last executing test programs: 19m54.395390111s ago: executing program 3 (id=2409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000540)={0x0, 0x8}, 0x10}, 0x94) sendto$inet(r0, &(0x7f0000010d80)="0056ccb99fdbcce043227e273add02000000000000000034941513d190bc8483961611bf3fe2ce8a16fe005f078f0649db4560940e942d7bcc34ac0b1982b5bdcfc9c38ff14888735d36dea62fba51274888a7dc6e2f2eb545ca16203fcbacc86c9b3751ae21f555b67c300800000400000000eaf3cf51e4a230cbaca8dbb2dda1793d14d1246c9c1eb226126618d37a4f3909058b45f969be35494a4e961aa325743e76931303f64d9270c4002cbd5181fafd97983a4cdc3fda10cc4b0ee0348c52457e707cd22b37be84cba30fb97401402fb977bea8e1", 0xd8, 0x4004000, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8010) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03170000000000003800128009000100766c616e00000000280002800c00020004000000030000000600010001000000080005"], 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 19m53.738616151s ago: executing program 3 (id=2411): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000005240)={0xa, 0x4e20, 0xf36, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000005500)=[@rthdr={{0x48, 0x29, 0x39, {0x8, 0x6, 0x1, 0x2, 0x0, [@empty, @remote, @remote]}}}, @hopopts={{0x30, 0x29, 0x36, {0x5c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x2e, 0x4, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x21, [0xfff, 0x4]}}, @ra={0x5, 0x2, 0xd90}, @enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x11, 0x0, 0x1}}}], 0xd0}}], 0x2, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x60010000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x130, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20048800) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FITHAW(r6, 0xc0045878) 19m49.386080435s ago: executing program 3 (id=2421): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@rand_addr=' \x01\x00'}}, @replay_thresh={0x8, 0xb, 0x10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) r4 = socket$nl_audit(0x10, 0x3, 0x9) splice(r1, 0x0, r4, 0x0, 0x2, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0xfffc, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19m45.43302203s ago: executing program 3 (id=2427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x8800) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfffe, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x5, "457d29f44382270a8831cd672ca3a810"}}}]}, 0x44}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff5, 0x4}, {0xa}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x68}}, 0x4800) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @window={0x3, 0x6, 0xff81}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x6, {0x2, 0x4e20, @remote}}) 19m42.431224244s ago: executing program 3 (id=2432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f616400240002800800014000000001080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x0, 0x3, 0x9) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r2, 0x303, 0xfffffffa, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg(r7, &(0x7f0000001dc0)={&(0x7f0000000400)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000840)="4705f1a6a781e35c1a9c24831b135d4cd2cc3b801bf2983dd744ac99f98177e17652e4007b8fd84c5969451672ffa24a52a1701f9607a71b78bf0ec107da8614acd0045b64a63da84311d9d64b171e80566e225f7335cc9fd077d7cc751545aa696687736048870d34163669708be6be12e1a8fef0dd812e1ff7ab0bd5fccd921bb801a46f", 0x85}, {&(0x7f0000000900)="37c4daa6cbd5d1b0a2a89b404e4ab6233240d8563f337882ad3f6bf530219b319fee83a831db35374a7b9a247874099ad192d5d494c351dfc3930f70fa1fef36992518ce4f05971facbfbe71608f53271d9cff6650703937a2a67a175edaeb53a61e6afab5b13d70976a48cd240bb25bfcc3f8908ed8aac55f7def295f29a75d039b437df2c6c6da3f6e40fa388bf36742dae6286fae148480143267490c", 0x9e}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1258}, 0x40) r9 = socket(0x2, 0x80805, 0x0) getpeername$tipc(r5, &(0x7f0000000140), &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000340)="07000300010001", 0x7) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', r8, 0x29, 0x3, 0x0, 0x68ec, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x8, 0x8000, 0xfffffffa, 0x6}}) sendmsg$nl_route(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000004800000425bd7000fbdbdf250a000000", @ANYRES32=r12, @ANYBLOB="aa0c000014000100fe88000000000000000000000000000114000100fe80000000000000000000000000000e080002000700000008000200040000001400010000000000000000000000000000000000000000000200"/100], 0x7c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040000) 19m39.864023971s ago: executing program 3 (id=2435): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1}, 0x41) socket$inet6(0xa, 0x5, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000070a0104000000000000000003000005340005800800014000000004080001400000430508000240000000010800024000000005080001400000003c08000240000000000900020073797a30000000000c000340000000000000000308000b400000000424000580080001"], 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050625bd700001dcdf251100000018000180140002d009edf3dc0000004d0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="060000001000010000000000000ec63fffe5e5e022b9292530676c000000050000946d0000001100110000ffffffffff0a6cf6a1000a"], 0x28}}, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000700000505000400030000000900020073797a320000000014000780050015000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 19m38.026706221s ago: executing program 32 (id=2412): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b80), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x4e, "5c76276f6c86622447099377e66e2ebe40de"}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x200020c1}, 0x4000040) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000007c0)={[{0x2b, 'freezer'}, {0x2d, 'pids'}]}, 0xf) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000008c0)={0x0, 0xfffff7e6}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES64=r2], 0x0, 0x36, 0x0, 0x1, 0x9}, 0x28) socketpair(0x15, 0xa, 0x40, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000280)=@req={0xff, 0x7, 0x53c90000, 0x6}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48d1}, 0x14) r11 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)=@deltaction={0x174, 0x31, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x3f335f8febd9fea2}, 0x4810) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 19m24.495874916s ago: executing program 33 (id=2435): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1}, 0x41) socket$inet6(0xa, 0x5, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000070a0104000000000000000003000005340005800800014000000004080001400000430508000240000000010800024000000005080001400000003c08000240000000000900020073797a30000000000c000340000000000000000308000b400000000424000580080001"], 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050625bd700001dcdf251100000018000180140002d009edf3dc0000004d0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="060000001000010000000000000ec63fffe5e5e022b9292530676c000000050000946d0000001100110000ffffffffff0a6cf6a1000a"], 0x28}}, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000700000505000400030000000900020073797a320000000014000780050015000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 18m48.043051953s ago: executing program 4 (id=2543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(0x0, r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r13}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 18m46.383638387s ago: executing program 4 (id=2549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x1214, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x1214}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800) getpid() sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 18m45.671256484s ago: executing program 4 (id=2550): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r5}, 0x38) 18m43.783675526s ago: executing program 4 (id=2555): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x4, 0x1, 0x8}) recvfrom$l2tp(r1, &(0x7f0000000340)=""/165, 0xa5, 0x2141, &(0x7f0000000400), 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 18m42.843242795s ago: executing program 4 (id=2558): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) 18m41.742950054s ago: executing program 4 (id=2561): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) 18m26.208105773s ago: executing program 34 (id=2561): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) 13m49.005738036s ago: executing program 7 (id=3251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000005c0)=""/159, 0x9f}, {0x0}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x9}, 0x3}], 0x1, 0x10022, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, r8, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x40}}, 0x0) accept4$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x80000) 13m48.195874822s ago: executing program 1 (id=3254): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x28) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68090}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf250a1453ac5f000000000000000000080018004e234e6314000200fc0200000000000000000000000000011400010020010000000000f0ffffffffffffff01"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b5", 0x75}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) 13m47.428540879s ago: executing program 7 (id=3256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) writev(r5, &(0x7f0000000380)=[{&(0x7f00000006c0)="0d612c10150bbfda8a172837ee3897325f9fa9480b707c0e8606af24f2695bc78ec68f1083694b6d2e1b3315b08924ae3adbe2ba29bb3c2070e9df8002e907a3f2ee23b451f5653465a138511b3e4b311bb38dbee4e1293032a08f3ff8c1401d955b02ee3185553f3bd7848224aa7820b4b42932c10e59e0208956b057ca7043ae43c33d007d30e32d3171e91827083dceb0b13a2d8102b4106b4a3f5bfd992b332b30a6fce114de88610040ab8e2a689ac9bc23c9edf2e37046a751b07104e4693498f9fb0d9fa8b27417bcea9d3a4fa96e37b6ea0b66a6b6fbcd12d85b24762775d49fc9a370cf6dda486b96fdc7375909e271485ec02ae71e5fcce5c2ddb92f089eaace96b3337c16e297eef52e4e579bed5e6d7ca095908d7d5c239f8ace29cfccb49294faa696a5aed28b435180d7f6e54cfa3d9a41f7bae51465733e5e98bfa96ef227931178c17415dfb35dfe0ec3f00eef20edbf6a7649417e1b3e5587c9605eaac8a8b0bb6ac4ca4a555a3940dae10aec0df46e06798948b88a875a95c4ddd67faafaaabb66c9de583600d5a17800e04f4e365348f17a8b5da39cb93e00c7ced564c6f62c9208560b85f2ba5f6e6b5dfd23b58ff85fade7c6f94c6f92ddac7591efdd1cd9def36fc100940fc2c22bc56ffb1b26c02d30015d6da9a81fde11f3ef08375427cf83963bab83940650d0db960b2a5cdc94348c0334ac83476d617c9b0cb2ec251753f6c5c37203bd4119726d5ea26ec965e174395a8657dbea23e0b9499d3045328ad61dd4238b207200eb100bba933ddebbed33c6f2633a242535c313ee09df66370100fd859493c87ffacc52a2d14b264ece76cf296b603bd3051aaefa78d792ad387a164e9df431126bcf27d72eb76b8eb734a51de9ffcfea6573387b238a398e3ad2dc38c136777f0792bbcb6a949ae6ccc85fd9f3c4c42d51d6b4829cf4804295caa8d4b76dccbfabb0fe95f896bbd201174ca38716615c9ce35263f1667ce2d2913e190023bb106d83eacffda6308e4b393143425386ff2c43a0df48583216482866ab7759d0183f74f2bd48bf710edf94d5d6b6c037f6cdbdaaeab3beddd4df1b2d9d464c03902b6a8def2232cc690468caa8dc37563a14800c0654e2e121cc1173aa2fc613a00eeb1fef542c12456231424b4a00f412c98e81da276d854951ebfafd4c6c1d966e93843ed5273e321dc3deb7b59d31734d917f861ee82dbe3dc3a51d81074e9a4081bb438b0554efd0d704e5776cc1e5a400c9ce6ed4663e1afa8526f5dfe51be5a20d7a72dd6f4ef3ad113ad180e0e5712e25cd442c08afc57f265ee8b6b5d31c72c374ed123ec1c1b008fe5c81ce2a6a7458af50635b861c567285e361f86b49aad7c06a6af0c59a5d1898afc401928f187e948a636f0fe6813a07e4bb53664f7a7af42739d2be73ebc520ea78209feea33be8e9dac7c71a65868f36242b95f4f17339e3136cc49ad8679d2f24f978221a47aac900263c2a04fcd96b9f631caa109c33c78213e27f3abb1cc90dd806901723731723afa9810eb4d6529bd1d0a9d5b8ddb7bba1124d86977d45b9ce99317a457063ed7b35f8e136e175f6b6a4e0ac33ee5084caa1f7974afcf96b2b2e53891feb89be8f2b0da5fb8f05ea6dacf5b0ba5c0b4c8f5371e0ede86019051adff8911759d915714ff133a5cd9a00dbb2c4d1f7186a7bd62694a992be2489baeeca6d3b4b80c0773bd7fea5f38d9339fa924b8767bcf213bac2745b85b34c5dde8125fa4aa4f82a977796d9cf264408244ae3e928254a3bd8465b2dcca9e8a53c04fd16e9a77c68881cc07d8db637cc50ec38347fa4acc9df66080ea69780c878465564a05ff53e56d8f267c0eb3466fc0cea4550fa8f72755c473f2df19e8f5f4aefe48bf9995b0be5e533759a26177b82d46b3388328f3d57e56a9789919e8e54c06c9b9490812d7a24deca484af904bf6a68a330577f9dc2891318cb30cb25ecb388d131a596b36a4179c30c0c391a737973179b04f25c4ff04690fafd373a778ae2c99196e13f6bde39557daf73ae6336663f980b33352da9e842ff0d4d6c314befdf4629b89acbb22a990cbeca3baa0ef941a070904f40bc7612b472383ac360ba5ccdfa0d0d3fe8693a6bce3100ecfb97d8baf2ecd7a8b1675ab00cb5364917271631d40fbbfea443e4817d05180079eb2927693d19901b1cfe5be1a240a89c8998db2bc91f51ecec6f9e03ca725007bfcf9025909b6e71a12cc27dc37f7ba075a9c00976f3b0642cfa8157ee0ad93e161e5eb70d47d005cfab953914bbb66bbe46fb504df4c3e61b8fc21f8590028ea37f07592b5994175302c3c16c144c6a3369ca6c8183999bf4b27be7dbdbc1207a0be41424d06f860b879b139c503de79196c7448501112642e161cba60df354419e6ba4e368d7e924f22317e1edf4d49a54bacd03146b0e1edef9a4edfaa01f9b73aae82050e4c8ab96c43b12545a9697b8d0cc7d364bcfc160806168e8f4206c07ec216ceefa2849834085ae2991045571ee2c41de0a4e7f015b8bbe7a074130929107fba4649063686e3b6bd0863cc56be99fa51418360eaa9195db348c3003458aeee58b93ac729fbcfbe24b974a5263c7bbbc07314841c870caa10e6265c99af3fce1bd4fdd30d6e32694f207f027be9bc73f29074d9386e3618901f4eaeb63f3c430b4fdd18cb3108a98cce5672e027546af044cfcd83f372abe78fe92bb2df93ce2decbd8c9e5510b4625caa5ab74a43f1f09b6a2fca5aeb28e1f25a91a1ac95781dce67cbdcc73005afacd5ff0d62eecd25e8cb6b36d3d1d1ca1575d77cbab3a6ac69d7e27e90fc4c9daad29f0cd19409c8b925d8bb8a2fe5585ceceae33bcc329cd26915fbc5eb79cdf72d6eafe9dce60d7cd337ec633b3341260f843ed7d21616f88f3917e0fa8f8efc6f72177bb4aa2c7568f2a6f27397716de807d65db7aeee5d08f48c31ccacf9f94468dd14098fc2573fde7dd6eedfccf472f230d56b49265b999a3f1d42601eb268a7bfa6f03b7e06193c2b253e83f956bf2194f27d8e0d044244cef6785a2329e7d82c78ebce481a0e9412bb7dafde8d4a536bf2805e21e76ee289abcfaa93a19743b7b376f309242f7d34a3d3f152064e1c40a2bb187f00f854d91dfc26d458ae3f0166a164c45c3020b80ecf9905c8870def82f5a466776e0b8772fa931690b8bc641372dbd04619231a3d1ea9f8afb2834d5e13d110b129de527cb3f4e936d5f64757842c43af36972c18704c58f34b47555a2813637c1f126a1de14a129e6fb4dfebb8135cc7ea6d18a23fda3980f626bcb5fdc9b878f0225efab398ed2ac76384d3259b03ab592efc82485b2c4c0014d79f2ac87f64dbc8028631c178ed39da0113998939db4389bfe7d92a0092d571c0d026aa71c70c4fb30eebfb8c5d1305e02efccedf90652cede8443b92e63a2c30db57347782e1388fd27992694332708fe7ae50d1466b8b698655e090c9fe30e2f77192c7f7073ceb670d2311d108c9f5fd16bda8e3da20c31f369c4612f7647e3da9aca491750b51b0b84c676c4b773543fdf5f92634f1fefa1ed2230fbc6b9bf7e1a0b88dd2b7882ae18106930a79cd8150047c7ad0e4393d9595e743d877a2dcdfa1fabb7b136e6c1e1ff92ef258aa44274e0c3ed755e63befbb5f9865ec6f8382547d34ba590e14eecd851c1002f850bfb672de51bbac8ed00bf5ca05aa9f5115b26d7cb154e4e80c064259baaffeb485384542acb83b3dc972e7886178a1d329b071b9045b7aaa7758266014eced858a431feab9a34226966d597454e963a7cdeb2bd884e15eba854e34e74f07304a6b198bb7516f0f6eb23696dc456345eb30d4ac6ad0aaa8abe664a2f961add7d322ff98e123225219fb0689d1029dcc638b23b1fb38a9174b6959c63dfb23dd5a0bf1c6b33587b6df6086c9a1bfb779b5a21fdd5818beadcea4b273ba43641f02faeac4e80b075b6c1c338754af5b1c8899cf1574dfba02356479ee9572d9ee444193fe3adc23123df523e8803ce1ebafe89db56a3a6ec8d0df064c1854c9ffe25f62aa9657d4961cbed76d379f5d511c31d067acbca4286083c942cbc05d02238d5951a413ed6d653455099d91000a26d7e8a4546516d62c87ec11573d316469e686885c162cfdaa84a0e92c86d192db4f32cc101d189df5cf738810d7e9cc8932c18675078173a715a18a350c26a66b02da8e678f63e531302b13d0b64676ef746abfeff4908271d5f707786b328dfe8da4b69530e6213e0577539ce6e2ccb9325ab4272826816b870c3ff05a3bff349e8374b7ebb56a3071c9c9fc124faf1806735648e37244f3bf358c71eb266b9095b2e1cc14f67e689f3e14902ea548334642b2efa592c938c1ba8ce609e11787f0f63563363de3ca7a5c8033f76225d995d1b3fa5c3968e7b2f205f873e0c1e18307f07d4defff779dc57a67a16ceea120ae5b4880f5d1ce067b0d2b436339d1c58804ccb782498b852d83fbe63b443164d4278baa5b52b5d7e7747733acc4e6ce53bb32b52431dc6809bcf92f8f225291c2111ddbc9a77e01b54d9dbb774ae24ba04e37c9fc697fad580b44e4fadb2b93481d3b2fbaa1aeb417a385496829a09fe623c43b7f4b09da0c571c5548b80841ad9f6048730cc7ab6efbb8865a8a8aa45e33490886d116b9bbe38f079a766a4e1a3ad626eb241c6708a60f6f682adffcb2ee36f38c2e3b68523eee2fc3099e802ea414fe7700696f191f173deb18d357084deb98bcee328287e87809d74b1389c7a96afafd0d4451440e3feb7127c7e97339dcb8f9f81daa36bc496c92f3bcdc57fffb74994c1bbb251a29b2bde5787036233b02832b4637f5008ff521b77b65c3b2e0ffd9b04eaf6dbdb0edc1eb3ccf2a4e51fa732c21cc13ffd941238f144968fa13074b30f0b3d5415c56809b5433096ecdb2042a2b3754811dfabd9ac83b9d44522537519dd4b6f59c44ff11b31447ac8241f5d7298ac56ee0c6adc21027184249e13919cfaab328ededf824074b0dbdac88e678cc4b237fd39252d3cd5c2ad33aca8c2de6c843f0efa5be057934dc81ba3a0c1c54478ad95c55d6579f4aaca2d2c7760df4226fca9a20adc1874346c3d4fb2fb515e0b2b5f609faa44b2e1b2f66021a28653ec28842a4090bd996fe8f9520552d7f1e1b40107f8a893e4b4fcc2d4efdfda74326a8977fc833997fbe2404e1e2f1eb49cfb548cf0af13bcb2325c8ddcbcbfcf0c4db1a711cb9b8719b26e91ee3a43a9b2f91b52303ab711e8324aa8b636aef13c20c63ca1315022c49d637f306c2deb62e3ce2b93521bc028e41efc393c22096447fc481249f6040406a0bd46eb2d6cb58b2ebd7892086873bd356dd94bbbf010f4c928d8b948073d25b076e231581d967bc487d104ab5c95c1b996620647a8198c13b4aed351f7d9a62ad27240bdb4ec388e5ea80d998c15217a174dbbac07bfb1012b48f86f7856e60de42127fd800898c2fe2e8b60334d2b71c4807f75074dc7b4c40847548a9615437fce320d21122419fdd2a7359f3d1c4a68044719477b42aaf88aa6a85e12976bfa96d3956098214c86a7956b3c813d3127bf25c60f458e6e333d7de4834090ebe85bbfe4e84d94ce4e1bc2033701b0611e62c37f57e995f8d264adb84f4485fdd9483710515c01b68f6cdcfe16a1c354ac14f128df3d057ffa0aebd91f225b94472eeda0a15a6c474f648aff524032169e584ad5244791990bdb2c5efb0d59dcdd", 0xffd}], 0x1) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x78, 0x2c, 0x0, @local, @mcast2, {[@srh={0x0, 0x8, 0x4, 0x4, 0xb, 0x60, 0x6, [@local, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x38}}}}}}}, 0xae) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000002c0), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 13m46.496167526s ago: executing program 1 (id=3259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r12}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 13m46.323235198s ago: executing program 2 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6179}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x8}], 0x2}, 0x5) 13m45.905718438s ago: executing program 7 (id=3262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r12}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 13m44.464458889s ago: executing program 1 (id=3263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', r4, 0x29, 0x4, 0x0, 0x800, 0x5d40c07344e3ad5b, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x1, 0x8a, 0x1bd6}}) writev(r6, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xf3a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r10, 0x0, 0x80, 0x8) vmsplice(r9, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0xdf2}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r14, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18, 0x40008c1}, 0x84) sendmsg$unix(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='(', 0x1}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x4000}, 0x44000) write(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20040000) 13m44.353332911s ago: executing program 2 (id=3265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000005c0)=""/159, 0x9f}, {0x0}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x9}, 0x3}], 0x1, 0x10022, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, r9, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x40}}, 0x0) accept4$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x80000) 13m44.272609481s ago: executing program 7 (id=3266): socket$l2tp(0x2, 0x2, 0x73) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 13m43.143269461s ago: executing program 7 (id=3267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r13}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 13m42.334737819s ago: executing program 1 (id=3270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x120c, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x874, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x120c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800) getpid() sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 13m42.222811283s ago: executing program 2 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 13m41.71564992s ago: executing program 7 (id=3273): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x44}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) 13m41.493757353s ago: executing program 2 (id=3274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) writev(r5, &(0x7f0000000380)=[{&(0x7f00000006c0)="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", 0xffd}], 0x1) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x78, 0x2c, 0x0, @local, @mcast2, {[@srh={0x0, 0x8, 0x4, 0x4, 0xb, 0x60, 0x6, [@local, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x38}}}}}}}, 0xae) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000002c0), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 13m41.460607744s ago: executing program 1 (id=3275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6179}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x8}], 0x2}, 0x5) 13m36.56959838s ago: executing program 1 (id=3282): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x44}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) 13m36.535862048s ago: executing program 2 (id=3283): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r4, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r11}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 13m35.037942528s ago: executing program 2 (id=3286): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x44}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) 13m26.461824983s ago: executing program 35 (id=3273): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x44}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) 13m21.407105485s ago: executing program 36 (id=3282): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x44}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) 13m19.906027729s ago: executing program 37 (id=3286): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x44}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) 6.590663239s ago: executing program 6 (id=9954): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040015}, 0x24040000) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x80101, 0x0) close(r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000f101"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00", 0x9}], 0x1) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000008e80b0bdfcda42d6d980312cc11e74deff000000800000ffdf0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r4], &(0x7f0000000980)='GPL\x00', 0x80000100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040080}, 0x800) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) 6.013319266s ago: executing program 8 (id=9962): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x29, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}}, 0x400c810) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x20044000) bind$inet6(r2, 0x0, 0xf0fbae51ac5bf15) epoll_create1(0x80000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @private=0xa010101}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}}) listen(r2, 0x1000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={r9, 0xdc, &(0x7f0000000440)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e24, 0x36, @private0, 0x98a3}, @in6={0xa, 0x4e20, 0x800, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x7, @empty, 0x7}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x42, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000600)=0x10) 3.403786067s ago: executing program 6 (id=9971): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000240)=""/4088, &(0x7f0000000000)=0xff8) 3.349693654s ago: executing program 0 (id=9972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xffffffff, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 3.346316549s ago: executing program 8 (id=9973): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0xfdef}], 0x1) 3.33174452s ago: executing program 9 (id=9974): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000380)=0x5fdb, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x97) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x12023, 0x0) 3.205632458s ago: executing program 9 (id=9976): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{&(0x7f0000000380)={0xa, 0x0, 0x5, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="a0002883781ecc0e", 0x8}, {0x0}], 0x2}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 3.205268602s ago: executing program 0 (id=9977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r6 = socket(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r6) 3.171834698s ago: executing program 8 (id=9978): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="fd", 0x0}, 0x50) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000d0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "0881adb2f690abf0b08d60bd430c16a6"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100ffffffff9500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00'}) 3.102144403s ago: executing program 9 (id=9979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x70bd28, 0x25dfdbff, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c00}, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002500)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3, 0xec9}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x2, 0xfc0, 0x66, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "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"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x1, 0x3], "31e86a71b891d7415876b0b6e9efc9e83329463a7b4c5cce9f0f4f11bcfee25ac1c116239f60c26b4b279f6c7957b8af1a4891ed9d86c0cd938dae8e6c6d7cec5aca2efc5bfc1510d7fec547213691b67a1004f80a17f8f42d86bd71e6ea56b156da6e6f8a693d8d89002ecfeb7e0ba7c908d080f24b45ac278f3e493a56a56c193ad830519352c43f0346e1be6a160b25fd0ffe3a19ed21fc5972ac9b8b3841481b9494f197f1f383acf84f77aec99c79ba567442de243fa1c75702f3bfff57a4ceded1508b14bb3e641719abee88b395d3f7b06dd5424961cb5a8e4cd6e72f4c0ccab3b1585e33c01d"}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x10}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x1, 0x1, 0x0, 0x2, 0x2, 0xfa}, 0x2, {0xc, 0xd, 0x2, 0x8, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "bb396a463c4228a4731b9c94061bb22f17b9d0b8d10cb9576665a28a369b86614ba00769678c691cbd88ea0d43e8b7c1078486621971429e9b1e5f8b18dbd4ac86c53ab82a0aab57ea0fcdf003754261fee13ca4334c7b74a5ee4253528676466ac32c835482bc4633d567238be966aa5da802ab869c7397325492aeae85bf949f09537dd10228e9939dcb03ae7da42dd495187502d7ddc5bf1337cff0b9f5b4c0f4442205c7c477df6930f7aa82766533e9edf2d159495a79218e03c409dcd178522dd82405be2ee243eb92a50cabce55c3f7d462ef83035cbb7da4441b1e16227362f3ef0d"}}}}, 0xfce) getsockopt$inet_opts(r3, 0x0, 0xd, 0x0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r7, r7, 0x0, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_MTU={0x8, 0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 2.439347254s ago: executing program 5 (id=9980): openat$tun(0xffffffffffffff9c, 0x0, 0x8ac41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfd6d, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000000}, 0x50) 2.386402375s ago: executing program 0 (id=9981): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x5, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.380503032s ago: executing program 8 (id=9982): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x40000000, 0x0, 0x4008001}, 0x0) 2.297704842s ago: executing program 6 (id=9983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x12}, 0x0) 2.297379638s ago: executing program 5 (id=9984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001900000002000000fedbdf25050006006c8000000a000600000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000030000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe80000000000000000000000000068bfc1d000400000000050019000000000002004e20e0000002000000000000000002"], 0xc8}}, 0x0) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x0, 0x3, 0x9, 0x8000000000000000, 0x80000001], 0x5, &(0x7f0000000080)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) pwrite64(r2, &(0x7f00000000c0)="9a001e99f6112598fdd1ea3af65418af161c0314469dfbef59c6df84da92fe81324386579c22e9d0ad0e16af694168bc795cb9f31c9bc68b4f9f9d33339b403c9451bc868270c39f60586fd7b278e238670dcb50b2f806dee363766e135f8a190ce275f60398256352edc951c8e9fc77", 0x70, 0x4) 2.232685493s ago: executing program 9 (id=9985): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x29, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}}, 0x400c810) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x20044000) bind$inet6(r2, 0x0, 0xf0fbae51ac5bf15) epoll_create1(0x80000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @private=0xa010101}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}}) listen(r2, 0x1000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={r9, 0xdc, &(0x7f0000000440)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e24, 0x36, @private0, 0x98a3}, @in6={0xa, 0x4e20, 0x800, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x7, @empty, 0x7}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x42, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000600)=0x10) 2.200475867s ago: executing program 6 (id=9986): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x3d}}) (fail_nth: 6) 2.105276438s ago: executing program 5 (id=9987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="44010000100001000000000800000020ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32, @ANYBLOB="05"], 0x144}}, 0x80) 2.104723944s ago: executing program 8 (id=9988): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x29, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x204) 1.991458459s ago: executing program 5 (id=9989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) 1.931959024s ago: executing program 5 (id=9990): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a0001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x2, 0x4, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x890) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfe33) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 933.713918ms ago: executing program 6 (id=9991): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0xa, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="183000008900000000000000030000009500000000000000a22141870cb9c3b4092b8844fde61b0fefc5b5ded26fcd941de7d003f1987a6073d717d4"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001400)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0xa8, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast, @port, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @remote, @icmp_id, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f0000002840)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000002700)=[{0x0}, {&(0x7f0000002500)=""/189, 0xbd}, {&(0x7f00000025c0)=""/75, 0x4b}, {&(0x7f0000002640)=""/82, 0x52}, {&(0x7f00000026c0)=""/23, 0x17}], 0x5, &(0x7f0000002780)=""/134, 0x86}, 0x10100) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 932.557224ms ago: executing program 5 (id=9992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r6 = socket(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r6) 865.77254ms ago: executing program 8 (id=9993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r2}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendfile(r1, r5, 0x0, 0x20000000002) 821.034623ms ago: executing program 9 (id=9994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff611051000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8000000b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x48800) (async) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004540), r9) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000004580)={0x48, r10, 0x36bc9ec053d6c199, 0x70bd2a, 0x5f47, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40881}, 0x4040040) (async) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x30, 0x0, &(0x7f0000000100)) 800.372074ms ago: executing program 0 (id=9995): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b44"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 736.891722ms ago: executing program 6 (id=9996): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) socket$kcm(0x29, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x40800) r5 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r5, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x1412, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000df01000000040000000000008401000000040000000000000105000000200000000000"], 0x0, 0x36}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r1, r0, 0x0, 0xf03a0005) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 625.673901ms ago: executing program 0 (id=9997): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(r0, 0x0, 0x0) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 70.460254ms ago: executing program 9 (id=9998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lx={0x18, 0x1, 0x0, 0xafff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 0 (id=9999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000002540)="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", 0x998}], 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b0000000800"], 0x28}, 0x1, 0x0, 0x0, 0x9095}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x20, &(0x7f0000001440)={&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x5e) pipe(&(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002e80)={&(0x7f0000001c00)="8af15b6d2eddca84f060f4763d601d0533205d462926021c07ffb2c63a54d1cc971b63f3e0ce4f630f77d48afd61af6a94f1d414e8c9abf05e10d610e662fbeca5726d8cf5815d07e4f0c48477e77eeb7d1eecdb7cfa3c240a7050f51be77fa3286966e1bf758b6e55a4e4955ef866fa10ddde0f59ebd7071454e748d97f9865f9348456c5", &(0x7f0000001cc0)=""/115, &(0x7f0000001d40)="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", &(0x7f0000002d40)="73755b501c2188b1fc51534daba7a406d477586ef41f1597bc933ac5b136b52d0ef00d958e7eafdbe5934333dcf05bd1792deaad39e40b695b31ade9c32c22504e254926ae57f3e4fece06259a664aa3b46843081c6bb786d0958ec1ba6942e125c23318b395cd3f8bd7d6e5f72f2e8140a40c461498a11076dd014acb981525210e2c9901555b2f7d4659c2d5ff13a441fbcd15ecf4d2cc223a249a1e95190d569cf41445b21e20bd6fd87a5075bec3ce6cde872a132566756b954ce128d59006bf11a3356505596b6d7e88fa4f5bc005549a", 0x7, r7}, 0x38) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001800)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000014c0)={'veth1_to_hsr\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x728, 0x568, 0x568, 0x310, 0x568, 0x0, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x2a, "e5940e4b91112443dee63d22728f303f77fdf65a51032d8da6652f6abfd3"}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@multicast1, 0x2, 0x0, 0x8e}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"e9de"}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) connect$inet6(r6, &(0x7f0000002f00)={0xa, 0x4e22, 0x1e00, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000016c0)={{r8, &(0x7f0000001500)='\x00', 0x40000, &(0x7f0000001540)={@align=0x6, {0xf801, 0x4543, 0xffffffff, 0x401}}, 0x2, &(0x7f0000001580), &(0x7f00000015c0)=0x5}, {[0xceb, 0x3, 0x2, 0x76]}, 0x200, 0x90, &(0x7f0000001600)=""/144}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xf, 0x9, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x2c, &(0x7f0000000180)=""/44, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x10, 0x5, 0xdf8c}, 0x10, 0x0, r0, 0x0, 0x0, &(0x7f0000001500), 0x10, 0x7f}, 0x94) kernel console output (not intermixed with test programs): T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8683'. [ 1528.403412][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1528.448244][ T6450] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8686'. [ 1528.471225][ T6447] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1528.743601][ T6461] bond0: (slave ip6tnl0): refused to change device type [ 1529.017480][ T6478] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8693'. [ 1529.175018][ T6476] syzkaller0: entered promiscuous mode [ 1529.186548][ T6476] syzkaller0: entered allmulticast mode [ 1529.569121][ T6500] FAULT_INJECTION: forcing a failure. [ 1529.569121][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.582746][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.0.8701 Not tainted syzkaller #0 PREEMPT(full) [ 1529.582774][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1529.582787][ T6500] Call Trace: [ 1529.582797][ T6500] [ 1529.582807][ T6500] dump_stack_lvl+0xe8/0x150 [ 1529.582837][ T6500] should_fail_ex+0x40c/0x560 [ 1529.582869][ T6500] _copy_from_user+0x2d/0xb0 [ 1529.582892][ T6500] ___sys_sendmsg+0x1c6/0x360 [ 1529.582913][ T6500] ? __lock_acquire+0x683/0x2cf0 [ 1529.582938][ T6500] ? __pfx____sys_sendmsg+0x10/0x10 [ 1529.582992][ T6500] ? __fget_files+0x2a/0x420 [ 1529.583011][ T6500] ? __fget_files+0x3a2/0x420 [ 1529.583039][ T6500] __x64_sys_sendmsg+0x1b1/0x290 [ 1529.583063][ T6500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1529.583101][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.583121][ T6500] do_syscall_64+0x174/0x580 [ 1529.583140][ T6500] ? trace_irq_disable+0x3b/0x140 [ 1529.583160][ T6500] ? clear_bhb_loop+0x40/0x90 [ 1529.583183][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.583215][ T6500] RIP: 0033:0x7fd6f8b9de59 [ 1529.583234][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.583250][ T6500] RSP: 002b:00007fd6f99f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1529.583271][ T6500] RAX: ffffffffffffffda RBX: 00007fd6f8e25fa0 RCX: 00007fd6f8b9de59 [ 1529.583285][ T6500] RDX: 0000000024040084 RSI: 0000200000000040 RDI: 0000000000000003 [ 1529.583297][ T6500] RBP: 00007fd6f99f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.583309][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.583320][ T6500] R13: 00007fd6f8e26038 R14: 00007fd6f8e25fa0 R15: 00007ffd625d7388 [ 1529.583351][ T6500] [ 1530.488334][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1532.784793][ T6497] bond0: entered promiscuous mode [ 1532.794020][ T6497] bond_slave_0: entered promiscuous mode [ 1532.801356][ T6497] bond_slave_1: entered promiscuous mode [ 1532.809678][ T6497] bond0: left promiscuous mode [ 1532.814627][ T6497] bond_slave_0: left promiscuous mode [ 1532.821161][ T6497] bond_slave_1: left promiscuous mode [ 1532.863438][ T6498] bond0: entered promiscuous mode [ 1532.869562][ T6498] bond_slave_0: entered promiscuous mode [ 1532.875590][ T6498] bond_slave_1: entered promiscuous mode [ 1532.886584][ T6498] bond0: left promiscuous mode [ 1532.893544][ T6498] bond_slave_0: left promiscuous mode [ 1532.900367][ T6498] bond_slave_1: left promiscuous mode [ 1533.007633][ T6512] netlink: 136 bytes leftover after parsing attributes in process `syz.8.8706'. [ 1533.044112][ T6512] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1533.200792][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8713'. [ 1533.214764][ T6525] netlink: 'syz.6.8712': attribute type 2 has an invalid length. [ 1533.244903][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8712'. [ 1533.256529][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8712'. [ 1533.674864][ T6548] xt_SECMARK: invalid mode: 4 [ 1533.839721][ T6542] lo speed is unknown, defaulting to 1000 [ 1534.043876][ T6556] syzkaller0: entered promiscuous mode [ 1534.066857][ T6556] syzkaller0: entered allmulticast mode [ 1534.162286][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8725'. [ 1534.372982][ T6573] FAULT_INJECTION: forcing a failure. [ 1534.372982][ T6573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.386942][ T6573] CPU: 0 UID: 0 PID: 6573 Comm: syz.8.8728 Not tainted syzkaller #0 PREEMPT(full) [ 1534.386969][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1534.386982][ T6573] Call Trace: [ 1534.386992][ T6573] [ 1534.387003][ T6573] dump_stack_lvl+0xe8/0x150 [ 1534.387033][ T6573] should_fail_ex+0x40c/0x560 [ 1534.387066][ T6573] _copy_from_iter+0x1d3/0x1660 [ 1534.387094][ T6573] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1534.387126][ T6573] ? rcu_is_watching+0x15/0xb0 [ 1534.387150][ T6573] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1534.387180][ T6573] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1534.387209][ T6573] ? __pfx__copy_from_iter+0x10/0x10 [ 1534.387237][ T6573] ? __alloc_skb+0x276/0x7a0 [ 1534.387254][ T6573] ? __alloc_skb+0x276/0x7a0 [ 1534.387277][ T6573] ? netlink_sendmsg+0x650/0xb40 [ 1534.387298][ T6573] ? skb_put+0x112/0x210 [ 1534.387320][ T6573] netlink_sendmsg+0x6c0/0xb40 [ 1534.387363][ T6573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.387390][ T6573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1534.387419][ T6573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.387440][ T6573] sock_sendmsg_nosec+0x13a/0x180 [ 1534.387470][ T6573] ____sys_sendmsg+0x54e/0x850 [ 1534.387497][ T6573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1534.387526][ T6573] ? import_iovec+0x73/0xa0 [ 1534.387549][ T6573] ___sys_sendmsg+0x2a5/0x360 [ 1534.387569][ T6573] ? __lock_acquire+0x683/0x2cf0 [ 1534.387595][ T6573] ? __pfx____sys_sendmsg+0x10/0x10 [ 1534.387650][ T6573] ? __fget_files+0x2a/0x420 [ 1534.387668][ T6573] ? __fget_files+0x3a2/0x420 [ 1534.387700][ T6573] __x64_sys_sendmsg+0x1b1/0x290 [ 1534.387725][ T6573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1534.387764][ T6573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.387786][ T6573] do_syscall_64+0x174/0x580 [ 1534.387804][ T6573] ? trace_irq_disable+0x3b/0x140 [ 1534.387824][ T6573] ? clear_bhb_loop+0x40/0x90 [ 1534.387847][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.387869][ T6573] RIP: 0033:0x7f914ad9de59 [ 1534.387889][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.387906][ T6573] RSP: 002b:00007f9148ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1534.387927][ T6573] RAX: ffffffffffffffda RBX: 00007f914b025fa0 RCX: 00007f914ad9de59 [ 1534.387941][ T6573] RDX: 0000000000048010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1534.387954][ T6573] RBP: 00007f9148ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.387966][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.387977][ T6573] R13: 00007f914b026038 R14: 00007f914b025fa0 R15: 00007ffc48bdd178 [ 1534.388008][ T6573] [ 1534.684722][ T6542] wlan0 speed is unknown, defaulting to 1000 [ 1534.911356][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8732'. [ 1535.551832][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8739'. [ 1535.929891][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.937425][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.228151][ T138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1537.421925][ T6615] bond0: entered promiscuous mode [ 1537.427001][ T6615] bond_slave_0: entered promiscuous mode [ 1537.470276][ T6615] bond_slave_1: entered promiscuous mode [ 1537.478944][ T6615] bond0: left promiscuous mode [ 1537.483824][ T6615] bond_slave_0: left promiscuous mode [ 1537.490617][ T6615] bond_slave_1: left promiscuous mode [ 1537.523401][ T6616] bond0: entered promiscuous mode [ 1537.543077][ T6616] bond_slave_0: entered promiscuous mode [ 1537.556495][ T6616] bond_slave_1: entered promiscuous mode [ 1537.570644][ T6616] bond0: left promiscuous mode [ 1537.575504][ T6616] bond_slave_0: left promiscuous mode [ 1537.581790][ T6616] bond_slave_1: left promiscuous mode [ 1537.611728][ T1163] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.644168][ T1163] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.670443][ T1163] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 52532 - 0 [ 1537.696296][ T1163] netdevsim netdevsim9 netdevsim0: unset [1, 2] type 2 family 0 port 47283 - 0 [ 1537.717291][ T1163] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.735716][ T1163] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.754058][ T1163] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 52532 - 0 [ 1537.764674][ T1163] netdevsim netdevsim9 netdevsim1: unset [1, 2] type 2 family 0 port 47283 - 0 [ 1537.799379][ T1163] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.819023][ T1163] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.831589][ T1163] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 52532 - 0 [ 1537.857317][ T1163] netdevsim netdevsim9 netdevsim2: unset [1, 2] type 2 family 0 port 47283 - 0 [ 1537.891935][ T1163] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.934919][ T1163] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.973720][ T1163] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 52532 - 0 [ 1538.000009][ T1163] netdevsim netdevsim9 netdevsim3: unset [1, 2] type 2 family 0 port 47283 - 0 [ 1538.072206][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8750'. [ 1538.147537][ T6655] netlink: 'syz.6.8752': attribute type 3 has an invalid length. [ 1538.485454][ T6664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1538.947521][ T6686] netlink: 'syz.8.8761': attribute type 1 has an invalid length. [ 1538.978627][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8761'. [ 1538.997276][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8761'. [ 1539.324226][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.381319][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.525327][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.550455][ T6693] veth1_vlan: left promiscuous mode [ 1539.567526][ T6693] veth0_vlan: left promiscuous mode [ 1539.593457][ T6693] veth0_vlan: entered promiscuous mode [ 1539.620053][ T6693] veth1_vlan: entered promiscuous mode [ 1539.638219][ T6693] veth1_macvtap: left promiscuous mode [ 1539.645573][ T6693] veth0_macvtap: left promiscuous mode [ 1539.653483][ T6693] veth0_macvtap: entered promiscuous mode [ 1539.660951][ T6693] veth1_macvtap: entered promiscuous mode [ 1539.701814][ T6693] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 1539.709477][ T6693] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1539.725710][T27648] lo speed is unknown, defaulting to 1000 [ 1539.734715][ T6696] sch_tbf: peakrate 65537 is lower than or equals to rate 11891975306174374873 ! [ 1539.746019][T27648] syz1: Port: 1 Link ACTIVE [ 1539.765065][ T6703] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8765'. [ 1539.796644][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.803976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.842926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.850215][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.936805][ T6718] FAULT_INJECTION: forcing a failure. [ 1539.936805][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.006435][ T7644] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.025689][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.9.8769 Not tainted syzkaller #0 PREEMPT(full) [ 1540.025739][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1540.025758][ T6718] Call Trace: [ 1540.025767][ T6718] [ 1540.025776][ T6718] dump_stack_lvl+0xe8/0x150 [ 1540.025809][ T6718] should_fail_ex+0x40c/0x560 [ 1540.025844][ T6718] should_failslab+0xa8/0x100 [ 1540.025870][ T6718] __kmalloc_cache_noprof+0xa8/0x660 [ 1540.025905][ T6718] ? nfnetlink_rcv+0x1021/0x28c0 [ 1540.025927][ T6718] ? nfnetlink_rcv+0x1021/0x28c0 [ 1540.025957][ T6718] nfnetlink_rcv+0x1021/0x28c0 [ 1540.026019][ T6718] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1540.026094][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 1540.026131][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 1540.026156][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 1540.026188][ T6718] netlink_unicast+0x7bb/0x940 [ 1540.026227][ T6718] netlink_sendmsg+0x813/0xb40 [ 1540.026271][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.026302][ T6718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1540.026336][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.026361][ T6718] sock_sendmsg_nosec+0x13a/0x180 [ 1540.026396][ T6718] ____sys_sendmsg+0x54e/0x850 [ 1540.026427][ T6718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1540.026463][ T6718] ? import_iovec+0x73/0xa0 [ 1540.026492][ T6718] ___sys_sendmsg+0x2a5/0x360 [ 1540.026516][ T6718] ? __lock_acquire+0x683/0x2cf0 [ 1540.026544][ T6718] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.026608][ T6718] ? __fget_files+0x2a/0x420 [ 1540.026630][ T6718] ? __fget_files+0x3a2/0x420 [ 1540.026664][ T6718] __x64_sys_sendmsg+0x1b1/0x290 [ 1540.026699][ T6718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1540.026745][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.026770][ T6718] do_syscall_64+0x174/0x580 [ 1540.026792][ T6718] ? trace_irq_disable+0x3b/0x140 [ 1540.026814][ T6718] ? clear_bhb_loop+0x40/0x90 [ 1540.026842][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.026864][ T6718] RIP: 0033:0x7f76f719de59 [ 1540.026886][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.026907][ T6718] RSP: 002b:00007f76f7ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.026931][ T6718] RAX: ffffffffffffffda RBX: 00007f76f7425fa0 RCX: 00007f76f719de59 [ 1540.026948][ T6718] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1540.026963][ T6718] RBP: 00007f76f7ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.026978][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.026991][ T6718] R13: 00007f76f7426038 R14: 00007f76f7425fa0 R15: 00007ffe620609b8 [ 1540.027027][ T6718] [ 1540.237233][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.365237][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.374433][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.542286][T27646] lo speed is unknown, defaulting to 1000 [ 1540.579456][ T6737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8771'. [ 1540.613360][ T6741] FAULT_INJECTION: forcing a failure. [ 1540.613360][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.662210][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8772'. [ 1540.675802][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.0.8771 Not tainted syzkaller #0 PREEMPT(full) [ 1540.675833][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1540.675847][ T6741] Call Trace: [ 1540.675856][ T6741] [ 1540.675867][ T6741] dump_stack_lvl+0xe8/0x150 [ 1540.675906][ T6741] should_fail_ex+0x40c/0x560 [ 1540.675942][ T6741] should_failslab+0xa8/0x100 [ 1540.675971][ T6741] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1540.676006][ T6741] ? sk_prot_alloc+0x57/0x210 [ 1540.676028][ T6741] ? sk_prot_alloc+0x57/0x210 [ 1540.676059][ T6741] sk_prot_alloc+0x57/0x210 [ 1540.676080][ T6741] ? sk_alloc+0x27/0x390 [ 1540.676105][ T6741] sk_alloc+0x3a/0x390 [ 1540.676131][ T6741] inet_create+0x7a9/0xff0 [ 1540.676155][ T6741] ? inet_create+0x9d/0xff0 [ 1540.676181][ T6741] __sock_create+0x4b3/0x9d0 [ 1540.676224][ T6741] mptcp_subflow_create_socket+0xfd/0x810 [ 1540.676357][ T6741] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1540.676384][ T6741] ? process_measurement+0x14fb/0x1c10 [ 1540.676423][ T6741] ? kasan_quarantine_put+0xbb/0x1f0 [ 1540.676457][ T6741] __mptcp_nmpc_sk+0x155/0x770 [ 1540.676511][ T6741] ? do_raw_spin_lock+0x12b/0x2f0 [ 1540.676540][ T6741] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1540.676565][ T6741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1540.676603][ T6741] mptcp_sendmsg_fastopen+0xce/0x540 [ 1540.676624][ T6741] ? mptcp_rps_record_subflows+0x1d/0x400 [ 1540.676656][ T6741] mptcp_sendmsg+0x1a69/0x1d10 [ 1540.676709][ T6741] ? aa_sk_perm+0x6d5/0x900 [ 1540.676747][ T6741] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1540.676769][ T6741] ? __pfx_aa_sk_perm+0x10/0x10 [ 1540.676799][ T6741] ? inet_sendmsg+0x298/0x320 [ 1540.676834][ T6741] ? __pfx_inet_sendmsg+0x10/0x10 [ 1540.676867][ T6741] sock_sendmsg_nosec+0x10e/0x180 [ 1540.676900][ T6741] ____sys_sendmsg+0x54e/0x850 [ 1540.676930][ T6741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1540.676963][ T6741] ? import_iovec+0x73/0xa0 [ 1540.676990][ T6741] ___sys_sendmsg+0x2a5/0x360 [ 1540.677021][ T6741] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.677069][ T6741] ? vfs_write+0x9ce/0xba0 [ 1540.677108][ T6741] ? do_sys_openat2+0x14e/0x200 [ 1540.677137][ T6741] __x64_sys_sendmsg+0x1b1/0x290 [ 1540.677165][ T6741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1540.677208][ T6741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.677232][ T6741] do_syscall_64+0x174/0x580 [ 1540.677252][ T6741] ? trace_irq_disable+0x3b/0x140 [ 1540.677273][ T6741] ? clear_bhb_loop+0x40/0x90 [ 1540.677298][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.677319][ T6741] RIP: 0033:0x7fd6f8b9de59 [ 1540.677340][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.677359][ T6741] RSP: 002b:00007fd6f99b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.677383][ T6741] RAX: ffffffffffffffda RBX: 00007fd6f8e26180 RCX: 00007fd6f8b9de59 [ 1540.677399][ T6741] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 000000000000000b [ 1540.677414][ T6741] RBP: 00007fd6f99b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.677428][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.677441][ T6741] R13: 00007fd6f8e26218 R14: 00007fd6f8e26180 R15: 00007ffd625d7388 [ 1540.677475][ T6741] [ 1541.157163][ T6749] netlink: 'syz.9.8774': attribute type 32 has an invalid length. [ 1541.168817][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8774'. [ 1541.577149][ T6770] syzkaller0: entered promiscuous mode [ 1541.596424][ T6770] syzkaller0: entered allmulticast mode [ 1541.639568][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8785'. [ 1542.078983][ T6791] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8790'. [ 1542.455422][ T6810] FAULT_INJECTION: forcing a failure. [ 1542.455422][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.502066][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.8.8796 Not tainted syzkaller #0 PREEMPT(full) [ 1542.502105][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.502118][ T6810] Call Trace: [ 1542.502127][ T6810] [ 1542.502137][ T6810] dump_stack_lvl+0xe8/0x150 [ 1542.502171][ T6810] should_fail_ex+0x40c/0x560 [ 1542.502207][ T6810] should_failslab+0xa8/0x100 [ 1542.502236][ T6810] __kmalloc_cache_noprof+0xa8/0x660 [ 1542.502293][ T6810] ? nfnetlink_rcv+0x1021/0x28c0 [ 1542.502316][ T6810] ? nfnetlink_rcv+0x1021/0x28c0 [ 1542.502345][ T6810] nfnetlink_rcv+0x1021/0x28c0 [ 1542.502407][ T6810] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1542.502448][ T6810] ? ref_tracker_free+0x689/0x830 [ 1542.502508][ T6810] ? skb_clone+0x246/0x3a0 [ 1542.502538][ T6810] ? __netlink_deliver_tap+0x811/0x860 [ 1542.502574][ T6810] ? netlink_deliver_tap+0x2e/0x1b0 [ 1542.502598][ T6810] ? netlink_deliver_tap+0x2e/0x1b0 [ 1542.502630][ T6810] netlink_unicast+0x7bb/0x940 [ 1542.502665][ T6810] netlink_sendmsg+0x813/0xb40 [ 1542.502702][ T6810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1542.502733][ T6810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1542.502771][ T6810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1542.502795][ T6810] sock_sendmsg_nosec+0x13a/0x180 [ 1542.502829][ T6810] ____sys_sendmsg+0x54e/0x850 [ 1542.502860][ T6810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1542.502895][ T6810] ? import_iovec+0x73/0xa0 [ 1542.502923][ T6810] ___sys_sendmsg+0x2a5/0x360 [ 1542.502946][ T6810] ? __lock_acquire+0x683/0x2cf0 [ 1542.502975][ T6810] ? __pfx____sys_sendmsg+0x10/0x10 [ 1542.503039][ T6810] ? __fget_files+0x2a/0x420 [ 1542.503061][ T6810] ? __fget_files+0x3a2/0x420 [ 1542.503102][ T6810] __x64_sys_sendmsg+0x1b1/0x290 [ 1542.503131][ T6810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1542.503174][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.503199][ T6810] do_syscall_64+0x174/0x580 [ 1542.503219][ T6810] ? trace_irq_disable+0x3b/0x140 [ 1542.503242][ T6810] ? clear_bhb_loop+0x40/0x90 [ 1542.503271][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.503293][ T6810] RIP: 0033:0x7f914ad9de59 [ 1542.503312][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.503331][ T6810] RSP: 002b:00007f9148ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1542.503356][ T6810] RAX: ffffffffffffffda RBX: 00007f914b025fa0 RCX: 00007f914ad9de59 [ 1542.503373][ T6810] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1542.503387][ T6810] RBP: 00007f9148ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.503402][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.503415][ T6810] R13: 00007f914b026038 R14: 00007f914b025fa0 R15: 00007ffc48bdd178 [ 1542.503451][ T6810] [ 1542.966914][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8800'. [ 1543.615404][ T6850] FAULT_INJECTION: forcing a failure. [ 1543.615404][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.630257][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.0.8809 Not tainted syzkaller #0 PREEMPT(full) [ 1543.630287][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1543.630300][ T6850] Call Trace: [ 1543.630308][ T6850] [ 1543.630316][ T6850] dump_stack_lvl+0xe8/0x150 [ 1543.630344][ T6850] should_fail_ex+0x40c/0x560 [ 1543.630381][ T6850] _copy_to_user+0x31/0xb0 [ 1543.630404][ T6850] simple_read_from_buffer+0xe1/0x170 [ 1543.630428][ T6850] proc_fail_nth_read+0x1bb/0x230 [ 1543.630453][ T6850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1543.630477][ T6850] ? rw_verify_area+0x24a/0x4c0 [ 1543.630501][ T6850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1543.630519][ T6850] vfs_read+0x213/0xa80 [ 1543.630545][ T6850] ? __pfx___mutex_lock+0x10/0x10 [ 1543.630564][ T6850] ? __pfx_vfs_read+0x10/0x10 [ 1543.630586][ T6850] ? __fget_files+0x2a/0x420 [ 1543.630607][ T6850] ? __fget_files+0x3a2/0x420 [ 1543.630623][ T6850] ? __fget_files+0x2a/0x420 [ 1543.630653][ T6850] ksys_read+0x150/0x270 [ 1543.630677][ T6850] ? __pfx_ksys_read+0x10/0x10 [ 1543.630705][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.630725][ T6850] do_syscall_64+0x174/0x580 [ 1543.630741][ T6850] ? trace_irq_disable+0x3b/0x140 [ 1543.630759][ T6850] ? clear_bhb_loop+0x40/0x90 [ 1543.630781][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.630799][ T6850] RIP: 0033:0x7fd6f8b5e68e [ 1543.630816][ T6850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1543.630832][ T6850] RSP: 002b:00007fd6f99f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1543.630851][ T6850] RAX: ffffffffffffffda RBX: 00007fd6f99f86c0 RCX: 00007fd6f8b5e68e [ 1543.630865][ T6850] RDX: 000000000000000f RSI: 00007fd6f99f80a0 RDI: 0000000000000004 [ 1543.630876][ T6850] RBP: 00007fd6f99f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.630888][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.630898][ T6850] R13: 00007fd6f8e26038 R14: 00007fd6f8e25fa0 R15: 00007ffd625d7388 [ 1543.630927][ T6850] [ 1544.212249][ T6867] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1544.500304][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8816'. [ 1544.652717][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8822'. [ 1544.676804][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8822'. [ 1544.705276][ T6894] netlink: 'syz.8.8822': attribute type 18 has an invalid length. [ 1544.798422][ T6904] netlink: 'syz.5.8825': attribute type 1 has an invalid length. [ 1544.855007][ T6904] bond8: entered promiscuous mode [ 1544.862251][ T6904] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1544.915805][ T6909] bond8: (slave bridge3): making interface the new active one [ 1544.938641][ T6909] bridge3: entered promiscuous mode [ 1544.945672][ T6909] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 1545.074025][ T6904] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1545.114686][ T6904] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1545.432118][ T6928] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8832'. [ 1545.452682][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8832'. [ 1545.494980][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8832'. [ 1545.609535][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8836'. [ 1545.879671][ T6949] bond0: entered promiscuous mode [ 1545.891383][ T6949] bond_slave_0: entered promiscuous mode [ 1545.907563][ T6949] bond_slave_1: entered promiscuous mode [ 1545.930310][ T6949] bond0: left promiscuous mode [ 1545.955552][ T6949] bond_slave_0: left promiscuous mode [ 1545.972842][ T6949] bond_slave_1: left promiscuous mode [ 1546.736137][ T6958] bond0: entered promiscuous mode [ 1546.767134][ T6958] bond_slave_0: entered promiscuous mode [ 1546.789890][ T6958] bond_slave_1: entered promiscuous mode [ 1546.810136][ T6958] bond0: left promiscuous mode [ 1546.820796][ T6958] bond_slave_0: left promiscuous mode [ 1546.832313][ T6958] bond_slave_1: left promiscuous mode [ 1546.849575][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8839'. [ 1546.859248][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8839'. [ 1547.001491][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8847'. [ 1547.073116][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8849'. [ 