last executing test programs: 22m38.27874348s ago: executing program 32 (id=1628): unshare(0x62040200) unshare(0x24060400) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/208, &(0x7f0000000280)=0xd0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) 19m21.161245076s ago: executing program 1 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa, 0x5}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r7], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r8, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8000000003c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 19m18.46390889s ago: executing program 1 (id=2487): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="05000000010001", 0x7) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$l2tp6(r4, &(0x7f0000000300)="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", 0xfd, 0x40000, &(0x7f0000000400)={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000240)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10) setsockopt$inet6_buf(r4, 0x29, 0x29ea9320669e07b1, &(0x7f0000000440)="aa2ecdf8353f4971a68949a44f81ae2dd2d86e24a00091b830fb5f", 0x1b) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES16=r4, @ANYBLOB="c837496e81961a6f74a55cbaee08fcadc9ed98a1545b9c56ec26f4d7f4517cc8fe8e41c656c59710634e21d206587c4aa977443f2016987187f5e2cd10c64f753558ba0642ea2c262cd8ed28b9d4d62c779b52fafbe2d94040d765bed7ef9efc6d62267d1f03737fc920df13dffbc371b9b3f1c5590a677d4985b192700aa09b70ec5467a205b7c5a4e73158cb9bcc51a9a96437edc5bf18b2cfe2185de64a54b4c25e6e01e9c06fe1b24f4409152ee6ff956d792ce0f2", @ANYBLOB="07f7c63e3e31750c1e72ed56abb5c7bffbf4593dd58ef4d99e2ca1e05d8b1a7427404d93bdca5e15635b25724dc72c0aaf2c04151570c8208f393902b9903e37ed2bcc2aea5b81f3ee3c11ac51ca832f17baccfae940e65414d4ee3483bcfa71f5e55130bc445f232495e156707a68479d7f10a20a25346e62771c43a149d4925c077f45727eb5d454a6c1face260ccdd0f4e3b1bf2a413736ca94f0b2dccce965e7f898e7ba7c9bb20ae902cb5334b60321bf1c3672d400686e47f10ea708", @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESDEC=r7, @ANYRES64=r9], 0x6c}, 0x1, 0x0, 0x0, 0x8003}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, @none, 0x6, 0x2}, 0xe) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) 19m15.71191728s ago: executing program 1 (id=2499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911030000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 19m15.088105808s ago: executing program 1 (id=2500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x420000, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000640)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e00)={{r1, &(0x7f0000000680)='\x00', 0x40, &(0x7f00000006c0)={@align=0x1, {0x100, 0x1, 0x8, 0x2}}, 0xd, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x7, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000800)='%)-(!$\x00', &(0x7f0000000840)="b85240d908bc0591dafb1fd20f9f111a591266ea12306a1808da4f88d818b278c3bab852b2e98d43b66e29e36fb3c264", 0x30, 0x30}, {0x3, 0xd3e9, &(0x7f0000000880)='$\x00', &(0x7f00000008c0)="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", 0x1000, 0x2a}, {0x2, 0x3, &(0x7f00000018c0)='/dev/ppp\x00', &(0x7f0000001900)="d2fab43306c6d91ad9e7a5a37637d2f29eedbeb5a930b5c5eb4cb30580f6c4ec60de1265d41b2d4977fc2c940e64eedb3857a109d3be9ec03a21880ae63c115719afd81edce4867d4a7e43812796e1b05ae0ed4cec4e49608650f3ef311935", 0x5f, 0xa}, {0x2, 0x0, &(0x7f0000001980)='nl80211\x00', 0x0, 0x0, 0x18}, {0x2, 0x2e4d, &(0x7f0000001a00)='syzkaller0\x00', &(0x7f0000001a40)="614abe70104720497fcbd2bebfe010f3318ed5e9245a7f2eb12dc7fa9ca4f33854494312249005fff6887c28147024f9832dddc8f34b734ea6905ed0dbc3bbd3725b2d55a0854f158ac00202818d8caa5c73ef5c716f78dc5c4f370fb44d5641f6ce2789b9fe61458f67021a6bb005f4f79f777ff30158120336fe7ff3597b85235ff450f68cbfe4510397c92927", 0x8e, 0x1}, {0x2, 0x4, &(0x7f0000001b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001b40)="6b8d7aac4a4ca906342a09df918635970da30f3335adf688b7d8463770391ad5b4d92a38d856c5e8e6aabf35bf665a35573bd293f8dd4ae5071cc87f1479326acf5b0cd613f54dbc80b1490dae7e7729130c6bbe77c0d4295d43f62323c7142ad30a7c15372a60f031a9c9e8a0fa74603bd888", 