiscuous mode [ 945.747670][T18730] team_slave_0: left promiscuous mode [ 945.748664][T18730] veth1_to_team: left promiscuous mode [ 945.766889][T18730] team_slave_1: left promiscuous mode [ 945.767461][T18730] veth0_to_batadv: left promiscuous mode [ 945.770509][T18730] batadv_slave_0: left promiscuous mode [ 945.774785][T18730] veth1_to_batadv: left promiscuous mode [ 945.775177][T18730] batadv_slave_1: left promiscuous mode [ 945.776861][T18730] xfrm0: left promiscuous mode [ 945.786867][T18730] veth0_to_hsr: left promiscuous mode [ 945.788869][T18730] veth1_to_hsr: left promiscuous mode [ 945.796486][T18730] hsr0: left promiscuous mode [ 945.802552][T18730] veth1_virt_wifi: left promiscuous mode [ 945.807495][T18730] veth0_virt_wifi: left promiscuous mode [ 945.807930][T18730] virt_wifi0: left promiscuous mode [ 945.807946][T18730] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 945.927621][T18733] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 946.341610][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.546991][T18769] syzkaller0: entered promiscuous mode [ 946.547013][T18769] syzkaller0: entered allmulticast mode [ 946.728402][T18769] tipc: Enabled bearer , priority 0 [ 946.730066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.745725][T18767] tipc: Resetting bearer [ 946.811393][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.852881][T18767] tipc: Disabling bearer [ 947.224616][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'. [ 947.452010][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.473353][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.528018][T18804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.591232][T18805] syzkaller0: entered promiscuous mode [ 947.591256][T18805] syzkaller0: entered allmulticast mode [ 947.787557][T18813] veth11: entered allmulticast mode [ 948.083267][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2829'. [ 948.263462][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2830'. [ 948.263785][T18832] 8021q: VLANs not supported on vxcan1 [ 948.473016][T18835] syzkaller0: entered promiscuous mode [ 948.473039][T18835] syzkaller0: entered allmulticast mode [ 948.480027][T18835] netlink: 'syz.9.2832': attribute type 5 has an invalid length. [ 948.480590][T18835] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2832'. [ 948.480609][T18835] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2832'. [ 948.480622][T18835] netlink: 580 bytes leftover after parsing attributes in process `syz.9.2832'. [ 948.754174][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2837'. [ 948.964561][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.964753][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.966578][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.966763][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.966929][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.967091][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.967259][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.967418][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 948.972546][T18850] netlink: 'syz.9.2838': attribute type 4 has an invalid length. [ 949.656600][ T155] net_ratelimit: 3 callbacks suppressed [ 949.656620][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.711831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.012632][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.475049][T18804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 950.570536][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.731454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.773514][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.899199][T18880] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2845'. [ 951.146982][T18884] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 951.177468][T18884] syzkaller1: entered promiscuous mode [ 951.177488][T18884] syzkaller1: entered allmulticast mode [ 951.210192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.299643][T18887] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 951.299669][T18887] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 951.367631][T18888] syzkaller1: entered promiscuous mode [ 951.367654][T18888] syzkaller1: entered allmulticast mode [ 951.559682][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2852'. [ 951.597871][T18906] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2851'. [ 951.630761][T18898] bond0: entered promiscuous mode [ 951.631228][T18898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.632057][T18906] bond0: entered allmulticast mode [ 951.692981][T18898] bond0: (slave bridge9): making interface the new active one [ 951.693004][T18898] bridge9: entered promiscuous mode [ 951.693171][T18898] bridge9: entered allmulticast mode [ 951.699011][T18898] bond0: (slave bridge9): Enslaving as an active interface with an up link [ 951.770002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.790613][T18909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 952.396612][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2859'. [ 952.626415][T18933] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2861'. [ 952.626439][T18933] tc_dump_action: action bad kind [ 954.064735][T18971] atomic_op ffff888052f081e0 conn xmit_atomic 0000000000000000 [ 954.132997][T18965] syzkaller1: entered promiscuous mode [ 954.133018][T18965] syzkaller1: entered allmulticast mode [ 954.662280][T18984] ip6gretap0: entered promiscuous mode [ 954.664524][T18984] ip6gretap0: left promiscuous mode [ 954.749899][ C0] net_ratelimit: 8 callbacks suppressed [ 954.749920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.780814][T18985] ip6gretap0: entered promiscuous mode [ 954.785688][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2877'. [ 954.786029][T18985] ip6gretap0: left promiscuous mode [ 954.995877][T18998] validate_nla: 26 callbacks suppressed [ 954.995897][T18998] netlink: 'syz.7.2879': attribute type 1 has an invalid length. [ 955.003280][T18989] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2876'. [ 955.051818][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.084134][T19000] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2879'. [ 955.123413][T18998] bond14: entered promiscuous mode [ 955.123868][T18998] 8021q: adding VLAN 0 to HW filter on device bond14 [ 955.140298][T19000] bond14: entered allmulticast mode [ 955.151686][T19004] netlink: 'syz.8.2881': attribute type 1 has an invalid length. [ 955.216354][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.242826][T19007] ip_tables: iptables: counters copy to user failed while replacing table [ 955.275259][T18998] bond14: (slave bridge7): making interface the new active one [ 955.275281][T18998] bridge7: entered promiscuous mode [ 955.275460][T18998] bridge7: entered allmulticast mode [ 955.309240][T18998] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 955.412618][T19007] syzkaller1: entered promiscuous mode [ 955.412803][T19007] syzkaller1: entered allmulticast mode [ 955.445419][T19004] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 955.448821][T19004] ip_tables: iptables: counters copy to user failed while replacing table [ 955.471473][T19022] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 955.479823][T19013] netlink: zone id is out of range [ 955.479834][T19013] netlink: zone id is out of range [ 955.479840][T19013] netlink: zone id is out of range [ 955.626363][T19011] syzkaller0: entered promiscuous mode [ 955.626517][T19011] syzkaller0: entered allmulticast mode [ 955.717946][T19011] ip6t_srh: unknown srh invflags 4000 [ 956.103029][T19038] netlink: 'syz.8.2889': attribute type 3 has an invalid length. [ 956.594398][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2890'. [ 956.666651][T19052] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.790852][T14393] syz_tun: left promiscuous mode [ 956.926829][T19059] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2891'. [ 