last executing test programs: 5m8.852925238s ago: executing program 4 (id=3672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005001b000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) 5m8.652022747s ago: executing program 4 (id=3673): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000003000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0)=0x3, 0x4) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r5, &(0x7f00000003c0)="53feabb0359010b71e28eae5268e8b986f2d05fda1cac512e32964ae847647204605b80d6812bd1e807b58024fb0952dab87f7fb0dbe179302416ad47cb997d38dbae076ce077593b5d5e7", &(0x7f0000000640)=""/243}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 5m7.720236469s ago: executing program 4 (id=3681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x38, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x39, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x3a, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374"]}, 0x20}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) ioctl$sock_TIOCOUTQ(r3, 0x80047453, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3b, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3c, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3d, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3e, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000000000000010100d00b45fd0025ad996f76732d73793374656d0000000000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x40, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x38, 0x8, 0x2, 0x0, {0x3, 0x1}}, 0x14}}, 0x44000) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3a, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3b, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3c, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3d, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3e, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r4, 0x2, 0x70bd2c, 0x7, {{}, {@void, @val={0xc, 0x99, {0x300000, 0x29}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff57}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x287}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x48005) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@local, @in=@private}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@mcast2}}, &(0x7f00000021c0)=0xe8) 5m7.198322694s ago: executing program 4 (id=3686): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x2, 0x2}}) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="77ab7fc334b617a3c71df5730b1113ebb02042f732e57a45b0a3fe7d8831f3767611d559aea6847e75188a366cc7f4ffa38663106a5637208942e6ecd0d3c0bb8aa05c448bfa6c4faf8c59e2690ef6416e9ee7984a95bb5481bd8f221459853640b5bc448923a950a0d9d328ab114436c807102432174c7daea1ee23e1eac70dfba5f2aa92f7ab81ca77bbb116366194ffb64f5d7a9b84dfce43efac3fbd84e9af204b3c7257fb054877aaf6c6c26e0495cdb4c211f831d1d5e92f52849d9469ae05066b495cd49fe78a431da6e213d87ec0623ba55573959a282544aebf001711f8f44396d4236a2bf9f5732c22eda527b3df30", 0xf4}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a370b", 0x4}], 0x1}}], 0x2, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008048, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 5m6.892654844s ago: executing program 3 (id=3687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004a00010002200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0055200014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00180001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x24000054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004a00010002200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0055200014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00180001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x24000054) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) 5m5.344645284s ago: executing program 2 (id=3693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000440)=[{0x0, 0x300}, {&(0x7f0000000280)="8bcceb216f624c06f5ff8408750900000000", 0x12}], 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "0800e200", "0500ffffff00228d"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca", 0xf}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x8, 0x466f, 0x6, 0x2}, 0x14) r3 = syz_open_procfs$namespace(0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000680)={0x0, 0x200, 0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001580)={{r4}, r5, 0xa, @inherit={0x70, &(0x7f0000000300)={0x0, 0x5, 0xffffffff, 0xfffffffffffffff6, {0x14, 0x200000ffff, 0x8, 0x9, 0xfffffffffffffffa}, [0x1, 0x5, 0x6, 0x6, 0x0]}}, @devid=r8}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 5m5.344478341s ago: executing program 3 (id=3694): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) bind$phonet(r0, &(0x7f0000000340)={0x23, 0x3, 0x8, 0x9}, 0x10) 5m5.311232566s ago: executing program 1 (id=3695): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) socket$inet(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000012000001"], 0x340a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 5m5.173527117s ago: executing program 3 (id=3696): r0 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0xfeed}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b7698a93335a94b8cda61325b62cda1807b03675c6347b431f2d71baa6bc59e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d8704592ee5c19ca0d2075ddc9313d8bd2202a89dae6a689d3900818f892f3f17957cd53023399810da5655e0fd0f0f394c9a8bedc", 0xca}, {&(0x7f0000000500)="0f15ce0e2a894e2afb7a77dc4a4ec84b8109b2c95397d40adb9d5e8df8fd9a3167faa56aa764e61ba1a6cc8fd041bb89bee6d17105e169dd8d68d5b79eb5958574299b9035fbed2942a75e731b7571c29a760623e725792c", 0x58}, {&(0x7f0000000580)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0xfe68}, {&(0x7f00000005c0)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f7d785fff277a2a5612abf6c830c8b72579207ac0dda5", 0x83}, {&(0x7f0000000780)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b89b89f7ffd6ad7838ab27f246f9b78fa61a5ee5", 0x4f}], 0xb, 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @mcast1, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0x43, 0xffffffff}}], 0x18}, 0x20000000) 5m4.872494612s ago: executing program 3 (id=3698): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c1140fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x5d, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)}], 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000200)={r5, &(0x7f0000000000)='\x04', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2}) r9 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000640)={r9, r9}) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0xa92) 5m4.175504968s ago: executing program 3 (id=3701): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x2, 0x2}}) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="77ab7fc334b617a3c71df5730b1113ebb02042f732e57a45b0a3fe7d8831f3767611d559aea6847e75188a366cc7f4ffa38663106a5637208942e6ecd0d3c0bb8aa05c448bfa6c4faf8c59e2690ef6416e9ee7984a95bb5481bd8f221459853640b5bc448923a950a0d9d328ab114436c807102432174c7daea1ee23e1eac70dfba5f2aa92f7ab81ca77bbb116366194ffb64f5d7a9b84dfce43efac3fbd84e9af204b3c7257fb054877aaf6c6c26e0495cdb4c211f831d1d5e92f52849d9469ae05066b495cd49fe78a431da6e213d87ec0623ba55573959a282544aebf001711f8f44396d4236a2bf9f5732c22eda527b3df30", 0xf4}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a370b", 0x4}], 0x1}}], 0x2, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008048, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 5m4.065745473s ago: executing program 0 (id=3702): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000018000000000000000000000002"], 0x50}}], 0x1, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000480)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r4, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2d, 0x40}, @llc={@snap={0xab, 0x0, "c2", "aaa54b", 0x88f8, "49a952b2b2eca9ff0102a93985a94341323b142956073d3a97e5c6253d56e3e2d107262536a2ed5787645f19a314b42b9b305afe73487d2d"}}}, 0x4e) sendmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002000)="98", 0x1}], 0x1, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x4000000) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "a4b5b7ac5627b897", "91bcd6d9d83ab68bd3783a726c7f334c", "eb896601", "e88ffe4e520565ee"}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdd, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 5m3.876811668s ago: executing program 1 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="54030000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000030000002c030880d800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922b0000980ac000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101020500030000000000060001000200000008000200ac1414bb0500030003000000060001000a00000014000200fe8000000000000000000000000000bb050003000300000034010080900009800400008088000080060001000200000008000200e00000020500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200fe8000400000000000000000000000aa05000300030000002400020097c7308350696b4e49a1c2ac691dfbe7089774f6e4a1b847ade9c823b97cc6ee08000a000100000024000200c9a0aeb157ebc3afdcdb6405c19f676f3bb06317b002dee5e7a24c4f60d8fb4a080003000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b06000500080000002400020027ff3e6b43f3f99750fa9854add20b14803d6862f52aee844f25d7f3cfdeb6612400010000000000000000000000000000000000000000000000000000000000000000000800030002000000200009801c000080060001000200000008000200640101020500030000000000280000802400010000000000000000000000000000000000000000000000000000000000000000005400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2c00098028000080060001000a00000014000200fc0100000000000000000000000000000500030002"], 0x354}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 5m3.3541985s ago: executing program 2 (id=3704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x840000000002, 0x3, 0x100) unshare(0x22020400) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 5m3.184626299s ago: executing program 1 (id=3705): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002540)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0x80, 0x5, 0x9, 0x10, 0x5, 0x7, 0xc7db, 0x1, 0x0, 0x3, 0xcf30, 0x8000, 0x3, 0x2a, 0x2, 0x2, 0x3, 0x7, 0x100, 0x80000001, 0x63e, 0x1008, 0xcf1, 0x2, 0x10, 0x8, 0xa, 0x2, 0x0, 0x4, 0x8, 0x6, 0x10000, 0x3bff, 0x8, 0xff, 0x7, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x7, 0xd885, 0x78, 0x7fffffff, 0x9, 0x6, 0xffff, 0xfffffffc, 0x2, 0x1, 0x8ee3, 0x1, 0x6000000, 0x4, 0x3ff, 0xffffffff, 0xa0, 0x7ff, 0x829, 0x943, 0x78a8, 0x7fff, 0x967, 0xfffffffe, 0x4, 0x7, 0xff, 0x7fff, 0x7, 0x2, 0x80, 0xd8d, 0x10001, 0x4, 0x3b95, 0xfffffff8, 0x5c26, 0x3ff, 0x1, 0x2, 0x4, 0x2, 0x4c08, 0x7ff, 0x3, 0x8, 0xfffffff9, 0x200020, 0xc83, 0x8, 0xffffffff, 0x80000001, 0x7, 0x2, 0xfffffffb, 0x80000001, 0xffff, 0x3, 0x80, 0x7fffffff, 0x4, 0xfff, 0x3, 0x2, 0x5, 0x4, 0x80000000, 0xe3, 0x6, 0x8, 0x9, 0x8, 0x7, 0x5, 0x326, 0x3, 0xfff, 0xe, 0xd, 0x200, 0x4ab800, 0x8, 0x4, 0x4, 0x9, 0x8, 0x2, 0xfffffffa, 0xc, 0xfe, 0xd, 0x5, 0x10001, 0x80000000, 0xb, 0x2, 0xae6b, 0x6, 0x4, 0x5, 0x80000000, 0x3, 0x4, 0x6ede, 0x3, 0x1, 0x203800, 0x5, 0x0, 0x5, 0x3, 0x3, 0x80000001, 0x1000, 0xfffffffe, 0xfffffff1, 0x606, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0xe9, 0xfb2, 0xa3c, 0x5, 0x7, 0x7, 0x5331, 0x4, 0x7fff, 0xa, 0x0, 0x6, 0xe8, 0x1, 0xf, 0x9, 0x1000, 0x1, 0x27, 0xffffff42, 0x4, 0x8, 0x7, 0x9, 0x6, 0x7, 0xfffffff9, 0x8, 0x7, 0x101, 0x3, 0x6, 0x0, 0x8000, 0x1, 0x3, 0x2, 0x7, 0x1000, 0xffffffff, 0x23db, 0xfffff800, 0x9, 0x6, 0x9, 0x0, 0x856, 0xfffeffff, 0xfffff896, 0x14f9, 0x7, 0x59, 0x3, 0xa, 0x60, 0x8df, 0x0, 0x1, 0x939e, 0x4, 0x4, 0x5, 0x7, 0x1, 0x0, 0x723, 0x80000001, 0x1, 0xc1a, 0x8, 0x0, 0x2, 0x9, 0x41e, 0x3, 0x6, 0x9, 0x9, 0x8001, 0x1d23, 0x8, 0xa73, 0x7516, 0x1, 0x1, 0x9, 0x6, 0x88]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0xd5}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}]}}]}, 0x45c}}, 0x0) 5m3.17856188s ago: executing program 2 (id=3706): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x0, 0xd, 0x5c}, 0x2c) 5m2.784980561s ago: executing program 0 (id=3707): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000002000000000000000c"], 0x30}], 0x1, 0x0) 5m2.784303069s ago: executing program 1 (id=3708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="400000001e00000125bd7000fbdbdf2500000000000000000000520000000017670004d402003200e00000010000000000000000000000000600000007350000"], 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000a74e05720000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c617374000000000400028014000180090001006c617374000000000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {0x4000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x9, 0x4, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, 0x700, 0x20, 0x8000}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659f", 0x47}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d861", 0x8f}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xb4a}], 0x5}}], 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r6], 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000000)=0x10) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0xffff, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x800) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 5m2.519594838s ago: executing program 0 (id=3709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800afff000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m2.50265029s ago: executing program 2 (id=3710): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x4) read$nci(r2, &(0x7f00000002c0)=""/80, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r4, 0x0, 0xffffffff000) accept(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5m2.096644045s ago: executing program 0 (id=3711): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c1140fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x5d, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)}], 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000200)={r5, &(0x7f0000000000)='\x04', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x3, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2}) r9 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000640)={r9, r9}) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0xa92) 5m2.027314541s ago: executing program 4 (id=3712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x80000001}]}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01006000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 5m1.242653666s ago: executing program 3 (id=3713): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 5m1.156851716s ago: executing program 4 (id=3714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x11c2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@getlink={0x38, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f0000000040)='\x00', 0x2000, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x10]}, {0x200, 0x8, 0x8, 0x6}}, 0x1ff, &(0x7f0000000340), &(0x7f0000000380)=0x3}) 5m0.992382711s ago: executing program 2 (id=3715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x81, 0x3a, &(0x7f00000005c0)=""/58, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x10}, 0x10, 0x2778b, 0xffffffffffffffff, 0x7, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x3, 0x1, 0x1, 0x2}, {0x1, 0x4, 0x3, 0xf}, {0x0, 0x5, 0x0, 0x2}, {0x1, 0x1, 0x1, 0x9}, {0x1, 0x3, 0x0, 0xb}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x5, 0x9, 0x9}], 0x10, 0x3}, 0x94) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[], 0xfe33) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r6, 0x0, 0xf, 0x0, &(0x7f0000000500)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) listen(r5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000800)={0xffffffffffffffff}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x8}, 0x18) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1a, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}]}, &(0x7f0000000180)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r15, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000980)='\x00', 0x0, &(0x7f00000009c0)={@_ha_fsid={[0xb, 0xe18]}, {0x5, 0xd, 0xffffff81, 0x8}}, 0xfe000000, &(0x7f0000000a00), &(0x7f0000000a40)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x9, &(0x7f0000000c00)=ANY=[@ANYBLOB="185600000a00000000000000000000000d838a400486f5af42b13daa7dd28255ab71000500000095000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000000c0)='GPL\x00', 0x60f, 0x91, &(0x7f0000000100)=""/145, 0x41100, 0x11, '\x00', 0x0, @fallback=0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x3, &(0x7f0000000ac0)=[r4, r9, r10, r11, r12, r13, r16, 0x1], &(0x7f0000000b00)=[{0x2, 0x1, 0x3, 0x8}, {0x4, 0x2, 0x3, 0x9}, {0x4, 0x3, 0xa, 0x7}], 0x10, 0xffffffff}, 0x94) socket(0x15, 0x3, 0xffffffff) 5m0.985877493s ago: executing program 0 (id=3716): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa, 0xfdff}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m0.760717236s ago: executing program 0 (id=3717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x1405, 0x20, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) recvmsg$can_raw(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1}, 0x43) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) 5m0.547830659s ago: executing program 1 (id=3718): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x84, 0x0, 0x4451099e661a63b1}, 0x0) 4m58.661223275s ago: executing program 1 (id=3719): pipe(&(0x7f0000000680)) socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000000ffe00", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m58.541294705s ago: executing program 2 (id=3720): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40020}, 0x4000800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x14}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4m44.71073115s ago: executing program 32 (id=3717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x1405, 0x20, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) recvmsg$can_raw(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1}, 0x43) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) 4m44.274093s ago: executing program 33 (id=3713): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 4m43.471670881s ago: executing program 34 (id=3714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x11c2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@getlink={0x38, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f0000000040)='\x00', 0x2000, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x10]}, {0x200, 0x8, 0x8, 0x6}}, 0x1ff, &(0x7f0000000340), &(0x7f0000000380)=0x3}) 4m42.615016289s ago: executing program 35 (id=3719): pipe(&(0x7f0000000680)) socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000000ffe00", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m41.445977779s ago: executing program 36 (id=3720): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40020}, 0x4000800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x14}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 3.924696692s ago: executing program 5 (id=5726): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400e00001000000000000000c"], 0x30}], 0x1, 0x0) 3.770037526s ago: executing program 5 (id=5727): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005fc0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x7ff, @mcast1, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f0000001600)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x1, 0x0, [@private0]}}}], 0x28}}], 0x1, 0x91) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x24040884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r3 = socket(0xa, 0x3, 