1547.197039][ T6985] bond0: entered promiscuous mode [ 1547.214229][ T6985] bond0: left promiscuous mode [ 1547.260933][ T6993] bond0: entered promiscuous mode [ 1547.283177][ T6993] bond0: left promiscuous mode [ 1547.418950][ T7000] netlink: 'syz.0.8855': attribute type 32 has an invalid length. [ 1547.429181][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1547.741332][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8861'. [ 1548.045608][ T7026] netlink: 'syz.8.8866': attribute type 32 has an invalid length. [ 1548.123312][ T7031] FAULT_INJECTION: forcing a failure. [ 1548.123312][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.150769][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.6.8867 Not tainted syzkaller #0 PREEMPT(full) [ 1548.150802][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1548.150816][ T7031] Call Trace: [ 1548.150825][ T7031] [ 1548.150836][ T7031] dump_stack_lvl+0xe8/0x150 [ 1548.150870][ T7031] should_fail_ex+0x40c/0x560 [ 1548.150909][ T7031] should_failslab+0xa8/0x100 [ 1548.150942][ T7031] __kmalloc_cache_noprof+0xa8/0x660 [ 1548.150982][ T7031] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1548.151014][ T7031] ? __kmalloc_cache_noprof+0x150/0x660 [ 1548.151047][ T7031] ? sctp_add_bind_addr+0x8c/0x370 [ 1548.151076][ T7031] ? sctp_add_bind_addr+0x8c/0x370 [ 1548.151111][ T7031] sctp_add_bind_addr+0x8c/0x370 [ 1548.151148][ T7031] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1548.151183][ T7031] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1548.151216][ T7031] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1548.151250][ T7031] ? sctp_v6_is_any+0x64/0x80 [ 1548.151284][ T7031] ? sctp_copy_one_addr+0x93/0x360 [ 1548.151319][ T7031] sctp_bind_addr_copy+0xb3/0x3c0 [ 1548.151352][ T7031] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1548.151384][ T7031] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1548.151412][ T7031] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1548.151443][ T7031] ? __local_bh_enable_ip+0xd0/0x130 [ 1548.151477][ T7031] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1548.151506][ T7031] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1548.151534][ T7031] sctp_sendmsg+0x159b/0x2d00 [ 1548.151575][ T7031] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1548.151614][ T7031] ? aa_sk_perm+0x6d5/0x900 [ 1548.151656][ T7031] ? sock_rps_record_flow+0x19/0x350 [ 1548.151694][ T7031] ? inet_sendmsg+0x298/0x320 [ 1548.151729][ T7031] ? __pfx_inet_sendmsg+0x10/0x10 [ 1548.151761][ T7031] sock_sendmsg_nosec+0x10e/0x180 [ 1548.151796][ T7031] ____sys_sendmsg+0x54e/0x850 [ 1548.151826][ T7031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1548.151861][ T7031] ? import_iovec+0x73/0xa0 [ 1548.151889][ T7031] ___sys_sendmsg+0x2a5/0x360 [ 1548.151913][ T7031] ? __lock_acquire+0x683/0x2cf0 [ 1548.151942][ T7031] ? __pfx____sys_sendmsg+0x10/0x10 [ 1548.151972][ T7031] ? kstrtouint+0x6e/0xe0 [ 1548.152033][ T7031] ? __fget_files+0x2a/0x420 [ 1548.152055][ T7031] ? __fget_files+0x3a2/0x420 [ 1548.152089][ T7031] __sys_sendmmsg+0x273/0x4d0 [ 1548.152122][ T7031] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1548.152158][ T7031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1548.152211][ T7031] ? ksys_write+0x242/0x270 [ 1548.152240][ T7031] ? __pfx_ksys_write+0x10/0x10 [ 1548.152275][ T7031] __x64_sys_sendmmsg+0xa0/0xc0 [ 1548.152300][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.152323][ T7031] do_syscall_64+0x174/0x580 [ 1548.152343][ T7031] ? trace_irq_disable+0x3b/0x140 [ 1548.152364][ T7031] ? clear_bhb_loop+0x40/0x90 [ 1548.152390][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.152410][ T7031] RIP: 0033:0x7f9d1bb9de59 [ 1548.152431][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.152450][ T7031] RSP: 002b:00007f9d1ca46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1548.152474][ T7031] RAX: ffffffffffffffda RBX: 00007f9d1be26090 RCX: 00007f9d1bb9de59 [ 1548.152490][ T7031] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 1548.152504][ T7031] RBP: 00007f9d1ca46090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.152518][ T7031] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 1548.152531][ T7031] R13: 00007f9d1be26128 R14: 00007f9d1be26090 R15: 00007ffde66c9d88 [ 1548.152566][ T7031] [ 1549.082984][ T7065] tipc: Invalid UDP bearer configuration [ 1549.083049][ T7065] tipc: Enabling of bearer rejected, failed to enable media [ 1549.148910][ T7064] bond0: entered promiscuous mode [ 1549.591662][ T7064] bond0: left promiscuous mode [ 1549.664340][ T7068] bond0: entered promiscuous mode [ 1549.742504][ T7068] bond0: left promiscuous mode [ 1549.937124][ T7080] netlink: 'syz.9.8885': attribute type 3 has an invalid length. [ 1550.254967][ T7096] netlink: 'syz.0.8891': attribute type 1 has an invalid length. [ 1550.620217][ T7115] __nla_validate_parse: 7 callbacks suppressed [ 1550.620238][ T7115] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8894'. [ 1550.714331][ T7115] FAULT_INJECTION: forcing a failure. [ 1550.714331][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.757674][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.6.8894 Not tainted syzkaller #0 PREEMPT(full) [ 1550.757707][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1550.757721][ T7115] Call Trace: [ 1550.757731][ T7115] [ 1550.757741][ T7115] dump_stack_lvl+0xe8/0x150 [ 1550.757778][ T7115] should_fail_ex+0x40c/0x560 [ 1550.757815][ T7115] should_failslab+0xa8/0x100 [ 1550.757843][ T7115] __kmalloc_cache_noprof+0xa8/0x660 [ 1550.757880][ T7115] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1550.758004][ T7115] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1550.758036][ T7115] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1550.758068][ T7115] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1550.758103][ T7115] mptcp_sendmsg+0x1a69/0x1d10 [ 1550.758151][ T7115] ? aa_sk_perm+0x6d5/0x900 [ 1550.758184][ T7115] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1550.758206][ T7115] ? __pfx_aa_sk_perm+0x10/0x10 [ 1550.758236][ T7115] ? inet_sendmsg+0x298/0x320 [ 1550.758272][ T7115] ? __pfx_inet_sendmsg+0x10/0x10 [ 1550.758302][ T7115] sock_sendmsg_nosec+0x10e/0x180 [ 1550.758336][ T7115] ____sys_sendmsg+0x54e/0x850 [ 1550.758368][ T7115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1550.758403][ T7115] ? import_iovec+0x73/0xa0 [ 1550.758430][ T7115] ___sys_sendmsg+0x2a5/0x360 [ 1550.758461][ T7115] ? __pfx____sys_sendmsg+0x10/0x10 [ 1550.758508][ T7115] ? vfs_write+0x9ce/0xba0 [ 1550.758552][ T7115] ? do_sys_openat2+0x14e/0x200 [ 1550.758582][ T7115] __x64_sys_sendmsg+0x1b1/0x290 [ 1550.758611][ T7115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1550.758659][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.758684][ T7115] do_syscall_64+0x174/0x580 [ 1550.758705][ T7115] ? trace_irq_disable+0x3b/0x140 [ 1550.758727][ T7115] ? clear_bhb_loop+0x40/0x90 [ 1550.758755][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.758778][ T7115] RIP: 0033:0x7f9d1bb9de59 [ 1550.758800][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.758820][ T7115] RSP: 002b:00007f9d1ca46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1550.758844][ T7115] RAX: ffffffffffffffda RBX: 00007f9d1be26090 RCX: 00007f9d1bb9de59 [ 1550.758861][ T7115] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 000000000000000b [ 1550.758875][ T7115] RBP: 00007f9d1ca46090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.758890][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.758903][ T7115] R13: 00007f9d1be26128 R14: 00007f9d1be26090 R15: 00007ffde66c9d88 [ 1550.758949][ T7115] [ 1551.419318][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8898'. [ 1551.449924][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8899'. [ 1551.901953][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8904'. [ 1551.920467][ T7153] FAULT_INJECTION: forcing a failure. [ 1551.920467][ T7153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.946850][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.0.8903 Not tainted syzkaller #0 PREEMPT(full) [ 1551.946879][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1551.946893][ T7153] Call Trace: [ 1551.946902][ T7153] [ 1551.946912][ T7153] dump_stack_lvl+0xe8/0x150 [ 1551.946946][ T7153] should_fail_ex+0x40c/0x560 [ 1551.946984][ T7153] _copy_from_user+0x2d/0xb0 [ 1551.947009][ T7153] bpf_test_init+0xd8/0x150 [ 1551.947040][ T7153] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1551.947084][ T7153] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1551.947118][ T7153] ? __fget_files+0x2a/0x420 [ 1551.947149][ T7153] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1551.947176][ T7153] bpf_prog_test_run+0x2c5/0x340 [ 1551.947206][ T7153] __sys_bpf+0xa22/0xd90 [ 1551.947237][ T7153] ? __pfx___sys_bpf+0x10/0x10 [ 1551.947271][ T7153] ? __fget_files+0x2a/0x420 [ 1551.947314][ T7153] ? ksys_write+0x242/0x270 [ 1551.947343][ T7153] ? __pfx_ksys_write+0x10/0x10 [ 1551.947376][ T7153] __x64_sys_bpf+0xba/0xd0 [ 1551.947409][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.947434][ T7153] do_syscall_64+0x174/0x580 [ 1551.947453][ T7153] ? trace_irq_disable+0x3b/0x140 [ 1551.947475][ T7153] ? clear_bhb_loop+0x40/0x90 [ 1551.947503][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.947526][ T7153] RIP: 0033:0x7fd6f8b9de59 [ 1551.947548][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.947568][ T7153] RSP: 002b:00007fd6f99f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1551.947592][ T7153] RAX: ffffffffffffffda RBX: 00007fd6f8e25fa0 RCX: 00007fd6f8b9de59 [ 1551.947609][ T7153] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1551.947624][ T7153] RBP: 00007fd6f99f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.947643][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.947657][ T7153] R13: 00007fd6f8e26038 R14: 00007fd6f8e25fa0 R15: 00007ffd625d7388 [ 1551.947694][ T7153] [ 1552.576003][ T7173] netlink: 'syz.0.8912': attribute type 32 has an invalid length. [ 1552.603988][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1552.880695][ T7185] xt_SECMARK: invalid mode: 4 [ 1553.435390][ T7210] netlink: 136 bytes leftover after parsing attributes in process `syz.6.8924'. [ 1553.494623][ T7210] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1553.730822][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8926'. [ 1553.976347][ T7227] netlink: 200 bytes leftover after parsing attributes in process `syz.9.8927'. [ 1555.046494][ T7254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8936'. [ 1555.146363][ T7260] syzkaller1: entered promiscuous mode [ 1555.180323][ T7260] syzkaller1: entered allmulticast mode [ 1555.334564][ T7258] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8935'. [ 1555.745221][ T7282] lo speed is unknown, defaulting to 1000 [ 1555.840279][ T7295] netlink: 200 bytes leftover after parsing attributes in process `syz.5.8944'. [ 1556.004332][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8946'. [ 1556.270908][ T7310] Bluetooth: hci1: too big key_count value 29096 [ 1556.353024][ T7313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8951'. [ 1556.366683][ T7282] wlan0 speed is unknown, defaulting to 1000 [ 1556.400226][ T7313] syzkaller1: entered promiscuous mode [ 1556.406840][ T7313] syzkaller1: entered allmulticast mode [ 1556.472285][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8940'. [ 1556.497263][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8940'. [ 1557.404953][ T7351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1557.564212][ T7358] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8965'. [ 1557.591840][ T7362] netlink: 200 bytes leftover after parsing attributes in process `syz.5.8964'. [ 1557.635147][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8967'. [ 1557.959518][ T7379] bond0: entered promiscuous mode [ 1557.970555][ T7379] bond_slave_0: entered promiscuous mode [ 1557.996877][ T7379] bond0: left promiscuous mode [ 1558.007709][ T7379] bond_slave_0: left promiscuous mode [ 1558.066899][ T7382] bond0: entered promiscuous mode [ 1558.076488][ T7382] bond_slave_0: entered promiscuous mode [ 1558.086896][ T7382] bond0: left promiscuous mode [ 1558.091966][ T7382] bond_slave_0: left promiscuous mode [ 1558.396976][ T7401] FAULT_INJECTION: forcing a failure. [ 1558.396976][ T7401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1558.416923][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.5.8981 Not tainted syzkaller #0 PREEMPT(full) [ 1558.416954][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1558.416969][ T7401] Call Trace: [ 1558.416978][ T7401] [ 1558.416989][ T7401] dump_stack_lvl+0xe8/0x150 [ 1558.417023][ T7401] should_fail_ex+0x40c/0x560 [ 1558.417060][ T7401] prepare_alloc_pages+0x230/0x650 [ 1558.417093][ T7401] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1558.417123][ T7401] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1558.417153][ T7401] ? __pfx_policy_nodemask+0x10/0x10 [ 1558.417178][ T7401] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1558.417210][ T7401] ? lock_acquire+0x106/0x350 [ 1558.417250][ T7401] alloc_pages_mpol+0x212/0x380 [ 1558.417284][ T7401] folio_alloc_mpol_noprof+0x39/0x160 [ 1558.417314][ T7401] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1558.417346][ T7401] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1558.417386][ T7401] do_wp_page+0x1163/0x4c70 [ 1558.417439][ T7401] ? __pfx_do_wp_page+0x10/0x10 [ 1558.417465][ T7401] ? do_raw_spin_lock+0x12b/0x2f0 [ 1558.417500][ T7401] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1558.417543][ T7401] handle_mm_fault+0x1490/0x3080 [ 1558.417589][ T7401] ? handle_mm_fault+0xec/0x3080 [ 1558.417629][ T7401] ? __pfx_handle_mm_fault+0x10/0x10 [ 1558.417661][ T7401] ? follow_page_pte+0xbd0/0xe70 [ 1558.417702][ T7401] ? __pfx_follow_page_pte+0x10/0x10 [ 1558.417749][ T7401] __get_user_pages+0x1678/0x2720 [ 1558.417819][ T7401] __gup_longterm_locked+0xd52/0x15c0 [ 1558.417853][ T7401] ? lock_acquire+0x106/0x350 [ 1558.417883][ T7401] ? sanity_check_pinned_pages+0x810/0x8d0 [ 1558.417920][ T7401] gup_fast_fallback+0x1d8c/0x20e0 [ 1558.417995][ T7401] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1558.418022][ T7401] ? __kmalloc_noprof+0x1ad/0x720 [ 1558.418056][ T7401] ? kasan_save_track+0x4f/0x80 [ 1558.418083][ T7401] ? pin_user_pages_fast+0x4d/0xb0 [ 1558.418115][ T7401] iov_iter_extract_pages+0x369/0x5f0 [ 1558.418152][ T7401] extract_iter_to_sg+0xee0/0x25f0 [ 1558.418202][ T7401] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1558.418244][ T7401] ? rcu_is_watching+0x15/0xb0 [ 1558.418272][ T7401] ? trace_kmalloc+0x2a/0xf0 [ 1558.418309][ T7401] ? __asan_memset+0x22/0x50 [ 1558.418351][ T7401] af_alg_get_rsgl+0x493/0x8d0 [ 1558.418515][ T7401] ? af_alg_alloc_areq+0xac/0x200 [ 1558.418550][ T7401] skcipher_recvmsg+0x39d/0xe10 [ 1558.418626][ T7401] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1558.418659][ T7401] ? __lock_acquire+0x683/0x2cf0 [ 1558.418681][ T7401] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1558.418710][ T7401] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1558.418739][ T7401] ? security_socket_recvmsg+0x7e/0x2c0 [ 1558.418780][ T7401] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1558.418816][ T7401] sock_recvmsg+0x196/0x1e0 [ 1558.418852][ T7401] ____sys_recvmsg+0x1e6/0x4a0 [ 1558.418889][ T7401] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1558.418934][ T7401] ? import_iovec+0x73/0xa0 [ 1558.418962][ T7401] ___sys_recvmsg+0x213/0x5a0 [ 1558.418995][ T7401] ? __pfx____sys_recvmsg+0x10/0x10 [ 1558.419027][ T7401] ? __fget_files+0x2a/0x420 [ 1558.419072][ T7401] ? __fget_files+0x3a2/0x420 [ 1558.419107][ T7401] __x64_sys_recvmsg+0x1ae/0x290 [ 1558.419136][ T7401] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1558.419185][ T7401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.419212][ T7401] do_syscall_64+0x174/0x580 [ 1558.419234][ T7401] ? trace_irq_disable+0x3b/0x140 [ 1558.419256][ T7401] ? clear_bhb_loop+0x40/0x90 [ 1558.419285][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.419308][ T7401] RIP: 0033:0x7fea7fb9de59 [ 1558.419330][ T7401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.419349][ T7401] RSP: 002b:00007fea80b4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1558.419374][ T7401] RAX: ffffffffffffffda RBX: 00007fea7fe25fa0 RCX: 00007fea7fb9de59 [ 1558.419391][ T7401] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1558.419406][ T7401] RBP: 00007fea80b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.419421][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.419434][ T7401] R13: 00007fea7fe26038 R14: 00007fea7fe25fa0 R15: 00007ffc08b31588 [ 1558.419473][ T7401] [ 1558.991375][ T7403] syzkaller1: entered promiscuous mode [ 1558.997058][ T7403] syzkaller1: entered allmulticast mode [ 1559.176752][ T7415] syzkaller0: entered promiscuous mode [ 1559.184040][ T7415] syzkaller0: entered allmulticast mode [ 1559.666115][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8995'. [ 1562.903330][ T7459] syzkaller1: entered promiscuous mode [ 1562.944935][ T7459] syzkaller1: entered allmulticast mode [ 1563.011436][ T7461] netlink: zone id is out of range [ 1563.026930][ T7461] netlink: zone id is out of range [ 1563.033308][ T7461] netlink: zone id is out of range [ 1563.041637][ T7461] netlink: zone id is out of range [ 1563.052289][ T7461] netlink: zone id is out of range [ 1563.072778][ T7461] netlink: zone id is out of range [ 1563.087334][ T7461] netlink: set zone limit has 8 unknown bytes [ 1563.281739][ T7476] sctp: [Deprecated]: syz.5.9007 (pid 7476) Use of int in max_burst socket option. [ 1563.281739][ T7476] Use struct sctp_assoc_value instead [ 1563.653211][ T7487] FAULT_INJECTION: forcing a failure. [ 1563.653211][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.680128][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.5.9011 Not tainted syzkaller #0 PREEMPT(full) [ 1563.680159][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1563.680172][ T7487] Call Trace: [ 1563.680182][ T7487] [ 1563.680192][ T7487] dump_stack_lvl+0xe8/0x150 [ 1563.680226][ T7487] should_fail_ex+0x40c/0x560 [ 1563.680419][ T7487] should_failslab+0xa8/0x100 [ 1563.680460][ T7487] __kmalloc_noprof+0xfe/0x720 [ 1563.680512][ T7487] ? hci_get_conn_list+0x10a/0x780 [ 1563.680627][ T7487] ? hci_get_conn_list+0x10a/0x780 [ 1563.680669][ T7487] hci_get_conn_list+0x10a/0x780 [ 1563.680705][ T7487] ? hci_sock_ioctl+0x346/0x940 [ 1563.680735][ T7487] ? hci_sock_ioctl+0x346/0x940 [ 1563.680766][ T7487] ? __pfx_hci_get_conn_list+0x10/0x10 [ 1563.680804][ T7487] ? hci_sock_ioctl+0x583/0x940 [ 1563.680839][ T7487] sock_do_ioctl+0x101/0x320 [ 1563.680873][ T7487] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1563.680898][ T7487] ? hook_file_ioctl+0x1f0/0x5f0 [ 1563.680941][ T7487] sock_ioctl+0x57a/0x7e0 [ 1563.680972][ T7487] ? __pfx_sock_ioctl+0x10/0x10 [ 1563.681002][ T7487] ? __fget_files+0x2a/0x420 [ 1563.681023][ T7487] ? __fget_files+0x3a2/0x420 [ 1563.681043][ T7487] ? __fget_files+0x2a/0x420 [ 1563.681069][ T7487] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1563.681102][ T7487] ? __pfx_sock_ioctl+0x10/0x10 [ 1563.681134][ T7487] __se_sys_ioctl+0xfc/0x170 [ 1563.681163][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.681188][ T7487] do_syscall_64+0x174/0x580 [ 1563.681210][ T7487] ? trace_irq_disable+0x3b/0x140 [ 1563.681250][ T7487] ? clear_bhb_loop+0x40/0x90 [ 1563.681277][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.681299][ T7487] RIP: 0033:0x7fea7fb9de59 [ 1563.681321][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.681340][ T7487] RSP: 002b:00007fea80b4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.681364][ T7487] RAX: ffffffffffffffda RBX: 00007fea7fe25fa0 RCX: 00007fea7fb9de59 [ 1563.681382][ T7487] RDX: 0000200000000180 RSI: 00000000800448d4 RDI: 0000000000000004 [ 1563.681398][ T7487] RBP: 00007fea80b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.681412][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.681426][ T7487] R13: 00007fea7fe26038 R14: 00007fea7fe25fa0 R15: 00007ffc08b31588 [ 1563.681463][ T7487] [ 1563.962243][ T7489] netlink: 136 bytes leftover after parsing attributes in process `syz.6.9012'. [ 1563.972915][ T7489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1564.381097][ T7505] bond0: entered promiscuous mode [ 1564.386377][ T7505] bond_slave_0: entered promiscuous mode [ 1564.393982][ T7505] @0Ù: entered promiscuous mode [ 1564.401749][ T7505] bond0: left promiscuous mode [ 1564.408661][ T7505] bond_slave_0: left promiscuous mode [ 1564.414879][ T7505] @0Ù: left promiscuous mode [ 1564.439735][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9018'. [ 1564.479452][ T7510] bond0: entered promiscuous mode [ 1564.499150][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.516065][ T7511] bond0: entered promiscuous mode [ 1564.522134][ T7511] bond_slave_0: entered promiscuous mode [ 1564.529020][ T7511] @0Ù: entered promiscuous mode [ 1564.539458][ T7511] bond0: left promiscuous mode [ 1564.544464][ T7511] bond_slave_0: left promiscuous mode [ 1564.550566][ T7511] @0Ù: left promiscuous mode [ 1564.579539][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9018'. [ 1564.757125][ T7517] syzkaller1: entered promiscuous mode [ 1564.801825][ T7517] syzkaller1: entered allmulticast mode [ 1564.993292][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9022'. [ 1565.097738][ T7533] veth1_to_bond: entered promiscuous mode [ 1565.226502][ T7540] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1565.240410][ T7540] syzkaller1: linktype set to 823 [ 1565.251725][ T7540] netlink: 'syz.6.9028': attribute type 1 has an invalid length. [ 1565.695033][ T7523] veth1_to_bond: left promiscuous mode [ 1565.741461][ T7562] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 1565.787562][ T7567] xt_SECMARK: invalid mode: 4 [ 1565.906151][ T7574] FAULT_INJECTION: forcing a failure. [ 1565.906151][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.956903][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.8.9040 Not tainted syzkaller #0 PREEMPT(full) [ 1565.956935][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1565.956949][ T7574] Call Trace: [ 1565.956958][ T7574] [ 1565.956968][ T7574] dump_stack_lvl+0xe8/0x150 [ 1565.957002][ T7574] should_fail_ex+0x40c/0x560 [ 1565.957040][ T7574] _copy_to_user+0x31/0xb0 [ 1565.957068][ T7574] hci_get_conn_list+0x591/0x780 [ 1565.957112][ T7574] ? __pfx_hci_get_conn_list+0x10/0x10 [ 1565.957150][ T7574] ? hci_sock_ioctl+0x583/0x940 [ 1565.957186][ T7574] sock_do_ioctl+0x101/0x320 [ 1565.957219][ T7574] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1565.957246][ T7574] ? hook_file_ioctl+0x1f0/0x5f0 [ 1565.957289][ T7574] sock_ioctl+0x57a/0x7e0 [ 1565.957321][ T7574] ? __pfx_sock_ioctl+0x10/0x10 [ 1565.957350][ T7574] ? __fget_files+0x2a/0x420 [ 1565.957372][ T7574] ? __fget_files+0x3a2/0x420 [ 1565.957393][ T7574] ? __fget_files+0x2a/0x420 [ 1565.957421][ T7574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1565.957453][ T7574] ? __pfx_sock_ioctl+0x10/0x10 [ 1565.957482][ T7574] __se_sys_ioctl+0xfc/0x170 [ 1565.957517][ T7574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.957542][ T7574] do_syscall_64+0x174/0x580 [ 1565.957563][ T7574] ? trace_irq_disable+0x3b/0x140 [ 1565.957585][ T7574] ? clear_bhb_loop+0x40/0x90 [ 1565.957621][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.957643][ T7574] RIP: 0033:0x7f914ad9de59 [ 1565.957665][ T7574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.957686][ T7574] RSP: 002b:00007f9148ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.957710][ T7574] RAX: ffffffffffffffda RBX: 00007f914b025fa0 RCX: 00007f914ad9de59 [ 1565.957727][ T7574] RDX: 0000200000000180 RSI: 00000000800448d4 RDI: 0000000000000004 [ 1565.957747][ T7574] RBP: 00007f9148ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.957765][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.957785][ T7574] R13: 00007f914b026038 R14: 00007f914b025fa0 R15: 00007ffc48bdd178 [ 1565.957822][ T7574] [ 1566.016359][ T7575] syzkaller1: entered promiscuous mode [ 1566.258688][ T7575] syzkaller1: entered allmulticast mode [ 1566.260706][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9041'. [ 1566.441911][ T7584] netlink: 'syz.0.9043': attribute type 1 has an invalid length. [ 1566.530433][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9046'. [ 1567.284070][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9046'. [ 1567.407229][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9046'. [ 1567.679569][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9048'. [ 1567.806268][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9053'. [ 1567.877546][ T7619] netlink: 'syz.5.9054': attribute type 10 has an invalid length. [ 1567.886272][ T7619] openvswitch: netlink: Message has 4 unknown bytes. [ 1568.229128][T31032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1568.735597][ T7642] syzkaller1: entered promiscuous mode [ 1568.769120][ T7642] syzkaller1: entered allmulticast mode [ 1569.395174][ T7670] __nla_validate_parse: 1 callbacks suppressed [ 1569.395198][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9072'. [ 1570.282894][ T7679] tipc: Invalid UDP bearer configuration [ 1570.283034][ T7679] tipc: Enabling of bearer rejected, failed to enable media [ 1570.621763][ T7702] netlink: 'syz.0.9077': attribute type 13 has an invalid length. [ 1571.070099][ T7723] Unknown metaid 768 dlen 4 [ 1571.377007][ T7733] bond14: option downdelay: invalid value (18446744073709551487) [ 1571.401734][ T7733] bond14: option downdelay: allowed values 0 - 2147483647 [ 1571.430233][ T7733] bond14 (unregistering): Released all slaves [ 1572.688293][ T7793] bond0: entered promiscuous mode [ 1572.701148][ T7793] bond_slave_0: entered promiscuous mode [ 1572.717445][ T7793] @0Ù: entered promiscuous mode [ 1572.739878][ T7793] bond0: left promiscuous mode [ 1572.755029][ T7793] bond_slave_0: left promiscuous mode [ 1572.764327][ T7793] @0Ù: left promiscuous mode [ 1572.796634][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9109'. [ 1572.825726][ T7798] netlink: 'syz.6.9109': attribute type 5 has an invalid length. [ 1572.839777][ T7797] bond0: entered promiscuous mode [ 1572.845230][ T7797] bond_slave_0: entered promiscuous mode [ 1572.851683][ T7798] netlink: 'syz.6.9109': attribute type 8 has an invalid length. [ 1572.860520][ T7797] @0Ù: entered promiscuous mode [ 1572.870411][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9109'. [ 1572.879670][ T7797] bond0: left promiscuous mode [ 1572.884705][ T7797] bond_slave_0: left promiscuous mode [ 1572.893584][ T7797] @0Ù: left promiscuous mode [ 1572.943909][ T7798] geneve4: entered promiscuous mode [ 1572.956623][ T7798] geneve4: entered allmulticast mode [ 1572.972894][ T7644] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 44629 - 0 [ 1573.001259][ T7644] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 44629 - 0 [ 1573.031428][ T7644] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 44629 - 0 [ 1573.057350][ T7644] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 44629 - 0 [ 1573.538100][ T7822] netlink: 4452 bytes leftover after parsing attributes in process `syz.8.9119'. [ 1573.679132][ T7828] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9120'. [ 1573.721724][ T7831] ip6gre4: entered allmulticast mode [ 1573.837150][ T7833] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9122'. [ 1573.981621][ T7840] sctp: [Deprecated]: syz.5.9125 (pid 7840) Use of int in max_burst socket option. [ 1573.981621][ T7840] Use struct sctp_assoc_value instead [ 1574.021302][ T7840] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9125'. [ 1574.153018][ T7846] netlink: 52 bytes leftover after parsing attributes in process `syz.9.9127'. [ 1574.275558][ T7846] syzkaller0: entered promiscuous mode [ 1574.308137][ T7852] IPVS: Scheduler module ip_vs_sip not found [ 1574.312551][ T7846] syzkaller0: entered allmulticast mode [ 1574.641325][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9135'. [ 1574.725297][ T7875] netlink: 'syz.6.9137': attribute type 32 has an invalid length. [ 1574.763180][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9137'. [ 1575.560696][ T7897] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9143'. [ 1578.511400][ T7894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1578.696574][ T7913] netlink: 'syz.0.9149': attribute type 32 has an invalid length. [ 1578.712827][ T7910] lo speed is unknown, defaulting to 1000 [ 1578.721735][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9149'. [ 1578.911496][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9153'. [ 1578.971675][ T7931] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9155'. [ 1578.982728][ T7931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1579.076767][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9156'. [ 1579.095260][ T7934] tipc: Enabling of bearer rejected, failed to enable media [ 1579.105998][ T7934] netlink: 'syz.5.9156': attribute type 1 has an invalid length. [ 1579.155785][ T7910] wlan0 speed is unknown, defaulting to 1000 [ 1579.260663][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9157'. [ 1579.355784][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9158'. [ 1580.121597][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9166'. [ 1580.158796][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9166'. [ 1580.341591][ T7968] : entered allmulticast mode [ 1580.361229][ T7974] : left allmulticast mode [ 1580.411373][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9168'. [ 1580.438011][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9168'. [ 1580.460618][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9168'. [ 1580.493619][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9168'. [ 1580.576555][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9174'. [ 1580.590197][ T7988] FAULT_INJECTION: forcing a failure. [ 1580.590197][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.608676][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.6.9176 Not tainted syzkaller #0 PREEMPT(full) [ 1580.608708][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1580.608722][ T7988] Call Trace: [ 1580.608731][ T7988] [ 1580.608741][ T7988] dump_stack_lvl+0xe8/0x150 [ 1580.608777][ T7988] should_fail_ex+0x40c/0x560 [ 1580.608815][ T7988] should_failslab+0xa8/0x100 [ 1580.608844][ T7988] __kmalloc_noprof+0xfe/0x720 [ 1580.608888][ T7988] ? tomoyo_encode+0x2ad/0x570 [ 1580.608916][ T7988] ? tomoyo_encode+0x2ad/0x570 [ 1580.608952][ T7988] tomoyo_encode+0x2ad/0x570 [ 1580.608987][ T7988] tomoyo_realpath_from_path+0x5fa/0x640 [ 1580.609028][ T7988] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1580.609053][ T7988] tomoyo_path_number_perm+0x246/0x5f0 [ 1580.609080][ T7988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1580.609104][ T7988] ? __lock_acquire+0x683/0x2cf0 [ 1580.609146][ T7988] ? hook_file_ioctl+0x1f0/0x5f0 [ 1580.609193][ T7988] ? __fget_files+0x2a/0x420 [ 1580.609220][ T7988] ? __fget_files+0x2a/0x420 [ 1580.609241][ T7988] ? __fget_files+0x3a2/0x420 [ 1580.609261][ T7988] ? __fget_files+0x2a/0x420 [ 1580.609288][ T7988] security_file_ioctl+0xc3/0x2a0 [ 1580.609314][ T7988] __se_sys_ioctl+0x47/0x170 [ 1580.609342][ T7988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.609366][ T7988] do_syscall_64+0x174/0x580 [ 1580.609384][ T7988] ? trace_irq_disable+0x3b/0x140 [ 1580.609406][ T7988] ? clear_bhb_loop+0x40/0x90 [ 1580.609435][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.609457][ T7988] RIP: 0033:0x7f9d1bb9de59 [ 1580.609478][ T7988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.609498][ T7988] RSP: 002b:00007f9d1ca67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.609522][ T7988] RAX: ffffffffffffffda RBX: 00007f9d1be25fa0 RCX: 00007f9d1bb9de59 [ 1580.609539][ T7988] RDX: 0000200000000040 RSI: 0000000000008b2b RDI: 0000000000000007 [ 1580.609554][ T7988] RBP: 00007f9d1ca67090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.609569][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.609583][ T7988] R13: 00007f9d1be26038 R14: 00007f9d1be25fa0 R15: 00007ffde66c9d88 [ 1580.609620][ T7988] [ 1580.609710][ T7988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1581.079153][ T7999] xt_hashlimit: size too large, truncated to 1048576 [ 1581.122873][ T8006] xt_hashlimit: size too large, truncated to 1048576 [ 1581.172552][ T8006] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1581.488856][ T8020] netlink: 'syz.0.9186': attribute type 12 has an invalid length. [ 1581.505068][ T8020] netlink: 'syz.0.9186': attribute type 29 has an invalid length. [ 1581.517864][ T8020] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9186'. [ 1581.956939][ T8022] tipc: Invalid UDP bearer configuration [ 1581.957001][ T8022] tipc: Enabling of bearer rejected, failed to enable media [ 1582.024229][ T8026] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9186'. [ 1582.395241][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9193'. [ 1582.532995][ T8042] bond0: entered promiscuous mode [ 1582.548794][ T8042] bond_slave_0: entered promiscuous mode [ 1582.561981][ T8042] bond_slave_1: entered promiscuous mode [ 1582.589596][ T8042] bond0: left promiscuous mode [ 1582.602174][ T8042] bond_slave_0: left promiscuous mode [ 1582.619097][ T8042] bond_slave_1: left promiscuous mode [ 1582.656111][ T8045] bond0: entered promiscuous mode [ 1582.673629][ T8045] bond_slave_0: entered promiscuous mode [ 1582.700337][ T8045] bond_slave_1: entered promiscuous mode [ 1582.727473][ T8045] bond0: left promiscuous mode [ 1582.737588][ T8045] bond_slave_0: left promiscuous mode [ 1582.753652][ T8045] bond_slave_1: left promiscuous mode [ 1583.314322][ T8079] tipc: Invalid UDP bearer configuration [ 1583.314379][ T8079] tipc: Enabling of bearer rejected, failed to enable media [ 1583.520322][ T8087] FAULT_INJECTION: forcing a failure. [ 1583.520322][ T8087] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1583.543437][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.6.9208 Not tainted syzkaller #0 PREEMPT(full) [ 1583.543468][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1583.543482][ T8087] Call Trace: [ 1583.543491][ T8087] [ 1583.543501][ T8087] dump_stack_lvl+0xe8/0x150 [ 1583.543536][ T8087] should_fail_ex+0x40c/0x560 [ 1583.543576][ T8087] prepare_alloc_pages+0x230/0x650 [ 1583.543611][ T8087] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1583.543642][ T8087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1583.543672][ T8087] ? __pfx_policy_nodemask+0x10/0x10 [ 1583.543698][ T8087] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1583.543731][ T8087] ? lock_acquire+0x106/0x350 [ 1583.543765][ T8087] alloc_pages_mpol+0x212/0x380 [ 1583.543799][ T8087] folio_alloc_mpol_noprof+0x39/0x160 [ 1583.543829][ T8087] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1583.543860][ T8087] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1583.543901][ T8087] do_wp_page+0x1163/0x4c70 [ 1583.543954][ T8087] ? __pfx_do_wp_page+0x10/0x10 [ 1583.543980][ T8087] ? do_raw_spin_lock+0x12b/0x2f0 [ 1583.544015][ T8087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1583.544059][ T8087] handle_mm_fault+0x1490/0x3080 [ 1583.544106][ T8087] ? handle_mm_fault+0xec/0x3080 [ 1583.544147][ T8087] ? __pfx_handle_mm_fault+0x10/0x10 [ 1583.544188][ T8087] ? follow_page_pte+0xbd0/0xe70 [ 1583.544229][ T8087] ? __pfx_follow_page_pte+0x10/0x10 [ 1583.544278][ T8087] __get_user_pages+0x1678/0x2720 [ 1583.544347][ T8087] __gup_longterm_locked+0xd52/0x15c0 [ 1583.544381][ T8087] ? lock_acquire+0x106/0x350 [ 1583.544413][ T8087] ? sanity_check_pinned_pages+0x810/0x8d0 [ 1583.544450][ T8087] gup_fast_fallback+0x1d8c/0x20e0 [ 1583.544518][ T8087] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1583.544545][ T8087] ? __kmalloc_noprof+0x1ad/0x720 [ 1583.544579][ T8087] ? kasan_save_track+0x4f/0x80 [ 1583.544606][ T8087] ? pin_user_pages_fast+0x4d/0xb0 [ 1583.544638][ T8087] iov_iter_extract_pages+0x369/0x5f0 [ 1583.544674][ T8087] extract_iter_to_sg+0xee0/0x25f0 [ 1583.544725][ T8087] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1583.544766][ T8087] ? rcu_is_watching+0x15/0xb0 [ 1583.544794][ T8087] ? trace_kmalloc+0x2a/0xf0 [ 1583.544831][ T8087] ? __asan_memset+0x22/0x50 [ 1583.544865][ T8087] af_alg_get_rsgl+0x493/0x8d0 [ 1583.544912][ T8087] ? af_alg_alloc_areq+0xac/0x200 [ 1583.544946][ T8087] skcipher_recvmsg+0x39d/0xe10 [ 1583.545003][ T8087] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1583.545035][ T8087] ? __lock_acquire+0x683/0x2cf0 [ 1583.545057][ T8087] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1583.545088][ T8087] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1583.545116][ T8087] ? security_socket_recvmsg+0x7e/0x2c0 [ 1583.545148][ T8087] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1583.545189][ T8087] sock_recvmsg+0x196/0x1e0 [ 1583.545225][ T8087] ____sys_recvmsg+0x1e6/0x4a0 [ 1583.545262][ T8087] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1583.545304][ T8087] ? import_iovec+0x73/0xa0 [ 1583.545333][ T8087] ___sys_recvmsg+0x213/0x5a0 [ 1583.545365][ T8087] ? __pfx____sys_recvmsg+0x10/0x10 [ 1583.545398][ T8087] ? __fget_files+0x2a/0x420 [ 1583.545442][ T8087] ? __fget_files+0x3a2/0x420 [ 1583.545478][ T8087] __x64_sys_recvmsg+0x1ae/0x290 [ 1583.545509][ T8087] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1583.545557][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.545583][ T8087] do_syscall_64+0x174/0x580 [ 1583.545604][ T8087] ? trace_irq_disable+0x3b/0x140 [ 1583.545626][ T8087] ? clear_bhb_loop+0x40/0x90 [ 1583.545655][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.545678][ T8087] RIP: 0033:0x7f9d1bb9de59 [ 1583.545699][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.545719][ T8087] RSP: 002b:00007f9d1ca67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1583.545744][ T8087] RAX: ffffffffffffffda RBX: 00007f9d1be25fa0 RCX: 00007f9d1bb9de59 [ 1583.545761][ T8087] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1583.545775][ T8087] RBP: 00007f9d1ca67090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.545790][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.545803][ T8087] R13: 00007f9d1be26038 R14: 00007f9d1be25fa0 R15: 00007ffde66c9d88 [ 1583.545841][ T8087] [ 1585.266600][ T8129] tipc: Invalid UDP bearer configuration [ 1585.266659][ T8129] tipc: Enabling of bearer rejected, failed to enable media [ 1585.505203][ T8138] __nla_validate_parse: 8 callbacks suppressed [ 1585.505224][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9227'. [ 1585.580163][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9227'. [ 1585.635984][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9227'. [ 1586.031806][ T8161] gretap0: entered promiscuous mode [ 1586.059496][ T8161] vlan3: entered promiscuous mode [ 1586.182244][ T8167] lo speed is unknown, defaulting to 1000 [ 1586.503726][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.528733][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.615159][ T8185] tipc: Invalid UDP bearer configuration [ 1586.615220][ T8185] tipc: Enabling of bearer rejected, failed to enable media [ 1586.760876][ T8193] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1586.926677][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9237'. [ 1587.139144][ T8167] wlan0 speed is unknown, defaulting to 1000 [ 1587.206508][ T8203] netlink: 'syz.6.9247': attribute type 1 has an invalid length. [ 1587.370288][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9247'. [ 1587.384882][ T8203] bond14: entered promiscuous mode [ 1587.409853][ T8203] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1587.513503][ T8207] bond14: entered allmulticast mode [ 1588.283889][ T8227] netlink: 'syz.8.9256': attribute type 1 has an invalid length. [ 1588.298095][ T8227] netlink: 'syz.8.9256': attribute type 2 has an invalid length. [ 1588.330964][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9256'. [ 1588.446606][ T8254] netlink: 'syz.5.9263': attribute type 12 has an invalid length. [ 1588.620965][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9267'. [ 1588.768207][ T8272] xt_SECMARK: invalid mode: 4 [ 1588.782920][ T8268] lo speed is unknown, defaulting to 1000 [ 1589.036375][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9276'. [ 1589.469445][ T8299] syzkaller0: entered promiscuous mode [ 1589.482444][ T8299] syzkaller0: entered allmulticast mode [ 1589.557986][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9275'. [ 1589.609540][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9283'. [ 1589.691871][ T8304] netlink: 