957.374473][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2894'. [ 957.824333][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2895'. [ 957.826473][ T5617] block nbd8: Receive control failed (result -107) [ 958.219635][T19078] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2898'. [ 959.802441][ C0] net_ratelimit: 12 callbacks suppressed [ 959.802464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.854191][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.259978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.809915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.894171][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.194679][T14402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.448057][T19076] gretap1: entered promiscuous mode [ 961.544112][T14402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.562916][T19091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 961.562940][T19091] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 961.694629][T19091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 961.694654][T19091] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 961.754747][T19091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 961.754771][T19091] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 961.798775][T19091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 961.798799][T19091] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 961.849885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.173604][T19125] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2907'. [ 962.300928][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.404673][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2908'. [ 963.012740][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'. [ 963.040357][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2916'. [ 963.234073][T19168] FAULT_INJECTION: forcing a failure. [ 963.234073][T19168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.234103][T19168] CPU: 0 UID: 0 PID: 19168 Comm: syz.5.2919 Not tainted syzkaller #0 PREEMPT(full) [ 963.234122][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 963.234132][T19168] Call Trace: [ 963.234139][T19168] [ 963.234147][T19168] dump_stack_lvl+0xe8/0x150 [ 963.234178][T19168] should_fail_ex+0x410/0x560 [ 963.234205][T19168] _copy_to_user+0x31/0xb0 [ 963.234232][T19168] simple_read_from_buffer+0xe1/0x170 [ 963.234265][T19168] proc_fail_nth_read+0x1bb/0x230 [ 963.234284][T19168] ? common_file_perm+0x20e/0x2b0 [ 963.234309][T19168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.234332][T19168] ? rw_verify_area+0x24a/0x4c0 [ 963.234352][T19168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.234371][T19168] vfs_read+0x213/0xa80 [ 963.234394][T19168] ? __pfx___mutex_lock+0x10/0x10 [ 963.234422][T19168] ? __pfx_vfs_read+0x10/0x10 [ 963.234445][T19168] ? __fget_files+0x2a/0x420 [ 963.234476][T19168] ? __fget_files+0x3a2/0x420 [ 963.234501][T19168] ? __fget_files+0x2a/0x420 [ 963.234537][T19168] ksys_read+0x150/0x270 [ 963.234558][T19168] ? __pfx_ksys_read+0x10/0x10 [ 963.234597][T19168] do_syscall_64+0x166/0x520 [ 963.234621][T19168] ? trace_irq_disable+0x3b/0x140 [ 963.234640][T19168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.234661][T19168] ? clear_bhb_loop+0x70/0xc0 [ 963.234683][T19168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.234701][T19168] RIP: 0033:0x7f7ec4d5fd8e [ 963.234719][T19168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 963.234734][T19168] RSP: 002b:00007f7ec5c05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 963.234755][T19168] RAX: ffffffffffffffda RBX: 00007f7ec5c066c0 RCX: 00007f7ec4d5fd8e [ 963.234768][T19168] RDX: 000000000000000f RSI: 00007f7ec5c060a0 RDI: 0000000000000004 [ 963.234780][T19168] RBP: 00007f7ec5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 963.234791][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.234802][T19168] R13: 00007f7ec5026038 R14: 00007f7ec5025fa0 R15: 00007ffe56c965c8 [ 963.234834][T19168] [ 963.504267][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.506268][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2920'. [ 963.506289][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2920'. [ 963.613598][T19176] netlink: 'syz.6.2921': attribute type 1 has an invalid length. [ 963.799035][T19176] 8021q: adding VLAN 0 to HW filter on device bond13 [ 963.862543][T19194] netlink: 'syz.6.2921': attribute type 1 has an invalid length. [ 963.933185][T19174] bond13: (slave veth11): Enslaving as an active interface with a down link [ 963.973148][T19170] bond0: (slave dummy0): Releasing backup interface [ 964.014755][T19170] bond13: (slave dummy0): making interface the new active one [ 964.015400][T19170] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 964.191863][T19196] bond13: (slave veth13): Enslaving as an active interface with a down link [ 964.236907][T14402] bond13: (slave dummy0): link status definitely down, disabling slave [ 964.279090][T14402] bond13: now running without any active interface! [ 964.684537][T19217] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2930'. [ 964.788548][T19212] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2929'. [ 964.829899][ C0] net_ratelimit: 3 callbacks suppressed [ 964.829920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.957379][T19229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2934'. [ 965.131935][T19229] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.162945][T19229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.274223][T19235] netlink: 'syz.7.2936': attribute type 2 has an invalid length. [ 965.371722][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.374356][T19239] netlink: 'syz.7.2938': attribute type 1 has an invalid length. [ 965.412555][T19229] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 965.493419][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2938'. [ 965.493454][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2938'. [ 965.783552][T19239] bond15: entered promiscuous mode [ 965.785310][T19239] 8021q: adding VLAN 0 to HW filter on device bond15 [ 965.803709][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.849985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.939171][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.477160][T19277] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2949'. [ 966.893995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.904131][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.180331][T19305] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 967.292577][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.435882][T19346] netlink: 'syz.7.2973': attribute type 1 has an invalid length. [ 968.542521][T19348] __nla_validate_parse: 2 callbacks suppressed [ 968.542540][T19348] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2973'. [ 968.621804][T19346] bond16: entered promiscuous mode [ 968.638833][T19346] 8021q: adding VLAN 0 to HW filter on device bond16 [ 968.639497][T19348] bond16: entered allmulticast mode [ 968.814544][T19346] bond16: (slave bridge8): making interface the new active one [ 968.814570][T19346] bridge8: entered promiscuous mode [ 968.814791][T19346] bridge8: entered allmulticast mode [ 968.837938][T19346] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 969.031603][T19329] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2968'. [ 969.271619][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2975'. [ 969.271663][T19358] netlink: 'syz.7.2975': attribute type 10 has an invalid length. [ 969.271679][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2975'. [ 969.312978][T19358] geneve3: entered promiscuous mode [ 969.313002][T19358] geneve3: entered allmulticast mode [ 969.850322][ C0] net_ratelimit: 4 callbacks suppressed [ 969.850344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.857807][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.870029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.977260][T19379] ebt_among: dst integrity fail: 301 [ 970.032677][T19377] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 970.089010][T19388] netlink: 'syz.8.2986': attribute type 3 has an invalid length. [ 970.089032][T19388] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2986'. [ 970.242773][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.492885][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.700162][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 970.700181][T19417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2995'. [ 970.785622][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2994'. [ 970.892518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.179045][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2998'. [ 971.341463][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.770514][T19446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.770580][T19446] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.772864][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.798789][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3005'. [ 971.838155][T19456] netlink: 'syz.8.3007': attribute type 1 has an invalid length. [ 971.930012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.950946][T19462] netlink: 'syz.6.3008': attribute type 10 has an invalid length. [ 972.041103][T19456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.068916][T19462] bond13: (slave dummy0): Releasing active interface [ 973.215143][T19499] syzkaller0: entered promiscuous mode [ 973.215166][T19499] syzkaller0: entered allmulticast mode [ 973.284653][T19486] vlan2: entered allmulticast mode [ 973.284676][T19486] bridge9: entered allmulticast mode [ 973.462154][T19499] tipc: Enabled bearer , priority 0 [ 973.471660][T19491] tipc: Resetting bearer [ 973.575586][T19491] tipc: Disabling bearer [ 973.708940][T19518] hsr_slave_0: left promiscuous mode [ 973.728302][T19518] hsr_slave_1: left promiscuous mode [ 974.647377][T19554] netlink: 'syz.6.3029': attribute type 4 has an invalid length. [ 974.768072][T19558] __nla_validate_parse: 1 callbacks suppressed [ 974.768090][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3033'. [ 974.890371][T14397] net_ratelimit: 7 callbacks suppressed [ 974.890390][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.915408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.973142][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.488605][T19572] syzkaller0: entered promiscuous mode [ 975.488629][T19572] syzkaller0: entered allmulticast mode [ 975.557062][T19565] tipc: Enabled bearer , priority 0 [ 975.657468][T19592] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3034'. [ 975.721808][T19564] tipc: Resetting bearer [ 975.726216][T19594] netlink: 'syz.9.3036': attribute type 1 has an invalid length. [ 975.844339][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3036'. [ 975.862695][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.883242][T19564] tipc: Disabling bearer [ 975.940019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.096025][T19594] bond14: entered promiscuous mode [ 976.099589][T19594] 8021q: adding VLAN 0 to HW filter on device bond14 [ 976.113548][T19603] bond14: entered allmulticast mode [ 976.236879][T19612] bond14: (slave bridge10): making interface the new active one [ 976.236903][T19612] bridge10: entered promiscuous mode [ 976.238023][T19612] bridge10: entered allmulticast mode [ 976.253519][T19612] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 976.259386][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.555517][T19628] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3044'. [ 976.886673][T19642] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3046'. [ 976.930584][T14402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.970160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.030573][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.144973][T19649] pim6reg: entered allmulticast mode [ 977.146989][T19651] pim6reg: left allmulticast mode [ 977.565596][T19673] netlink: 'syz.9.3053': attribute type 1 has an invalid length. [ 977.646755][T19677] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3053'. [ 977.655209][T19673] bond15: entered promiscuous mode [ 977.656101][T19673] 8021q: adding VLAN 0 to HW filter on device bond15 [ 977.660796][T19677] bond15: entered allmulticast mode [ 977.774028][T19673] bond15: (slave bridge11): making interface the new active one [ 977.774053][T19673] bridge11: entered promiscuous mode [ 977.776681][T19673] bridge11: entered allmulticast mode [ 977.799083][T19673] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 978.039444][T19685] FAULT_INJECTION: forcing a failure. [ 978.039444][T19685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.039475][T19685] CPU: 0 UID: 0 PID: 19685 Comm: syz.7.3059 Not tainted syzkaller #0 PREEMPT(full) [ 978.039503][T19685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 978.039514][T19685] Call Trace: [ 978.039521][T19685] [ 978.039529][T19685] dump_stack_lvl+0xe8/0x150 [ 978.039561][T19685] should_fail_ex+0x410/0x560 [ 978.039592][T19685] _copy_to_user+0x31/0xb0 [ 978.039622][T19685] simple_read_from_buffer+0xe1/0x170 [ 978.039656][T19685] proc_fail_nth_read+0x1bb/0x230 [ 978.039677][T19685] ? common_file_perm+0x20e/0x2b0 [ 978.039706][T19685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 978.039732][T19685] ? rw_verify_area+0x24a/0x4c0 [ 978.039751][T19685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 978.039771][T19685] vfs_read+0x213/0xa80 [ 978.039795][T19685] ? __pfx___mutex_lock+0x10/0x10 [ 978.039823][T19685] ? __pfx_vfs_read+0x10/0x10 [ 978.039843][T19685] ? __fget_files+0x2a/0x420 [ 978.039875][T19685] ? __fget_files+0x3a2/0x420 [ 978.039899][T19685] ? __fget_files+0x2a/0x420 [ 978.039935][T19685] ksys_read+0x150/0x270 [ 978.039957][T19685] ? __pfx_ksys_read+0x10/0x10 [ 978.039988][T19685] do_syscall_64+0x166/0x520 [ 978.040012][T19685] ? trace_irq_disable+0x3b/0x140 [ 978.040031][T19685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.040050][T19685] ? clear_bhb_loop+0x70/0xc0 [ 978.040073][T19685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.040091][T19685] RIP: 0033:0x7f057735fd8e [ 978.040108][T19685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 978.040123][T19685] RSP: 002b:00007f0578320fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 978.040143][T19685] RAX: ffffffffffffffda RBX: 00007f05783216c0 RCX: 00007f057735fd8e [ 978.040156][T19685] RDX: 000000000000000f RSI: 00007f05783210a0 RDI: 0000000000000004 [ 978.040167][T19685] RBP: 00007f0578321090 R08: 0000000000000000 R09: 0000000000000000 [ 978.040178][T19685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.040189][T19685] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 978.040221][T19685] [ 978.155235][T19691] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3058'. [ 978.162944][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.515209][T19706] syzkaller0: entered promiscuous mode [ 978.515231][T19706] syzkaller0: entered allmulticast mode [ 978.615050][T19706] tipc: Enabled bearer , priority 0 [ 978.617601][T19702] tipc: Resetting bearer [ 978.683196][T19702] tipc: Disabling bearer [ 978.898996][T19721] tipc: Enabled bearer , priority 0 [ 978.908847][T19721] syzkaller0: entered promiscuous mode [ 978.909776][T19721] syzkaller0: entered allmulticast mode [ 978.927690][T19724] netlink: 'syz.6.3068': attribute type 10 has an invalid length. [ 978.936658][T19724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 979.046501][T19721] tipc: Resetting bearer [ 979.168563][T19720] tipc: Resetting bearer [ 979.255472][T19720] tipc: Disabling bearer [ 979.415338][T19738] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3071'. [ 979.420216][T19738] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3071'. [ 979.951143][ C0] net_ratelimit: 6 callbacks suppressed [ 