0x4) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x80000000, 0x1000004, {0xa, 0x4e20, 0x3, @private0, 0x4}}}, 0x3a) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r4, 0x1, 0x6, &(0x7f0000000100)=""/79, &(0x7f0000000180)=0x4f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0x3ff, 0x4) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r6 = socket$netlink(0x10, 0x3, 0x0) sendto(r6, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 3.460420432s ago: executing program 5 (id=5730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x9, &(0x7f0000000440)=@raw=[@generic={0x4, 0x6, 0x5, 0x3, 0x7}, @cb_func={0x18, 0xb}, @generic={0x5, 0x1, 0x3, 0x7, 0x6}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000004c0)='syzkaller\x00', 0x7a5b, 0x12, &(0x7f0000000500)=""/18, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x2, 0x9, 0x1ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r6, r7], &(0x7f00000008c0)=[{0x5, 0x1, 0x4, 0x1}, {0x3, 0x4, 0x8}, {0x1, 0x1, 0xc, 0x6}, {0x2, 0x3, 0x5, 0x2}, {0x3, 0x5, 0xb, 0x6}, {0x2, 0x4, 0xe}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'dvmrp0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x1}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c000030390001a000000a000a0000000100050007"], 0x6a) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004100070127bd7000fefdffff04070022f340000000000000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) socket$alg(0x26, 0x5, 0x0) 3.225993055s ago: executing program 8 (id=5731): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000480001152dbd3000fedbdf250a008000", @ANYRES32=0x0, @ANYBLOB="050000001400010000000000000000000000000000000001080002"], 0x38}, 0x1, 0x0, 0x0, 0x24004885}, 0x44080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getae={0x40, 0x1f, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xa, 0xff}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3504}}, 0x40}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x40040c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 2.908718754s ago: executing program 9 (id=5734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd2c, 0x9, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) r2 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x360, 0x450, 0x0, 0x0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x4000, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) 2.387899982s ago: executing program 7 (id=5735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000006000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) 2.380069064s ago: executing program 8 (id=5736): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="6800e400300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 2.37937634s ago: executing program 5 (id=5737): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x100000, 0x2b8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x7000000}}, {0x28, '\x00', 0x7}}}}, 0x318) 2.309254073s ago: executing program 6 (id=5738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x1f8, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x137}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3b33}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b1}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa686}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a09}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) 2.308944415s ago: executing program 9 (id=5739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000700000008000600e0110001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x880) 2.127502253s ago: executing program 8 (id=5740): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002540)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0x80, 0x5, 0x9, 0x10, 0x5, 0x7, 0xc7db, 0x1, 0x0, 0x3, 0xcf30, 0x8000, 0x3, 0x2a, 0x2, 0x2, 0x3, 0x7, 0x100, 0x80000001, 0x63e, 0x1008, 0xcf1, 0x2, 0x10, 0x8, 0xa, 0x2, 0x0, 0x4, 0x8, 0x6, 0x10000, 0x3bff, 0x8, 0xff, 0x7, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x7, 0xd885, 0x78, 0x7fffffff, 0x9, 0x6, 0xffff, 0xfffffffc, 0x2, 0x1, 0x8ee3, 0x1, 0x6000000, 0x4, 0x3ff, 0xffffffff, 0xa0, 0x7ff, 0x829, 0x943, 0x78a8, 0x7fff, 0x967, 0xfffffffe, 0x4, 0x7, 0xff, 0x7fff, 0x7, 0x2, 0x80, 0xd8d, 0x10001, 0x4, 0x3b95, 0xfffffff8, 0x5c26, 0x3ff, 0x1, 0x2, 0x4, 0x2, 0x4c08, 0x7ff, 0x3, 0x8, 0xfffffff9, 0x200020, 0xc83, 0x8, 0xffffffff, 0x80000001, 0x7, 0x2, 0xfffffffb, 0x80000001, 0xffff, 0x3, 0x80, 0x7fffffff, 0x4, 0xfff, 0x3, 0x2, 0x5, 0x4, 0x80000000, 0xe3, 0x6, 0x8, 0x9, 0x8, 0x7, 0x5, 0x326, 0x3, 0xfff, 0xe, 0xd, 0x200, 0x4ab800, 0x8, 0x4, 0x4, 0x9, 0x8, 0x2, 0xfffffffa, 0xc, 0x2, 0xd, 0x5, 0x10001, 0x80000000, 0xb, 0x2, 0xae6b, 0x6, 0x4, 0x5, 0x80000000, 0x3, 0x4, 0x6ede, 0x3, 0x1, 0x203800, 0x5, 0x20, 0x5, 0x3, 0x3, 0x80000001, 0x1000, 0xfffffffe, 0xfffffff1, 0x606, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0xe9, 0xfb2, 0xa3c, 0x5, 0x7, 0x7, 0x5331, 0x4, 0x7fff, 0xa, 0x0, 0x6, 0xe8, 0x1, 0xf, 0x9, 0x1000, 0x1, 0x27, 0xffffff42, 0x4, 0x8, 0x7, 0x9, 0x6, 0x7, 0xfffffff9, 0x8, 0x7, 0x101, 0x3, 0x6, 0x0, 0x8000, 0x1, 0x3, 0x2, 0x7, 0x1000, 0xffffffff, 0x23db, 0xfffff800, 0x9, 0x6, 0x9, 0x0, 0x856, 0xfffeffff, 0xfffff896, 0x14f9, 0x7, 0x59, 0x3, 0xa, 0x60, 0x8df, 0x0, 0x1, 0x939e, 0x4, 0x4, 0x5, 0x7, 0x1, 0x0, 0x723, 0x80000001, 0x1, 0xc1a, 0x8, 0x0, 0x2, 0x9, 0x41e, 0x3, 0x6, 0x9, 0x9, 0x8001, 0x1d23, 0x8, 0xa73, 0x7516, 0x1, 0x1, 0x9, 0x6, 0x88]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0xd5}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}]}}]}, 0x45c}}, 0x0) 2.10853766s ago: executing program 7 (id=5741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x84000) 2.075057412s ago: executing program 5 (id=5742): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x1f}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.073474994s ago: executing program 6 (id=5743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000001000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.952999318s ago: executing program 9 (id=5744): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000001050500000000000000000a000000300002802c00018014000300ff"], 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8463}], 0x1, 0x0, 0x0, 0x0) close(r0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x22020400) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1.810413594s ago: executing program 7 (id=5745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) 1.760112267s ago: executing program 5 (id=5746): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES8=r1, @ANYRES16=r0], 0x32600) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) connect$inet(r3, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendto$inet(r3, &(0x7f0000000600)="123456", 0x3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000500)=0x6, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.714613374s ago: executing program 8 (id=5747): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000c0000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.591974998s ago: executing program 6 (id=5748): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000480001152dbd3000fedbdf250a008000", @ANYRES32=0x0, @ANYBLOB="050000001400010000000000000000000000000000000001080002"], 0x38}, 0x1, 0x0, 0x0, 0x24004885}, 0x44080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getae={0x40, 0x1f, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xa, 0xff}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3504}}, 0x40}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x40040c0) 1.476879928s ago: executing program 7 (id=5749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 1.417434428s ago: executing program 8 (id=5750): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4000000) 1.275829996s ago: executing program 8 (id=5751): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x5e26, 0xffffffff, @loopback, 0xffffeff9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x6, 0x84) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x52293, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r5, 0x0, 0x20000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r8 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r8, 0x7, 0x6, 0x3ff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r9, &(0x7f0000000600)="0c9931259aae413e5e3d190d86a0145e712f376df1f27ae3687fe26ca93964a7c150a72c8b89f26e4829eb43cf10dbd1a840397df60bbcc47389d95fc6bcf5cb43f3ecf9ed84bdbe32622c94e50e7a4d5bb97d04c408614ce12a22e97e6dfce63483caa8cdf030d19d41ac067bec49a2dda0802157a92c67ff8aab15d7dfcea2cbb601", &(0x7f00000006c0)=""/64}, 0x20) 1.083207932s ago: executing program 6 (id=5752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000740)={&(0x7f00000003c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/112, 0x70}], 0x5, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x2100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x5, 0x12, 0x0, &(0x7f0000000440)="7e82e1544e7723cc888c18658e77597bc36d", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqsrc(r4, 0x0, 0xf, 0x0, &(0x7f0000000100)) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206030000000000000000000a00000013000300686173683a6e65742c69666163650000050001000700000005000573797a30000000000500040002000000140007800800064000000000080008400000005c000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x2804d}, 0x0) (rerun: 64) 854.036473ms ago: executing program 9 (id=5753): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34001200100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 749.389102ms ago: executing program 7 (id=5754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010feff0002900000121f", 0x2e}], 0x1}, 0x8044) 697.597213ms ago: executing program 6 (id=5755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ed00"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 559.109658ms ago: executing program 9 (id=5756): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x17}, [], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 336.69082ms ago: executing program 7 (id=5757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000600e0110001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 220.486595ms ago: executing program 9 (id=5758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='qn'], 0xb6) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$rds(0x15, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000400", @ANYRES16=r8, @ANYRES32, @ANYRES32=r9, @ANYRES16=0x0], 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x24, r13, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '\"'}]}, 0x24}}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x8080) recvfrom$inet6(r0, &(0x7f0000000000)=""/50, 0x32, 0x122, 0x0, 0x0) 0s ago: executing program 6 (id=5759): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88858}, 0x8000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='.\x00'}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4040895) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) r3 = epoll_create(0x19d44f05) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)) socket$kcm(0x2, 0x3, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000240)={'xfrm0\x00', @random="06033ec2a99d"}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="14000000100001fff5000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c000300000000f500006e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700000000000000000080", @ANYRESOCT=0x0], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000300)="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") kernel console output (not intermixed with test programs): 6.954160][T23212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.954186][T23212] do_syscall_64+0x174/0x580 [ 836.954216][T23212] ? trace_irq_disable+0x3b/0x140 [ 836.954244][T23212] ? clear_bhb_loop+0x40/0x90 [ 836.954271][T23212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.954293][T23212] RIP: 0033:0x7f06fa99e0d9 [ 836.954314][T23212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.954333][T23212] RSP: 002b:00007f06fb7c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.954357][T23212] RAX: ffffffffffffffda RBX: 00007f06fac25fa0 RCX: 00007f06fa99e0d9 [ 836.954374][T23212] RDX: 000000000000c0d4 RSI: 0000200000000380 RDI: 0000000000000003 [ 836.954388][T23212] RBP: 00007f06fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 836.954402][T23212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.954415][T23212] R13: 00007f06fac26038 R14: 00007f06fac25fa0 R15: 00007ffff5d94218 [ 836.954451][T23212] [ 837.431889][T23217] FAULT_INJECTION: forcing a failure. [ 837.431889][T23217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.445154][T23217] CPU: 1 UID: 0 PID: 23217 Comm: syz.9.4962 Not tainted syzkaller #0 PREEMPT(full) [ 837.445183][T23217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.445197][T23217] Call Trace: [ 837.445207][T23217] [ 837.445217][T23217] dump_stack_lvl+0xe8/0x150 [ 837.445257][T23217] should_fail_ex+0x40c/0x560 [ 837.445291][T23217] _copy_from_user+0x2d/0xb0 [ 837.445314][T23217] ___sys_sendmsg+0x1c6/0x360 [ 837.445343][T23217] ? __lock_acquire+0x683/0x2cf0 [ 837.445380][T23217] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.445448][T23217] ? __fget_files+0x2a/0x420 [ 837.445489][T23217] ? __fget_files+0x3a2/0x420 [ 837.445529][T23217] __x64_sys_sendmsg+0x1b1/0x290 [ 837.445561][T23217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 837.445609][T23217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.445633][T23217] do_syscall_64+0x174/0x580 [ 837.445662][T23217] ? trace_irq_disable+0x3b/0x140 [ 837.445691][T23217] ? clear_bhb_loop+0x40/0x90 [ 837.445718][T23217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.445739][T23217] RIP: 0033:0x7fab0df9e0d9 [ 837.445760][T23217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.445780][T23217] RSP: 002b:00007fab0ee72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.445804][T23217] RAX: ffffffffffffffda RBX: 00007fab0e225fa0 RCX: 00007fab0df9e0d9 [ 837.445821][T23217] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 837.445835][T23217] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 837.445849][T23217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.445863][T23217] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 837.445898][T23217] [ 837.906340][T23228] xt_hashlimit: size too large, truncated to 1048576 [ 838.017543][T23230] IPv6: NLM_F_CREATE should be specified when creating new route [ 838.122227][T23230] netlink: 'syz.5.4963': attribute type 2 has an invalid length. [ 838.185175][T23230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.061839][T23253] syzkaller1: entered promiscuous mode [ 839.156352][T23261] netlink: 'syz.6.4975': attribute type 10 has an invalid length. [ 839.181684][T23261] team0: Port device dummy0 added [ 839.489024][T23272] x_tables: ip_tables: ah match: only valid for protocol 51 [ 839.497991][T23272] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4979'. [ 839.540271][T23272] netlink: 'syz.6.4979': attribute type 25 has an invalid length. [ 839.568691][T23272] netlink: 'syz.6.4979': attribute type 3 has an invalid length. [ 839.943085][T23287] openvswitch: netlink: Message has 4 unknown bytes. [ 840.118222][T23296] netlink: 'syz.6.4990': attribute type 4 has an invalid length. [ 840.368562][T23304] netlink: ct family unspecified [ 840.377222][T23304] openvswitch: netlink: Actions may not be safe on all matching packets [ 840.406202][T23300] syzkaller1: entered promiscuous mode [ 840.684708][T23310] __nla_validate_parse: 6 callbacks suppressed [ 840.684732][T23310] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4993'. [ 840.827595][T23292] FAULT_INJECTION: forcing a failure. [ 840.827595][T23292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.874271][T23292] CPU: 1 UID: 0 PID: 23292 Comm: syz.8.4985 Not tainted syzkaller #0 PREEMPT(full) [ 840.874303][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.874318][T23292] Call Trace: [ 840.874327][T23292] [ 840.874338][T23292] dump_stack_lvl+0xe8/0x150 [ 840.874378][T23292] should_fail_ex+0x40c/0x560 [ 840.874413][T23292] _copy_from_user+0x2d/0xb0 [ 840.874437][T23292] __sys_bpf+0x2e7/0xd90 [ 840.874478][T23292] ? __pfx___sys_bpf+0x10/0x10 [ 840.874522][T23292] ? __fget_files+0x2a/0x420 [ 840.874573][T23292] ? ksys_write+0x242/0x270 [ 840.874599][T23292] ? __pfx_ksys_write+0x10/0x10 [ 840.874628][T23292] __x64_sys_bpf+0xba/0xd0 [ 840.874656][T23292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.874682][T23292] do_syscall_64+0x174/0x580 [ 840.874722][T23292] ? trace_irq_disable+0x3b/0x140 [ 840.874752][T23292] ? clear_bhb_loop+0x40/0x90 [ 840.874780][T23292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.874802][T23292] RIP: 0033:0x7fea9b99e0d9 [ 840.874824][T23292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.874843][T23292] RSP: 002b:00007fea9c793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 840.874868][T23292] RAX: ffffffffffffffda RBX: 00007fea9bc26090 RCX: 00007fea9b99e0d9 [ 840.874885][T23292] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 840.874899][T23292] RBP: 00007fea9c793090 R08: 0000000000000000 R09: 0000000000000000 [ 840.874913][T23292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.874926][T23292] R13: 00007fea9bc26128 R14: 00007fea9bc26090 R15: 00007ffe49cb2ac8 [ 840.874962][T23292] [ 841.585633][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4994'. [ 844.679873][T23309] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 844.691275][T23309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 844.701091][T23309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 844.727430][T23314] vlan2: entered promiscuous mode [ 844.738019][T23314] hsr0: entered promiscuous mode [ 844.749187][T23314] vlan2: entered allmulticast mode [ 844.764714][T23314] hsr0: entered allmulticast mode [ 844.780505][T23314] hsr_slave_0: entered allmulticast mode [ 844.802016][T23314] hsr_slave_1: entered allmulticast mode [ 844.933115][T23316] hsr_slave_0: left promiscuous mode [ 844.952544][T23316] hsr_slave_1: left promiscuous mode [ 845.155188][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5000'. [ 845.227715][ T1152] batadv2: left promiscuous mode [ 845.371785][T23331] syzkaller1: entered promiscuous mode [ 845.392009][T23331] syzkaller1: entered allmulticast mode [ 845.435627][T23346] sctp: [Deprecated]: syz.9.5003 (pid 23346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 845.435627][T23346] Use struct sctp_sack_info instead [ 845.522237][T23348] ip_tables: iptables: counters copy to user failed while replacing table [ 845.558960][T23346] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 845.616717][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5003'. [ 845.701653][T23351] netlink: 'syz.8.5005': attribute type 1 has an invalid length. [ 845.782970][T23351] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5005'. [ 845.818365][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5005'. [ 846.182092][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5012'. [ 846.919984][T23346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.951396][T23346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.639020][ T6368] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.677722][ T6368] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.707816][T23376] syzkaller1: entered promiscuous mode [ 847.719951][T23376] syzkaller1: entered allmulticast mode [ 847.726014][T23386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5014'. [ 847.726043][T23386] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5014'. [ 847.730896][T23386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5014'. [ 