'syz.5.9283': attribute type 1 has an invalid length. [ 1589.769407][ T8268] wlan0 speed is unknown, defaulting to 1000 [ 1589.793958][ T8284] lo speed is unknown, defaulting to 1000 [ 1590.201676][ T8322] xt_SECMARK: invalid mode: 4 [ 1590.444612][ T8284] wlan0 speed is unknown, defaulting to 1000 [ 1590.719457][ T8341] __nla_validate_parse: 3 callbacks suppressed [ 1590.719479][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9298'. [ 1590.879237][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9297'. [ 1590.953019][ T8353] netlink: 'syz.8.9302': attribute type 1 has an invalid length. [ 1591.101344][ T8353] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9302'. [ 1591.227841][ T8354] bond12: (slave bridge2): making interface the new active one [ 1591.237225][ T8354] bond12: (slave bridge2): Enslaving as an active interface with an up link [ 1591.257342][ T8353] bond12: entered promiscuous mode [ 1591.279028][ T8353] bridge2: entered promiscuous mode [ 1591.299946][ T8353] bond12: entered allmulticast mode [ 1591.311244][ T8353] bridge2: entered allmulticast mode [ 1591.325302][ T8353] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1591.356531][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9303'. [ 1591.452385][ T8367] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9305'. [ 1591.695123][ T8378] bond0: (slave bond_slave_1): Releasing backup interface [ 1591.888141][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9309'. [ 1591.908935][ T8374] lo speed is unknown, defaulting to 1000 [ 1592.037383][ T8389] FAULT_INJECTION: forcing a failure. [ 1592.037383][ T8389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.078334][ T8390] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 1592.089235][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.8.9313 Not tainted syzkaller #0 PREEMPT(full) [ 1592.089267][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1592.089281][ T8389] Call Trace: [ 1592.089296][ T8389] [ 1592.089306][ T8389] dump_stack_lvl+0xe8/0x150 [ 1592.089342][ T8389] should_fail_ex+0x40c/0x560 [ 1592.089387][ T8389] _copy_from_iter+0x1d3/0x1660 [ 1592.089420][ T8389] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1592.089456][ T8389] ? rcu_is_watching+0x15/0xb0 [ 1592.089486][ T8389] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1592.089520][ T8389] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1592.089554][ T8389] ? __pfx__copy_from_iter+0x10/0x10 [ 1592.089587][ T8389] ? __alloc_skb+0x276/0x7a0 [ 1592.089607][ T8389] ? __alloc_skb+0x276/0x7a0 [ 1592.089634][ T8389] ? netlink_sendmsg+0x650/0xb40 [ 1592.089660][ T8389] ? skb_put+0x112/0x210 [ 1592.089685][ T8389] netlink_sendmsg+0x6c0/0xb40 [ 1592.089723][ T8389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.089754][ T8389] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1592.089789][ T8389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.089815][ T8389] sock_sendmsg_nosec+0x13a/0x180 [ 1592.089849][ T8389] ____sys_sendmsg+0x54e/0x850 [ 1592.089880][ T8389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.089915][ T8389] ? import_iovec+0x73/0xa0 [ 1592.089942][ T8389] ___sys_sendmsg+0x2a5/0x360 [ 1592.089966][ T8389] ? __lock_acquire+0x683/0x2cf0 [ 1592.089995][ T8389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.090060][ T8389] ? __fget_files+0x2a/0x420 [ 1592.090082][ T8389] ? __fget_files+0x3a2/0x420 [ 1592.090117][ T8389] __x64_sys_sendmsg+0x1b1/0x290 [ 1592.090145][ T8389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1592.090191][ T8389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.090215][ T8389] do_syscall_64+0x174/0x580 [ 1592.090237][ T8389] ? trace_irq_disable+0x3b/0x140 [ 1592.090258][ T8389] ? clear_bhb_loop+0x40/0x90 [ 1592.090287][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.090309][ T8389] RIP: 0033:0x7f914ad9de59 [ 1592.090331][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.090351][ T8389] RSP: 002b:00007f9148ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.090383][ T8389] RAX: ffffffffffffffda RBX: 00007f914b025fa0 RCX: 00007f914ad9de59 [ 1592.090400][ T8389] RDX: 0000000000040040 RSI: 0000200000000200 RDI: 0000000000000004 [ 1592.090415][ T8389] RBP: 00007f9148ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.090430][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.090444][ T8389] R13: 00007f914b026038 R14: 00007f914b025fa0 R15: 00007ffc48bdd178 [ 1592.090481][ T8389] [ 1592.092065][ T8390] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 1592.388967][ T8390] geneve2: left promiscuous mode [ 1592.400743][ T8390] geneve3: left promiscuous mode [ 1592.428176][ T8390] geneve3: left allmulticast mode [ 1592.438529][ T8390] bond2: left promiscuous mode [ 1592.450112][ T8390] bond3: left promiscuous mode [ 1592.466787][ T8390] macvtap0: left allmulticast mode [ 1592.498669][ T8390] vlan2: left allmulticast mode [ 1592.504874][ T8390] bond0: left allmulticast mode [ 1592.520433][ T8390] bond_slave_0: left allmulticast mode [ 1592.526084][ T8390] @0Ù: left allmulticast mode [ 1592.721929][ T8400] 8021q: VLANs not supported on wg2 [ 1592.911243][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9318'. [ 1593.175786][ T8379] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9308'. [ 1593.201832][ T8412] lo speed is unknown, defaulting to 1000 [ 1593.211490][ T8374] wlan0 speed is unknown, defaulting to 1000 [ 1593.280865][ T8379] syz_tun: entered promiscuous mode [ 1593.321580][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.342965][ T8426] netlink: 'syz.0.9325': attribute type 13 has an invalid length. [ 1593.412752][ T8379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1593.431340][ T8379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1593.457451][ T8379] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1593.785718][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9321'. [ 1593.825015][ T8430] netlink: 'syz.0.9326': attribute type 13 has an invalid length. [ 1593.890791][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9323'. [ 1594.131516][ T8421] lo speed is unknown, defaulting to 1000 [ 1594.210538][ T8441] netlink: 'syz.8.9331': attribute type 1 has an invalid length. [ 1594.558335][ T8454] netlink: 'syz.8.9336': attribute type 13 has an invalid length. [ 1594.580653][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 1594.626458][ T8412] wlan0 speed is unknown, defaulting to 1000 [ 1596.444879][ T8495] netlink: 'syz.0.9347': attribute type 13 has an invalid length. [ 1596.943045][ T8518] syzkaller1: entered promiscuous mode [ 1596.960655][ T8518] syzkaller1: entered allmulticast mode [ 1597.116782][ T8526] lo speed is unknown, defaulting to 1000 [ 1597.328628][ T8532] netlink: 'syz.9.9360': attribute type 13 has an invalid length. [ 1597.691898][ T8547] __nla_validate_parse: 3 callbacks suppressed [ 1597.691920][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9362'. [ 1597.995873][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1598.093193][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9358'. [ 1598.120658][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1598.183577][ T8530] lo speed is unknown, defaulting to 1000 [ 1598.193713][ T8526] wlan0 speed is unknown, defaulting to 1000 [ 1598.394338][ T8564] netlink: 'syz.6.9369': attribute type 13 has an invalid length. [ 1598.731904][ T8575] netlink: 'syz.9.9372': attribute type 13 has an invalid length. [ 1598.740666][ T8578] syzkaller1: entered promiscuous mode [ 1598.740694][ T8578] syzkaller1: entered allmulticast mode [ 1598.892569][ T8580] syzkaller0: entered promiscuous mode [ 1598.906699][ T8580] syzkaller0: entered allmulticast mode [ 1598.944571][ T8530] wlan0 speed is unknown, defaulting to 1000 [ 1598.952702][ T8580] tipc: Enabled bearer , priority 0 [ 1598.983976][ T8579] tipc: Resetting bearer [ 1599.065974][ T8579] tipc: Disabling bearer [ 1599.910383][ T8607] bridge0: port 3(vlan3) entered blocking state [ 1599.927278][ T8607] bridge0: port 3(vlan3) entered disabled state [ 1599.942400][ T8607] vlan3: entered allmulticast mode [ 1599.972377][ T8607] geneve0: entered allmulticast mode [ 1599.995521][ T8607] vlan3: entered promiscuous mode [ 1600.012972][ T8607] geneve0: entered promiscuous mode [ 1600.099569][ T8617] netlink: 'syz.6.9384': attribute type 13 has an invalid length. [ 1600.229260][ T7644] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1600.321280][ T8627] syzkaller1: entered promiscuous mode [ 1600.336430][ T8627] syzkaller1: entered allmulticast mode [ 1600.554979][ T8631] bond0: entered promiscuous mode [ 1600.568726][ T8631] bond_slave_0: entered promiscuous mode [ 1600.584651][ T8631] bond0: left promiscuous mode [ 1600.595437][ T8631] bond_slave_0: left promiscuous mode [ 1600.647493][ T8632] bond0: entered promiscuous mode [ 1600.666459][ T8632] bond_slave_0: entered promiscuous mode [ 1600.704537][ T8632] bond0: left promiscuous mode [ 1600.726697][ T8632] bond_slave_0: left promiscuous mode [ 1600.755345][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9391'. [ 1600.982027][ T8643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9395'. [ 1601.055559][ T8646] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9396'. [ 1601.095865][ T8648] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9395'. [ 1601.109038][ T8646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1601.132378][ T8650] netlink: 'syz.8.9397': attribute type 13 has an invalid length. [ 1601.449668][ T8655] lo speed is unknown, defaulting to 1000 [ 1601.645208][ T8666] netdevsim netdevsim8: Direct firmware load for [ 1601.645208][ T8666] failed with error -2 [ 1601.700877][ T8666] netdevsim netdevsim8: Falling back to sysfs fallback for: [ 1601.700877][ T8666] [ 1602.244253][ T8685] syzkaller1: entered promiscuous mode [ 1602.259509][ T8685] syzkaller1: entered allmulticast mode [ 1602.426775][ T8693] netlink: 'syz.8.9411': attribute type 13 has an invalid length. [ 1602.614178][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9399'. [ 1602.634515][ T8655] wlan0 speed is unknown, defaulting to 1000 [ 1602.869056][ T8659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9399'. [ 1603.192748][ T8721] bond10: (slave veth0_to_bond): Releasing backup interface [ 1603.311073][ T8721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1603.570411][ T8734] netlink: 'syz.0.9425': attribute type 13 has an invalid length. [ 1603.646349][ T8735] syzkaller1: entered promiscuous mode [ 1603.699390][ T8735] syzkaller1: entered allmulticast mode [ 1603.826425][ T8742] FAULT_INJECTION: forcing a failure. [ 1603.826425][ T8742] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.889901][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.0.9428 Not tainted syzkaller #0 PREEMPT(full) [ 1603.889932][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1603.889946][ T8742] Call Trace: [ 1603.889955][ T8742] [ 1603.889966][ T8742] dump_stack_lvl+0xe8/0x150 [ 1603.890002][ T8742] should_fail_ex+0x40c/0x560 [ 1603.890038][ T8742] should_failslab+0xa8/0x100 [ 1603.890067][ T8742] __kmalloc_noprof+0xfe/0x720 [ 1603.890100][ T8742] ? rcu_is_watching+0x15/0xb0 [ 1603.890128][ T8742] ? tomoyo_realpath_from_path+0xef/0x640 [ 1603.890157][ T8742] ? tomoyo_realpath_from_path+0xef/0x640 [ 1603.890195][ T8742] tomoyo_realpath_from_path+0xef/0x640 [ 1603.890236][ T8742] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1603.890261][ T8742] tomoyo_path_number_perm+0x246/0x5f0 [ 1603.890290][ T8742] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1603.890314][ T8742] ? __lock_acquire+0x683/0x2cf0 [ 1603.890366][ T8742] ? hook_file_ioctl+0x1f0/0x5f0 [ 1603.890416][ T8742] ? __fget_files+0x2a/0x420 [ 1603.890442][ T8742] ? __fget_files+0x2a/0x420 [ 1603.890463][ T8742] ? __fget_files+0x3a2/0x420 [ 1603.890483][ T8742] ? __fget_files+0x2a/0x420 [ 1603.890507][ T8742] security_file_ioctl+0xc3/0x2a0 [ 1603.890532][ T8742] __se_sys_ioctl+0x47/0x170 [ 1603.890560][ T8742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.890584][ T8742] do_syscall_64+0x174/0x580 [ 1603.890604][ T8742] ? trace_irq_disable+0x3b/0x140 [ 1603.890625][ T8742] ? clear_bhb_loop+0x40/0x90 [ 1603.890651][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.890671][ T8742] RIP: 0033:0x7fd6f8b9de59 [ 1603.890693][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.890714][ T8742] RSP: 002b:00007fd6f99f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.890738][ T8742] RAX: ffffffffffffffda RBX: 00007fd6f8e25fa0 RCX: 00007fd6f8b9de59 [ 1603.890754][ T8742] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 1603.890769][ T8742] RBP: 00007fd6f99f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.890793][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.890807][ T8742] R13: 00007fd6f8e26038 R14: 00007fd6f8e25fa0 R15: 00007ffd625d7388 [ 1603.890844][ T8742] [ 1603.895119][ T8742] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1604.506151][ T8756] lo speed is unknown, defaulting to 1000 [ 1604.742245][ T8764] tipc: Invalid UDP bearer configuration [ 1604.742305][ T8764] tipc: Enabling of bearer rejected, failed to enable media [ 1604.826591][ T8766] netlink: 'syz.8.9435': attribute type 1 has an invalid length. [ 1605.023689][ T8766] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1605.111469][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9435'. [ 1605.151696][ T8769] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1605.356022][ T8756] wlan0 speed is unknown, defaulting to 1000 [ 1605.500857][ T8779] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9437'. [ 1605.551542][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9432'. [ 1605.699341][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9432'. [ 1606.354569][ T8793] syzkaller0: entered promiscuous mode [ 1606.375161][ T8793] syzkaller0: entered allmulticast mode [ 1606.519620][ T8812] syzkaller1: entered promiscuous mode [ 1606.545593][ T8812] syzkaller1: entered allmulticast mode [ 1606.619016][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9446'. [ 1606.749102][ T8811] xfrm0: entered promiscuous mode [ 1606.765174][ T8811] xfrm0: entered allmulticast mode [ 1607.091990][ T8826] Bluetooth: MGMT ver 1.23 [ 1607.161259][ T8831] lo speed is unknown, defaulting to 1000 [ 1607.264017][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.273795][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1607.341151][ T8835] bridge_slave_0: left allmulticast mode [ 1607.346882][ T8835] bridge_slave_0: left promiscuous mode [ 1607.365518][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.383791][ T8841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1607.421217][ T8835] bridge_slave_1: left allmulticast mode [ 1607.429273][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.452205][ T8835] bond0: (slave bond_slave_0): Releasing backup interface [ 1607.476503][ T8835] bond_slave_0: left allmulticast mode [ 1607.507044][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.529270][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.551886][ T8835] bond1: (slave veth3): Releasing backup interface [ 1607.582639][ T8835] bond6: (slave geneve3): Releasing active interface [ 1607.622602][ T8835] bond7: (slave vti0): Releasing backup interface [ 1607.641967][ T8835] vti0: left promiscuous mode [ 1607.785132][ T8846] syzkaller0: entered promiscuous mode [ 1607.824903][ T8846] syzkaller0: entered allmulticast mode [ 1607.952651][ T8860] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9460'. [ 1608.035562][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9453'. [ 1608.164478][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9461'. [ 1608.193703][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9453'. [ 1608.222461][ T8831] wlan0 speed is unknown, defaulting to 1000 [ 1609.466172][ T8913] syzkaller1: entered promiscuous mode [ 1609.529097][ T8913] syzkaller1: entered allmulticast mode [ 1610.075347][ T8927] syzkaller0: entered promiscuous mode [ 1610.099400][ T8927] syzkaller0: entered allmulticast mode [ 1610.205810][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9480'. [ 1610.263921][ T8939] netlink: 'syz.5.9478': attribute type 1 has an invalid length. [ 1610.291060][ T8939] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9478'. [ 1610.421901][ T8950] lo speed is unknown, defaulting to 1000 [ 1610.634258][ T8963] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1610.838061][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9493'. [ 1610.885457][ T8976] syzkaller1: entered promiscuous mode [ 1610.912805][ T8976] syzkaller1: entered allmulticast mode [ 1611.212969][ T8982] syzkaller0: entered promiscuous mode [ 1611.225277][ T8982] syzkaller0: entered allmulticast mode [ 1611.444865][ T8950] wlan0 speed is unknown, defaulting to 1000 [ 1611.468786][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1611.577232][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9500'. [ 1611.589312][ T8953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1612.240134][ T9017] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1612.379847][ T9022] syzkaller0: entered promiscuous mode [ 1612.401566][ T9022] syzkaller0: entered allmulticast mode [ 1612.551119][ T9035] syzkaller1: entered promiscuous mode [ 1612.583634][ T9035] syzkaller1: entered allmulticast mode [ 1612.926539][ T9047] FAULT_INJECTION: forcing a failure. [ 1612.926539][ T9047] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.966001][ T9047] CPU: 1 UID: 0 PID: 9047 Comm: syz.6.9519 Not tainted syzkaller #0 PREEMPT(full) [ 1612.966034][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1612.966049][ T9047] Call Trace: [ 1612.966058][ T9047] [ 1612.966068][ T9047] dump_stack_lvl+0xe8/0x150 [ 1612.966103][ T9047] should_fail_ex+0x40c/0x560 [ 1612.966141][ T9047] should_failslab+0xa8/0x100 [ 1612.966169][ T9047] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1612.966201][ T9047] ? local_lock_release+0x9c/0x160 [ 1612.966237][ T9047] ? __alloc_skb+0x1d7/0x7a0 [ 1612.966255][ T9047] ? __alloc_skb+0x1d7/0x7a0 [ 1612.966284][ T9047] __alloc_skb+0x1d7/0x7a0 [ 1612.966309][ T9047] netlink_ack+0x136/0xb30 [ 1612.966332][ T9047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1612.966382][ T9047] netlink_rcv_skb+0x2a4/0x4a0 [ 1612.966409][ T9047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1612.966441][ T9047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1612.966485][ T9047] ? down_read+0x2be/0x330 [ 1612.966514][ T9047] genl_rcv+0x28/0x40 [ 1612.966542][ T9047] netlink_unicast+0x7bb/0x940 [ 1612.966589][ T9047] netlink_sendmsg+0x813/0xb40 [ 1612.966627][ T9047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.966658][ T9047] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1612.966692][ T9047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.966717][ T9047] sock_sendmsg_nosec+0x13a/0x180 [ 1612.966751][ T9047] __sys_sendto+0x408/0x5a0 [ 1612.966773][ T9047] ? ksys_write+0x1e6/0x270 [ 1612.966803][ T9047] ? __pfx___sys_sendto+0x10/0x10 [ 1612.966823][ T9047] ? __mutex_unlock_slowpath+0x731/0x900 [ 1612.966891][ T9047] ? __pfx_ksys_write+0x10/0x10 [ 1612.966925][ T9047] __x64_sys_sendto+0xde/0x100 [ 1612.966948][ T9047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.966974][ T9047] do_syscall_64+0x174/0x580 [ 1612.966994][ T9047] ? trace_irq_disable+0x3b/0x140 [ 1612.967016][ T9047] ? clear_bhb_loop+0x40/0x90 [ 1612.967044][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.967068][ T9047] RIP: 0033:0x7f9d1bb5e68e [ 1612.967089][ T9047] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1612.967109][ T9047] RSP: 002b:00007f9d1ca65e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1612.967133][ T9047] RAX: ffffffffffffffda RBX: 00007f9d1ca676c0 RCX: 00007f9d1bb5e68e [ 1612.967151][ T9047] RDX: 0000000000000028 RSI: 00007f9d1ca66000 RDI: 0000000000000004 [ 1612.967166][ T9047] RBP: 0000000000000000 R08: 00007f9d1ca65f04 R09: 000000000000000c [ 1612.967181][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1612.967194][ T9047] R13: 00007f9d1ca65f58 R14: 00007f9d1ca66000 R15: 0000000000000000 [ 1612.967231][ T9047] [ 1613.263499][ T9049] __nla_validate_parse: 6 callbacks suppressed [ 1613.263523][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9520'. [ 1613.435829][ T9051] lo speed is unknown, defaulting to 1000 [ 1613.771651][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9527'. [ 