979.951166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.093017][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.362807][T14406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.534435][T19786] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 980.691777][T19795] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3083'. [ 980.691926][T19795] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3083'. [ 980.735047][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.969887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.435046][T19818] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 981.524702][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.951525][T19841] xt_NETMAP: bad rangesize 37. [ 982.012379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.029837][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.446254][T19858] 8021q: VLANs not supported on wg2 [ 982.554944][T19862] syzkaller0: entered promiscuous mode [ 982.554967][T19862] syzkaller0: entered allmulticast mode [ 982.579031][T19862] tipc: Enabled bearer , priority 0 [ 982.601930][T19861] ip_tables: iptables: counters copy to user failed while replacing table [ 982.715795][T19870] tipc: Resetting bearer [ 983.455794][T19860] tipc: Resetting bearer [ 983.610431][T19860] tipc: Disabling bearer [ 984.990214][ C0] net_ratelimit: 4 callbacks suppressed [ 984.990235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.144397][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3123'. [ 985.387777][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.388226][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.388598][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.388958][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.433028][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.433449][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.433844][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 985.983835][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.009882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.138446][T19970] __nla_validate_parse: 29 callbacks suppressed [ 986.138468][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3132'. [ 986.269663][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3132'. [ 986.386363][T19970] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3132'. [ 986.494775][T19981] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3134'. [ 987.051286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.080714][T19990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.100359][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.138755][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.138977][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.139249][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.139453][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.139647][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.180200][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.212910][T19992] erspan2: entered allmulticast mode [ 987.359487][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.359716][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.360646][T19995] sch_fq: defrate 4294967293 ignored. [ 987.384666][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.384899][T19991] netlink: 'syz.9.3137': attribute type 1 has an invalid length. [ 987.386712][T20002] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 987.452699][T19992] erspan2: entered allmulticast mode [ 987.676975][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3143'. [ 987.701000][T19992] erspan2: entered allmulticast mode [ 987.770655][T14402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.783747][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.866497][T20024] syzkaller0: entered promiscuous mode [ 987.866677][T20024] syzkaller0: entered allmulticast mode [ 988.052256][T20018] syzkaller0: entered promiscuous mode [ 988.052439][T20018] syzkaller0: entered allmulticast mode [ 988.076332][T20019] tipc: Enabled bearer , priority 0 [ 988.163258][T20024] tipc: Resetting bearer [ 988.177354][T20014] tipc: Resetting bearer [ 988.261292][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.269342][T20014] tipc: Disabling bearer [ 988.413902][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.539208][T20037] tipc: Enabled bearer , priority 0 [ 988.562354][T20016] tipc: Resetting bearer [ 988.658691][T20016] tipc: Disabling bearer [ 988.903068][T20055] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3150'. [ 989.795185][T20080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3158'. [ 989.894327][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3162'. [ 989.899585][T20081] bond15: option mode: invalid value (7) [ 989.903504][T20091] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3159'. [ 989.915005][T20081] bond15 (unregistering): Released all slaves [ 990.029895][ C0] net_ratelimit: 3 callbacks suppressed [ 990.029915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.427318][T20085] bond17: entered promiscuous mode [ 990.427954][T20085] 8021q: adding VLAN 0 to HW filter on device bond17 [ 990.428720][T20089] bond17: entered allmulticast mode [ 990.507240][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3164'. [ 990.536075][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.625079][T20102] bond17: (slave bridge10): making interface the new active one [ 990.625103][T20102] bridge10: entered promiscuous mode [ 990.625268][T20102] bridge10: entered allmulticast mode [ 990.665693][T20102] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 991.049919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.275744][T20135] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.323106][T20135] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 991.384800][T20135] openvswitch: netlink: EtherType 300 is less than min 600 [ 991.632108][T14402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.775437][T20146] ip_tables: iptables: counters copy to user failed while replacing table [ 991.797812][T20144] __nla_validate_parse: 3 callbacks suppressed [ 991.797830][T20144] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3172'. [ 992.035425][T20150] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3175'. [ 992.035453][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3175'. [ 992.479756][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3179'. [ 992.770081][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.892569][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.249412][T20181] ip6gre1: entered promiscuous mode [ 993.310569][T20188] bond5: (slave syz_tun): Releasing active interface [ 993.356121][T20188] team0: Port device vlan0 removed [ 993.390334][T20188] bond3: (slave bridge2): Releasing backup interface [ 993.390359][T20188] bridge2: left promiscuous mode [ 993.390497][T20188] bridge2: left allmulticast mode [ 993.397904][T20188] bond4: (slave bridge3): Releasing backup interface [ 993.397925][T20188] bridge3: left promiscuous mode [ 993.442451][T20188] bond5: (slave veth9): Releasing active interface [ 993.442473][T20188] bond5: (slave veth9): the permanent HWaddr of slave - 42:61:08:1c:22:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 993.457743][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.553594][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.635028][T14406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.693410][T20202] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3194'. [ 993.746881][T20203] validate_nla: 22 callbacks suppressed [ 993.746901][T20203] netlink: 'syz.8.3194': attribute type 1 has an invalid length. [ 993.913002][T20206] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3194'. [ 993.932114][T20188] bond5: (slave bridge4): Releasing active interface [ 993.933722][T20206] netlink: 'syz.8.3194': attribute type 1 has an invalid length. [ 994.068291][T20198] bridge14: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 