847.766377][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5013'. [ 847.797994][ T6368] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.817211][ T6368] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.846917][T23386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5014'. [ 847.946245][ T13] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.971177][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.044232][T23391] xfrm0 speed is unknown, defaulting to 1000 [ 848.113462][T23399] xt_hashlimit: size too large, truncated to 1048576 [ 848.209258][T23402] netlink: 'syz.6.5019': attribute type 4 has an invalid length. [ 848.287081][T23402] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5019'. [ 848.616478][T23413] netlink: 'syz.6.5023': attribute type 2 has an invalid length. [ 848.871083][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5027'. [ 848.927070][T23422] netlink: 'syz.8.5026': attribute type 1 has an invalid length. [ 849.219078][T23433] FAULT_INJECTION: forcing a failure. [ 849.219078][T23433] name failslab, interval 1, probability 0, space 0, times 0 [ 849.266321][T23433] CPU: 0 UID: 0 PID: 23433 Comm: syz.6.5032 Not tainted syzkaller #0 PREEMPT(full) [ 849.266360][T23433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 849.266375][T23433] Call Trace: [ 849.266385][T23433] [ 849.266394][T23433] dump_stack_lvl+0xe8/0x150 [ 849.266446][T23433] should_fail_ex+0x40c/0x560 [ 849.266483][T23433] should_failslab+0xa8/0x100 [ 849.266519][T23433] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 849.266547][T23433] ? local_lock_release+0x9c/0x160 [ 849.266574][T23433] ? __alloc_skb+0x1d7/0x7a0 [ 849.266596][T23433] ? __alloc_skb+0x1d7/0x7a0 [ 849.266627][T23433] __alloc_skb+0x1d7/0x7a0 [ 849.266657][T23433] netlink_sendmsg+0x5d4/0xb40 [ 849.266697][T23433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.266730][T23433] ? aa_sock_msg_perm+0xf1/0x1b0 [ 849.266762][T23433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.266790][T23433] sock_sendmsg_nosec+0x13a/0x180 [ 849.266828][T23433] ____sys_sendmsg+0x54e/0x850 [ 849.266863][T23433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.266902][T23433] ? import_iovec+0x73/0xa0 [ 849.266928][T23433] ___sys_sendmsg+0x2a5/0x360 [ 849.266955][T23433] ? __lock_acquire+0x683/0x2cf0 [ 849.266991][T23433] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.267026][T23433] ? kstrtouint+0x6e/0xe0 [ 849.267082][T23433] ? __fget_files+0x2a/0x420 [ 849.267143][T23433] ? __fget_files+0x3a2/0x420 [ 849.267185][T23433] __sys_sendmmsg+0x273/0x4d0 [ 849.267220][T23433] ? __pfx___sys_sendmmsg+0x10/0x10 [ 849.267260][T23433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 849.267308][T23433] ? ksys_write+0x242/0x270 [ 849.267333][T23433] ? __pfx_ksys_write+0x10/0x10 [ 849.267363][T23433] __x64_sys_sendmmsg+0xa0/0xc0 [ 849.267391][T23433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.267415][T23433] do_syscall_64+0x174/0x580 [ 849.267445][T23433] ? trace_irq_disable+0x3b/0x140 [ 849.267474][T23433] ? clear_bhb_loop+0x40/0x90 [ 849.267501][T23433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.267523][T23433] RIP: 0033:0x7ff10a79e0d9 [ 849.267544][T23433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.267564][T23433] RSP: 002b:00007ff10b5f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 849.267588][T23433] RAX: ffffffffffffffda RBX: 00007ff10aa25fa0 RCX: 00007ff10a79e0d9 [ 849.267604][T23433] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 849.267619][T23433] RBP: 00007ff10b5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 849.267634][T23433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.267646][T23433] R13: 00007ff10aa26038 R14: 00007ff10aa25fa0 R15: 00007ffdd4338808 [ 849.267680][T23433] [ 849.739158][T23437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.967193][T23442] bridge0: port 3(batadv1) entered blocking state [ 849.991064][T23442] bridge0: port 3(batadv1) entered disabled state [ 850.020196][T23442] batadv1: entered allmulticast mode [ 850.037335][T23442] batadv1: entered promiscuous mode [ 850.456667][ T1152] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 850.465969][ T1152] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 850.810318][T23449] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 850.829812][T23460] __nla_validate_parse: 4 callbacks suppressed [ 850.829832][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5041'. [ 850.884398][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5041'. [ 850.926998][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5043'. [ 851.313669][T23480] FAULT_INJECTION: forcing a failure. [ 851.313669][T23480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.360909][T23480] CPU: 1 UID: 0 PID: 23480 Comm: syz.7.5048 Not tainted syzkaller #0 PREEMPT(full) [ 851.360940][T23480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.360953][T23480] Call Trace: [ 851.360962][T23480] [ 851.360972][T23480] dump_stack_lvl+0xe8/0x150 [ 851.361011][T23480] should_fail_ex+0x40c/0x560 [ 851.361044][T23480] _copy_from_user+0x2d/0xb0 [ 851.361066][T23480] __sys_bpf+0x2e7/0xd90 [ 851.361106][T23480] ? __pfx___sys_bpf+0x10/0x10 [ 851.361147][T23480] ? __fget_files+0x2a/0x420 [ 851.361197][T23480] ? ksys_write+0x242/0x270 [ 851.361221][T23480] ? __pfx_ksys_write+0x10/0x10 [ 851.361249][T23480] __x64_sys_bpf+0xba/0xd0 [ 851.361275][T23480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.361299][T23480] do_syscall_64+0x174/0x580 [ 851.361337][T23480] ? trace_irq_disable+0x3b/0x140 [ 851.361365][T23480] ? clear_bhb_loop+0x40/0x90 [ 851.361392][T23480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.361413][T23480] RIP: 0033:0x7f6bd279e0d9 [ 851.361433][T23480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.361452][T23480] RSP: 002b:00007f6bd36b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 851.361476][T23480] RAX: ffffffffffffffda RBX: 00007f6bd2a25fa0 RCX: 00007f6bd279e0d9 [ 851.361492][T23480] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 851.361505][T23480] RBP: 00007f6bd36b8090 R08: 0000000000000000 R09: 0000000000000000 [ 851.361519][T23480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.361531][T23480] R13: 00007f6bd2a26038 R14: 00007f6bd2a25fa0 R15: 00007ffc6efc4018 [ 851.361566][T23480] [ 851.637144][T23474] xfrm0 speed is unknown, defaulting to 1000 [ 852.121323][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5052'. [ 852.134768][T23489] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 852.147160][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5052'. [ 852.173083][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5052'. [ 852.212795][T23490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5052'. [ 852.227107][T23494] batadv4: left allmulticast mode [ 852.246350][T23494] batadv4: left promiscuous mode [ 852.249324][T23491] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.257306][T23494] bridge0: port 4(batadv4) entered disabled state [ 852.286834][T23490] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.314648][T23494] batadv1: left allmulticast mode [ 852.379562][T23494] batadv1: left promiscuous mode [ 852.406662][T23494] bridge0: port 3(batadv1) entered disabled state [ 852.453068][T23494] bridge_slave_1: left allmulticast mode [ 852.496016][T23494] bridge_slave_1: left promiscuous mode [ 852.510035][T23494] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.535508][T23494] bridge_slave_0: left allmulticast mode [ 852.543148][T23494] bridge_slave_0: left promiscuous mode [ 852.551291][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.623034][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5052'. [ 852.629382][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5052'. [ 852.634495][T23500] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5054'. [ 852.650719][T23491] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.652651][T23490] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.673177][T23491] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.697622][T23491] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.706059][T23490] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.758490][T23490] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.793519][T23491] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 852.816530][T23490] netlink: 'syz.7.5052': attribute type 18 has an invalid length. [ 853.068807][T23515] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 853.561269][T23531] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 853.728778][T23535] batman_adv: batadv0: Removing interface: dummy0 [ 854.200698][T23552] netlink: ct family unspecified [ 854.230863][T23552] openvswitch: netlink: Actions may not be safe on all matching packets [ 854.329529][T23554] syzkaller0: entered promiscuous mode [ 854.346247][T23554] syzkaller0: entered allmulticast mode [ 854.539539][T23562] FAULT_INJECTION: forcing a failure. [ 854.539539][T23562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.580116][T23562] CPU: 1 UID: 0 PID: 23562 Comm: syz.7.5078 Not tainted syzkaller #0 PREEMPT(full) [ 854.580159][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.580173][T23562] Call Trace: [ 854.580182][T23562] [ 854.580192][T23562] dump_stack_lvl+0xe8/0x150 [ 854.580232][T23562] should_fail_ex+0x40c/0x560 [ 854.580265][T23562] _copy_from_iter+0x1d3/0x1660 [ 854.580380][T23562] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 854.580413][T23562] ? rcu_is_watching+0x15/0xb0 [ 854.580435][T23562] ? trace_kmem_cache_alloc+0x29/0xe0 [ 854.580465][T23562] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 854.580492][T23562] ? __pfx__copy_from_iter+0x10/0x10 [ 854.580523][T23562] ? __alloc_skb+0x276/0x7a0 [ 854.580549][T23562] ? __alloc_skb+0x276/0x7a0 [ 854.580577][T23562] ? netlink_sendmsg+0x650/0xb40 [ 854.580606][T23562] ? skb_put+0x112/0x210 [ 854.580634][T23562] netlink_sendmsg+0x6c0/0xb40 [ 854.580673][T23562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.580707][T23562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 854.580737][T23562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.580764][T23562] sock_sendmsg_nosec+0x13a/0x180 [ 854.580798][T23562] ____sys_sendmsg+0x54e/0x850 [ 854.580832][T23562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.580869][T23562] ? import_iovec+0x73/0xa0 [ 854.580894][T23562] ___sys_sendmsg+0x2a5/0x360 [ 854.580920][T23562] ? __lock_acquire+0x683/0x2cf0 [ 854.580957][T23562] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.581023][T23562] ? __fget_files+0x2a/0x420 [ 854.581053][T23562] ? __fget_files+0x3a2/0x420 [ 854.581094][T23562] __x64_sys_sendmsg+0x1b1/0x290 [ 854.581136][T23562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.581185][T23562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.581211][T23562] do_syscall_64+0x174/0x580 [ 854.581242][T23562] ? trace_irq_disable+0x3b/0x140 [ 854.581271][T23562] ? clear_bhb_loop+0x40/0x90 [ 854.581297][T23562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.581320][T23562] RIP: 0033:0x7f6bd279e0d9 [ 854.581341][T23562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.581360][T23562] RSP: 002b:00007f6bd36b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.581384][T23562] RAX: ffffffffffffffda RBX: 00007f6bd2a25fa0 RCX: 00007f6bd279e0d9 [ 854.581400][T23562] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 854.581414][T23562] RBP: 00007f6bd36b8090 R08: 0000000000000000 R09: 0000000000000000 [ 854.581427][T23562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.581441][T23562] R13: 00007f6bd2a26038 R14: 00007f6bd2a25fa0 R15: 00007ffc6efc4018 [ 854.581476][T23562] [ 856.191279][T23615] __nla_validate_parse: 33 callbacks suppressed [ 856.191301][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5095'. [ 856.483987][T23617] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5097'. [ 856.515484][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5097'. [ 856.816585][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5102'. [ 857.270614][T23649] FAULT_INJECTION: forcing a failure. [ 857.270614][T23649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.331705][T23649] CPU: 1 UID: 0 PID: 23649 Comm: syz.9.5110 Not tainted syzkaller #0 PREEMPT(full) [ 857.331735][T23649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.331748][T23649] Call Trace: [ 857.331758][T23649] [ 857.331768][T23649] dump_stack_lvl+0xe8/0x150 [ 857.331809][T23649] should_fail_ex+0x40c/0x560 [ 857.331845][T23649] _copy_to_user+0x31/0xb0 [ 857.331870][T23649] bpf_prog_test_run_raw_tp+0x5f0/0x7e0 [ 857.331912][T23649] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 857.331949][T23649] ? __fget_files+0x2a/0x420 [ 857.331986][T23649] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 857.332022][T23649] bpf_prog_test_run+0x2c5/0x340 [ 857.332059][T23649] __sys_bpf+0xa22/0xd90 [ 857.332097][T23649] ? __pfx___sys_bpf+0x10/0x10 [ 857.332138][T23649] ? __fget_files+0x2a/0x420 [ 857.332184][T23649] ? ksys_write+0x242/0x270 [ 857.332209][T23649] ? __pfx_ksys_write+0x10/0x10 [ 857.332237][T23649] __x64_sys_bpf+0xba/0xd0 [ 857.332263][T23649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.332288][T23649] do_syscall_64+0x174/0x580 [ 857.332318][T23649] ? trace_irq_disable+0x3b/0x140 [ 857.332347][T23649] ? clear_bhb_loop+0x40/0x90 [ 857.332374][T23649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.332396][T23649] RIP: 0033:0x7fab0df9e0d9 [ 857.332416][T23649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.332435][T23649] RSP: 002b:00007fab0ee72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.332459][T23649] RAX: ffffffffffffffda RBX: 00007fab0e225fa0 RCX: 00007fab0df9e0d9 [ 857.332475][T23649] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 857.332488][T23649] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 857.332500][T23649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.332513][T23649] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 857.332547][T23649] [ 857.412557][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5111'. [ 857.516045][ T4939] Bluetooth: hci9: command tx timeout [ 857.766737][T23664] validate_nla: 8 callbacks suppressed [ 857.766846][T23664] netlink: 'syz.5.5117': attribute type 1 has an invalid length. [ 857.987221][T23664] 8021q: adding VLAN 0 to HW filter on device bond11 [ 858.095444][T23671] bond11: (slave veth7): Enslaving as an active interface with a down link [ 858.161549][T23674] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 858.210781][T23674] bond11: (slave batadv5): making interface the new active one [ 858.233857][T23674] batadv5: entered promiscuous mode [ 858.241060][T23674] bond11: (slave batadv5): Enslaving as an active interface with an up link [ 858.393645][T23684] bridge0: port 3(batadv3) entered blocking state [ 858.404748][T23684] bridge0: port 3(batadv3) entered disabled state [ 858.418165][T23684] batadv3: entered allmulticast mode [ 858.436824][T23684] batadv3: entered promiscuous mode [ 858.802945][T23695] ip_tables: iptables: counters copy to user failed while replacing table [ 858.815383][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5129'. [ 858.888360][ T6368] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 858.897825][ T6368] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 859.270767][T23711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5134'. [ 859.286744][ T6368] IPVS: starting estimator thread 0... [ 859.291478][T23707] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 859.308099][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5134'. [ 859.408579][T23713] IPVS: using max 26 ests per chain, 62400 per kthread [ 859.466563][T23717] netlink: 'syz.7.5136': attribute type 1 has an invalid length. [ 859.551108][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5136'. [ 859.604017][T23724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5136'. [ 860.076771][T23741] netlink: 'syz.5.5147': attribute type 4 has an invalid length. [ 860.109076][T23743] openvswitch: netlink: Message has 13 unknown bytes. [ 860.413589][T23754] bridge_slave_0: entered promiscuous mode [ 860.881110][T23777] FAULT_INJECTION: forcing a failure. [ 860.881110][T23777] name failslab, interval 1, probability 0, space 0, times 0 [ 860.938399][T23777] CPU: 1 UID: 0 PID: 23777 Comm: syz.5.5162 Not tainted syzkaller #0 PREEMPT(full) [ 860.938431][T23777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.938445][T23777] Call Trace: [ 860.938454][T23777] [ 860.938464][T23777] dump_stack_lvl+0xe8/0x150 [ 860.938505][T23777] should_fail_ex+0x40c/0x560 [ 860.938540][T23777] should_failslab+0xa8/0x100 [ 860.938591][T23777] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 860.938621][T23777] ? skb_clone+0x212/0x3a0 [ 860.938648][T23777] ? skb_clone+0x212/0x3a0 [ 860.938684][T23777] skb_clone+0x212/0x3a0 [ 860.938716][T23777] __netlink_deliver_tap+0x413/0x860 [ 860.938759][T23777] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.938790][T23777] netlink_deliver_tap+0x19c/0x1b0 [ 860.938819][T23777] netlink_unicast+0x77f/0x940 [ 860.938857][T23777] netlink_sendmsg+0x813/0xb40 [ 860.938896][T23777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.938932][T23777] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.938964][T23777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.938992][T23777] sock_sendmsg_nosec+0x13a/0x180 [ 860.939030][T23777] ____sys_sendmsg+0x54e/0x850 [ 860.939066][T23777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.939103][T23777] ? import_iovec+0x73/0xa0 [ 860.939130][T23777] ___sys_sendmsg+0x2a5/0x360 [ 860.939157][T23777] ? __lock_acquire+0x683/0x2cf0 [ 860.939194][T23777] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.939262][T23777] ? __fget_files+0x2a/0x420 [ 860.939293][T23777] ? __fget_files+0x3a2/0x420 [ 860.939335][T23777] __x64_sys_sendmsg+0x1b1/0x290 [ 860.939367][T23777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.939417][T23777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.939443][T23777] do_syscall_64+0x174/0x580 [ 860.939474][T23777] ? trace_irq_disable+0x3b/0x140 [ 860.939504][T23777] ? clear_bhb_loop+0x40/0x90 [ 860.939532][T23777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.939563][T23777] RIP: 0033:0x7f06fa99e0d9 [ 860.939585][T23777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.939605][T23777] RSP: 002b:00007f06fb7c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.939630][T23777] RAX: ffffffffffffffda RBX: 00007f06fac25fa0 RCX: 00007f06fa99e0d9 [ 860.939647][T23777] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 860.939662][T23777] RBP: 00007f06fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 860.939676][T23777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.939689][T23777] R13: 00007f06fac26038 R14: 00007f06fac25fa0 R15: 00007ffff5d94218 [ 860.939724][T23777] [ 861.247578][T23782] __nla_validate_parse: 10 callbacks suppressed [ 861.247599][T23782] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5164'. [ 861.276965][T23783] syzkaller0: entered promiscuous mode [ 861.282539][T23783] syzkaller0: entered allmulticast mode [ 861.476398][T23790] netlink: 'syz.6.5167': attribute type 23 has an invalid length. [ 861.891539][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5172'. [ 862.035527][T23814] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.5174'. [ 862.076289][T23814] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.5174'. [ 862.103461][T23813] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5173'. [ 862.136213][T23819] netlink: 'syz.8.5176': attribute type 1 has an invalid length. [ 862.156269][T23819] netlink: 'syz.8.5176': attribute type 2 has an invalid length. [ 