1613.949411][ T9051] wlan0 speed is unknown, defaulting to 1000 [ 1614.116131][ T9072] syzkaller0: entered promiscuous mode [ 1614.132754][ T9072] syzkaller0: entered allmulticast mode [ 1614.170339][ T9079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.245644][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9521'. [ 1614.296685][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9521'. [ 1614.340680][ T9079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.393708][ T9093] netlink: 51 bytes leftover after parsing attributes in process `syz.8.9537'. [ 1614.474937][ T9079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.557289][ T9079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.623404][ T9099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9538'. [ 1614.651421][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9538'. [ 1614.667219][ T9099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9538'. [ 1614.681461][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9538'. [ 1614.809481][ T9089] syzkaller1: entered promiscuous mode [ 1614.815274][ T9089] syzkaller1: entered allmulticast mode [ 1615.181079][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9542'. [ 1615.273264][ T7644] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.381236][ T7644] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.501608][ T7644] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.549167][ T7644] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.793391][ T9144] syzkaller0: entered promiscuous mode [ 1615.809550][ T9144] syzkaller0: entered allmulticast mode [ 1616.065455][ T9146] lo speed is unknown, defaulting to 1000 [ 1616.459383][ T9168] pim6reg0: tun_chr_ioctl cmd 35111 [ 1616.688130][ T9146] wlan0 speed is unknown, defaulting to 1000 [ 1617.760863][ T9218] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1617.796279][ T9222] FAULT_INJECTION: forcing a failure. [ 1617.796279][ T9222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1617.848033][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.0.9578 Not tainted syzkaller #0 PREEMPT(full) [ 1617.848063][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.848077][ T9222] Call Trace: [ 1617.848086][ T9222] [ 1617.848095][ T9222] dump_stack_lvl+0xe8/0x150 [ 1617.848128][ T9222] should_fail_ex+0x40c/0x560 [ 1617.848165][ T9222] prepare_alloc_pages+0x230/0x650 [ 1617.848198][ T9222] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1617.848227][ T9222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1617.848255][ T9222] ? __pfx_policy_nodemask+0x10/0x10 [ 1617.848299][ T9222] alloc_pages_mpol+0x212/0x380 [ 1617.848331][ T9222] folio_alloc_mpol_noprof+0x39/0x160 [ 1617.848359][ T9222] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1617.848388][ T9222] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1617.848425][ T9222] do_wp_page+0x1163/0x4c70 [ 1617.848475][ T9222] ? __pfx_do_wp_page+0x10/0x10 [ 1617.848500][ T9222] ? do_raw_spin_lock+0x12b/0x2f0 [ 1617.848534][ T9222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1617.848576][ T9222] handle_mm_fault+0x1490/0x3080 [ 1617.848621][ T9222] ? handle_mm_fault+0xec/0x3080 [ 1617.848659][ T9222] ? __pfx_handle_mm_fault+0x10/0x10 [ 1617.848688][ T9222] ? follow_page_pte+0xbd0/0xe70 [ 1617.848727][ T9222] ? __pfx_follow_page_pte+0x10/0x10 [ 1617.848770][ T9222] __get_user_pages+0x1678/0x2720 [ 1617.848833][ T9222] __gup_longterm_locked+0xd52/0x15c0 [ 1617.848875][ T9222] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1617.848911][ T9222] gup_fast_fallback+0x1d8c/0x20e0 [ 1617.848975][ T9222] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1617.849012][ T9222] ? pin_user_pages_fast+0x4d/0xb0 [ 1617.849043][ T9222] iov_iter_extract_pages+0x369/0x5f0 [ 1617.849077][ T9222] extract_iter_to_sg+0xee0/0x25f0 [ 1617.849128][ T9222] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1617.849161][ T9222] ? __kmalloc_noprof+0x396/0x720 [ 1617.849195][ T9222] ? __kmalloc_noprof+0x1ad/0x720 [ 1617.849225][ T9222] ? sock_kmalloc+0xd6/0x160 [ 1617.849248][ T9222] ? sock_kmalloc+0xd6/0x160 [ 1617.849287][ T9222] ? __asan_memset+0x22/0x50 [ 1617.849324][ T9222] af_alg_get_rsgl+0x493/0x8d0 [ 1617.849369][ T9222] ? af_alg_alloc_areq+0xac/0x200 [ 1617.849402][ T9222] skcipher_recvmsg+0x39d/0xe10 [ 1617.849456][ T9222] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1617.849487][ T9222] ? __lock_acquire+0x683/0x2cf0 [ 1617.849508][ T9222] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1617.849537][ T9222] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1617.849564][ T9222] ? security_socket_recvmsg+0x7e/0x2c0 [ 1617.849595][ T9222] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1617.849629][ T9222] sock_recvmsg+0x196/0x1e0 [ 1617.849662][ T9222] ____sys_recvmsg+0x1e6/0x4a0 [ 1617.849698][ T9222] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1617.849740][ T9222] ? import_iovec+0x73/0xa0 [ 1617.849766][ T9222] ___sys_recvmsg+0x213/0x5a0 [ 1617.849798][ T9222] ? __pfx____sys_recvmsg+0x10/0x10 [ 1617.849845][ T9222] ? __fget_files+0x2a/0x420 [ 1617.849888][ T9222] ? __fget_files+0x3a2/0x420 [ 1617.849923][ T9222] __x64_sys_recvmsg+0x1ae/0x290 [ 1617.849952][ T9222] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1617.850000][ T9222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.850026][ T9222] do_syscall_64+0x174/0x580 [ 1617.850048][ T9222] ? trace_irq_disable+0x3b/0x140 [ 1617.850069][ T9222] ? clear_bhb_loop+0x40/0x90 [ 1617.850096][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.850118][ T9222] RIP: 0033:0x7fd6f8b9de59 [ 1617.850138][ T9222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.850155][ T9222] RSP: 002b:00007fd6f99f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1617.850179][ T9222] RAX: ffffffffffffffda RBX: 00007fd6f8e25fa0 RCX: 00007fd6f8b9de59 [ 1617.850194][ T9222] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1617.850208][ T9222] RBP: 00007fd6f99f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.850221][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.850234][ T9222] R13: 00007fd6f8e26038 R14: 00007fd6f8e25fa0 R15: 00007ffd625d7388 [ 1617.850271][ T9222] [ 1618.311816][ T9226] __nla_validate_parse: 15 callbacks suppressed [ 1618.311840][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9579'. [ 1618.374261][ T9230] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1618.445421][ T9234] lo speed is unknown, defaulting to 1000 [ 1618.613901][ T9236] bond0: entered promiscuous mode [ 1618.668551][ T9236] bond0: left promiscuous mode [ 1618.676523][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9586'. [ 1618.729492][ T9243] bond0: entered promiscuous mode [ 1618.744576][ T9243] bond0: left promiscuous mode [ 1618.750828][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9586'. [ 1618.789754][ T9234] wlan0 speed is unknown, defaulting to 1000 [ 1618.804268][ T9242] netlink: 'syz.5.9586': attribute type 1 has an invalid length. [ 1618.936175][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1619.086470][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9584'. [ 1619.156535][ T9251] bond8: entered promiscuous mode [ 1619.164665][ T9251] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1619.205362][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9584'. [ 1619.254138][ T9259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1619.273599][ T9259] bond8: (slave sit4): The slave device specified does not support setting the MAC address [ 1619.285834][ T9259] bond8: (slave sit4): Error -95 calling set_mac_address [ 1619.421770][ T9261] tipc: Disabling bearer [ 1619.490778][ T9263] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9592'. [ 1619.708611][ T9271] sch_fq: defrate 4294967293 ignored. [ 1619.873700][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9597'. [ 1620.112788][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1620.153746][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1620.447089][ T9274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1620.913555][ T9327] syzkaller0: entered promiscuous mode [ 1620.920971][ T9327] syzkaller0: entered allmulticast mode [ 1622.036200][ T9341] tipc: Invalid UDP bearer configuration [ 1622.036254][ T9341] tipc: Enabling of bearer rejected, failed to enable media [ 1623.232745][ T9376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1623.532776][ T9406] __nla_validate_parse: 5 callbacks suppressed [ 1623.532799][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9638'. [ 1623.786852][ T9417] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9643'. [ 1624.220129][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9649'. [ 1624.435697][ T9453] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.649206][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9657'. [ 1624.772973][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9657'. [ 1624.882453][ T9477] netlink: 136 bytes leftover after parsing attributes in process `syz.6.9661'. [ 1624.903072][ T9477] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1625.196281][ T9493] tipc: Invalid UDP bearer configuration [ 1625.196337][ T9493] tipc: Enabling of bearer rejected, failed to enable media [ 1625.358192][ T9496] tipc: Invalid UDP bearer configuration [ 1625.358252][ T9496] tipc: Enabling of bearer rejected, failed to enable media [ 1626.046236][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9666'. [ 1626.321546][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9669'. [ 1626.450001][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9671'. [ 1626.498557][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9671'. [ 1626.530318][ T9506] netlink: 'syz.8.9671': attribute type 20 has an invalid length. [ 1626.576889][ T9511] xt_SECMARK: invalid mode: 4 [ 1627.227604][ T9539] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1627.412727][ T9552] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1627.854461][ T9576] xt_SECMARK: invalid mode: 4 [ 1628.178932][ T9587] FAULT_INJECTION: forcing a failure. [ 1628.178932][ T9587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1628.242765][ T9587] CPU: 1 UID: 0 PID: 9587 Comm: syz.8.9700 Not tainted syzkaller #0 PREEMPT(full) [ 1628.242796][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1628.242810][ T9587] Call Trace: [ 1628.242819][ T9587] [ 1628.242830][ T9587] dump_stack_lvl+0xe8/0x150 [ 1628.242866][ T9587] should_fail_ex+0x40c/0x560 [ 1628.242903][ T9587] prepare_alloc_pages+0x230/0x650 [ 1628.242935][ T9587] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1628.242963][ T9587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1628.242992][ T9587] ? __pfx_policy_nodemask+0x10/0x10 [ 1628.243015][ T9587] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1628.243045][ T9587] ? lock_acquire+0x106/0x350 [ 1628.243077][ T9587] alloc_pages_mpol+0x212/0x380 [ 1628.243109][ T9587] folio_alloc_mpol_noprof+0x39/0x160 [ 1628.243137][ T9587] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1628.243168][ T9587] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1628.243208][ T9587] do_wp_page+0x1163/0x4c70 [ 1628.243257][ T9587] ? __pfx_do_wp_page+0x10/0x10 [ 1628.243292][ T9587] ? do_raw_spin_lock+0x12b/0x2f0 [ 1628.243327][ T9587] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1628.243370][ T9587] handle_mm_fault+0x1490/0x3080 [ 1628.243415][ T9587] ? handle_mm_fault+0xec/0x3080 [ 1628.243456][ T9587] ? __pfx_handle_mm_fault+0x10/0x10 [ 1628.243487][ T9587] ? follow_page_pte+0xbd0/0xe70 [ 1628.243528][ T9587] ? __pfx_follow_page_pte+0x10/0x10 [ 1628.243574][ T9587] __get_user_pages+0x1678/0x2720 [ 1628.243639][ T9587] __gup_longterm_locked+0xd52/0x15c0 [ 1628.243684][ T9587] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1628.243721][ T9587] gup_fast_fallback+0x1d8c/0x20e0 [ 1628.243789][ T9587] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1628.243827][ T9587] ? pin_user_pages_fast+0x4d/0xb0 [ 1628.243860][ T9587] iov_iter_extract_pages+0x369/0x5f0 [ 1628.243895][ T9587] extract_iter_to_sg+0xee0/0x25f0 [ 1628.243946][ T9587] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1628.243982][ T9587] ? __kmalloc_noprof+0x396/0x720 [ 1628.244014][ T9587] ? __kmalloc_noprof+0x1ad/0x720 [ 1628.244045][ T9587] ? sock_kmalloc+0xd6/0x160 [ 1628.244067][ T9587] ? sock_kmalloc+0xd6/0x160 [ 1628.244099][ T9587] ? __asan_memset+0x22/0x50 [ 1628.244135][ T9587] af_alg_get_rsgl+0x493/0x8d0 [ 1628.244188][ T9587] skcipher_recvmsg+0x39d/0xe10 [ 1628.244245][ T9587] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1628.244284][ T9587] ? __lock_acquire+0x683/0x2cf0 [ 1628.244307][ T9587] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1628.244336][ T9587] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1628.244363][ T9587] ? security_socket_recvmsg+0x7e/0x2c0 [ 1628.244395][ T9587] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1628.244430][ T9587] sock_recvmsg+0x196/0x1e0 [ 1628.244465][ T9587] ____sys_recvmsg+0x1e6/0x4a0 [ 1628.244500][ T9587] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1628.244543][ T9587] ? import_iovec+0x73/0xa0 [ 1628.244572][ T9587] ___sys_recvmsg+0x213/0x5a0 [ 1628.244604][ T9587] ? __pfx____sys_recvmsg+0x10/0x10 [ 1628.244635][ T9587] ? __fget_files+0x2a/0x420 [ 1628.244677][ T9587] ? __fget_files+0x3a2/0x420 [ 1628.244712][ T9587] __x64_sys_recvmsg+0x1ae/0x290 [ 1628.244741][ T9587] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1628.244789][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.244815][ T9587] do_syscall_64+0x174/0x580 [ 1628.244836][ T9587] ? trace_irq_disable+0x3b/0x140 [ 1628.244858][ T9587] ? clear_bhb_loop+0x40/0x90 [ 1628.244887][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.244909][ T9587] RIP: 0033:0x7f914ad9de59 [ 1628.244932][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.244952][ T9587] RSP: 002b:00007f9148ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1628.244976][ T9587] RAX: ffffffffffffffda RBX: 00007f914b025fa0 RCX: 00007f914ad9de59 [ 1628.244993][ T9587] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1628.245007][ T9587] RBP: 00007f9148ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.245021][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1628.245035][ T9587] R13: 00007f914b026038 R14: 00007f914b025fa0 R15: 00007ffc48bdd178 [ 1628.245073][ T9587] [ 1629.132828][ T9620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1629.168370][ T9615] syzkaller0: entered promiscuous mode [ 1629.174076][ T9615] syzkaller0: entered allmulticast mode [ 1629.283458][ T9623] __nla_validate_parse: 2 callbacks suppressed [ 1629.283479][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9710'. [ 1629.331513][ T9631] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1629.576198][ T9641] ip6tnl3: entered allmulticast mode [ 1629.605685][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9720'. [ 1629.799475][ T9659] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9723'. [ 1629.826550][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9721'. [ 1629.925967][ T9667] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9723'. [ 1630.248173][ T9677] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9728'. [ 1630.885560][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9736'. [ 1631.126184][ T9731] netlink: 144 bytes leftover after parsing attributes in process `syz.8.9741'. [ 1631.243489][ T9734] syzkaller1: entered promiscuous mode [ 1631.259843][ T9734] syzkaller1: entered allmulticast mode [ 1631.366042][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9745'. [ 1631.684029][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9752'. [ 1632.229631][T19367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1632.315826][ T9792] syzkaller1: entered promiscuous mode [ 1632.355516][ T9792] syzkaller1: entered allmulticast mode [ 1632.591099][ T9805] tipc: Invalid UDP bearer configuration [ 1632.591159][ T9805] tipc: Enabling of bearer rejected, failed to enable media [ 1633.907188][ T9830] xt_SECMARK: invalid mode: 4 [ 1634.351169][ T9855] tipc: Invalid UDP bearer configuration [ 1634.351233][ T9855] tipc: Enabling of bearer rejected, failed to enable media [ 1634.484869][ T9846] syzkaller1: entered promiscuous mode [ 1634.506936][ T9846] syzkaller1: entered allmulticast mode [ 1634.936145][ T9874] netlink: 'syz.9.9788': attribute type 1 has an invalid length. [ 1635.150488][ T9877] __nla_validate_parse: 1 callbacks suppressed [ 1635.150511][ T9877] netlink: 64 bytes leftover after parsing attributes in process `syz.9.9788'. [ 1636.068951][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9798'. [ 1636.176338][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9799'. [ 1636.274458][ T9910] netlink: 212 bytes leftover after parsing attributes in process `syz.9.9801'. [ 1636.287594][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9801'. [ 1636.534973][ T9922] netlink: 'syz.0.9803': attribute type 1 has an invalid length. [ 1636.619772][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9803'. [ 1636.632965][ T9922] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1637.048680][ T9934] netlink: 'syz.5.9811': attribute type 11 has an invalid length. [ 1637.105047][ T9934] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9811'. [ 1637.111533][ T9938] pim6reg1: entered promiscuous mode [ 1637.149412][ T9938] pim6reg1: entered allmulticast mode [ 1637.207101][ T9934] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1637.546262][ T9956] syzkaller0: entered promiscuous mode [ 1637.553189][ T9956] syzkaller0: entered allmulticast mode [ 1637.645218][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9823'. [ 1637.710576][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9825'. [ 1637.799912][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.809476][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.304260][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9854'. [ 1639.953513][T10088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1640.134249][T10097] netlink: 'syz.5.9871': attribute type 1 has an invalid length. [ 1640.181203][T10101] FAULT_INJECTION: forcing a failure. [ 1640.181203][T10101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1640.211133][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.0.9872 Not tainted syzkaller #0 PREEMPT(full) [ 1640.211165][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1640.211179][T10101] Call Trace: [ 1640.211187][T10101] [ 1640.211196][T10101] dump_stack_lvl+0xe8/0x150 [ 1640.211232][T10101] should_fail_ex+0x40c/0x560 [ 1640.211272][T10101] prepare_alloc_pages+0x230/0x650 [ 1640.211317][T10101] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1640.211348][T10101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1640.211378][T10101] ? __pfx_policy_nodemask+0x10/0x10 [ 1640.211403][T10101] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1640.211436][T10101] ? lock_acquire+0x106/0x350 [ 1640.211468][T10101] alloc_pages_mpol+0x212/0x380 [ 1640.211502][T10101] folio_alloc_mpol_noprof+0x39/0x160 [ 1640.211535][T10101] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1640.211566][T10101] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1640.211606][T10101] do_wp_page+0x1163/0x4c70 [ 1640.211658][T10101] ? __pfx_do_wp_page+0x10/0x10 [ 1640.211684][T10101] ? do_raw_spin_lock+0x12b/0x2f0 [ 1640.211718][T10101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1640.211763][T10101] handle_mm_fault+0x1490/0x3080 [ 1640.211808][T10101] ? handle_mm_fault+0xec/0x3080 [ 1640.211847][T10101] ? __pfx_handle_mm_fault+0x10/0x10 [ 1640.211879][T10101] ? follow_page_pte+0xbd0/0xe70 [ 1640.211920][T10101] ? __pfx_follow_page_pte+0x10/0x10 [ 1640.211964][T10101] __get_user_pages+0x1678/0x2720 [ 1640.212031][T10101] __gup_longterm_locked+0xd52/0x15c0 [ 1640.212076][T10101] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1640.212113][T10101] gup_fast_fallback+0x1d8c/0x20e0 [ 1640.212181][T10101] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1640.212219][T10101] ? pin_user_pages_fast+0x4d/0xb0 [ 1640.212250][T10101] iov_iter_extract_pages+0x369/0x5f0 [ 1640.212321][T10101] extract_iter_to_sg+0xee0/0x25f0 [ 1640.212373][T10101] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1640.212409][T10101] ? __kmalloc_noprof+0x396/0x720 [ 1640.212443][T10101] ? __kmalloc_noprof+0x1ad/0x720 [ 1640.212474][T10101] ? sock_kmalloc+0xd6/0x160 [ 