994.185414][T20215] x_tables: duplicate underflow at hook 2 [ 994.466405][T20229] netlink: 'syz.8.3200': attribute type 1 has an invalid length. [ 994.501698][T20229] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3200'. [ 994.547225][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3202'. [ 994.570515][T20230] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3202'. [ 994.837919][T20238] netlink: 'syz.5.3205': attribute type 1 has an invalid length. [ 994.837941][T20238] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3205'. [ 995.069886][ C0] net_ratelimit: 4 callbacks suppressed [ 995.069907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.151023][T20244] ipvlan2: entered allmulticast mode [ 995.151047][T20244] virt_wifi0: entered allmulticast mode [ 995.165687][T20244] batman_adv: batadv0: Adding interface: ipvlan2 [ 995.165703][T20244] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.165731][T20244] batman_adv: batadv0: Interface activated: ipvlan2 [ 996.090868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.116099][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.133592][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.211054][T20270] syzkaller1: entered promiscuous mode [ 996.211076][T20270] syzkaller1: entered allmulticast mode [ 996.862458][T20313] __nla_validate_parse: 6 callbacks suppressed [ 996.862479][T20313] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3222'. [ 997.129999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.262086][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.414908][T20324] x_tables: duplicate underflow at hook 3 [ 997.455039][T20320] ovs0: entered promiscuous mode [ 997.711136][T20330] netlink: 'syz.5.3228': attribute type 10 has an invalid length. [ 997.711159][T20330] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3228'. [ 998.113762][T20336] netlink: 'syz.5.3232': attribute type 11 has an invalid length. [ 998.232603][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3232'. [ 998.282140][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3233'. [ 998.356309][T20344] bridge11: entered promiscuous mode [ 998.356333][T20344] bridge11: entered allmulticast mode [ 998.360719][T14402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.602673][T20345] hsr_slave_1 (unregistering): left promiscuous mode [ 998.654115][T14406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.654958][T14406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.975026][T20378] syzkaller0: entered promiscuous mode [ 998.975210][T20378] syzkaller0: entered allmulticast mode [ 999.252595][T20378] tipc: Enabled bearer , priority 0 [ 999.286473][T20376] tipc: Resetting bearer [ 999.299522][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.574359][T20376] tipc: Disabling bearer [ 999.595765][T20400] netlink: 'syz.8.3243': attribute type 1 has an invalid length. [ 999.657238][T20405] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3243'. [ 999.693811][T20400] bond15: entered promiscuous mode [ 999.694327][T20400] 8021q: adding VLAN 0 to HW filter on device bond15 [ 999.712932][T20405] bond15: entered allmulticast mode [ 999.788168][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3247'. [ 999.810566][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3247'. [ 1000.071641][T20400] bond15: (slave bridge7): making interface the new active one [ 1000.071665][T20400] bridge7: entered promiscuous mode [ 1000.071856][T20400] bridge7: entered allmulticast mode [ 1000.093060][T20422] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3249'. [ 1000.110728][ C0] net_ratelimit: 2 callbacks suppressed [ 1000.110743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.132796][T20400] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 1000.527805][T20436] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3254'. [ 1000.527827][T20436] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3254'. [ 1000.620953][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.082723][T20450] openvswitch: netlink: Geneve option length err (len 283, max 255). [ 1001.129886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.720617][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.060979][T20479] netlink: 'syz.6.3270': attribute type 1 has an invalid length. [ 1002.170041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.482242][T20493] FAULT_INJECTION: forcing a failure. [ 1002.482242][T20493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.482274][T20493] CPU: 0 UID: 0 PID: 20493 Comm: syz.7.3275 Not tainted syzkaller #0 PREEMPT(full) [ 1002.482295][T20493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1002.482307][T20493] Call Trace: [ 1002.482315][T20493] [ 1002.482324][T20493] dump_stack_lvl+0xe8/0x150 [ 1002.482356][T20493] should_fail_ex+0x410/0x560 [ 1002.482389][T20493] _copy_from_iter+0x1d3/0x1660 [ 1002.482415][T20493] ? __alloc_skb+0x27a/0x7a0 [ 1002.482440][T20493] ? __alloc_skb+0x27a/0x7a0 [ 1002.482464][T20493] ? __alloc_skb+0x27a/0x7a0 [ 1002.482486][T20493] ? __pfx__copy_from_iter+0x10/0x10 [ 1002.482508][T20493] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1002.482528][T20493] ? __alloc_skb+0x27a/0x7a0 [ 1002.482548][T20493] ? __alloc_skb+0x27a/0x7a0 [ 1002.482576][T20493] ? netlink_sendmsg+0x650/0xb40 [ 1002.482597][T20493] ? skb_put+0x112/0x210 [ 1002.482623][T20493] netlink_sendmsg+0x6c0/0xb40 [ 1002.482652][T20493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.482681][T20493] ? apparmor_socket_sendmsg+0x98/0x360 [ 1002.482709][T20493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.482733][T20493] sock_sendmsg_nosec+0x14e/0x190 [ 1002.482757][T20493] ____sys_sendmsg+0x54e/0x850 [ 1002.482790][T20493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.482828][T20493] ? import_iovec+0x73/0xa0 [ 1002.482859][T20493] ___sys_sendmsg+0x2a5/0x360 [ 1002.482884][T20493] ? __lock_acquire+0x747/0x2de0 [ 1002.482909][T20493] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.482972][T20493] ? __fget_files+0x2a/0x420 [ 1002.482998][T20493] ? __fget_files+0x3a2/0x420 [ 1002.483035][T20493] __x64_sys_sendmsg+0x1b1/0x290 [ 1002.483064][T20493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1002.483113][T20493] do_syscall_64+0x166/0x520 [ 1002.483138][T20493] ? trace_irq_disable+0x3b/0x140 [ 1002.483158][T20493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.483184][T20493] ? clear_bhb_loop+0x70/0xc0 [ 1002.483208][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.483226][T20493] RIP: 0033:0x7f057739f559 [ 1002.483244][T20493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.483260][T20493] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.483281][T20493] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 1002.483295][T20493] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1002.483307][T20493] RBP: 00007f0578321090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.483319][T20493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.483330][T20493] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 1002.483362][T20493] [ 1002.922606][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.981274][T20498] bond16: option packets_per_slave: invalid value (134217728) [ 1002.981298][T20498] bond16: option packets_per_slave: allowed values 0 - 65535 [ 1003.011069][T20498] bond16 (unregistering): Released all slaves [ 1003.130335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.235046][T20515] __nla_validate_parse: 1 callbacks suppressed [ 1003.235067][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3280'. [ 1003.690571][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.690971][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.759318][T20506] FAULT_INJECTION: forcing a failure. [ 1003.759318][T20506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.759350][T20506] CPU: 1 UID: 0 PID: 20506 Comm: syz.7.3278 Not tainted syzkaller #0 PREEMPT(full) [ 