862.331476][T23822] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5177'. [ 862.344206][T23824] netlink: 'syz.6.5178': attribute type 1 has an invalid length. [ 862.402854][T23828] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 862.412670][T23824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5178'. [ 862.468822][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5178'. [ 862.490466][T23829] xt_hashlimit: size too large, truncated to 1048576 [ 862.549750][T23828] @0Ù: renamed from bond_slave_1 (while UP) [ 862.969896][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5187'. [ 863.174519][T23853] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.5189'. [ 863.448453][T23862] FAULT_INJECTION: forcing a failure. [ 863.448453][T23862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.482911][T23862] CPU: 0 UID: 0 PID: 23862 Comm: syz.5.5194 Not tainted syzkaller #0 PREEMPT(full) [ 863.482944][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.482958][T23862] Call Trace: [ 863.482968][T23862] [ 863.482979][T23862] dump_stack_lvl+0xe8/0x150 [ 863.483019][T23862] should_fail_ex+0x40c/0x560 [ 863.483058][T23862] _copy_to_user+0x31/0xb0 [ 863.483083][T23862] simple_read_from_buffer+0xe1/0x170 [ 863.483121][T23862] proc_fail_nth_read+0x1bb/0x230 [ 863.483159][T23862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.483194][T23862] ? rw_verify_area+0x24a/0x4c0 [ 863.483216][T23862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.483247][T23862] vfs_read+0x213/0xa80 [ 863.483275][T23862] ? __pfx___mutex_lock+0x10/0x10 [ 863.483308][T23862] ? __pfx_vfs_read+0x10/0x10 [ 863.483331][T23862] ? __fget_files+0x2a/0x420 [ 863.483365][T23862] ? __fget_files+0x3a2/0x420 [ 863.483394][T23862] ? __fget_files+0x2a/0x420 [ 863.483433][T23862] ksys_read+0x150/0x270 [ 863.483457][T23862] ? __pfx_ksys_read+0x10/0x10 [ 863.483489][T23862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.483513][T23862] do_syscall_64+0x174/0x580 [ 863.483544][T23862] ? trace_irq_disable+0x3b/0x140 [ 863.483572][T23862] ? clear_bhb_loop+0x40/0x90 [ 863.483607][T23862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.483630][T23862] RIP: 0033:0x7f06fa95e90e [ 863.483652][T23862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 863.483672][T23862] RSP: 002b:00007f06fb7bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.483696][T23862] RAX: ffffffffffffffda RBX: 00007f06fb7c06c0 RCX: 00007f06fa95e90e [ 863.483713][T23862] RDX: 000000000000000f RSI: 00007f06fb7c00a0 RDI: 0000000000000005 [ 863.483727][T23862] RBP: 00007f06fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 863.483741][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.483755][T23862] R13: 00007f06fac26038 R14: 00007f06fac25fa0 R15: 00007ffff5d94218 [ 863.483791][T23862] [ 864.166627][T23882] netlink: 'syz.7.5202': attribute type 1 has an invalid length. [ 864.276706][T23885] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 864.487807][T23897] netlink: 'syz.7.5207': attribute type 1 has an invalid length. [ 864.504036][T23900] netlink: 'syz.8.5206': attribute type 1 has an invalid length. [ 864.530010][T23900] netlink: 'syz.8.5206': attribute type 2 has an invalid length. [ 864.713877][T23897] 8021q: adding VLAN 0 to HW filter on device bond10 [ 865.194644][T23921] ip_tables: iptables: counters copy to user failed while replacing table [ 865.366171][T23928] netlink: 'syz.5.5217': attribute type 1 has an invalid length. [ 865.658088][T23937] 8021q: VLANs not supported on ip_vti0 [ 865.669572][T23934] syzkaller0: entered promiscuous mode [ 865.677865][T23934] syzkaller0: entered allmulticast mode [ 866.384699][T23963] __nla_validate_parse: 10 callbacks suppressed [ 866.384721][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5228'. [ 866.437062][T23966] netlink: 'syz.7.5230': attribute type 1 has an invalid length. [ 866.474757][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5230'. [ 866.486725][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5230'. [ 866.505107][T23963] vlan2: entered promiscuous mode [ 866.700314][T23973] FAULT_INJECTION: forcing a failure. [ 866.700314][T23973] name failslab, interval 1, probability 0, space 0, times 0 [ 866.779348][T23973] CPU: 1 UID: 0 PID: 23973 Comm: syz.7.5233 Not tainted syzkaller #0 PREEMPT(full) [ 866.779379][T23973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.779394][T23973] Call Trace: [ 866.779403][T23973] [ 866.779413][T23973] dump_stack_lvl+0xe8/0x150 [ 866.779452][T23973] should_fail_ex+0x40c/0x560 [ 866.779486][T23973] should_failslab+0xa8/0x100 [ 866.779521][T23973] __kmalloc_cache_noprof+0xa8/0x660 [ 866.779551][T23973] ? rtnl_newlink+0x143/0x1c30 [ 866.779656][T23973] ? rtnl_newlink+0x143/0x1c30 [ 866.779688][T23973] rtnl_newlink+0x143/0x1c30 [ 866.779714][T23973] ? kasan_save_track+0x4f/0x80 [ 866.779742][T23973] ? kasan_save_track+0x3e/0x80 [ 866.779768][T23973] ? __kasan_slab_free+0x5c/0x80 [ 866.779796][T23973] ? kmem_cache_free+0x182/0x650 [ 866.779822][T23973] ? nlmon_xmit+0xb0/0x100 [ 866.779922][T23973] ? dev_hard_start_xmit+0x2cd/0x830 [ 866.780089][T23973] ? __dev_queue_xmit+0x14c0/0x3820 [ 866.780119][T23973] ? __netlink_deliver_tap+0x5b4/0x860 [ 866.780148][T23973] ? netlink_deliver_tap+0x19c/0x1b0 [ 866.780174][T23973] ? netlink_unicast+0x77f/0x940 [ 866.780196][T23973] ? netlink_sendmsg+0x813/0xb40 [ 866.780225][T23973] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.780249][T23973] ? do_syscall_64+0x174/0x580 [ 866.780279][T23973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.780344][T23973] ? kasan_quarantine_put+0xbb/0x1f0 [ 866.780374][T23973] ? lockdep_hardirqs_on+0x7a/0x110 [ 866.780408][T23973] ? nlmon_xmit+0xb0/0x100 [ 866.780428][T23973] ? kmem_cache_free+0x182/0x650 [ 866.780470][T23973] ? __lock_acquire+0x683/0x2cf0 [ 866.780506][T23973] ? __dev_queue_xmit+0x29b/0x3820 [ 866.780540][T23973] ? __local_bh_enable_ip+0xd0/0x130 [ 866.780566][T23973] ? lockdep_hardirqs_on+0x7a/0x110 [ 866.780595][T23973] ? __dev_queue_xmit+0x29b/0x3820 [ 866.780623][T23973] ? __local_bh_enable_ip+0xd0/0x130 [ 866.780647][T23973] ? __dev_queue_xmit+0x29b/0x3820 [ 866.780685][T23973] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 866.780711][T23973] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.780749][T23973] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.780773][T23973] rtnetlink_rcv_msg+0x802/0xc00 [ 866.780803][T23973] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 866.780828][T23973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.780851][T23973] ? ref_tracker_free+0x689/0x830 [ 866.780885][T23973] ? __pfx_ref_tracker_free+0x10/0x10 [ 866.780926][T23973] netlink_rcv_skb+0x226/0x4a0 [ 866.780957][T23973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.780984][T23973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.781036][T23973] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.781064][T23973] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.781097][T23973] netlink_unicast+0x7bb/0x940 [ 866.781133][T23973] netlink_sendmsg+0x813/0xb40 [ 866.781171][T23973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.781212][T23973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.781243][T23973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.781270][T23973] sock_sendmsg_nosec+0x13a/0x180 [ 866.781306][T23973] ____sys_sendmsg+0x54e/0x850 [ 866.781340][T23973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.781377][T23973] ? import_iovec+0x73/0xa0 [ 866.781404][T23973] ___sys_sendmsg+0x2a5/0x360 [ 866.781431][T23973] ? __lock_acquire+0x683/0x2cf0 [ 866.781465][T23973] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.781532][T23973] ? __fget_files+0x2a/0x420 [ 866.781563][T23973] ? __fget_files+0x3a2/0x420 [ 866.781604][T23973] __x64_sys_sendmsg+0x1b1/0x290 [ 866.781636][T23973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.781685][T23973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.781709][T23973] do_syscall_64+0x174/0x580 [ 866.781739][T23973] ? trace_irq_disable+0x3b/0x140 [ 866.781767][T23973] ? clear_bhb_loop+0x40/0x90 [ 866.781793][T23973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.781814][T23973] RIP: 0033:0x7f6bd279e0d9 [ 866.781835][T23973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.781854][T23973] RSP: 002b:00007f6bd36b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.781879][T23973] RAX: ffffffffffffffda RBX: 00007f6bd2a25fa0 RCX: 00007f6bd279e0d9 [ 866.781895][T23973] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 866.781909][T23973] RBP: 00007f6bd36b8090 R08: 0000000000000000 R09: 0000000000000000 [ 866.781923][T23973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.781936][T23973] R13: 00007f6bd2a26038 R14: 00007f6bd2a25fa0 R15: 00007ffc6efc4018 [ 866.781972][T23973] [ 867.359113][T23982] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5236'. [ 867.466465][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5237'. [ 867.512612][T23986] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 867.562297][T23989] netlink: 'syz.7.5238': attribute type 3 has an invalid length. [ 867.589589][T23990] openvswitch: netlink: Message has 4 unknown bytes. [ 867.599065][T23989] netlink: 'syz.7.5238': attribute type 3 has an invalid length. [ 867.689932][T23996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5240'. [ 867.730651][T23996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5240'. [ 867.822249][T23996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5240'. [ 867.848104][T23997] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5240'. [ 867.858485][T23997] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5240'. [ 868.085524][T23993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.120039][T23993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.680806][ T6371] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.713772][ T6371] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.777199][ T6368] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.807978][ T6368] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.876345][ T6368] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.905900][ T6368] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.956636][ T6368] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.996295][ T6368] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.291311][T24047] netlink: 'syz.7.5251': attribute type 15 has an invalid length. [ 869.447643][T24047] netlink: 'syz.7.5251': attribute type 15 has an invalid length. [ 869.456369][ T13] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 869.503761][ T13] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 869.556205][ T13] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 869.589980][ T13] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 869.802584][T24062] FAULT_INJECTION: forcing a failure. [ 869.802584][T24062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.818190][T24062] CPU: 0 UID: 0 PID: 24062 Comm: syz.6.5255 Not tainted syzkaller #0 PREEMPT(full) [ 869.818221][T24062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.818236][T24062] Call Trace: [ 869.818245][T24062] [ 869.818255][T24062] dump_stack_lvl+0xe8/0x150 [ 869.818294][T24062] should_fail_ex+0x40c/0x560 [ 869.818328][T24062] _copy_from_iter+0x1d3/0x1660 [ 869.818358][T24062] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 869.818389][T24062] ? rcu_is_watching+0x15/0xb0 [ 869.818414][T24062] ? trace_kmem_cache_alloc+0x29/0xe0 [ 869.818444][T24062] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 869.818472][T24062] ? __pfx__copy_from_iter+0x10/0x10 [ 869.818502][T24062] ? __alloc_skb+0x276/0x7a0 [ 869.818533][T24062] ? __alloc_skb+0x276/0x7a0 [ 869.818563][T24062] ? netlink_sendmsg+0x650/0xb40 [ 869.818592][T24062] ? skb_put+0x112/0x210 [ 869.818619][T24062] netlink_sendmsg+0x6c0/0xb40 [ 869.818647][T24062] ? __fget_files+0x2a/0x420 [ 869.818686][T24062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.818720][T24062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.818751][T24062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.818785][T24062] sock_sendmsg_nosec+0x13a/0x180 [ 869.818822][T24062] __sys_sendto+0x408/0x5a0 [ 869.818848][T24062] ? ksys_write+0x1e6/0x270 [ 869.818873][T24062] ? __pfx___sys_sendto+0x10/0x10 [ 869.818896][T24062] ? __mutex_unlock_slowpath+0x731/0x900 [ 869.818960][T24062] ? __pfx_ksys_write+0x10/0x10 [ 869.818988][T24062] __x64_sys_sendto+0xde/0x100 [ 869.819014][T24062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.819039][T24062] do_syscall_64+0x174/0x580 [ 869.819069][T24062] ? trace_irq_disable+0x3b/0x140 [ 869.819097][T24062] ? clear_bhb_loop+0x40/0x90 [ 869.819124][T24062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.819151][T24062] RIP: 0033:0x7ff10a79e0d9 [ 869.819172][T24062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.819191][T24062] RSP: 002b:00007ff10b5f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 869.819214][T24062] RAX: ffffffffffffffda RBX: 00007ff10aa25fa0 RCX: 00007ff10a79e0d9 [ 869.819230][T24062] RDX: 0000000000000068 RSI: 0000200000000000 RDI: 0000000000000003 [ 869.819244][T24062] RBP: 00007ff10b5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 869.819258][T24062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.819271][T24062] R13: 00007ff10aa26038 R14: 00007ff10aa25fa0 R15: 00007ffdd4338808 [ 869.819305][T24062] [ 870.091288][ T12] batadv5: left promiscuous mode [ 870.221986][T24066] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 871.408129][T24103] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 871.575660][T24117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 871.783388][T24123] ip_tables: iptables: counters copy to user failed while replacing table [ 872.045223][T24131] __nla_validate_parse: 7 callbacks suppressed [ 872.045245][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5275'. [ 872.104447][T24131] 8021q: VLANs not supported on ip_vti0 [ 872.590350][T24148] netlink: 1244 bytes leftover after parsing attributes in process `syz.8.5277'. [ 872.617240][T24150] FAULT_INJECTION: forcing a failure. [ 872.617240][T24150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.701515][T24150] CPU: 1 UID: 0 PID: 24150 Comm: syz.7.5281 Not tainted syzkaller #0 PREEMPT(full) [ 872.701544][T24150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.701558][T24150] Call Trace: [ 872.701568][T24150] [ 872.701577][T24150] dump_stack_lvl+0xe8/0x150 [ 872.701617][T24150] should_fail_ex+0x40c/0x560 [ 872.701651][T24150] _copy_from_user+0x2d/0xb0 [ 872.701674][T24150] ___sys_sendmsg+0x1c6/0x360 [ 872.701703][T24150] ? __lock_acquire+0x683/0x2cf0 [ 872.701739][T24150] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.701816][T24150] ? __fget_files+0x2a/0x420 [ 872.701847][T24150] ? __fget_files+0x3a2/0x420 [ 872.701889][T24150] __x64_sys_sendmsg+0x1b1/0x290 [ 872.701921][T24150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.701970][T24150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.701994][T24150] do_syscall_64+0x174/0x580 [ 872.702025][T24150] ? trace_irq_disable+0x3b/0x140 [ 872.702054][T24150] ? clear_bhb_loop+0x40/0x90 [ 872.702082][T24150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.702103][T24150] RIP: 0033:0x7f6bd279e0d9 [ 872.702124][T24150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.702143][T24150] RSP: 002b:00007f6bd36b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.702167][T24150] RAX: ffffffffffffffda RBX: 00007f6bd2a25fa0 RCX: 00007f6bd279e0d9 [ 872.702184][T24150] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 872.702198][T24150] RBP: 00007f6bd36b8090 R08: 0000000000000000 R09: 0000000000000000 [ 872.702212][T24150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.702225][T24150] R13: 00007f6bd2a26038 R14: 00007f6bd2a25fa0 R15: 00007ffc6efc4018 [ 872.702260][T24150] [ 873.311189][T24167] netlink: 'syz.5.5285': attribute type 4 has an invalid length. [ 873.321436][T24138] netlink: 'syz.9.5276': attribute type 4 has an invalid length. [ 873.345546][T24167] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5285'. [ 873.434663][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5276'. [ 873.443654][T24174] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5287'. [ 873.505511][T24138] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5276'. [ 873.539784][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5276'. [ 873.702833][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5289'. [ 874.043675][T24192] syzkaller0: entered promiscuous mode [ 874.078542][T24192] syzkaller0: entered allmulticast mode [ 874.282254][T24202] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 874.330521][T24205] Cannot find set identified by id 65534 to match [ 874.385225][T24203] netlink: 'syz.5.5294': attribute type 63 has an invalid length. [ 874.385225][T24202] netlink: 'syz.5.5294': attribute type 63 has an invalid length. [ 874.385254][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5294'. [ 874.425072][T24203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5294'. [ 874.458584][T24210] FAULT_INJECTION: forcing a failure. [ 874.458584][T24210] name failslab, interval 1, probability 0, space 0, times 0 [ 874.474088][T24210] CPU: 1 UID: 0 PID: 24210 Comm: syz.8.5296 Not tainted syzkaller #0 PREEMPT(full) [ 874.474119][T24210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 874.474133][T24210] Call Trace: [ 874.474144][T24210] [ 874.474154][T24210] dump_stack_lvl+0xe8/0x150 [ 874.474195][T24210] should_fail_ex+0x40c/0x560 [ 874.474227][T24210] should_failslab+0xa8/0x100 [ 874.474264][T24210] __kmalloc_cache_noprof+0xa8/0x660 [ 874.474295][T24210] ? rtnl_newlink+0x143/0x1c30 [ 874.474319][T24210] ? rtnl_newlink+0x143/0x1c30 [ 874.474350][T24210] rtnl_newlink+0x143/0x1c30 [ 874.474377][T24210] ? kasan_save_track+0x4f/0x80 [ 874.474403][T24210] ? kasan_save_track+0x3e/0x80 [ 874.474431][T24210] ? __kasan_slab_free+0x5c/0x80 [ 874.474456][T24210] ? kmem_cache_free+0x182/0x650 [ 874.474482][T24210] ? nlmon_xmit+0xb0/0x100 [ 874.474501][T24210] ? dev_hard_start_xmit+0x2cd/0x830 [ 874.474527][T24210] ? __dev_queue_xmit+0x14c0/0x3820 [ 874.474554][T24210] ? __netlink_deliver_tap+0x5b4/0x860 [ 874.474580][T24210] ? netlink_deliver_tap+0x19c/0x1b0 [ 874.474606][T24210] ? netlink_unicast+0x77f/0x940 [ 874.474638][T24210] ? netlink_sendmsg+0x813/0xb40 [ 874.474668][T24210] ? __pfx_rtnl_newlink+0x10/0x10 [ 874.474690][T24210] ? do_syscall_64+0x174/0x580 [ 874.474720][T24210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.474780][T24210] ? kasan_quarantine_put+0xbb/0x1f0 [ 874.474808][T24210] ? lockdep_hardirqs_on+0x7a/0x110 [ 874.474844][T24210] ? nlmon_xmit+0xb0/0x100 [ 874.474863][T24210] ? kmem_cache_free+0x182/0x650 [ 874.474904][T24210] ? __lock_acquire+0x683/0x2cf0 [ 874.474939][T24210] ? __dev_queue_xmit+0x29b/0x3820 [ 874.474972][T24210] ? __local_bh_enable_ip+0xd0/0x130 [ 874.475000][T24210] ? lockdep_hardirqs_on+0x7a/0x110 [ 874.475029][T24210] ? __dev_queue_xmit+0x29b/0x3820 [ 874.475057][T24210] ? __local_bh_enable_ip+0xd0/0x130 [ 874.475081][T24210] ? __dev_queue_xmit+0x29b/0x3820 [ 874.475118][T24210] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 874.475144][T24210] ? __pfx_rtnl_newlink+0x10/0x10 [ 874.475183][T24210] ? __pfx_rtnl_newlink+0x10/0x10 [ 874.475206][T24210] rtnetlink_rcv_msg+0x802/0xc00 [ 874.475234][T24210] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 874.475258][T24210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 874.475281][T24210] ? ref_tracker_free+0x689/0x830 [ 874.475314][T24210] ? __pfx_ref_tracker_free+0x10/0x10 [ 874.475352][T24210] netlink_rcv_skb+0x226/0x4a0 [ 874.475379][T24210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 874.475404][T24210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.475444][T24210] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.475471][T24210] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.475503][T24210] netlink_unicast+0x7bb/0x940 [ 874.475540][T24210] netlink_sendmsg+0x813/0xb40 [ 874.475579][T24210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.475611][T24210] ? aa_sock_msg_perm+0xf1/0x1b0 [ 874.475651][T24210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.475678][T24210] sock_sendmsg_nosec+0x13a/0x180 [ 874.475716][T24210] ____sys_sendmsg+0x54e/0x850 [ 874.475750][T24210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.475787][T24210] ? import_iovec+0x73/0xa0 [ 874.475812][T24210] ___sys_sendmsg+0x2a5/0x360 [ 874.475839][T24210] ? __lock_acquire+0x683/0x2cf0 [ 874.475874][T24210] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.475941][T24210] ? __fget_files+0x2a/0x420 [ 874.475971][T24210] ? __fget_files+0x3a2/0x420 [ 874.476012][T24210] __x64_sys_sendmsg+0x1b1/0x290 [ 874.476045][T24210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.476091][T24210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.476115][T24210] do_syscall_64+0x174/0x580 [ 874.476145][T24210] ? trace_irq_disable+0x3b/0x140 [ 874.476173][T24210] ? clear_bhb_loop+0x40/0x90 [ 874.476199][T24210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.476221][T24210] RIP: 0033:0x7fea9b99e0d9 [ 874.476241][T24210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.476261][T24210] RSP: 002b:00007fea9c7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.476285][T24210] RAX: ffffffffffffffda RBX: 00007fea9bc25fa0 RCX: 00007fea9b99e0d9 [ 874.476302][T24210] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 874.476316][T24210] RBP: 00007fea9c7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 874.476329][T24210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.476342][T24210] R13: 00007fea9bc26038 R14: 00007fea9bc25fa0 R15: 00007ffe49cb2ac8 [ 874.476378][T24210] [ 875.217720][T24222] FAULT_INJECTION: forcing a failure. [ 875.217720][T24222] name failslab, interval 1, probability 0, space 0, times 0 [ 875.261823][T24222] CPU: 0 UID: 0 PID: 24222 Comm: syz.8.5298 Not tainted syzkaller #0 PREEMPT(full) [ 875.261854][T24222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.261867][T24222] Call Trace: [ 875.261878][T24222] [ 875.261888][T24222] dump_stack_lvl+0xe8/0x150 [ 875.261930][T24222] should_fail_ex+0x40c/0x560 [ 875.261967][T24222] should_failslab+0xa8/0x100 [ 875.262004][T24222] __kmalloc_cache_noprof+0xa8/0x660 [ 875.262044][T24222] ? nft_pernet+0x23/0x240 [ 875.262164][T24222] ? nf_tables_commit+0x9c8/0xad90 [ 875.262186][T24222] ? nf_tables_commit+0x9c8/0xad90 [ 875.262217][T24222] nf_tables_commit+0x9c8/0xad90 [ 875.262245][T24222] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 875.262286][T24222] ? nla_validate_array+0xfc/0x260 [ 875.262331][T24222] ? __pfx_nf_tables_commit+0x10/0x10 [ 875.262373][T24222] ? __pfx___nla_validate_parse+0x10/0x10 [ 875.262413][T24222] ? __pfx_nf_tables_newset+0x10/0x10 [ 875.262435][T24222] ? nft_pernet+0x23/0x240 [ 875.262464][T24222] ? nfnl_pernet+0x23/0x240 [ 875.262523][T24222] nfnetlink_rcv+0x1caf/0x28c0 [ 875.262589][T24222] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 875.262633][T24222] ? ref_tracker_free+0x689/0x830 [ 875.262690][T24222] ? skb_clone+0x246/0x3a0 [ 875.262726][T24222] ? __netlink_deliver_tap+0x811/0x860 [ 875.262765][T24222] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.262794][T24222] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.262829][T24222] netlink_unicast+0x7bb/0x940 [ 875.262869][T24222] netlink_sendmsg+0x813/0xb40 [ 875.262910][T24222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.262945][T24222] ? aa_sock_msg_perm+0xf1/0x1b0 [ 875.262978][T24222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.263006][T24222] sock_sendmsg_nosec+0x13a/0x180 [ 875.263044][T24222] ____sys_sendmsg+0x54e/0x850 [ 875.263083][T24222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.263122][T24222] ? import_iovec+0x73/0xa0 [ 875.263149][T24222] ___sys_sendmsg+0x2a5/0x360 [ 875.263176][T24222] ? __lock_acquire+0x683/0x2cf0 [ 875.263214][T24222] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.263294][T24222] ? __fget_files+0x2a/0x420 [ 875.263323][T24222] ? __fget_files+0x3a2/0x420 [ 875.263364][T24222] __x64_sys_sendmsg+0x1b1/0x290 [ 875.263395][T24222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.263442][T24222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.263468][T24222] do_syscall_64+0x174/0x580 [ 875.263499][T24222] ? trace_irq_disable+0x3b/0x140 [ 875.263536][T24222] ? clear_bhb_loop+0x40/0x90 [ 875.263563][T24222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.263584][T24222] RIP: 0033:0x7fea9b99e0d9 [ 875.263605][T24222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.263622][T24222] RSP: 002b:00007fea9c7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.263645][T24222] RAX: ffffffffffffffda RBX: 00007fea9bc25fa0 RCX: 00007fea9b99e0d9 [ 875.263661][T24222] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 875.263674][T24222] RBP: 00007fea9c7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 875.263688][T24222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 875.263701][T24222] R13: 00007fea9bc26038 R14: 00007fea9bc25fa0 R15: 00007ffe49cb2ac8 [ 875.263736][T24222] [ 875.879186][T24219] netlink: 'syz.6.5299': attribute type 2 has an invalid length. [ 875.897121][T24223] tipc: Enabling of bearer rejected, failed to enable media [ 876.059321][T24237] openvswitch: netlink: Message has 4 unknown bytes. [ 876.060316][T24225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.083490][T24225] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.102184][T24225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.173079][T24225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.182934][T24225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.196965][T24225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 876.207704][T24225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.223466][T24225] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 876.233721][T24225] veth1_vlan: left promiscuous mode [ 876.240910][T24225] veth0_vlan: left promiscuous mode [ 876.248803][T24225] veth0_vlan: entered promiscuous mode [ 876.257977][T24225] veth1_vlan: entered promiscuous mode [ 876.272055][T24225] veth1_macvtap: left promiscuous mode [ 876.279352][T24225] veth0_macvtap: left promiscuous mode [ 876.286933][T24225] veth0_macvtap: entered promiscuous mode [ 876.295843][T24225] veth1_macvtap: entered promiscuous mode [ 876.311866][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 876.320909][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.337563][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 876.357615][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 876.372656][T24225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.382329][T24225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 876.394065][T24225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 876.408396][T24225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 876.417310][T24225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 876.425504][T24225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 876.433062][T24225] ip6gre1: left promiscuous mode [ 876.440218][T24225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 876.448701][T24225] 8021q: adding VLAN 0 to HW filter on device bond7 [ 876.458780][T24225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 876.482472][T24235] netlink: 'syz.7.5301': attribute type 12 has an invalid length. [ 876.666868][T24250] netlink: 'syz.5.5307': attribute type 9 has an invalid length. [ 876.733563][T24251] FAULT_INJECTION: forcing a failure. [ 876.733563][T24251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.747434][T24251] CPU: 1 UID: 0 PID: 24251 Comm: syz.9.5305 Not tainted syzkaller #0 PREEMPT(full) [ 876.747463][T24251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.747477][T24251] Call Trace: [ 876.747486][T24251] [ 876.747496][T24251] dump_stack_lvl+0xe8/0x150 [ 876.747534][T24251] should_fail_ex+0x40c/0x560 [ 876.747567][T24251] strncpy_from_user+0x36/0x2c0 [ 876.747592][T24251] ? lock_acquire+0x106/0x350 [ 876.747626][T24251] strncpy_from_user_nofault+0x71/0x150 [ 876.747698][T24251] bpf_probe_read_compat_str+0xe1/0x180 [ 876.747728][T24251] bpf_prog_1ebe9639b4d65d7c+0x41/0x70 [ 876.747751][T24251] __bpf_prog_test_run_raw_tp+0x329/0xa20 [ 876.747792][T24251] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 876.747832][T24251] bpf_prog_test_run_raw_tp+0x576/0x7e0 [ 876.747871][T24251] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 876.747900][T24251] ? __fget_files+0x2a/0x420 [ 876.747937][T24251] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 876.747966][T24251] bpf_prog_test_run+0x2c5/0x340 [ 876.748001][T24251] __sys_bpf+0xa22/0xd90 [ 876.748039][T24251] ? __pfx___sys_bpf+0x10/0x10 [ 876.748079][T24251] ? __fget_files+0x2a/0x420 [ 876.748136][T24251] ? ksys_write+0x242/0x270 [ 876.748163][T24251] ? __pfx_ksys_write+0x10/0x10 [ 876.748191][T24251] __x64_sys_bpf+0xba/0xd0 [ 876.748219][T24251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.748245][T24251] do_syscall_64+0x174/0x580 [ 876.748276][T24251] ? trace_irq_disable+0x3b/0x140 [ 876.748304][T24251] ? clear_bhb_loop+0x40/0x90 [ 876.748332][T24251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.748354][T24251] RIP: 0033:0x7fab0df9e0d9 [ 876.748375][T24251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.748393][T24251] RSP: 002b:00007fab0ee72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 876.748417][T24251] RAX: ffffffffffffffda RBX: 00007fab0e225fa0 RCX: 00007fab0df9e0d9 [ 876.748434][T24251] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 876.748448][T24251] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 876.748462][T24251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.748475][T24251] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 876.748511][T24251] [ 877.168733][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.178172][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.199538][T24265] openvswitch: netlink: Message has 8 unknown bytes. [ 877.233675][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.242783][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.260206][ T6364] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 877.346807][ T6368] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.381222][ T6368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.425414][ T6368] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.469571][ T6368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.491668][T24267] __nla_validate_parse: 3 callbacks suppressed [ 877.491690][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5313'. [ 877.513171][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5314'. [ 877.572680][T24271] vlan2: entered promiscuous mode [ 877.581795][T24267] netlink: 'syz.9.5313': attribute type 1 has an invalid length. [ 877.586842][T24271] syz_tun: entered promiscuous mode [ 877.602993][T24267] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5313'. [ 877.683258][T24273] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5316'. [ 878.102651][T24291] FAULT_INJECTION: forcing a failure. [ 878.102651][T24291] name failslab, interval 1, probability 0, space 0, times 0 [ 878.160964][T24291] CPU: 0 UID: 0 PID: 24291 Comm: syz.6.5322 Not tainted syzkaller #0 PREEMPT(full) [ 878.160998][T24291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.161011][T24291] Call Trace: [ 878.161021][T24291] [ 878.161031][T24291] dump_stack_lvl+0xe8/0x150 [ 878.161072][T24291] should_fail_ex+0x40c/0x560 [ 878.161106][T24291] should_failslab+0xa8/0x100 [ 878.161143][T24291] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 878.161171][T24291] ? __mutex_trylock_common+0x15f/0x270 [ 878.161194][T24291] ? radix_tree_node_alloc+0x7e/0x3a0 [ 878.161223][T24291] ? radix_tree_node_alloc+0x7e/0x3a0 [ 878.161261][T24291] radix_tree_node_alloc+0x7e/0x3a0 [ 878.161299][T24291] idr_get_free+0x28f/0xa10 [ 878.161341][T24291] idr_alloc_u32+0x18a/0x330 [ 878.161492][T24291] ? __pfx_idr_alloc_u32+0x10/0x10 [ 878.161531][T24291] ? net_generic+0x1e/0x240 [ 878.161629][T24291] tcf_idr_check_alloc+0x623/0x7f0 [ 878.161690][T24291] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 878.161717][T24291] ? __nla_parse+0x40/0x60 [ 878.161756][T24291] tcf_gate_init+0x344/0x15a0 [ 878.161811][T24291] ? __pfx___nla_validate_parse+0x10/0x10 [ 878.161844][T24291] ? __pfx_tcf_gate_init+0x10/0x10 [ 878.161869][T24291] ? __lock_acquire+0x683/0x2cf0 [ 878.161907][T24291] ? __pfx___nla_validate_parse+0x10/0x10 [ 878.161938][T24291] ? __lock_acquire+0x683/0x2cf0 [ 878.161981][T24291] ? __nla_validate_parse+0x2429/0x2d50 [ 878.162029][T24291] ? __nla_parse+0x40/0x60 [ 878.162066][T24291] tcf_action_init_1+0x4ba/0x740 [ 878.162099][T24291] ? __pfx_tcf_action_init_1+0x10/0x10 [ 878.162123][T24291] ? _raw_read_unlock+0x28/0x50 [ 878.162181][T24291] ? tc_action_load_ops+0x247/0x540 [ 878.162221][T24291] ? is_bpf_text_address+0x292/0x2b0 [ 878.162260][T24291] ? __nla_parse+0x40/0x60 [ 878.162295][T24291] tcf_action_init+0x30e/0xb10 [ 878.162331][T24291] ? __pfx_tcf_action_init+0x10/0x10 [ 878.162384][T24291] ? netlink_sendmsg+0x813/0xb40 [ 878.162413][T24291] ? sock_sendmsg_nosec+0x13a/0x180 [ 878.162447][T24291] ? __pfx___nla_validate_parse+0x10/0x10 [ 878.162478][T24291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.162544][T24291] tc_ctl_action+0x43b/0xc70 [ 878.162582][T24291] ? __pfx_tc_ctl_action+0x10/0x10 [ 878.162613][T24291] ? rcu_is_watching+0x15/0xb0 [ 878.162686][T24291] ? __pfx_tc_ctl_action+0x10/0x10 [ 878.162711][T24291] rtnetlink_rcv_msg+0x7b9/0xc00 [ 878.162743][T24291] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 878.162769][T24291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 878.162803][T24291] ? ref_tracker_free+0x689/0x830 [ 878.162838][T24291] ? __pfx_ref_tracker_free+0x10/0x10 [ 878.162880][T24291] netlink_rcv_skb+0x226/0x4a0 [ 878.162923][T24291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 878.162952][T24291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.162996][T24291] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.163024][T24291] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.163057][T24291] netlink_unicast+0x7bb/0x940 [ 878.163096][T24291] netlink_sendmsg+0x813/0xb40 [ 878.163125][T24291] ? __fget_files+0x2a/0x420 [ 878.163166][T24291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.163201][T24291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 878.163233][T24291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.163261][T24291] sock_sendmsg_nosec+0x13a/0x180 [ 878.163298][T24291] __sys_sendto+0x408/0x5a0 [ 878.163324][T24291] ? ksys_write+0x1e6/0x270 [ 878.163350][T24291] ? __pfx___sys_sendto+0x10/0x10 [ 878.163373][T24291] ? __mutex_unlock_slowpath+0x731/0x900 [ 878.163439][T24291] ? __pfx_ksys_write+0x10/0x10 [ 878.163468][T24291] __x64_sys_sendto+0xde/0x100 [ 878.163495][T24291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.163517][T24291] do_syscall_64+0x174/0x580 [ 878.163545][T24291] ? trace_irq_disable+0x3b/0x140 [ 878.163573][T24291] ? clear_bhb_loop+0x40/0x90 [ 878.163600][T24291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.163622][T24291] RIP: 0033:0x7ff10a79e0d9 [ 878.163643][T24291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.163662][T24291] RSP: 002b:00007ff10b5f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 878.163685][T24291] RAX: ffffffffffffffda RBX: 00007ff10aa25fa0 RCX: 00007ff10a79e0d9 [ 878.163701][T24291] RDX: 0000000000000068 RSI: 0000200000000000 RDI: 0000000000000003 [ 878.163716][T24291] RBP: 00007ff10b5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 878.163729][T24291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.163743][T24291] R13: 00007ff10aa26038 R14: 00007ff10aa25fa0 R15: 00007ffdd4338808 [ 878.163780][T24291] [ 878.399613][T24295] netlink: zone id is out of range [ 878.677010][T24295] netlink: zone id is out of range [ 878.682282][T24295] netlink: zone id is out of range [ 878.712591][T24295] netlink: zone id is out of range [ 878.732968][T24295] netlink: zone id is out of range [ 878.755365][T24295] netlink: zone id is out of range [ 878.779176][T24295] netlink: zone id is out of range [ 878.791330][T24295] netlink: zone id is out of range [ 878.825366][T24295] netlink: zone id is out of range [ 879.297260][T24280] netlink: 'syz.8.5320': attribute type 10 has an invalid length. [ 879.322430][T24317] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5330'. [ 879.454967][T24321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5332'. [ 879.733865][T24330] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5336'. [ 880.002016][T24334] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 880.661979][T24359] netlink: 'syz.6.5347': attribute type 13 has an invalid length. [ 880.719636][T24362] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5347'. [ 881.128051][T24372] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 881.295538][T24379] x_tables: duplicate underflow at hook 1 [ 881.388125][T24372] 8021q: adding VLAN 0 to HW filter on device bond11 [ 881.410518][T24388] FAULT_INJECTION: forcing a failure. [ 881.410518][T24388] name failslab, interval 1, probability 0, space 0, times 0 [ 881.442879][T24388] CPU: 1 UID: 0 PID: 24388 Comm: syz.6.5355 Not tainted syzkaller #0 PREEMPT(full) [ 881.442914][T24388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.442928][T24388] Call Trace: [ 881.442937][T24388] [ 881.442947][T24388] dump_stack_lvl+0xe8/0x150 [ 881.442986][T24388] should_fail_ex+0x40c/0x560 [ 881.443020][T24388] should_failslab+0xa8/0x100 [ 881.443057][T24388] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 881.443085][T24388] ? local_lock_release+0x9c/0x160 [ 881.443112][T24388] ? __alloc_skb+0x1d7/0x7a0 [ 881.443134][T24388] ? __alloc_skb+0x1d7/0x7a0 [ 881.443165][T24388] __alloc_skb+0x1d7/0x7a0 [ 881.443195][T24388] netlink_sendmsg+0x5d4/0xb40 [ 881.443244][T24388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.443279][T24388] ? aa_sock_msg_perm+0xf1/0x1b0 [ 881.443311][T24388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.443339][T24388] sock_sendmsg_nosec+0x13a/0x180 [ 881.443375][T24388] ____sys_sendmsg+0x54e/0x850 [ 881.443408][T24388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.443445][T24388] ? import_iovec+0x73/0xa0 [ 881.443469][T24388] ___sys_sendmsg+0x2a5/0x360 [ 881.443494][T24388] ? __lock_acquire+0x683/0x2cf0 [ 881.443529][T24388] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.443594][T24388] ? __fget_files+0x2a/0x420 [ 881.443624][T24388] ? __fget_files+0x3a2/0x420 [ 881.443665][T24388] __x64_sys_sendmsg+0x1b1/0x290 [ 881.443696][T24388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 881.443742][T24388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.443766][T24388] do_syscall_64+0x174/0x580 [ 881.443797][T24388] ? trace_irq_disable+0x3b/0x140 [ 881.443827][T24388] ? clear_bhb_loop+0x40/0x90 [ 881.443854][T24388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.443876][T24388] RIP: 0033:0x7ff10a79e0d9 [ 881.443897][T24388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.443916][T24388] RSP: 002b:00007ff10b5f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.443940][T24388] RAX: ffffffffffffffda RBX: 00007ff10aa25fa0 RCX: 