0x73, 0x22}, {0x2, 0x61, &(0x7f0000001c00)='\xfb#}\']{\\\x00', &(0x7f0000001c40)="2f64133db8caf5009235e9fe974ce180c69693fc1c9e53e2e64a2330e2eada8aaf7b087c665c1f7676f72e952efad372a908572136aa621038f6ba39aaffa37ee714aa73782b607f24f3b54ce6ab264b727276beace8d79891e670f191fb471780090e7618b71a7627c92988445f60c5d313581c475a20737b9daf6fe36243bed2de5e2e", 0x84, 0x2}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050) recvfrom$inet(r3, &(0x7f0000001ec0), 0x0, 0x40000101, &(0x7f0000001f00)={0x2, 0x4e21, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r6}}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x294, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r6}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @nested={0x4, 0x3f}, @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d1962a9ddd6a1f2a7120d5726201021878bbf7b18ecb5c01f59bc1c9aa0a040b3a38f0b9d8be109c6a", @typed={0x103, 0x84, 0x0, 0x0, @binary="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"}, @typed={0xb, 0xe3, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9b, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da06549"]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 19m14.605388965s ago: executing program 0 (id=2501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006c000100279d"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3486dd6076db4000442f00fe80e800000000000000000000000021ff0200000000000000000000000000010320655800df6249ab025b56ef0086dd08"], 0x0) 19m13.747679569s ago: executing program 0 (id=2503): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xfffe}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32=r2, @ANYBLOB="deb3af21db8f556e326ac2dde24c350bc3ae962be84cdd948af293aa2dad00cc8c09605e71e87579b288ab23a6198fa4623f1beea18a2c7dea19067a17df9d737f62fb0977bdfcfdc4f2f270304aee8f47062a77767cd9edbea3577e7722d30fd3f8bda7d755f5", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) sendmsg$inet(r4, 0x0, 0x20000000) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3800ca494ed6000000009f0160052250681f04d6b0457776488f1296688108ca0568fb1f5dc8b0b2d58aafc4f6bc964a4e27cffde928badacf3887c797cdab6f5cd0544026bf34bb6ebd4e351159f3a4fe802db3572645e60092e6732e6a89641b4014bd908fae612e8698aa06a61c", @ANYRES16=r9, @ANYBLOB="0000000000000000180012800b00010069703667726500000800028004001200", @ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20040044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001300)=@newtaction={0xcdc, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0xcc8, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xc78, 0x2, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x4514, 0x0, 0xa6d, 0x4, 0xf, 0x18000, 0x6, 0x8, 0x81, 0x7ff, 0x7, 0x680, 0x0, 0x2c, 0x6, 0x90, 0x3, 0x6, 0x56, 0x6, 0x8001, 0x401, 0x5, 0x1000, 0x0, 0xc, 0x2, 0x100, 0xfff, 0x9, 0x101, 0x1, 0xf9d, 0x10, 0x8, 0x4, 0x64ce, 0x4d6, 0xfc77, 0x3, 0xb, 0x8001, 0x10001, 0x80, 0xfffffff9, 0xfffffffb, 0x0, 0x2, 0x800, 0x10001, 0x9, 0x2, 0x1ff, 0x9, 0xfffffff8, 0x5, 0x1, 0x7, 0x8001, 0x7, 0x4, 0x80, 0x20000000, 0x1, 0x0, 0x0, 0xa, 0x3, 0x8000, 0x3, 0x4, 0x1d63, 0x32, 0x4, 0xc, 0x6cf, 0x80, 0xde4a, 0x0, 0x9, 0x800, 0x6, 0x4, 0x59db, 0xfffffffa, 0x9, 0xfffffff8, 0x9, 0x8e5b, 0x1, 0x5a1, 0xb10c, 0x3, 0x7fff, 0x7f, 0x1, 0xff0e, 0x7, 0x1, 0x2, 0x40, 0x200, 0x2, 0x1, 0x6, 0x7ff, 0x7, 0x80000001, 0x7, 0xffff, 0x80000000, 0x3, 0x8, 0x0, 0x0, 0x3, 0x10, 0x7, 0x4, 0x800, 0x4, 0x7, 0xfffffffb, 0x6, 0xac, 0x763b, 0x2a, 0xffff, 0xf3, 0x2, 0x0, 0x1ff, 0xffffffff, 0x2, 0xe, 0x8, 0x0, 0xfffffc01, 0xe, 0xfffffffe, 0x8, 0xffffffff, 0x2, 0xc, 0x5, 0x5, 0x2, 0xabb8, 0x5c9, 0x6, 0x3, 0x81, 0x20, 0x4, 0x2, 0xb, 0x100, 0x9, 0xffffff3a, 0x0, 0xfffffffc, 0x3, 0x6, 0x2040, 0xfc, 0xddc9, 0x4, 0x44, 0x1, 0x5, 0x5, 0x9, 0x6, 0x100, 0x10000, 0x6, 0x401, 0xff, 0x200, 0x800, 0x81, 0x30000, 0x7fff, 0x0, 0x5b, 0x200, 0x9, 0x9, 0x9, 0x1ff, 0x10, 0xfffffff7, 0x17df, 0x5, 0x0, 0x8001, 0x5, 0x4, 0xfff, 0x9, 0x6, 0x4, 0x6, 0x3, 0x6, 0x7, 0x9, 0x8, 