1003.759369][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1003.759380][T20506] Call Trace: [ 1003.759387][T20506] [ 1003.759395][T20506] dump_stack_lvl+0xe8/0x150 [ 1003.759428][T20506] should_fail_ex+0x410/0x560 [ 1003.759457][T20506] _copy_to_user+0x31/0xb0 [ 1003.759483][T20506] bpf_test_finish+0x1cf/0x690 [ 1003.759511][T20506] ? __pfx_bpf_test_finish+0x10/0x10 [ 1003.759539][T20506] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 1003.759574][T20506] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1003.759601][T20506] ? __fget_files+0x2a/0x420 [ 1003.759631][T20506] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1003.759652][T20506] bpf_prog_test_run+0x2c5/0x340 [ 1003.759681][T20506] __sys_bpf+0xa22/0xd90 [ 1003.759717][T20506] ? __pfx___sys_bpf+0x10/0x10 [ 1003.759747][T20506] ? __fget_files+0x2a/0x420 [ 1003.759788][T20506] ? ksys_write+0x242/0x270 [ 1003.759810][T20506] ? __pfx_ksys_write+0x10/0x10 [ 1003.759834][T20506] __x64_sys_bpf+0xba/0xd0 [ 1003.759857][T20506] do_syscall_64+0x166/0x520 [ 1003.759882][T20506] ? trace_irq_disable+0x3b/0x140 [ 1003.759901][T20506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.759921][T20506] ? clear_bhb_loop+0x70/0xc0 [ 1003.759945][T20506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.759963][T20506] RIP: 0033:0x7f057739f559 [ 1003.759982][T20506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.759997][T20506] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1003.760017][T20506] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 1003.760031][T20506] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1003.760043][T20506] RBP: 00007f0578321090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.760054][T20506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.760064][T20506] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 1003.760101][T20506] [ 1004.031519][T20508] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.3279'. [ 1004.194434][T20522] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.3279'. [ 1004.508437][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3287'. [ 1004.508461][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3287'. [ 1004.640147][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3290'. [ 1004.640175][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3290'. [ 1004.640244][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3290'. [ 1004.709992][T20561] netlink: 'syz.7.3288': attribute type 1 has an invalid length. [ 1005.633766][T20589] net_ratelimit: 2 callbacks suppressed [ 1005.633785][T20589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1006.712326][T20561] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 1006.758899][T20577] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-tlb(5) [ 1006.930187][ T7788] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.930220][ T7788] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1006.939379][T14393] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.939411][T14393] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1006.939446][T14393] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.939469][T14393] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1006.939500][T14393] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.939523][T14393] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1007.172832][T20608] netlink: 'syz.6.3296': attribute type 8 has an invalid length. [ 1008.237170][T20649] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3300'. [ 1008.358967][T20649] bond11 (unregistering): (slave lo): Releasing backup interface [ 1008.372489][T20649] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1008.868735][T20649] bond11 (unregistering): Released all slaves [ 1008.897991][T20683] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3308'. [ 1008.926674][T20683] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3308'. [ 1008.980067][T20653] netlink: 3568 bytes leftover after parsing attributes in process `syz.5.3302'. [ 1009.426221][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3310'. [ 1009.565974][T20697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3311'. [ 1009.786282][T20701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1009.815182][T14051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.375002][T20729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.736305][T14051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.937426][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1010.937460][T20753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1011.029938][ T8242] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.029982][ T8242] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.030015][ T8242] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.047518][T20767] netlink: 'syz.8.3324': attribute type 1 has an invalid length. [ 1011.089655][T20767] bond11: entered promiscuous mode [ 1011.090322][T20767] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1011.104802][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3324'. [ 1011.104875][T20767] bond11: entered allmulticast mode [ 1011.119608][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1011.119634][T20758] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1011.161079][T20767] bond11: (slave bridge8): making interface the new active one [ 1011.161103][T20767] bridge8: entered promiscuous mode [ 1011.161270][T20767] bridge8: entered allmulticast mode [ 1011.163072][T20767] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 1011.781703][T20792] bond16: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1011.898724][T20795] xt_l2tp: v2 tid > 0xffff: 4294901760 [ 1011.917081][T20792] bond16 (unregistering): Released all slaves [ 1012.376592][T20816] IPVS: Unknown mcast interface: bond_slave_0 [ 1012.832604][T20836] bond18: entered promiscuous mode [ 1012.837024][T20836] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1012.937645][T20847] ipvlan2: entered promiscuous mode [ 1012.951147][T20847] team0: Device ipvlan2 failed to register rx_handler [ 1013.473760][T20871] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.032312][T20892] rxe_eth0 speed is unknown, defaulting to 1000 [ 1014.165816][T20895] __nla_validate_parse: 6 callbacks suppressed [ 1014.165835][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1014.167788][T20895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1014.978184][T20909] can: request_module (can-proto-4) failed. [ 1015.125628][T20900] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 57951 - 0 [ 1015.233362][T20892] lo speed is unknown, defaulting to 1000 [ 1015.490594][T20900] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 57951 - 0 [ 1015.766911][T20900] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 57951 - 0 [ 1015.845839][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3369'. [ 1016.046808][T20900] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 57951 - 0 [ 1016.240892][T20943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1016.319527][T20948] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1016.524511][T20955] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3375'. [ 1016.915810][T20972] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3378'. [ 1017.039812][T14397] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 57951 - 0 [ 1017.652494][T20979] IPVS: stopping backup sync thread 20948 ... [ 1017.796899][T20978] sctp: [Deprecated]: syz.6.3379 (pid 20978) Use of int in max_burst socket option. [ 1017.796899][T20978] Use struct sctp_assoc_value instead [ 1018.019888][T14393] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 57951 - 0 [ 1018.021216][T14393] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 57951 - 0 [ 1018.030334][T14397] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 57951 - 0 [ 1018.369678][T21011] netlink: 'syz.8.3387': attribute type 2 has an invalid length. [ 1018.369702][T21011] netlink: 'syz.8.3387': attribute