00007ff10a79e0d9 [ 881.443956][T24388] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 881.443970][T24388] RBP: 00007ff10b5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 881.443983][T24388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.443996][T24388] R13: 00007ff10aa26038 R14: 00007ff10aa25fa0 R15: 00007ffdd4338808 [ 881.444030][T24388] [ 881.751758][T24393] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5356'. [ 881.772561][T24378] bond11: (slave veth3): Enslaving as an active interface with a down link [ 881.790933][T24381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.893748][T24381] bond11: (slave batadv0): making interface the new active one [ 881.972540][T24381] batadv0: entered promiscuous mode [ 881.997407][T24381] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 882.059231][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5358'. [ 882.268089][T24405] syz.8.5362: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 882.320627][T24411] FAULT_INJECTION: forcing a failure. [ 882.320627][T24411] name failslab, interval 1, probability 0, space 0, times 0 [ 882.352452][T24405] CPU: 0 UID: 0 PID: 24405 Comm: syz.8.5362 Not tainted syzkaller #0 PREEMPT(full) [ 882.352483][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.352498][T24405] Call Trace: [ 882.352507][T24405] [ 882.352518][T24405] dump_stack_lvl+0xe8/0x150 [ 882.352559][T24405] warn_alloc+0x24c/0x270 [ 882.352594][T24405] ? stack_depot_save_flags+0x33/0x800 [ 882.352628][T24405] ? __pfx_warn_alloc+0x10/0x10 [ 882.352660][T24405] ? kasan_save_track+0x3e/0x80 [ 882.352689][T24405] ? __kasan_kmalloc+0x93/0xb0 [ 882.352722][T24405] ? xsk_setsockopt+0x52a/0x960 [ 882.352873][T24405] ? do_sock_setsockopt+0x17c/0x1b0 [ 882.352901][T24405] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 882.352926][T24405] ? do_syscall_64+0x174/0x580 [ 882.352958][T24405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.352994][T24405] __vmalloc_node_range_noprof+0x12c/0x1730 [ 882.353056][T24405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 882.353090][T24405] ? __kasan_kmalloc+0x93/0xb0 [ 882.353128][T24405] ? __kmalloc_cache_noprof+0x32d/0x660 [ 882.353158][T24405] ? __kmalloc_cache_noprof+0x150/0x660 [ 882.353189][T24405] vmalloc_user_noprof+0xad/0xe0 [ 882.353218][T24405] ? xskq_create+0xbf/0x170 [ 882.353247][T24405] xskq_create+0xbf/0x170 [ 882.353280][T24405] xsk_init_queue+0x8a/0xe0 [ 882.353311][T24405] xsk_setsockopt+0x52a/0x960 [ 882.353338][T24405] ? __fget_files+0x2a/0x420 [ 882.353372][T24405] ? __pfx_xsk_setsockopt+0x10/0x10 [ 882.353411][T24405] ? __pfx_aa_sk_perm+0x10/0x10 [ 882.353440][T24405] ? aa_sock_opt_perm+0xff/0x1a0 [ 882.353471][T24405] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 882.353502][T24405] ? __pfx_xsk_setsockopt+0x10/0x10 [ 882.353533][T24405] do_sock_setsockopt+0x17c/0x1b0 [ 882.353566][T24405] __x64_sys_setsockopt+0x13d/0x1b0 [ 882.353596][T24405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.353622][T24405] do_syscall_64+0x174/0x580 [ 882.353653][T24405] ? trace_irq_disable+0x3b/0x140 [ 882.353683][T24405] ? clear_bhb_loop+0x40/0x90 [ 882.353713][T24405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.353735][T24405] RIP: 0033:0x7fea9b99e0d9 [ 882.353756][T24405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.353776][T24405] RSP: 002b:00007fea9c7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 882.353801][T24405] RAX: ffffffffffffffda RBX: 00007fea9bc25fa0 RCX: 00007fea9b99e0d9 [ 882.353818][T24405] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 882.353832][T24405] RBP: 00007fea9ba35024 R08: 0000000000000004 R09: 0000000000000000 [ 882.353846][T24405] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.353860][T24405] R13: 00007fea9bc26038 R14: 00007fea9bc25fa0 R15: 00007ffe49cb2ac8 [ 882.353904][T24405] [ 882.353945][T24405] Mem-Info: [ 882.400923][T24411] CPU: 1 UID: 0 PID: 24411 Comm: syz.9.5364 Not tainted syzkaller #0 PREEMPT(full) [ 882.401007][T24411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.401054][T24411] Call Trace: [ 882.401078][T24411] [ 882.401108][T24411] dump_stack_lvl+0xe8/0x150 [ 882.401216][T24411] should_fail_ex+0x40c/0x560 [ 882.401309][T24411] should_failslab+0xa8/0x100 [ 882.401406][T24411] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 882.401499][T24411] ? kasprintf+0xe2/0x140 [ 882.401563][T24411] ? kasprintf+0xe2/0x140 [ 882.401647][T24411] kvasprintf+0xeb/0x1a0 [ 882.401709][T24411] ? sock_sendmsg_nosec+0x13a/0x180 [ 882.401822][T24411] ? ____sys_sendmsg+0x54e/0x850 [ 882.401901][T24411] ? ___sys_sendmsg+0x2a5/0x360 [ 882.401976][T24411] ? __pfx_kvasprintf+0x10/0x10 [ 882.402076][T24411] kasprintf+0xe2/0x140 [ 882.402162][T24411] ? __pfx_kasprintf+0x10/0x10 [ 882.402256][T24411] nf_tables_set_alloc_name+0x10e/0x710 [ 882.402410][T24411] ? __kmalloc_noprof+0x396/0x720 [ 882.402491][T24411] ? __kmalloc_noprof+0x1ad/0x720 [ 882.402575][T24411] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 882.402649][T24411] ? nla_strdup+0xb8/0x140 [ 882.402755][T24411] nf_tables_newset+0x13aa/0x2570 [ 882.402859][T24411] ? __pfx_nf_tables_newset+0x10/0x10 [ 882.402984][T24411] ? __nla_parse+0x40/0x60 [ 882.403075][T24411] nfnetlink_rcv+0x1288/0x28c0 [ 882.403287][T24411] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 882.403486][T24411] ? netlink_deliver_tap+0x2e/0x1b0 [ 882.403593][T24411] ? netlink_deliver_tap+0x2e/0x1b0 [ 882.403667][T24411] ? netlink_deliver_tap+0x2e/0x1b0 [ 882.403760][T24411] netlink_unicast+0x7bb/0x940 [ 882.403857][T24411] netlink_sendmsg+0x813/0xb40 [ 882.403963][T24411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.404052][T24411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 882.404148][T24411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.404223][T24411] sock_sendmsg_nosec+0x13a/0x180 [ 882.404325][T24411] ____sys_sendmsg+0x54e/0x850 [ 882.404411][T24411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.404535][T24411] ? import_iovec+0x73/0xa0 [ 882.404606][T24411] ___sys_sendmsg+0x2a5/0x360 [ 882.404679][T24411] ? __lock_acquire+0x683/0x2cf0 [ 882.404767][T24411] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.404929][T24411] ? __fget_files+0x2a/0x420 [ 882.405012][T24411] ? __fget_files+0x3a2/0x420 [ 882.405102][T24411] __x64_sys_sendmsg+0x1b1/0x290 [ 882.405132][T24411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 882.405178][T24411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.405199][T24411] do_syscall_64+0x174/0x580 [ 882.405225][T24411] ? trace_irq_disable+0x3b/0x140 [ 882.405250][T24411] ? clear_bhb_loop+0x40/0x90 [ 882.405273][T24411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.405292][T24411] RIP: 0033:0x7fab0df9e0d9 [ 882.405310][T24411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.405326][T24411] RSP: 002b:00007fab0ee72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.405344][T24411] RAX: ffffffffffffffda RBX: 00007fab0e225fa0 RCX: 00007fab0df9e0d9 [ 882.405357][T24411] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 882.405368][T24411] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 882.405379][T24411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 882.405388][T24411] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 882.405415][T24411] [ 883.032432][T24405] active_anon:7663 inactive_anon:0 isolated_anon:0 [ 883.032432][T24405] active_file:0 inactive_file:44357 isolated_file:0 [ 883.032432][T24405] unevictable:768 dirty:297 writeback:0 [ 883.032432][T24405] slab_reclaimable:11660 slab_unreclaimable:110624 [ 883.032432][T24405] mapped:32262 shmem:1361 pagetables:1788 [ 883.032432][T24405] sec_pagetables:0 bounce:0 [ 883.032432][T24405] kernel_misc_reclaimable:0 [ 883.032432][T24405] free:1302194 free_pcp:13378 free_cma:0 [ 883.098443][T24410] net_ratelimit: 3 callbacks suppressed [ 883.098466][T24410] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 883.166154][T24405] Node 0 active_anon:30828kB inactive_anon:0kB active_file:0kB inactive_file:177228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129272kB dirty:1196kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15340kB pagetables:6940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 883.284332][T24405] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 883.382695][T24405] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.472146][T24405] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 883.492318][T24437] ªªªªªª: renamed from vlan0 (while UP) [ 883.519772][T24405] Node 0 DMA32 free:1249100kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30728kB inactive_anon:0kB active_file:0kB inactive_file:177228kB unevictable:1536kB writepending:1196kB zspages:0kB present:3129332kB managed:2548500kB mlocked:0kB bounce:0kB free_pcp:49764kB local_pcp:18924kB free_cma:0kB [ 883.639745][T24405] lowmem_reserve[]: 0 0 0 0 0 [ 883.660754][T24428] "syz.9.5366" (24428) uses obsolete ecb(arc4) skcipher [ 883.681545][T24435] __nla_validate_parse: 1 callbacks suppressed [ 883.681568][T24435] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5367'. [ 883.701485][T24405] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.768497][T24440] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5362'. [ 883.796704][T24405] lowmem_reserve[]: 0 0 0 0 0 [ 883.811221][T24440] netlink: 240 bytes leftover after parsing attributes in process `syz.8.5362'. [ 883.864069][T24405] Node 1 Normal free:3947276kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.931852][T24405] lowmem_reserve[]: 0 0 0 0 0 [ 883.944976][T24405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 883.966204][T24405] Node 0 DMA32: 1359*4kB (UME) 829*8kB (UME) 683*16kB (UME) 908*32kB (UME) 331*64kB (UME) 64*128kB (UME) 24*256kB (UME) 30*512kB (UM) 8*1024kB (UM) 4*2048kB (UM) 276*4096kB (UM) = 1249812kB [ 883.995303][T24405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 884.014792][T24405] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 6*16kB (UM) 6*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3947276kB [ 884.066026][T24405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.129408][T24405] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 884.201815][T24405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.268790][T24405] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 884.347718][T24405] 45672 total pagecache pages [ 884.365885][T24405] 0 pages in swap cache [ 884.394622][T24405] Free swap = 124996kB [ 884.417860][T24405] Total swap = 124996kB [ 884.431397][T24405] 2097051 pages RAM [ 884.444760][T24405] 0 pages HighMem/MovableOnly [ 884.469338][T24405] 428246 pages reserved [ 884.476651][T24405] 0 pages cma reserved [ 884.685908][T24466] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 884.732887][T24474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5379'. [ 884.759192][T24474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5379'. [ 885.471388][T24494] netlink: 'syz.7.5387': attribute type 13 has an invalid length. [ 885.505344][T24494] netlink: 'syz.7.5387': attribute type 17 has an invalid length. [ 885.945607][T24502] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5390'. [ 886.155859][T24494] 0ªî{X¹¦: left allmulticast mode [ 886.393591][T24494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.428877][T24494] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.571500][T24494] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.578808][T24494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.383471][T24494] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.390741][T24494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.478589][T24537] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 887.519469][T24494] veth1_macvtap: left promiscuous mode [ 887.530752][T24494] veth0_macvtap: left promiscuous mode [ 887.549208][T24494] veth0_macvtap: entered promiscuous mode [ 887.576005][T24494] veth1_macvtap: entered promiscuous mode [ 887.605848][T24494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 887.627919][T24494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 887.649648][T24494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 887.667457][T24494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.679347][T24539] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 887.693278][T24494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 887.708834][T24494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 887.728555][T24494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 887.744100][T24494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 887.766020][T24494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.777693][T24494] 8021q: adding VLAN 0 to HW filter on device bond6 [ 887.793218][T24494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 887.812268][T24494] 8021q: adding VLAN 0 to HW filter on device bond8 [ 887.830719][T24494] 8021q: adding VLAN 0 to HW filter on device bond9 [ 887.841820][T24494] 8021q: adding VLAN 0 to HW filter on device bond10 [ 887.853623][T24494] 8021q: adding VLAN 0 to HW filter on device bond11 [ 887.865858][T24494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.929172][ T7355] xfrm0 speed is unknown, defaulting to 1000 [ 887.959871][ T6364] bond11: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 888.002741][T24524] IPVS: Unknown mcast interface: pimreg0 [ 888.034915][ T7354] xfrm0 speed is unknown, defaulting to 1000 [ 888.113087][ T7360] xfrm0 speed is unknown, defaulting to 1000 [ 888.211258][T24547] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5407'. [ 888.515643][T24560] FAULT_INJECTION: forcing a failure. [ 888.515643][T24560] name failslab, interval 1, probability 0, space 0, times 0 [ 888.575453][T24560] CPU: 0 UID: 0 PID: 24560 Comm: syz.8.5413 Not tainted syzkaller #0 PREEMPT(full) [ 888.575485][T24560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.575499][T24560] Call Trace: [ 888.575509][T24560] [ 888.575519][T24560] dump_stack_lvl+0xe8/0x150 [ 888.575559][T24560] should_fail_ex+0x40c/0x560 [ 888.575595][T24560] should_failslab+0xa8/0x100 [ 888.575633][T24560] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 888.575663][T24560] ? skb_clone+0x212/0x3a0 [ 888.575692][T24560] ? skb_clone+0x212/0x3a0 [ 888.575728][T24560] skb_clone+0x212/0x3a0 [ 888.575761][T24560] __netlink_deliver_tap+0x413/0x860 [ 888.575806][T24560] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.575838][T24560] netlink_deliver_tap+0x19c/0x1b0 [ 888.575869][T24560] netlink_unicast+0x77f/0x940 [ 888.575908][T24560] netlink_sendmsg+0x813/0xb40 [ 888.575949][T24560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.575983][T24560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 888.576016][T24560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.576046][T24560] sock_sendmsg_nosec+0x13a/0x180 [ 888.576086][T24560] ____sys_sendmsg+0x54e/0x850 [ 888.576121][T24560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.576159][T24560] ? import_iovec+0x73/0xa0 [ 888.576186][T24560] ___sys_sendmsg+0x2a5/0x360 [ 888.576213][T24560] ? __lock_acquire+0x683/0x2cf0 [ 888.576249][T24560] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.576319][T24560] ? __fget_files+0x2a/0x420 [ 888.576349][T24560] ? __fget_files+0x3a2/0x420 [ 888.576399][T24560] __x64_sys_sendmsg+0x1b1/0x290 [ 888.576432][T24560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.576482][T24560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.576507][T24560] do_syscall_64+0x174/0x580 [ 888.576538][T24560] ? trace_irq_disable+0x3b/0x140 [ 888.576567][T24560] ? clear_bhb_loop+0x40/0x90 [ 888.576594][T24560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.576617][T24560] RIP: 0033:0x7fea9b99e0d9 [ 888.576638][T24560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.576656][T24560] RSP: 002b:00007fea9c7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.576679][T24560] RAX: ffffffffffffffda RBX: 00007fea9bc25fa0 RCX: 00007fea9b99e0d9 [ 888.576695][T24560] RDX: 0000000004000890 RSI: 0000200000000080 RDI: 0000000000000003 [ 888.576710][T24560] RBP: 00007fea9c7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 888.576723][T24560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.576736][T24560] R13: 00007fea9bc26038 R14: 00007fea9bc25fa0 R15: 00007ffe49cb2ac8 [ 888.576772][T24560] [ 888.878139][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5413'. [ 889.188189][T24578] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 889.989303][T24610] netlink: ct family unspecified [ 890.019576][T24610] openvswitch: netlink: Actions may not be safe on all matching packets [ 890.298189][T24602] syzkaller0: entered promiscuous mode [ 890.312475][T24602] syzkaller0: entered allmulticast mode [ 890.704072][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5431'. [ 890.939622][T24642] netlink: 'syz.8.5433': attribute type 10 has an invalid length. [ 894.710773][T24621] netlink: 'syz.6.5429': attribute type 1 has an invalid length. [ 894.719028][T24621] netlink: 'syz.6.5429': attribute type 2 has an invalid length. [ 895.319416][ T1053] batadv0: left promiscuous mode [ 895.357281][T24671] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5443'. [ 895.465372][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5444'. [ 895.477929][T24674] netlink: 'syz.8.5444': attribute type 10 has an invalid length. [ 895.487788][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5444'. [ 895.560062][T24674] geneve2: entered promiscuous mode [ 895.571135][T24674] geneve2: entered allmulticast mode [ 895.645458][T24677] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5444'. [ 895.703410][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5444'. [ 895.737906][T24676] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5445'. [ 896.059155][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5449'. [ 896.343324][T24701] FAULT_INJECTION: forcing a failure. [ 896.343324][T24701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.380608][T24701] CPU: 1 UID: 0 PID: 24701 Comm: syz.5.5453 Not tainted syzkaller #0 PREEMPT(full) [ 896.380646][T24701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.380662][T24701] Call Trace: [ 896.380671][T24701] [ 896.380681][T24701] dump_stack_lvl+0xe8/0x150 [ 896.380723][T24701] should_fail_ex+0x40c/0x560 [ 896.380758][T24701] _copy_from_user+0x2d/0xb0 [ 896.380781][T24701] kstrtouint_from_user+0xd6/0x180 [ 896.380902][T24701] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 896.380950][T24701] proc_fail_nth_write+0x8e/0x210 [ 896.380984][T24701] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 896.381026][T24701] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 896.381057][T24701] vfs_write+0x296/0xba0 [ 896.381091][T24701] ? __pfx_vfs_write+0x10/0x10 [ 896.381115][T24701] ? __fget_files+0x2a/0x420 [ 896.381152][T24701] ? __fget_files+0x3a2/0x420 [ 896.381182][T24701] ? __fget_files+0x2a/0x420 [ 896.381223][T24701] ksys_write+0x150/0x270 [ 896.381248][T24701] ? __pfx_ksys_write+0x10/0x10 [ 896.381280][T24701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.381310][T24701] do_syscall_64+0x174/0x580 [ 896.381340][T24701] ? trace_irq_disable+0x3b/0x140 [ 896.381371][T24701] ? clear_bhb_loop+0x40/0x90 [ 896.381399][T24701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.381421][T24701] RIP: 0033:0x7f06fa95e90e [ 896.381443][T24701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 896.381462][T24701] RSP: 002b:00007f06fb7bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.381486][T24701] RAX: ffffffffffffffda RBX: 00007f06fb7c06c0 RCX: 00007f06fa95e90e [ 896.381502][T24701] RDX: 0000000000000001 RSI: 00007f06fb7c00a0 RDI: 0000000000000004 [ 896.381516][T24701] RBP: 