0x8, 0x10000, 0x8, 0x6, 0x8, 0x101, 0xbb, 0xfffffff7, 0x3ff, 0x3, 0xc, 0x5, 0xffff45fe, 0x0, 0x8ef0, 0x4000000, 0x6, 0xffff, 0x9, 0x3, 0x7, 0x40, 0x7, 0x5, 0xa, 0x6d640ad3, 0xfffffffb, 0x6, 0x2000, 0x4, 0xff, 0x0, 0x2, 0x5, 0x7, 0x37, 0x5, 0xffffffff, 0x2, 0x5, 0x6, 0x7fff, 0x200, 0x401, 0x6, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0xffffffff, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x1000, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19m12.047262088s ago: executing program 1 (id=2505): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x70bd2d, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0) socket(0x1e, 0x4, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="3e51d807fb66095a5f650b736768318dd3af16f58bf70ab7f61da6cb98644addf6dd7ac8a56338cd127bbc586c3c0db93c3a9738fa4e818cad95c3776f8146f8f66ba4b5980cb117fa97d60f", @ANYRES16=r2, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r3, @ANYBLOB="2c002f800c000200000000000000000008000100000000001400038008000400020000000800010002000000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x64, r7, 0x5eae78d9c54e9d3f, 0x70bd24, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88, 0x40d20}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xdd12ddf286faf91d}, 0x4) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r12, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r14, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r15, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x64}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8850}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000040200000000000000000000000000060900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x1) 19m11.953847789s ago: executing program 0 (id=2506): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000480), 0x1) 19m11.30604047s ago: executing program 0 (id=2507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000214010027bdfdfbdbdf25ca43c50600", @ANYRES32, @ANYBLOB="05005400010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r4, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) 19m10.168805808s ago: executing program 3 (id=2508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r5, @ANYRES32=r8, @ANYRESHEX=r3], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r14 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r14, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 19m8.835980475s ago: executing program 1 (id=2511): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r7, 0x89f2, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 19m6.312783947s ago: executing program 0 (id=2516): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x420000, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000640)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e00)={{r1, &(0x7f0000000680)='\x00', 0x40, &(0x7f00000006c0)={@align=0x1, {0x100, 0x1, 0x8, 0x2}}, 0xd, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x7, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000800)='%)-(!$\x00', &(0x7f0000000840)="b85240d908bc0591dafb1fd20f9f111a591266ea12306a1808da4f88d818b278c3bab852b2e98d43b66e29e36fb3c264", 0x30, 0x30}, {0x3, 0xd3e9, &(0x7f0000000880)='$\x00', &(0x7f00000008c0)="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", 0x1000, 0x2a}, {0x2, 0x3, &(0x7f00000018c0)='/dev/ppp\x00', &(0x7f0000001900)="d2fab43306c6d91ad9e7a5a37637d2f29eedbeb5a930b5c5eb4cb30580f6c4ec60de1265d41b2d4977fc2c940e64eedb3857a109d3be9ec03a21880ae63c115719afd81edce4867d4a7e43812796e1b05ae0ed4cec4e49608650f3ef311935", 0x5f, 0xa}, {0x2, 0x0, &(0x7f0000001980)='nl80211\x00', &(0x7f00000019c0)="284b771c5a62486cc9f3e3db8697a416d432f016aec6", 0x16, 0x18}, {0x2, 0x2e4d, &(0x7f0000001a00)='syzkaller0\x00', &(0x7f0000001a40)="614abe70104720497fcbd2bebfe010f3318ed5e9245a7f2eb12dc7fa9ca4f33854494312249005fff6887c28147024f9832dddc8f34b734ea6905ed0dbc3bbd3725b2d55a0854f158ac00202818d8caa5c73ef5c716f78dc5c4f370fb44d5641f6ce2789b9fe61458f67021a6bb005f4f79f777ff30158120336fe7ff3597b85235ff450f68cbfe4510397c92927", 