type 2 has an invalid length. [ 1018.854248][T21035] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1018.855568][T21035] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1018.922906][T21038] netlink: 'syz.8.3392': attribute type 11 has an invalid length. [ 1019.275077][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3394'. [ 1019.388600][T21049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.617241][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3397'. [ 1019.813553][T21046] bond14 (unregistering): Released all slaves [ 1020.041002][T21065] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3400'. [ 1020.041855][T21052] bond16: Invalid ad_actor_system MAC address. [ 1020.041874][T21052] bond16: option ad_actor_system: invalid value (7) [ 1020.099983][T21052] bond16 (unregistering): Released all slaves [ 1020.119207][T21065] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3400'. [ 1020.254211][T21067] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3402'. [ 1020.787900][T21089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1020.803096][T21089] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1021.065442][T21096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3406'. [ 1021.083636][T21096] Cannot find set identified by id 0 to match [ 1021.633945][T21114] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 1021.637614][T21108] batadv_slave_1: entered promiscuous mode [ 1021.638364][T21107] batadv_slave_1: left promiscuous mode [ 1021.804827][T21120] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3419'. [ 1022.291398][T21146] nbd296: detected capacity change from 0 to 63 [ 1022.343589][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3422'. [ 1022.606895][T21153] netlink: 'syz.5.3423': attribute type 1 has an invalid length. [ 1022.884533][T21159] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 1022.889034][T21160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1023.150713][ T5617] block nbd296: Receive control failed (result -104) [ 1023.558058][T21187] syzkaller0: entered promiscuous mode [ 1023.558081][T21187] syzkaller0: entered allmulticast mode [ 1023.603033][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3437'. [ 1023.666791][T21194] [ 1023.669161][T21194] ====================================================== [ 1023.676182][T21194] WARNING: possible circular locking dependency detected [ 1023.683206][T21194] syzkaller #0 Not tainted [ 1023.687612][T21194] ------------------------------------------------------ [ 1023.694625][T21194] syz.7.3435/21194 is trying to acquire lock: [ 1023.700687][T21194] ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 1023.709837][T21194] [ 1023.709837][T21194] but task is already holding lock: [ 1023.717195][T21194] ffff88807f7c4080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1023.726686][T21194] [ 1023.726686][T21194] which lock already depends on the new lock. [ 1023.726686][T21194] [ 1023.737086][T21194] [ 1023.737086][T21194] the existing dependency chain (in reverse order) is: [ 1023.746099][T21194] [ 1023.746099][T21194] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 1023.753671][T21194] __might_fault+0xcb/0x130 [ 1023.758712][T21194] _copy_from_user+0x28/0xb0 [ 1023.763832][T21194] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1023.770430][T21194] ip_generic_getfrag+0x149/0x2d0 [ 1023.776055][T21194] __ip6_append_data+0x3b26/0x40c0 [ 1023.781749][T21194] ip6_append_data+0x108/0x270 [ 1023.787081][T21194] rawv6_sendmsg+0x1298/0x18c0 [ 1023.792408][T21194] sock_sendmsg_nosec+0x10f/0x190 [ 1023.797952][T21194] ____sys_sendmsg+0x54e/0x850 [ 1023.803244][T21194] ___sys_sendmsg+0x2a5/0x360 [ 1023.808447][T21194] __x64_sys_sendmsg+0x1b1/0x290 [ 1023.813913][T21194] do_syscall_64+0x166/0x520 [ 1023.819032][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.825446][T21194] [ 1023.825446][T21194] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1023.833179][T21194] lock_sock_nested+0x41/0x100 [ 1023.838461][T21194] tls_sw_sendmsg+0x189/0x2c00 [ 1023.843819][T21194] sock_sendmsg_nosec+0x90/0x190 [ 1023.849268][T21194] sock_write_iter+0x2de/0x3e0 [ 1023.854543][T21194] do_iter_readv_writev+0x612/0x8c0 [ 1023.860254][T21194] vfs_writev+0x343/0x990 [ 1023.865105][T21194] do_writev+0x154/0x2e0 [ 1023.869859][T21194] do_syscall_64+0x166/0x520 [ 1023.874963][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.881372][T21194] [ 1023.881372][T21194] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 1023.888832][T21194] __mutex_lock+0x19d/0x1550 [ 1023.893952][T21194] tls_sw_sendmsg+0x14e/0x2c00 [ 1023.899235][T21194] sock_sendmsg_nosec+0x90/0x190 [ 1023.904688][T21194] sock_sendmsg+0x1ca/0x2d0 [ 1023.909719][T21194] __sock_xmit+0x245/0x4f0 [ 1023.914745][T21194] nbd_disconnect+0x3ad/0x560 [ 1023.919954][T21194] nbd_disconnect_and_put+0x32/0x280 [ 1023.925767][T21194] nbd_genl_disconnect+0x4af/0x590 [ 1023.931390][T21194] genl_family_rcv_msg_doit+0x233/0x340 [ 1023.937456][T21194] genl_rcv_msg+0x614/0x7a0 [ 1023.942485][T21194] netlink_rcv_skb+0x226/0x4a0 [ 1023.947768][T21194] genl_rcv+0x28/0x40 [ 1023.952262][T21194] netlink_unicast+0x8ef/0xa80 [ 1023.957551][T21194] netlink_sendmsg+0x813/0xb40 [ 1023.962831][T21194] sock_sendmsg_nosec+0x14e/0x190 [ 1023.968376][T21194] ____sys_sendmsg+0x54e/0x850 [ 1023.973668][T21194] ___sys_sendmsg+0x2a5/0x360 [ 1023.978871][T21194] __x64_sys_sendmsg+0x1b1/0x290 [ 1023.984337][T21194] do_syscall_64+0x166/0x520 [ 1023.989453][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.995869][T21194] [ 1023.995869][T21194] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1024.003522][T21194] __mutex_lock+0x19d/0x1550 [ 1024.008637][T21194] nbd_queue_rq+0x373/0xff0 [ 1024.013656][T21194] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1024.019804][T21194] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1024.026710][T21194] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1024.033216][T21194] blk_mq_run_work_fn+0x16c/0x300 [ 1024.038760][T21194] process_scheduled_works+0xc3d/0x1630 [ 1024.044836][T21194] worker_thread+0xa47/0xfb0 [ 1024.049953][T21194] kthread+0x38b/0x480 [ 1024.054538][T21194] ret_from_fork+0x514/0xb70 [ 1024.059684][T21194] ret_from_fork_asm+0x1a/0x30 [ 1024.064974][T21194] [ 1024.064974][T21194] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1024.072179][T21194] __mutex_lock+0x19d/0x1550 [ 1024.077285][T21194] nbd_queue_rq+0xc1/0xff0 [ 1024.082223][T21194] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1024.088295][T21194] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1024.095139][T21194] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1024.101630][T21194] blk_mq_run_work_fn+0x16c/0x300 [ 1024.107163][T21194] process_scheduled_works+0xc3d/0x1630 [ 1024.113232][T21194] worker_thread+0xa47/0xfb0 [ 1024.118335][T21194] kthread+0x38b/0x480 [ 1024.122918][T21194] ret_from_fork+0x514/0xb70 [ 1024.128043][T21194] ret_from_fork_asm+0x1a/0x30 [ 1024.133341][T21194] [ 1024.133341][T21194] -> #3 (set->srcu){.+.