00007f06fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 896.381530][T24701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 896.381543][T24701] R13: 00007f06fac26038 R14: 00007f06fac25fa0 R15: 00007ffff5d94218 [ 896.381581][T24701] [ 896.609685][T24705] ip_tables: iptables: counters copy to user failed while replacing table [ 896.637021][T24706] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5454'. [ 896.657717][T24706] netlink: 'syz.8.5454': attribute type 1 has an invalid length. [ 896.904342][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5457'. [ 896.969175][T24712] FAULT_INJECTION: forcing a failure. [ 896.969175][T24712] name failslab, interval 1, probability 0, space 0, times 0 [ 897.006443][T24712] CPU: 1 UID: 0 PID: 24712 Comm: syz.6.5457 Not tainted syzkaller #0 PREEMPT(full) [ 897.006473][T24712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.006488][T24712] Call Trace: [ 897.006497][T24712] [ 897.006507][T24712] dump_stack_lvl+0xe8/0x150 [ 897.006550][T24712] should_fail_ex+0x40c/0x560 [ 897.006584][T24712] should_failslab+0xa8/0x100 [ 897.006619][T24712] __kmalloc_cache_noprof+0xa8/0x660 [ 897.006651][T24712] ? nfnetlink_rcv+0x1021/0x28c0 [ 897.006677][T24712] ? nfnetlink_rcv+0x1021/0x28c0 [ 897.006709][T24712] nfnetlink_rcv+0x1021/0x28c0 [ 897.006772][T24712] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 897.006815][T24712] ? ref_tracker_free+0x689/0x830 [ 897.006870][T24712] ? skb_clone+0x246/0x3a0 [ 897.006904][T24712] ? __netlink_deliver_tap+0x811/0x860 [ 897.006943][T24712] ? netlink_deliver_tap+0x2e/0x1b0 [ 897.006970][T24712] ? netlink_deliver_tap+0x2e/0x1b0 [ 897.007005][T24712] netlink_unicast+0x7bb/0x940 [ 897.007043][T24712] netlink_sendmsg+0x813/0xb40 [ 897.007083][T24712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.007118][T24712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 897.007162][T24712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.007189][T24712] sock_sendmsg_nosec+0x13a/0x180 [ 897.007229][T24712] ____sys_sendmsg+0x54e/0x850 [ 897.007264][T24712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.007303][T24712] ? import_iovec+0x73/0xa0 [ 897.007330][T24712] ___sys_sendmsg+0x2a5/0x360 [ 897.007356][T24712] ? __lock_acquire+0x683/0x2cf0 [ 897.007395][T24712] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.007463][T24712] ? __fget_files+0x2a/0x420 [ 897.007493][T24712] ? __fget_files+0x3a2/0x420 [ 897.007536][T24712] __x64_sys_sendmsg+0x1b1/0x290 [ 897.007570][T24712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.007620][T24712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.007645][T24712] do_syscall_64+0x174/0x580 [ 897.007677][T24712] ? trace_irq_disable+0x3b/0x140 [ 897.007706][T24712] ? clear_bhb_loop+0x40/0x90 [ 897.007733][T24712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.007755][T24712] RIP: 0033:0x7ff10a79e0d9 [ 897.007776][T24712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.007797][T24712] RSP: 002b:00007ff10b5f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.007821][T24712] RAX: ffffffffffffffda RBX: 00007ff10aa25fa0 RCX: 00007ff10a79e0d9 [ 897.007837][T24712] RDX: 0000000004000890 RSI: 0000200000000080 RDI: 0000000000000003 [ 897.007852][T24712] RBP: 00007ff10b5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 897.007865][T24712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.007879][T24712] R13: 00007ff10aa26038 R14: 00007ff10aa25fa0 R15: 00007ffdd4338808 [ 897.007916][T24712] [ 897.308698][T24722] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5462'. [ 897.397354][T24724] FAULT_INJECTION: forcing a failure. [ 897.397354][T24724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.410573][T24724] CPU: 1 UID: 0 PID: 24724 Comm: syz.9.5463 Not tainted syzkaller #0 PREEMPT(full) [ 897.410603][T24724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.410618][T24724] Call Trace: [ 897.410627][T24724] [ 897.410637][T24724] dump_stack_lvl+0xe8/0x150 [ 897.410676][T24724] should_fail_ex+0x40c/0x560 [ 897.410709][T24724] _copy_from_iter+0x1d3/0x1660 [ 897.410738][T24724] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 897.410767][T24724] ? rcu_is_watching+0x15/0xb0 [ 897.410789][T24724] ? trace_kmem_cache_alloc+0x29/0xe0 [ 897.410818][T24724] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 897.410846][T24724] ? __pfx__copy_from_iter+0x10/0x10 [ 897.410876][T24724] ? __alloc_skb+0x276/0x7a0 [ 897.410898][T24724] ? __alloc_skb+0x276/0x7a0 [ 897.410929][T24724] ? netlink_sendmsg+0x650/0xb40 [ 897.410957][T24724] ? skb_put+0x112/0x210 [ 897.410985][T24724] netlink_sendmsg+0x6c0/0xb40 [ 897.411024][T24724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.411058][T24724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 897.411088][T24724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.411127][T24724] sock_sendmsg_nosec+0x13a/0x180 [ 897.411165][T24724] ____sys_sendmsg+0x54e/0x850 [ 897.411199][T24724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.411238][T24724] ? import_iovec+0x73/0xa0 [ 897.411263][T24724] ___sys_sendmsg+0x2a5/0x360 [ 897.411289][T24724] ? __lock_acquire+0x683/0x2cf0 [ 897.411327][T24724] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.411393][T24724] ? __fget_files+0x2a/0x420 [ 897.411424][T24724] ? __fget_files+0x3a2/0x420 [ 897.411466][T24724] __x64_sys_sendmsg+0x1b1/0x290 [ 897.411498][T24724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.411547][T24724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.411572][T24724] do_syscall_64+0x174/0x580 [ 897.411601][T24724] ? trace_irq_disable+0x3b/0x140 [ 897.411630][T24724] ? clear_bhb_loop+0x40/0x90 [ 897.411657][T24724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.411680][T24724] RIP: 0033:0x7fab0df9e0d9 [ 897.411699][T24724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.411718][T24724] RSP: 002b:00007fab0ee72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.411741][T24724] RAX: ffffffffffffffda RBX: 00007fab0e225fa0 RCX: 00007fab0df9e0d9 [ 897.411758][T24724] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 897.411772][T24724] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 897.411786][T24724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.411799][T24724] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 897.411835][T24724] [ 897.749660][T24726] bridge0: entered promiscuous mode [ 897.776609][T24726] bridge0: entered allmulticast mode [ 898.131624][T24738] bond9 (unregistering): Released all slaves [ 898.236038][T24752] netlink: 'syz.9.5471': attribute type 2 has an invalid length. [ 898.271897][T24746] netlink: 'syz.5.5470': attribute type 1 has an invalid length. [ 898.808281][T24769] ip6tnl1: entered allmulticast mode [ 899.062400][T24784] netlink: 'syz.9.5484': attribute type 63 has an invalid length. [ 900.045335][T24828] bridge0: port 4(batadv3) entered blocking state [ 900.080977][T24828] bridge0: port 4(batadv3) entered disabled state [ 900.109182][T24828] batadv3: entered allmulticast mode [ 900.133306][T24828] batadv3: entered promiscuous mode [ 900.283496][T24834] xfrm0 speed is unknown, defaulting to 1000 [ 900.526460][ T13] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 900.533733][T24843] __nla_validate_parse: 10 callbacks suppressed [ 900.537103][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5505'. [ 900.542997][ T13] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 900.577074][T24845] netlink: 'syz.6.5506': attribute type 1 has an invalid length. [ 900.629048][T24845] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 900.853768][T24859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5509'. [ 901.130988][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5510'. [ 901.253476][T24869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5512'. [ 901.318543][T24863] 8021q: adding VLAN 0 to HW filter on device bond9 [ 901.372555][T24867] bond9: (slave batadv4): Opening slave failed [ 901.842341][T24886] netlink: 'syz.9.5516': attribute type 10 has an invalid length. [ 902.351295][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5521'. [ 902.386891][T24908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5523'. [ 902.405400][T24908] 8021q: VLANs not supported on ip_vti0 [ 902.593674][T24910] syzkaller0: entered promiscuous mode [ 902.615814][T24910] syzkaller0: entered allmulticast mode [ 903.173581][T24927] Bluetooth: MGMT ver 1.23 [ 903.858237][T24954] ip6gre2: entered promiscuous mode [ 903.878936][T24954] ip6gre2: entered allmulticast mode [ 903.897955][T24957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 903.970542][T24926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.307665][T24972] sock: sock_timestamping_bind_phc: sock not bind to device [ 904.331391][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5545'. [ 904.340633][T24974] netlink: 'syz.5.5545': attribute type 3 has an invalid length. [ 904.349197][T24974] netlink: 'syz.5.5545': attribute type 5 has an invalid length. [ 904.358065][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5545'. [ 904.429141][T24974] geneve2: entered promiscuous mode [ 904.435712][T24974] geneve2: entered allmulticast mode [ 904.497062][ T6368] netdevsim netdevsim5 €Â: set [1, 1] type 2 family 0 port 48492 - 0 [ 904.510346][ T6368] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 48492 - 0 [ 904.520777][ T6368] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 48492 - 0 [ 904.547162][ T6368] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 48492 - 0 [ 904.756151][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5548'. [ 904.937272][T24996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5551'. [ 905.552687][T25025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 906.199182][T25041] FAULT_INJECTION: forcing a failure. [ 906.199182][T25041] name failslab, interval 1, probability 0, space 0, times 0 [ 906.246008][T25041] CPU: 1 UID: 0 PID: 25041 Comm: syz.5.5561 Not tainted syzkaller #0 PREEMPT(full) [ 906.246038][T25041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.246056][T25041] Call Trace: [ 906.246065][T25041] [ 906.246074][T25041] dump_stack_lvl+0xe8/0x150 [ 906.246114][T25041] should_fail_ex+0x40c/0x560 [ 906.246147][T25041] should_failslab+0xa8/0x100 [ 906.246182][T25041] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 906.246210][T25041] ? local_lock_release+0x9c/0x160 [ 906.246237][T25041] ? __alloc_skb+0x1d7/0x7a0 [ 906.246259][T25041] ? __alloc_skb+0x1d7/0x7a0 [ 906.246290][T25041] __alloc_skb+0x1d7/0x7a0 [ 906.246319][T25041] netlink_sendmsg+0x5d4/0xb40 [ 906.246360][T25041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.246393][T25041] ? aa_sock_msg_perm+0xf1/0x1b0 [ 906.246421][T25041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.246449][T25041] sock_sendmsg_nosec+0x13a/0x180 [ 906.246497][T25041] ____sys_sendmsg+0x54e/0x850 [ 906.246531][T25041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.246568][T25041] ? import_iovec+0x73/0xa0 [ 906.246594][T25041] ___sys_sendmsg+0x2a5/0x360 [ 906.246621][T25041] ? __lock_acquire+0x683/0x2cf0 [ 906.246659][T25041] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.246692][T25041] ? kstrtouint+0x6e/0xe0 [ 906.246751][T25041] ? __fget_files+0x2a/0x420 [ 906.246780][T25041] ? __fget_files+0x3a2/0x420 [ 906.246824][T25041] __sys_sendmmsg+0x273/0x4d0 [ 906.246858][T25041] ? __pfx___sys_sendmmsg+0x10/0x10 [ 906.246898][T25041] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 906.246946][T25041] ? ksys_write+0x242/0x270 [ 906.246971][T25041] ? __pfx_ksys_write+0x10/0x10 [ 906.247001][T25041] __x64_sys_sendmmsg+0xa0/0xc0 [ 906.247030][T25041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.247055][T25041] do_syscall_64+0x174/0x580 [ 906.247085][T25041] ? trace_irq_disable+0x3b/0x140 [ 906.247115][T25041] ? clear_bhb_loop+0x40/0x90 [ 906.247142][T25041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.247164][T25041] RIP: 0033:0x7f06fa99e0d9 [ 906.247186][T25041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.247206][T25041] RSP: 002b:00007f06fb7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.247230][T25041] RAX: ffffffffffffffda RBX: 00007f06fac25fa0 RCX: 00007f06fa99e0d9 [ 906.247246][T25041] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 906.247261][T25041] RBP: 00007f06fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 906.247275][T25041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.247288][T25041] R13: 00007f06fac26038 R14: 00007f06fac25fa0 R15: 00007ffff5d94218 [ 906.247324][T25041] [ 906.598890][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5561'. [ 906.694963][T25047] netlink: ct family unspecified [ 906.728277][T25047] openvswitch: netlink: Actions may not be safe on all matching packets [ 906.751317][T25051] netlink: 'syz.7.5565': attribute type 1 has an invalid length. [ 907.089634][T25052] gretap0: entered allmulticast mode [ 907.131757][T25064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5565'. [ 907.173524][T25052] bond12: (slave gretap0): making interface the new active one [ 907.200993][T25052] bond12: (slave gretap0): Enslaving as an active interface with an up link [ 907.398536][T25071] bridge0: port 4(batadv4) entered blocking state [ 907.418693][T25071] bridge0: port 4(batadv4) entered disabled state [ 907.453448][T25071] batadv4: entered allmulticast mode [ 907.488553][T25071] batadv4: entered promiscuous mode [ 907.531026][T25073] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5573'. [ 907.703126][T25079] Cannot find set identified by id 65534 to match [ 907.759969][T25083] netlink: 'syz.6.5578': attribute type 10 has an invalid length. [ 907.810252][T25083] team0: Port device dummy0 removed [ 907.889022][ T1053] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 907.898473][ T1053] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 908.023820][T25092] netlink: 'syz.8.5583': attribute type 10 has an invalid length. [ 908.062436][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5580'. [ 908.322552][T25107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5587'. [ 908.380631][T25092] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 908.394271][T25107] 8021q: VLANs not supported on ip_vti0 [ 908.573500][T25113] veth0: entered promiscuous mode [ 908.600311][T25114] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5588'. [ 908.933234][T25112] veth0: left promiscuous mode [ 910.049854][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5601'. [ 910.201964][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 910.243430][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 910.483093][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5607'. [ 910.522737][T25167] FAULT_INJECTION: forcing a failure. [ 910.522737][T25167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.551410][T25167] CPU: 0 UID: 0 PID: 25167 Comm: syz.9.5607 Not tainted syzkaller #0 PREEMPT(full) [ 910.551443][T25167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.551458][T25167] Call Trace: [ 910.551467][T25167] [ 910.551478][T25167] dump_stack_lvl+0xe8/0x150 [ 910.551519][T25167] should_fail_ex+0x40c/0x560 [ 910.551554][T25167] _copy_to_user+0x31/0xb0 [ 910.551579][T25167] simple_read_from_buffer+0xe1/0x170 [ 910.551617][T25167] proc_fail_nth_read+0x1bb/0x230 [ 910.551652][T25167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 910.551688][T25167] ? rw_verify_area+0x24a/0x4c0 [ 910.551712][T25167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 910.551742][T25167] vfs_read+0x213/0xa80 [ 910.551770][T25167] ? __pfx___mutex_lock+0x10/0x10 [ 910.551803][T25167] ? __pfx_vfs_read+0x10/0x10 [ 910.551826][T25167] ? __fget_files+0x2a/0x420 [ 910.551861][T25167] ? __fget_files+0x3a2/0x420 [ 910.551890][T25167] ? __fget_files+0x2a/0x420 [ 910.551930][T25167] ksys_read+0x150/0x270 [ 910.551963][T25167] ? __pfx_ksys_read+0x10/0x10 [ 910.551995][T25167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.552020][T25167] do_syscall_64+0x174/0x580 [ 910.552056][T25167] ? trace_irq_disable+0x3b/0x140 [ 910.552085][T25167] ? clear_bhb_loop+0x40/0x90 [ 910.552112][T25167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.552135][T25167] RIP: 0033:0x7fab0df5e90e [ 910.552157][T25167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 910.552176][T25167] RSP: 002b:00007fab0ee71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 910.552201][T25167] RAX: ffffffffffffffda RBX: 00007fab0ee726c0 RCX: 00007fab0df5e90e [ 910.552217][T25167] RDX: 000000000000000f RSI: 00007fab0ee720a0 RDI: 0000000000000004 [ 910.552231][T25167] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 910.552246][T25167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.552259][T25167] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 910.552301][T25167] [ 911.127456][T25176] netlink: 'syz.8.5611': attribute type 9 has an invalid length. [ 911.418445][T25187] syzkaller0: left promiscuous mode [ 911.424034][T25187] syzkaller0: left allmulticast mode [ 911.753817][T25199] __nla_validate_parse: 5 callbacks suppressed [ 911.753838][T25199] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5618'. [ 911.790114][T25200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 912.122891][T25213] netlink: 'syz.5.5625': attribute type 10 has an invalid length. [ 912.195792][ T6368] bond0: (slave bond_slave_0): interface is now down [ 912.252954][ T6368] bond0: (slave c@0Ù): interface is now down [ 912.287960][ T6368] bond0: now running without any active interface! [ 912.411032][T25221] netlink: 'syz.9.5627': attribute type 2 has an invalid length. [ 912.442207][T25221] netlink: 'syz.9.5627': attribute type 1 has an invalid length. [ 912.511098][T25226] IPVS: Unknown mcast interface: syzkaller0 [ 912.522584][T25226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5629'. [ 912.539049][T25226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5629'. [ 912.803803][T25241] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5634'. [ 913.234868][T25258] netlink: 'syz.8.5638': attribute type 30 has an invalid length. [ 913.346327][T25236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5632'. [ 913.448758][T25261] xfrm0 speed is unknown, defaulting to 1000 [ 913.533431][T25271] netlink: 'syz.8.5640': attribute type 5 has an invalid length. [ 914.087416][T25289] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5647'. [ 914.169492][T25296] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 914.241700][T25297] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 914.280922][T25301] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 914.314242][T25301] netlink: ct family unspecified [ 914.330065][T25301] openvswitch: netlink: Actions may not be safe on all matching packets [ 914.553833][T25311] xt_hashlimit: size too large, truncated to 1048576 [ 914.610701][T25314] @0Ù: renamed from bond_slave_1 (while UP) [ 915.215371][T25330] netlink: 'syz.9.5656': attribute type 4 has an invalid length. [ 915.240068][T25330] netlink: 'syz.9.5656': attribute type 4 has an invalid length. [ 915.746229][T25345] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5661'. [ 915.781654][T25345] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.790954][T25345] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.832615][T25345] bridge0: left allmulticast mode [ 916.386695][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.469382][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5665'. [ 916.503962][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5665'. [ 916.576781][T25368] FAULT_INJECTION: forcing a failure. [ 916.576781][T25368] name failslab, interval 1, probability 0, space 0, times 0 [ 916.616188][T25368] CPU: 1 UID: 0 PID: 25368 Comm: syz.9.5666 Not tainted syzkaller #0 PREEMPT(full) [ 916.616220][T25368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.616234][T25368] Call Trace: [ 916.616244][T25368] [ 916.616255][T25368] dump_stack_lvl+0xe8/0x150 [ 916.616295][T25368] should_fail_ex+0x40c/0x560 [ 916.616326][T25368] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 916.616360][T25368] should_failslab+0xa8/0x100 [ 916.616396][T25368] __kvmalloc_node_noprof+0x176/0x860 [ 916.616432][T25368] ? __kvmalloc_node_noprof+0x35c/0x860 [ 916.616462][T25368] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 916.616500][T25368] bpf_test_run_xdp_live+0x220/0x1c20 [ 916.616544][T25368] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 916.616584][T25368] ? __mutex_unlock_slowpath+0x731/0x900 [ 916.616624][T25368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 916.616662][T25368] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 916.616694][T25368] ? 