1640.212500][T10101] ? sock_kmalloc+0xd6/0x160 [ 1640.212531][T10101] ? __asan_memset+0x22/0x50 [ 1640.212566][T10101] af_alg_get_rsgl+0x493/0x8d0 [ 1640.212618][T10101] skcipher_recvmsg+0x39d/0xe10 [ 1640.212675][T10101] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1640.212706][T10101] ? __lock_acquire+0x683/0x2cf0 [ 1640.212729][T10101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1640.212759][T10101] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1640.212788][T10101] ? security_socket_recvmsg+0x7e/0x2c0 [ 1640.212820][T10101] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1640.212854][T10101] sock_recvmsg+0x196/0x1e0 [ 1640.212888][T10101] ____sys_recvmsg+0x1e6/0x4a0 [ 1640.212924][T10101] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1640.212967][T10101] ? import_iovec+0x73/0xa0 [ 1640.212995][T10101] ___sys_recvmsg+0x213/0x5a0 [ 1640.213031][T10101] ? __pfx___schedule+0x10/0x10 [ 1640.213069][T10101] ? __pfx____sys_recvmsg+0x10/0x10 [ 1640.213103][T10101] ? irqentry_exit+0x218/0x8f0 [ 1640.213171][T10101] __x64_sys_recvmsg+0x1ae/0x290 [ 1640.213201][T10101] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1640.213249][T10101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.213280][T10101] do_syscall_64+0x174/0x580 [ 1640.213300][T10101] ? trace_irq_disable+0x3b/0x140 [ 1640.213322][T10101] ? clear_bhb_loop+0x40/0x90 [ 1640.213349][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.213371][T10101] RIP: 0033:0x7fd6f8b9de59 [ 1640.213392][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.213412][T10101] RSP: 002b:00007fd6f99f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1640.213436][T10101] RAX: ffffffffffffffda RBX: 00007fd6f8e25fa0 RCX: 00007fd6f8b9de59 [ 1640.213453][T10101] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1640.213467][T10101] RBP: 00007fd6f99f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.213482][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1640.213496][T10101] R13: 00007fd6f8e26038 R14: 00007fd6f8e25fa0 R15: 00007ffd625d7388 [ 1640.213532][T10101] [ 1640.700389][T10102] veth7: entered promiscuous mode [ 1640.985116][T10123] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1641.128603][T10130] __nla_validate_parse: 1 callbacks suppressed [ 1641.128620][T10130] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9885'. [ 1641.168968][T10130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1641.336356][T10144] xt_SECMARK: invalid mode: 4 [ 1641.749052][ T57] wlan1: Trigger new scan to find an IBSS to join [ 1641.767398][T19367] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1641.777148][T19367] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1641.802694][T19367] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1641.826634][T19367] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1642.179250][T10176] netlink: 136 bytes leftover after parsing attributes in process `syz.9.9902'. [ 1642.189439][T10176] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1642.836128][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9914'. [ 1642.856728][T10209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9914'. [ 1642.872886][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9914'. [ 1642.883714][T10209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9914'. [ 1643.104097][T10222] xt_SECMARK: invalid mode: 4 [ 1643.153205][T10221] tipc: Enabled bearer , priority 0 [ 1643.283144][T10221] syzkaller0: entered promiscuous mode [ 1643.289574][T10221] syzkaller0: entered allmulticast mode [ 1643.296934][T10221] tipc: Resetting bearer [ 1643.368610][T10229] netlink: 192 bytes leftover after parsing attributes in process `syz.5.9920'. [ 1643.448575][T10220] tipc: Resetting bearer [ 1644.793657][T19367] wlan1: Trigger new scan to find an IBSS to join [ 1645.836817][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.626454][T10220] tipc: Disabling bearer [ 1647.762308][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9938'. [ 1647.960513][T10274] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 1648.142659][T10286] FAULT_INJECTION: forcing a failure. [ 1648.142659][T10286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.173888][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.9.9945 Not tainted syzkaller #0 PREEMPT(full) [ 1648.173919][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1648.173933][T10286] Call Trace: [ 1648.173942][T10286] [ 1648.173951][T10286] dump_stack_lvl+0xe8/0x150 [ 1648.173986][T10286] should_fail_ex+0x40c/0x560 [ 1648.174023][T10286] _copy_from_user+0x2d/0xb0 [ 1648.174049][T10286] sctp_getsockopt_associnfo+0xd8/0x790 [ 1648.174086][T10286] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1648.174118][T10286] ? __pfx_sctp_getsockopt_associnfo+0x10/0x10 [ 1648.174151][T10286] ? sctp_getsockopt+0x12f/0xb90 [ 1648.174176][T10286] ? __local_bh_enable_ip+0xd0/0x130 [ 1648.174215][T10286] sctp_getsockopt+0x7ca/0xb90 [ 1648.174238][T10286] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1648.174271][T10286] do_sock_getsockopt+0x51d/0x7e0 [ 1648.174302][T10286] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1648.174345][T10286] ? __fget_files+0x3a2/0x420 [ 1648.174367][T10286] ? __fget_files+0x2a/0x420 [ 1648.174397][T10286] __x64_sys_getsockopt+0x1a4/0x240 [ 1648.174427][T10286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.174453][T10286] do_syscall_64+0x174/0x580 [ 1648.174473][T10286] ? trace_irq_disable+0x3b/0x140 [ 1648.174495][T10286] ? clear_bhb_loop+0x40/0x90 [ 1648.174520][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.174545][T10286] RIP: 0033:0x7f76f719de59 [ 1648.174568][T10286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.174596][T10286] RSP: 002b:00007f76f7fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1648.174619][T10286] RAX: ffffffffffffffda RBX: 00007f76f7426090 RCX: 00007f76f719de59 [ 1648.174636][T10286] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 1648.174649][T10286] RBP: 00007f76f7fd7090 R08: 0000200000000000 R09: 0000000000000000 [ 1648.174663][T10286] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1648.174676][T10286] R13: 00007f76f7426128 R14: 00007f76f7426090 R15: 00007ffe620609b8 [ 1648.174714][T10286] [ 1648.271022][T10287] xt_hashlimit: size too large, truncated to 1048576 [ 1648.344681][T10291] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9950'. [ 1648.344711][T10291] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1648.451406][T10289] sctp: [Deprecated]: syz.8.9948 (pid 10289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1648.451406][T10289] Use struct sctp_sack_info instead [ 1648.549708][T10289] netlink: 'syz.8.9948': attribute type 1 has an invalid length. [ 1648.571807][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9952'. [ 1648.850510][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9956'. [ 1648.865010][T10311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9956'. [ 1648.875129][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9956'. [ 1648.885063][T10311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9956'. [ 1649.010429][T10317] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1649.220770][T10330] netlink: 'syz.5.9963': attribute type 16 has an invalid length. [ 1649.229728][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9963'. [ 1649.613405][T10348] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9968'. [ 1651.682926][T10306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1652.901987][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9982'. [ 1652.932968][T10389] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9982'. [ 1652.951682][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9982'. [ 1652.981180][T10396] syzkaller0: entered promiscuous mode [ 1652.996586][T10396] syzkaller0: entered allmulticast mode [ 1653.956303][T10400] FAULT_INJECTION: forcing a failure. [ 1653.956303][T10400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.973190][T10400] CPU: 1 UID: 0 PID: 10400 Comm: syz.6.9986 Not tainted syzkaller #0 PREEMPT(full) [ 1653.973222][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1653.973235][T10400] Call Trace: [ 1653.973244][T10400] [ 1653.973254][T10400] dump_stack_lvl+0xe8/0x150 [ 1653.973287][T10400] should_fail_ex+0x40c/0x560 [ 1653.973325][T10400] _copy_from_user+0x2d/0xb0 [ 1653.973351][T10400] ethtool_set_channels+0x166/0x5e0 [ 1653.973467][T10400] ? __pfx_ethtool_set_channels+0x10/0x10 [ 1653.973505][T10400] ? bpf_lsm_capable+0x9/0x20 [ 1653.973527][T10400] ? security_capable+0x7e/0x2c0 [ 1653.973563][T10400] dev_ethtool+0x1d94/0x29c0 [ 1653.973602][T10400] ? __lock_acquire+0x683/0x2cf0 [ 1653.973644][T10400] ? __pfx_dev_ethtool+0x10/0x10 [ 1653.973676][T10400] ? kasan_quarantine_put+0xbb/0x1f0 [ 1653.973716][T10400] ? dev_load+0x21/0x1f0 [ 1653.973763][T10400] ? dev_load+0x21/0x1f0 [ 1653.973798][T10400] ? dev_load+0x21/0x1f0 [ 1653.973834][T10400] dev_ioctl+0x392/0x1150 [ 1653.973871][T10400] sock_do_ioctl+0x23e/0x320 [ 1653.973905][T10400] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1653.973931][T10400] ? hook_file_ioctl+0x1f0/0x5f0 [ 1653.973976][T10400] sock_ioctl+0x57a/0x7e0 [ 1653.974007][T10400] ? __pfx_sock_ioctl+0x10/0x10 [ 1653.974036][T10400] ? __fget_files+0x2a/0x420 [ 1653.974057][T10400] ? __fget_files+0x3a2/0x420 [ 1653.974079][T10400] ? __fget_files+0x2a/0x420 [ 1653.974105][T10400] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1653.974137][T10400] ? __pfx_sock_ioctl+0x10/0x10 [ 1653.974165][T10400] __se_sys_ioctl+0xfc/0x170 [ 1653.974194][T10400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.974219][T10400] do_syscall_64+0x174/0x580 [ 1653.974241][T10400] ? trace_irq_disable+0x3b/0x140 [ 1653.974263][T10400] ? clear_bhb_loop+0x40/0x90 [ 1653.974291][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.974313][T10400] RIP: 0033:0x7f9d1bb9de59 [ 1653.974334][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.974353][T10400] RSP: 002b:00007f9d1ca67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.974378][T10400] RAX: ffffffffffffffda RBX: 00007f9d1be25fa0 RCX: 00007f9d1bb9de59 [ 1653.974395][T10400] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 1653.974410][T10400] RBP: 00007f9d1ca67090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.974424][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.974438][T10400] R13: 00007f9d1be26038 R14: 00007f9d1be25fa0 R15: 00007ffde66c9d88 [ 1653.974486][T10400] [ 1654.375704][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9994'. [ 1654.436848][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9993'. [ 1655.207258][ T5632] block nbd2: Receive control failed (result -1) [ 1655.221549][ T5632] [ 1655.223946][ T5632] ====================================================== [ 1655.231204][ T5632] WARNING: possible circular locking dependency detected [ 1655.238335][ T5632] syzkaller #0 Not tainted [ 1655.242813][ T5632] ------------------------------------------------------ [ 1655.249921][ T5632] kworker/u9:2/5632 is trying to acquire lock: [ 1655.256123][ T5632] ffff88802f441d60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1655.265699][ T5632] [ 1655.265699][ T5632] but task is already holding lock: [ 1655.273102][ T5632] ffff88805969f468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1655.282144][ T5632] [ 1655.282144][ T5632] which lock already depends on the new lock. [ 1655.282144][ T5632] [ 1655.292580][ T5632] [ 1655.292580][ T5632] the existing dependency chain (in reverse order) is: [ 1655.301623][ T5632] [ 1655.301623][ T5632] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1655.309431][ T5632] __mutex_lock+0x19d/0x1550 [ 1655.314704][ T5632] nbd_queue_rq+0x373/0x1150 [ 1655.319855][ T5632] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1655.326082][ T5632] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1655.333019][ T5632] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1655.339556][ T5632] blk_mq_run_work_fn+0x16c/0x300 [ 1655.345139][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 1655.351357][ T5632] worker_thread+0xa47/0xfb0 [ 1655.356508][ T5632] kthread+0x388/0x470 [ 1655.361131][ T5632] ret_from_fork+0x514/0xb70 [ 1655.366283][ T5632] ret_from_fork_asm+0x1a/0x30 [ 1655.371650][ T5632] [ 1655.371650][ T5632] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1655.378903][ T5632] __mutex_lock+0x19d/0x1550 [ 1655.384054][ T5632] nbd_queue_rq+0xc1/0x1150 [ 1655.389116][ T5632] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1655.395226][ T5632] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1655.402111][ T5632] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1655.408639][ T5632] blk_mq_run_work_fn+0x16c/0x300 [ 1655.414215][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 1655.420335][ T5632] worker_thread+0xa47/0xfb0 [ 1655.425475][ T5632] kthread+0x388/0x470 [ 1655.430176][ T5632] ret_from_fork+0x514/0xb70 [ 1655.435314][ T5632] ret_from_fork_asm+0x1a/0x30 [ 1655.440619][ T5632] [ 1655.440619][ T5632] -> #4 (set->srcu){.+.+}-{0:0}: [ 1655.447765][ T5632] __synchronize_srcu+0xc9/0x2f0 [ 1655.453264][ T5632] elevator_switch+0x1e8/0x7b0 [ 1655.458698][ T5632] elevator_change+0x2fa/0x480 [ 1655.464033][ T5632] elevator_set_default+0x375/0x440 [ 1655.469795][ T5632] blk_register_queue+0x3f3/0x4e0 [ 1655.475436][ T5632] __add_disk+0x6cb/0xe30 [ 1655.480318][ T5632] add_disk_fwnode+0xfb/0x4b0 [ 1655.485541][ T5632] nbd_dev_add+0x733/0xb60 [ 1655.490500][ T5632] nbd_init+0x15f/0x1e0 [ 1655.495299][ T5632] do_one_initcall+0x250/0x870 [ 1655.500606][ T5632] do_initcall_level+0x10a/0x1a0 [ 1655.506153][ T5632] do_initcalls+0x59/0xa0 [ 1655.511038][ T5632] kernel_init_freeable+0x29d/0x3e0 [ 1655.516790][ T5632] kernel_init+0x1d/0x1d0 [ 1655.521682][ T5632] ret_from_fork+0x514/0xb70 [ 1655.526827][ T5632] ret_from_fork_asm+0x1a/0x30 [ 1655.532141][ T5632] [ 1655.532141][ T5632] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1655.539999][ T5632] __mutex_lock+0x19d/0x1550 [ 1655.545137][ T5632] elevator_change+0x1af/0x480 [ 1655.550453][ T5632] elevator_set_none+0xb5/0x140 [ 1655.555856][ T5632] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1655.562206][ T5632] nbd_start_device+0x189/0xb30 [ 1655.567600][ T5632] nbd_genl_connect+0x1597/0x1c10 [ 1655.573172][ T5632] genl_family_rcv_msg_doit+0x233/0x340 [ 1655.579276][ T5632] genl_rcv_msg+0x614/0x7a0 [ 1655.584339][ T5632] netlink_rcv_skb+0x226/0x4a0 [ 1655.589647][ T5632] genl_rcv+0x28/0x40 [ 1655.594176][ T5632] netlink_unicast+0x7bb/0x940 [ 1655.599474][ T5632] netlink_sendmsg+0x813/0xb40 [ 1655.604779][ T5632] sock_sendmsg_nosec+0x13a/0x180 [ 1655.610351][ T5632] ____sys_sendmsg+0x54e/0x850 [ 1655.615649][ T5632] ___sys_sendmsg+0x2a5/0x360 [ 1655.620868][ T5632] __x64_sys_sendmsg+0x1b1/0x290 [ 1655.626346][ T5632] do_syscall_64+0x174/0x580 [ 1655.631471][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.637908][ T5632] [ 1655.637908][ T5632] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1655.646624][ T5632] blk_alloc_queue+0x544/0x690 [ 1655.651941][ T5632] __blk_mq_alloc_disk+0x194/0x390 [ 1655.657601][ T5632] nbd_dev_add+0x494/0xb60 [ 1655.662556][ T5632] nbd_init+0x15f/0x1e0 [ 1655.667346][ T5632] do_one_initcall+0x250/0x870 [ 1655.672655][ T5632] do_initcall_level+0x10a/0x1a0 [ 1655.678157][ T5632] do_initcalls+0x59/0xa0 [ 1655.683037][ T5632] kernel_init_freeable+0x29d/0x3e0 [ 1655.688783][ T5632] kernel_init+0x1d/0x1d0 [ 1655.693661][ T5632] ret_from_fork+0x514/0xb70 [ 1655.698796][ T5632] ret_from_fork_asm+0x1a/0x30 [ 1655.704111][ T5632] [ 1655.704111][ T5632] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1655.711346][ T5632] fs_reclaim_acquire+0x71/0x100 [ 1655.716826][ T5632] __kmalloc_noprof+0xbc/0x720 [ 1655.722175][ T5632] tls_sw_sendmsg+0x599/0x2860 [ 1655.727634][ T5632] sock_sendmsg_nosec+0x90/0x180 [ 1655.733125][ T5632] sock_sendmsg+0x1ca/0x2d0 [ 1655.738183][ T5632] splice_to_socket+0xb5e/0x12a0 [ 1655.743666][ T5632] direct_splice_actor+0x101/0x160 [ 1655.749317][ T5632] splice_direct_to_actor+0x57b/0xcb0 [ 1655.755240][ T5632] do_splice_direct+0x195/0x290 [ 1655.760633][ T5632] do_sendfile+0x52e/0x7c0 [ 1655.765639][ T5632] __se_sys_sendfile64+0x144/0x1a0 [ 1655.771339][ T5632] do_syscall_64+0x174/0x580 [ 1655.776484][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.782944][ T5632] [ 1655.782944][ T5632] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1655.791061][ T5632] __lock_acquire+0x1520/0x2cf0 [ 1655.796469][ T5632] lock_acquire+0x106/0x350 [ 1655.801549][ T5632] lock_sock_nested+0x41/0x100 [ 1655.806883][ T5632] inet_shutdown+0x6a/0x390 [ 1655.811956][ T5632] nbd_mark_nsock_dead+0x2cb/0x550 [ 1655.817717][ T5632] recv_work+0x1cee/0x1e10 [ 1655.822690][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 1655.828835][ T5632] worker_thread+0xa47/0xfb0 [ 1655.833991][ T5632] kthread+0x388/0x470 [ 1655.838606][ T5632] ret_from_fork+0x514/0xb70 [ 1655.843751][ T5632] ret_from_fork_asm+0x1a/0x30 [ 1655.849057][ T5632] [ 1655.849057][ T5632] other info that might help us debug this: [ 1655.849057][ T5632] [ 1655.859305][ T5632] Chain exists of: [ 1655.859305][ T5632] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1655.859305][ T5632] [ 1655.872450][ T5632] Possible unsafe locking scenario: [ 1655.872450][ T5632] [ 1655.879945][ T5632] CPU0 CPU1 [ 1655.885388][ T5632] ---- ---- [ 1655.890779][ T5632] lock(&nsock->tx_lock); [ 1655.895218][ T5632] lock(&cmd->lock); [ 1655.901739][ T5632] lock(&nsock->tx_lock); [ 1655.908694][ T5632] lock(sk_lock-AF_INET6-NBD); [ 1655.913580][ T5632] [ 1655.913580][ T5632] *** DEADLOCK *** [ 1655.913580][ T5632] [ 1655.921743][ T5632] 3 locks held by kworker/u9:2/5632: [ 1655.927119][ T5632] #0: ffff88801ff3d140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1655.938426][ T5632] #1: ffffc90003ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1655.950316][ T5632] #2: ffff88805969f468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1655.959658][ T5632] [ 1655.959658][ T5632] stack backtrace: [ 1655.965571][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1655.965594][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1655.965613][ T5632] Workqueue: nbd2-recv recv_work [ 1655.965640][ T5632] Call Trace: [ 1655.965649][ T5632] [ 1655.965659][ T5632] dump_stack_lvl+0xe8/0x150 [ 1655.965681][ T5632] print_circular_bug+0x2e1/0x300 [ 1655.965707][ T5632] check_noncircular+0x12e/0x150 [ 1655.965732][ T5632] __lock_acquire+0x1520/0x2cf0 [ 1655.965758][ T5632] ? irqentry_exit+0x218/0x8f0 [ 1655.965787][ T5632] ? lockdep_hardirqs_on+0x7a/0x110 [ 1655.965814][ T5632] ? inet_shutdown+0x6a/0x390 [ 1655.965840][ T5632] lock_acquire+0x106/0x350 [ 1655.965856][ T5632] ? inet_shutdown+0x6a/0x390 [ 1655.965889][ T5632] lock_sock_nested+0x41/0x100 [ 1655.965913][ T5632] ? inet_shutdown+0x6a/0x390 [ 1655.965939][ T5632] inet_shutdown+0x6a/0x390 [ 1655.965966][ T5632] nbd_mark_nsock_dead+0x2cb/0x550 [ 1655.965988][ T5632] recv_work+0x1cee/0x1e10 [ 1655.966010][ T5632] ? __lock_acquire+0x683/0x2cf0 [ 1655.966029][ T5632] ? register_lock_class+0x31/0x2e0 [ 1655.966048][ T5632] ? __lock_acquire+0x683/0x2cf0 [ 1655.966070][ T5632] ? __pfx_recv_work+0x10/0x10 [ 1655.966090][ T5632] ? do_raw_spin_lock+0x12b/0x2f0 [ 1655.966117][ T5632] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1655.966143][ T5632] ? process_scheduled_works+0xa20/0x14e0 [ 1655.966172][ T5632] ? rcu_is_watching+0x15/0xb0 [ 1655.966194][ T5632] ? process_scheduled_works+0xa20/0x14e0 [ 1655.966218][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 1655.966256][ T5632] ? __pfx_process_scheduled_works+0x10/0x10 [ 1655.966284][ T5632] ? assign_work+0x3cf/0x5d0 [ 1655.966310][ T5632] worker_thread+0xa47/0xfb0 [ 1655.966347][ T5632] kthread+0x388/0x470 [ 1655.966365][ T5632] ? __pfx_worker_thread+0x10/0x10 [ 1655.966389][ T5632] ? __pfx_kthread+0x10/0x10 [ 1655.966408][ T5632] ret_from_fork+0x514/0xb70 [ 1655.966428][ T5632] ? __pfx_ret_from_fork+0x10/0x10 [ 1655.966447][ T5632] ? __switch_to+0xc89/0x1420 [ 1655.966494][ T5632] ? __pfx_kthread+0x10/0x10 [ 1655.966513][ T5632] ret_from_fork_asm+0x1a/0x30 [ 1655.966543][ T5632] [ 1656.452193][T10442] netlink: 'syz.0.9999': attribute type 361 has an invalid length. [ 1656.479686][T10442] tipc: New replicast peer: 172.20.20.187 [ 1656.498453][T10442] tipc: Enabled bearer , priority 10 [ 1664.228264][ T1179] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)