+}-{0:0}: [ 1024.140457][T21194] __synchronize_srcu+0xc9/0x2f0 [ 1024.145947][T21194] elevator_switch+0x1e8/0x7b0 [ 1024.151281][T21194] elevator_change+0x2fa/0x480 [ 1024.156569][T21194] elevator_set_default+0x375/0x440 [ 1024.162290][T21194] blk_register_queue+0x3f3/0x4e0 [ 1024.167913][T21194] __add_disk+0x6b8/0xdb0 [ 1024.172781][T21194] add_disk_fwnode+0x100/0x3a0 [ 1024.178063][T21194] nbd_dev_add+0x733/0xb60 [ 1024.183009][T21194] nbd_init+0x168/0x1f0 [ 1024.187809][T21194] do_one_initcall+0x250/0x870 [ 1024.193186][T21194] do_initcall_level+0x10a/0x1a0 [ 1024.198712][T21194] do_initcalls+0x59/0xa0 [ 1024.203560][T21194] kernel_init_freeable+0x29d/0x3e0 [ 1024.209288][T21194] kernel_init+0x22/0x1d0 [ 1024.214135][T21194] ret_from_fork+0x514/0xb70 [ 1024.219242][T21194] ret_from_fork_asm+0x1a/0x30 [ 1024.224538][T21194] [ 1024.224538][T21194] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1024.232361][T21194] __mutex_lock+0x19d/0x1550 [ 1024.237479][T21194] elevator_change+0x1af/0x480 [ 1024.242766][T21194] elevator_set_none+0xb5/0x140 [ 1024.248138][T21194] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1024.254459][T21194] nbd_start_device+0x189/0xb30 [ 1024.259834][T21194] nbd_genl_connect+0x167d/0x1cd0 [ 1024.265369][T21194] genl_family_rcv_msg_doit+0x233/0x340 [ 1024.271440][T21194] genl_rcv_msg+0x614/0x7a0 [ 1024.276476][T21194] netlink_rcv_skb+0x226/0x4a0 [ 1024.281762][T21194] genl_rcv+0x28/0x40 [ 1024.286261][T21194] netlink_unicast+0x8ef/0xa80 [ 1024.291557][T21194] netlink_sendmsg+0x813/0xb40 [ 1024.296840][T21194] sock_sendmsg_nosec+0x14e/0x190 [ 1024.302386][T21194] ____sys_sendmsg+0x54e/0x850 [ 1024.307677][T21194] ___sys_sendmsg+0x2a5/0x360 [ 1024.312883][T21194] __x64_sys_sendmsg+0x1b1/0x290 [ 1024.318360][T21194] do_syscall_64+0x166/0x520 [ 1024.323488][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.329906][T21194] [ 1024.329906][T21194] -> #1 (&q->q_usage_counter(io)#71){++++}-{0:0}: [ 1024.338509][T21194] blk_alloc_queue+0x544/0x690 [ 1024.343797][T21194] __blk_mq_alloc_disk+0x194/0x390 [ 1024.349427][T21194] nbd_dev_add+0x494/0xb60 [ 1024.354372][T21194] nbd_genl_connect+0x96c/0x1cd0 [ 1024.359841][T21194] genl_family_rcv_msg_doit+0x233/0x340 [ 1024.365918][T21194] genl_rcv_msg+0x614/0x7a0 [ 1024.370948][T21194] netlink_rcv_skb+0x226/0x4a0 [ 1024.376225][T21194] genl_rcv+0x28/0x40 [ 1024.380718][T21194] netlink_unicast+0x8ef/0xa80 [ 1024.386012][T21194] netlink_sendmsg+0x813/0xb40 [ 1024.391299][T21194] sock_sendmsg_nosec+0x14e/0x190 [ 1024.396838][T21194] ____sys_sendmsg+0x54e/0x850 [ 1024.402116][T21194] ___sys_sendmsg+0x2a5/0x360 [ 1024.407308][T21194] __x64_sys_sendmsg+0x1b1/0x290 [ 1024.412761][T21194] do_syscall_64+0x166/0x520 [ 1024.417876][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.424284][T21194] [ 1024.424284][T21194] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1024.431483][T21194] __lock_acquire+0x164c/0x2de0 [ 1024.436845][T21194] lock_acquire+0x115/0x350 [ 1024.441868][T21194] fs_reclaim_acquire+0x71/0x100 [ 1024.447332][T21194] prepare_alloc_pages+0x149/0x600 [ 1024.452962][T21194] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1024.459296][T21194] alloc_pages_mpol+0x21e/0x390 [ 1024.464659][T21194] alloc_pages_noprof+0xb1/0x2b0 [ 1024.470111][T21194] pte_alloc_one+0x22/0x370 [ 1024.475123][T21194] do_pte_missing+0x13c8/0x34b0 [ 1024.480484][T21194] handle_mm_fault+0x1a53/0x3750 [ 1024.485952][T21194] do_user_addr_fault+0x746/0x1340 [ 1024.491578][T21194] exc_page_fault+0x6a/0xc0 [ 1024.496592][T21194] asm_exc_page_fault+0x26/0x30 [ 1024.501952][T21194] rep_movs_alternative+0x30/0xa0 [ 1024.507500][T21194] _copy_from_user+0x7a/0xb0 [ 1024.512612][T21194] copy_from_sockptr+0x5e/0x90 [ 1024.518005][T21194] packet_setsockopt+0xa2a/0x1510 [ 1024.523558][T21194] do_sock_setsockopt+0x17c/0x1b0 [ 1024.529109][T21194] __x64_sys_setsockopt+0x13d/0x1b0 [ 1024.534834][T21194] do_syscall_64+0x166/0x520 [ 1024.539941][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.546356][T21194] [ 1024.546356][T21194] other info that might help us debug this: [ 1024.546356][T21194] [ 1024.556577][T21194] Chain exists of: [ 1024.556577][T21194] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1024.556577][T21194] [ 1024.569166][T21194] Possible unsafe locking scenario: [ 1024.569166][T21194] [ 1024.576612][T21194] CPU0 CPU1 [ 1024.581971][T21194] ---- ---- [ 1024.587324][T21194] rlock(&mm->mmap_lock); [ 1024.591739][T21194] lock(sk_lock-AF_INET6); [ 1024.598745][T21194] lock(&mm->mmap_lock); [ 1024.605581][T21194] lock(fs_reclaim); [ 1024.609559][T21194] [ 1024.609559][T21194] *** DEADLOCK *** [ 1024.609559][T21194] [ 1024.617689][T21194] locks held by syz.7.3435/21194: 2, last CPU#0: [ 1024.624003][T21194] #0: ffff88805d318260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x5a0/0x1510 [ 1024.634118][T21194] #1: ffff88807f7c4080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1024.644029][T21194] [ 1024.644029][T21194] stack backtrace: [ 1024.649909][T21194] CPU: 0 UID: 0 PID: 21194 Comm: syz.7.3435 Not tainted syzkaller #0 PREEMPT(full) [ 1024.659264][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1024.669310][T21194] Call Trace: [ 1024.672587][T21194] [ 1024.675508][T21194] dump_stack_lvl+0xe8/0x150 [ 1024.680097][T21194] print_circular_bug+0x2e2/0x300 [ 1024.685129][T21194] check_noncircular+0x12f/0x150 [ 1024.690061][T21194] __lock_acquire+0x164c/0x2de0 [ 1024.694911][T21194] lock_acquire+0x115/0x350 [ 1024.699404][T21194] ? prepare_alloc_pages+0x149/0x600 [ 1024.704692][T21194] ? __lock_acquire+0x747/0x2de0 [ 1024.709622][T21194] fs_reclaim_acquire+0x71/0x100 [ 1024.714557][T21194] ? prepare_alloc_pages+0x149/0x600 [ 1024.719830][T21194] prepare_alloc_pages+0x149/0x600 [ 1024.724931][T21194] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1024.730729][T21194] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1024.737052][T21194] ? __pfx_policy_nodemask+0x10/0x10 [ 1024.742350][T21194] alloc_pages_mpol+0x21e/0x390 [ 1024.747197][T21194] alloc_pages_noprof+0xb1/0x2b0 [ 1024.752131][T21194] pte_alloc_one+0x22/0x370 [ 1024.756638][T21194] do_pte_missing+0x13c8/0x34b0 [ 1024.761492][T21194] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1024.767725][T21194] handle_mm_fault+0x1a53/0x3750 [ 1024.772670][T21194] ? handle_mm_fault+0xf1/0x3750 [ 1024.777623][T21194] ? __pfx_handle_mm_fault+0x10/0x10 [ 1024.782917][T21194] ? __lock_acquire+0x747/0x2de0 [ 1024.787846][T21194] ? lock_mm_and_find_vma+0xa7/0x340 [ 1024.793126][T21194] do_user_addr_fault+0x746/0x1340 [ 1024.798246][T21194] exc_page_fault+0x6a/0xc0 [ 1024.802756][T21194] asm_exc_page_fault+0x26/0x30 [ 1024.807607][T21194] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1024.813404][T21194] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1024.833008][T21194] RSP: 0018:ffffc90003fdfc10 EFLAGS: 00050212 [ 1024.839077][T21194] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 1024.847054][T21194] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc90003fdfcf0 [ 1024.855023][T21194] RBP: 0000000000000000 R08: ffffc90003fdfcff R09: 1ffff920007fbf9f [ 1024.862979][T21194] R10: dffffc0000000000 R11: fffff520007fbfa0 R12: 0000000000000005 [ 1024.870939][T21194] R13: ffffc90003fdfcf0 R14: ffffc90003fdfcf0 R15: 00002000000000c0 [ 1024.878910][T21194] _copy_from_user+0x7a/0xb0 [ 1024.883517][T21194] copy_from_sockptr+0x5e/0x90 [ 1024.888283][T21194] packet_setsockopt+0xa2a/0x1510 [ 1024.893312][T21194] ? __pfx_packet_setsockopt+0x10/0x10 [ 1024.898775][T21194] ? aa_sk_perm+0x713/0x900 [ 1024.903284][T21194] ? __pfx_aa_sk_perm+0x10/0x10 [ 1024.908129][T21194] ? aa_sock_opt_perm+0x142/0x1e0 [ 1024.913160][T21194] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1024.918701][T21194] ? __pfx_packet_setsockopt+0x10/0x10 [ 1024.924163][T21194] do_sock_setsockopt+0x17c/0x1b0 [ 1024.929192][T21194] __x64_sys_setsockopt+0x13d/0x1b0 [ 1024.934397][T21194] do_syscall_64+0x166/0x520 [ 1024.938982][T21194] ? trace_irq_disable+0x3b/0x140 [ 1024.944001][T21194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.950055][T21194] ? clear_bhb_loop+0x70/0xc0 [ 1024.954723][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.960607][T21194] RIP: 0033:0x7f057739f559 [ 1024.965011][T21194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.984606][T21194] RSP: 002b:00007f0578321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1024.993018][T21194] RAX: ffffffffffffffda RBX: 00007f0577625fa0 RCX: 00007f057739f559 [ 1025.000978][T21194] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000007 [ 1025.008942][T21194] RBP: 00007f0577436b20 R08: 000000000000001c R09: 0000000000000000 [ 1025.016902][T21194] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1025.024867][T21194] R13: 00007f0577626038 R14: 00007f0577625fa0 R15: 00007ffcaf728f68 [ 1025.032839][T21194] [ 1025.072561][T21186] bond16 (unregistering): Released all slaves