0xffffffffa02052c0 [ 916.616769][T25368] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 916.616808][T25368] ? _copy_from_user+0x94/0xb0 [ 916.616831][T25368] ? bpf_test_init+0x113/0x150 [ 916.616858][T25368] ? xdp_convert_md_to_buff+0x5b/0x330 [ 916.616891][T25368] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 916.616940][T25368] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 916.616976][T25368] ? __fget_files+0x2a/0x420 [ 916.617013][T25368] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 916.617044][T25368] bpf_prog_test_run+0x2c5/0x340 [ 916.617081][T25368] __sys_bpf+0xa22/0xd90 [ 916.617121][T25368] ? __pfx___sys_bpf+0x10/0x10 [ 916.617165][T25368] ? __fget_files+0x2a/0x420 [ 916.617214][T25368] ? ksys_write+0x242/0x270 [ 916.617240][T25368] ? __pfx_ksys_write+0x10/0x10 [ 916.617268][T25368] __x64_sys_bpf+0xba/0xd0 [ 916.617296][T25368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.617321][T25368] do_syscall_64+0x174/0x580 [ 916.617351][T25368] ? trace_irq_disable+0x3b/0x140 [ 916.617380][T25368] ? clear_bhb_loop+0x40/0x90 [ 916.617408][T25368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.617430][T25368] RIP: 0033:0x7fab0df9e0d9 [ 916.617450][T25368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.617470][T25368] RSP: 002b:00007fab0ee72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.617494][T25368] RAX: ffffffffffffffda RBX: 00007fab0e225fa0 RCX: 00007fab0df9e0d9 [ 916.617515][T25368] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 916.617536][T25368] RBP: 00007fab0ee72090 R08: 0000000000000000 R09: 0000000000000000 [ 916.617550][T25368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.617564][T25368] R13: 00007fab0e226038 R14: 00007fab0e225fa0 R15: 00007fff951e2c18 [ 916.617600][T25368] [ 916.855446][T25372] openvswitch: netlink: Message has 4 unknown bytes. [ 917.399424][T25387] netlink: 'syz.9.5674': attribute type 9 has an invalid length. [ 917.445048][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5674'. [ 917.534412][T25386] tipc: Enabling of bearer rejected, failed to enable media [ 917.583777][T25389] xfrm0 speed is unknown, defaulting to 1000 [ 917.666351][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 917.823520][T25408] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 918.045046][T25418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.404572][T25427] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5688'. [ 918.671181][T25430] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5690'. [ 919.166553][T25455] netlink: 'syz.8.5697': attribute type 10 has an invalid length. [ 919.209868][T25454] netlink: 'syz.9.5696': attribute type 1 has an invalid length. [ 919.444879][T25454] 8021q: adding VLAN 0 to HW filter on device bond10 [ 919.514113][T25467] netlink: 'syz.5.5700': attribute type 1 has an invalid length. [ 919.722861][T25456] bond10: (slave veth3): Enslaving as an active interface with a down link [ 919.839268][T25459] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 919.885865][T25459] bond10: (slave batadv4): making interface the new active one [ 919.917816][T25459] batadv4: entered promiscuous mode [ 919.923608][T25459] bond10: (slave batadv4): Enslaving as an active interface with an up link [ 920.109589][T25467] 8021q: adding VLAN 0 to HW filter on device bond13 [ 920.215058][T25468] bond13: (slave veth9): Enslaving as an active interface with a down link [ 920.288137][T25471] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 920.324202][T25471] bond13: (slave batadv6): making interface the new active one [ 920.353640][T25471] batadv6: entered promiscuous mode [ 920.370670][T25471] bond13: (slave batadv6): Enslaving as an active interface with an up link [ 920.596429][T25493] FAULT_INJECTION: forcing a failure. [ 920.596429][T25493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.621740][T25493] CPU: 1 UID: 0 PID: 25493 Comm: syz.5.5709 Not tainted syzkaller #0 PREEMPT(full) [ 920.621772][T25493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 920.621786][T25493] Call Trace: [ 920.621795][T25493] [ 920.621805][T25493] dump_stack_lvl+0xe8/0x150 [ 920.621846][T25493] should_fail_ex+0x40c/0x560 [ 920.621881][T25493] _copy_from_iter+0x1d3/0x1660 [ 920.621911][T25493] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 920.621942][T25493] ? rcu_is_watching+0x15/0xb0 [ 920.621965][T25493] ? trace_kmem_cache_alloc+0x29/0xe0 [ 920.621995][T25493] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 920.622023][T25493] ? __pfx__copy_from_iter+0x10/0x10 [ 920.622054][T25493] ? __alloc_skb+0x276/0x7a0 [ 920.622078][T25493] ? __alloc_skb+0x276/0x7a0 [ 920.622109][T25493] ? netlink_sendmsg+0x650/0xb40 [ 920.622140][T25493] ? skb_put+0x112/0x210 [ 920.622169][T25493] netlink_sendmsg+0x6c0/0xb40 [ 920.622210][T25493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.622245][T25493] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.622276][T25493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.622305][T25493] sock_sendmsg_nosec+0x13a/0x180 [ 920.622343][T25493] ____sys_sendmsg+0x54e/0x850 [ 920.622378][T25493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.622417][T25493] ? import_iovec+0x73/0xa0 [ 920.622453][T25493] ___sys_sendmsg+0x2a5/0x360 [ 920.622480][T25493] ? __lock_acquire+0x683/0x2cf0 [ 920.622515][T25493] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.622550][T25493] ? kstrtouint+0x6e/0xe0 [ 920.622606][T25493] ? __fget_files+0x2a/0x420 [ 920.622636][T25493] ? __fget_files+0x3a2/0x420 [ 920.622677][T25493] __sys_sendmmsg+0x273/0x4d0 [ 920.622713][T25493] ? __pfx___sys_sendmmsg+0x10/0x10 [ 920.622751][T25493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 920.622801][T25493] ? ksys_write+0x242/0x270 [ 920.622826][T25493] ? __pfx_ksys_write+0x10/0x10 [ 920.622856][T25493] __x64_sys_sendmmsg+0xa0/0xc0 [ 920.622884][T25493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.622908][T25493] do_syscall_64+0x174/0x580 [ 920.622941][T25493] ? trace_irq_disable+0x3b/0x140 [ 920.622971][T25493] ? clear_bhb_loop+0x40/0x90 [ 920.622999][T25493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.623022][T25493] RIP: 0033:0x7f06fa99e0d9 [ 920.623043][T25493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.623063][T25493] RSP: 002b:00007f06fb7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.623087][T25493] RAX: ffffffffffffffda RBX: 00007f06fac25fa0 RCX: 00007f06fa99e0d9 [ 920.623104][T25493] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 920.623119][T25493] RBP: 00007f06fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 920.623136][T25493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.623150][T25493] R13: 00007f06fac26038 R14: 00007f06fac25fa0 R15: 00007ffff5d94218 [ 920.623186][T25493] [ 920.916924][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5709'. [ 921.336681][T25512] xt_hashlimit: size too large, truncated to 1048576 [ 921.559497][T25521] netlink: 'syz.5.5718': attribute type 10 has an invalid length. [ 921.844982][T25526] syzkaller0: entered promiscuous mode [ 921.865382][T25526] syzkaller0: entered allmulticast mode [ 922.331546][T25546] netlink: 'syz.7.5728': attribute type 3 has an invalid length. [ 922.413097][T25548] tipc: Enabling of bearer rejected, failed to enable media [ 922.536726][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5728'. [ 922.657923][T25551] xt_TCPMSS: Only works on TCP SYN packets [ 923.251241][T25567] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 923.342071][T25567] tipc: Enabled bearer , priority 26 [ 923.388330][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 923.404027][T25575] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5734'. [ 923.501055][T25573] ip6t_srh: unknown srh match flags 4000 [ 923.526347][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 923.666279][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 923.806486][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 923.946410][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 924.055194][T25589] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 924.086501][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 924.226497][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 924.367400][T18413] tipc: Node number set to 644856849 [ 924.506212][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 924.776663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 924.881306][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5751'. [ 925.404817][T25630] netlink: 'syz.7.5754': attribute type 10 has an invalid length. [ 925.498353][T25632] netlink: 'syz.6.5755': attribute type 1 has an invalid length. [ 925.864135][T25632] 8021q: adding VLAN 0 to HW filter on device bond9 [ 926.005279][ T4939] block nbd0: Receive control failed (result -1) [ 926.012440][ T4939] [ 926.014810][ T4939] ====================================================== [ 926.021914][ T4939] WARNING: possible circular locking dependency detected [ 926.029123][ T4939] syzkaller #0 Not tainted [ 926.033573][ T4939] ------------------------------------------------------ [ 926.040715][ T4939] kworker/u9:1/4939 is trying to acquire lock: [ 926.046906][ T4939] ffff88807bcd6e60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 926.056479][ T4939] [ 926.056479][ T4939] but task is already holding lock: [ 926.063928][ T4939] ffff88807c109068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 926.073027][ T4939] [ 926.073027][ T4939] which lock already depends on the new lock. [ 926.073027][ T4939] [ 926.083468][ T4939] [ 926.083468][ T4939] the existing dependency chain (in reverse order) is: [ 926.092515][ T4939] [ 926.092515][ T4939] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 926.100348][ T4939] __mutex_lock+0x19d/0x1550 [ 926.105515][ T4939] nbd_queue_rq+0x373/0x1150 [ 926.110711][ T4939] blk_mq_dispatch_rq_list+0x499/0x1990 [ 926.116970][ T4939] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 926.123993][ T4939] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 926.130570][ T4939] blk_mq_run_work_fn+0x16c/0x300 [ 926.136168][ T4939] process_scheduled_works+0xa8e/0x14e0 [ 926.142281][ T4939] worker_thread+0xa47/0xfb0 [ 926.147521][ T4939] kthread+0x388/0x470 [ 926.152175][ T4939] ret_from_fork+0x514/0xb70 [ 926.157380][ T4939] ret_from_fork_asm+0x1a/0x30 [ 926.162704][ T4939] [ 926.162704][ T4939] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 926.169974][ T4939] __mutex_lock+0x19d/0x1550 [ 926.175227][ T4939] nbd_queue_rq+0xc1/0x1150 [ 926.180295][ T4939] blk_mq_dispatch_rq_list+0x499/0x1990 [ 926.186421][ T4939] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 926.193330][ T4939] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 926.199892][ T4939] blk_mq_run_work_fn+0x16c/0x300 [ 926.205492][ T4939] process_scheduled_works+0xa8e/0x14e0 [ 926.211646][ T4939] worker_thread+0xa47/0xfb0 [ 926.216810][ T4939] kthread+0x388/0x470 [ 926.221450][ T4939] ret_from_fork+0x514/0xb70 [ 926.226619][ T4939] ret_from_fork_asm+0x1a/0x30 [ 926.232036][ T4939] [ 926.232036][ T4939] -> #4 (set->srcu){.+.+}-{0:0}: [ 926.239243][ T4939] __synchronize_srcu+0xc9/0x2f0 [ 926.244768][ T4939] elevator_switch+0x1e8/0x7b0 [ 926.250193][ T4939] elevator_change+0x2fa/0x480 [ 926.255525][ T4939] elevator_set_default+0x375/0x440 [ 926.261304][ T4939] blk_register_queue+0x3f3/0x4e0 [ 926.267156][ T4939] __add_disk+0x6cb/0xe30 [ 926.272064][ T4939] add_disk_fwnode+0x100/0x3a0 [ 926.277404][ T4939] nbd_dev_add+0x733/0xb60 [ 926.282392][ T4939] nbd_init+0x15f/0x1e0 [ 926.287262][ T4939] do_one_initcall+0x250/0x870 [ 926.292593][ T4939] do_initcall_level+0x10a/0x1a0 [ 926.298217][ T4939] do_initcalls+0x59/0xa0 [ 926.303113][ T4939] kernel_init_freeable+0x29d/0x3e0 [ 926.308881][ T4939] kernel_init+0x1d/0x1d0 [ 926.313864][ T4939] ret_from_fork+0x514/0xb70 [ 926.319028][ T4939] ret_from_fork_asm+0x1a/0x30 [ 926.324360][ T4939] [ 926.324360][ T4939] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 926.332225][ T4939] __mutex_lock+0x19d/0x1550 [ 926.337393][ T4939] elevator_change+0x1af/0x480 [ 926.342729][ T4939] elevator_set_none+0xb5/0x140 [ 926.348153][ T4939] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 926.354536][ T4939] nbd_start_device+0x189/0xb30 [ 926.359957][ T4939] nbd_genl_connect+0x1597/0x1c10 [ 926.365551][ T4939] genl_family_rcv_msg_doit+0x233/0x340 [ 926.371663][ T4939] genl_rcv_msg+0x614/0x7a0 [ 926.376731][ T4939] netlink_rcv_skb+0x226/0x4a0 [ 926.382069][ T4939] genl_rcv+0x28/0x40 [ 926.386617][ T4939] netlink_unicast+0x7bb/0x940 [ 926.391986][ T4939] netlink_sendmsg+0x813/0xb40 [ 926.397320][ T4939] sock_sendmsg_nosec+0x13a/0x180 [ 926.402920][ T4939] ____sys_sendmsg+0x54e/0x850 [ 926.408254][ T4939] ___sys_sendmsg+0x2a5/0x360 [ 926.413502][ T4939] __x64_sys_sendmsg+0x1b1/0x290 [ 926.419019][ T4939] do_syscall_64+0x174/0x580 [ 926.424186][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.430755][ T4939] [ 926.430755][ T4939] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 926.439464][ T4939] blk_alloc_queue+0x544/0x690 [ 926.444892][ T4939] __blk_mq_alloc_disk+0x194/0x390 [ 926.450569][ T4939] nbd_dev_add+0x494/0xb60 [ 926.455605][ T4939] nbd_init+0x15f/0x1e0 [ 926.460327][ T4939] do_one_initcall+0x250/0x870 [ 926.465666][ T4939] do_initcall_level+0x10a/0x1a0 [ 926.471183][ T4939] do_initcalls+0x59/0xa0 [ 926.476085][ T4939] kernel_init_freeable+0x29d/0x3e0 [ 926.481861][ T4939] kernel_init+0x1d/0x1d0 [ 926.486799][ T4939] ret_from_fork+0x514/0xb70 [ 926.491960][ T4939] ret_from_fork_asm+0x1a/0x30 [ 926.497285][ T4939] [ 926.497285][ T4939] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 926.504559][ T4939] fs_reclaim_acquire+0x71/0x100 [ 926.510074][ T4939] __kmalloc_noprof+0xbc/0x720 [ 926.515408][ T4939] tls_sw_sendmsg+0x599/0x2860 [ 926.520839][ T4939] sock_sendmsg_nosec+0x90/0x180 [ 926.526349][ T4939] sock_sendmsg+0x1ca/0x2d0 [ 926.531498][ T4939] splice_to_socket+0xb5e/0x12a0 [ 926.537013][ T4939] direct_splice_actor+0x101/0x160 [ 926.542793][ T4939] splice_direct_to_actor+0x57b/0xcb0 [ 926.548745][ T4939] do_splice_direct+0x195/0x290 [ 926.554174][ T4939] do_sendfile+0x52e/0x7c0 [ 926.559157][ T4939] __se_sys_sendfile64+0x144/0x1a0 [ 926.564835][ T4939] do_syscall_64+0x174/0x580 [ 926.569999][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.576455][ T4939] [ 926.576455][ T4939] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 926.584608][ T4939] __lock_acquire+0x1520/0x2cf0 [ 926.590038][ T4939] lock_acquire+0x106/0x350 [ 926.595112][ T4939] lock_sock_nested+0x41/0x100 [ 926.600440][ T4939] inet_shutdown+0x6a/0x390 [ 926.605509][ T4939] nbd_mark_nsock_dead+0x2cb/0x550 [ 926.611214][ T4939] recv_work+0x1cee/0x1e10 [ 926.616244][ T4939] process_scheduled_works+0xa8e/0x14e0 [ 926.622369][ T4939] worker_thread+0xa47/0xfb0 [ 926.627571][ T4939] kthread+0x388/0x470 [ 926.632222][ T4939] ret_from_fork+0x514/0xb70 [ 926.637479][ T4939] ret_from_fork_asm+0x1a/0x30 [ 926.642794][ T4939] [ 926.642794][ T4939] other info that might help us debug this: [ 926.642794][ T4939] [ 926.653120][ T4939] Chain exists of: [ 926.653120][ T4939] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 926.653120][ T4939] [ 926.666190][ T4939] Possible unsafe locking scenario: [ 926.666190][ T4939] [ 926.673727][ T4939] CPU0 CPU1 [ 926.679191][ T4939] ---- ---- [ 926.684656][ T4939] lock(&nsock->tx_lock); [ 926.689107][ T4939] lock(&cmd->lock); [ 926.695637][ T4939] lock(&nsock->tx_lock); [ 926.702596][ T4939] lock(sk_lock-AF_INET6-NBD); [ 926.707468][ T4939] [ 926.707468][ T4939] *** DEADLOCK *** [ 926.707468][ T4939] [ 926.715694][ T4939] 3 locks held by kworker/u9:1/4939: [ 926.720994][ T4939] #0: ffff888027c31140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 926.732315][ T4939] #1: ffffc9000fdd7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 926.744089][ T4939] #2: ffff88807c109068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 926.753437][ T4939] [ 926.753437][ T4939] stack backtrace: [ 926.759342][ T4939] CPU: 1 UID: 0 PID: 4939 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 926.759363][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.759376][ T4939] Workqueue: nbd0-recv recv_work [ 926.759396][ T4939] Call Trace: [ 926.759406][ T4939] [ 926.759414][ T4939] dump_stack_lvl+0xe8/0x150 [ 926.759442][ T4939] print_circular_bug+0x2e1/0x300 [ 926.759463][ T4939] check_noncircular+0x12e/0x150 [ 926.759484][ T4939] __lock_acquire+0x1520/0x2cf0 [ 926.759520][ T4939] ? inet_shutdown+0x6a/0x390 [ 926.759539][ T4939] lock_acquire+0x106/0x350 [ 926.759563][ T4939] ? inet_shutdown+0x6a/0x390 [ 926.759584][ T4939] ? __queue_work+0x1ea/0x10a0 [ 926.759608][ T4939] lock_sock_nested+0x41/0x100 [ 926.759625][ T4939] ? inet_shutdown+0x6a/0x390 [ 926.759645][ T4939] inet_shutdown+0x6a/0x390 [ 926.759666][ T4939] nbd_mark_nsock_dead+0x2cb/0x550 [ 926.759686][ T4939] recv_work+0x1cee/0x1e10 [ 926.759707][ T4939] ? __lock_acquire+0x683/0x2cf0 [ 926.759732][ T4939] ? register_lock_class+0x31/0x2e0 [ 926.759758][ T4939] ? __lock_acquire+0x683/0x2cf0 [ 926.759786][ T4939] ? __pfx_recv_work+0x10/0x10 [ 926.759805][ T4939] ? do_raw_spin_lock+0x12b/0x2f0 [ 926.759826][ T4939] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 926.759847][ T4939] ? process_scheduled_works+0xa20/0x14e0 [ 926.759872][ T4939] ? rcu_is_watching+0x15/0xb0 [ 926.759889][ T4939] ? process_scheduled_works+0xa20/0x14e0 [ 926.759915][ T4939] process_scheduled_works+0xa8e/0x14e0 [ 926.759948][ T4939] ? __pfx_process_scheduled_works+0x10/0x10 [ 926.759971][ T4939] ? assign_work+0x3cf/0x5d0 [ 926.759991][ T4939] worker_thread+0xa47/0xfb0 [ 926.760025][ T4939] kthread+0x388/0x470 [ 926.760050][ T4939] ? __pfx_worker_thread+0x10/0x10 [ 926.760069][ T4939] ? __pfx_kthread+0x10/0x10 [ 926.760095][ T4939] ret_from_fork+0x514/0xb70 [ 926.760136][ T4939] ? __pfx_ret_from_fork+0x10/0x10 [ 926.760161][ T4939] ? __switch_to+0xc89/0x1420 [ 926.760184][ T4939] ? __pfx_kthread+0x10/0x10 [ 926.760209][ T4939] ret_from_fork_asm+0x1a/0x30 [ 926.760232][ T4939] [ 929.026307][ C1] net_ratelimit: 3 callbacks suppressed [ 929.026330][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 930.066223][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 931.106560][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 932.146216][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 932.277648][ T12] batadv4: left promiscuous mode [ 932.718221][ T1172] batadv6: left promiscuous mode [ 933.186268][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 934.226189][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 934.316197][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 935.266209][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available