0x8e, 0x1}, {0x2, 0x4, &(0x7f0000001b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001b40)="6b8d7aac4a4ca906342a09df918635970da30f3335adf688b7d8463770391ad5b4d92a38d856c5e8e6aabf35bf665a35573bd293f8dd4ae5071cc87f1479326acf5b0cd613f54dbc80b1490dae7e7729130c6bbe77c0d4295d43f62323c7142ad30a7c15372a60f031a9c9e8a0fa74603bd888", 0x73, 0x22}, {0x2, 0x61, &(0x7f0000001c00)='\xfb#}\']{\\\x00', &(0x7f0000001c40)="2f64133db8caf5009235e9fe974ce180c69693fc1c9e53e2e64a2330e2eada8aaf7b087c665c1f7676f72e952efad372a908572136aa621038f6ba39aaffa37ee714aa73782b607f24f3b54ce6ab264b727276beace8d79891e670f191fb471780090e7618b71a7627c92988445f60c5d313581c475a20737b9daf6fe36243bed2de5e2e", 0x84, 0x2}]}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001e80)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050) recvfrom$inet(r4, &(0x7f0000001ec0), 0x0, 0x40000101, &(0x7f0000001f00)={0x2, 0x4e21, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r8}}, 0x40) sendmsg$nl_generic(r5, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x294, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r8}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @nested={0x4, 0x3f}, @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d1962a9ddd6a1f2a7120d5726201021878bbf7b18ecb5c01f59bc1c9aa0a040b3a38f0b9d8be109c6a", @typed={0x103, 0x84, 0x0, 0x0, @binary="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"}, @typed={0xb, 0xe3, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9b, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da06549"]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 19m6.256807334s ago: executing program 3 (id=2517): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ec0)={'filter\x00', 0xb001, 0xff03, 0x418, 0x330, 0x0, 0x0, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x100, 0x7fe, 0x6, 'bond_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0x2, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) 19m5.520777585s ago: executing program 3 (id=2518): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'gre0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xd9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x841) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0102000000000000000001"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$alg(0x26, 0x5, 0x0) 19m5.387064356s ago: executing program 4 (id=2519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xfffe}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32=r2, @ANYBLOB="deb3af21db8f556e326ac2dde24c350bc3ae962be84cdd948af293aa2dad00cc8c09605e71e87579b288ab23a6198fa4623f1beea18a2c7dea19067a17df9d737f62fb0977bdfcfdc4f2f270304aee8f47062a77767cd9edbea3577e7722d30fd3f8bda7d755f5", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3800ca494ed6000000009f0160052250681f04d6b0457776488f1296688108ca0568fb1f5dc8b0b2d58aafc4f6bc964a4e27cffde928badacf3887c797cdab6f5cd0544026bf34bb6ebd4e351159f3a4fe802db3572645e60092e6732e6a89641b4014bd908fae612e8698aa06a61c", @ANYRES16=r9, @ANYBLOB="0000000000000000180012800b00010069703667726500000800028004001200", @ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20040044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001300)=@newtaction={0xcdc, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0xcc8, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xc78, 0x2, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x4514, 0x0, 0xa6d, 0x4, 0xf, 0x18000, 0x6, 0x8, 0x81, 0x7ff, 0x7, 0x680, 0x0, 0x2c, 0x6, 0x90, 0x3, 0x6, 0x56, 0x6, 0x8001, 0x401, 0x5, 0x1000, 0x0, 0xc, 0x2, 0x100, 0xfff, 0x9, 0x101, 0x1, 0xf9d, 0x10, 0x8, 0x4, 0x64ce, 0x4d6, 0xfc77, 0x3, 0xb, 0x8001, 0x10001, 0x80, 0xfffffff9, 0xfffffffb, 0x0, 0x2, 0x800, 0x10001, 0x9, 0x2, 0x1ff, 0x9, 0xfffffff8, 0x5, 0x1, 0x7, 0x8001, 0x7, 0x4, 0x80, 0x20000000, 0x1, 0x0, 0x0, 0xa, 0x3, 0x8000, 0x3, 0x4, 0x1d63, 0x32, 0x4, 0xc, 0x6cf, 0x80, 0xde4a, 0x0, 0x9, 0x800, 0x6, 0x4, 0x59db, 0xfffffffa, 0x9, 0xfffffff8, 0x9, 0x8e5b, 0x1, 0x5a1, 0xb10c, 0x3, 0x7fff, 0x7f, 0x1, 0xff0e, 0x7, 0x1, 0x2, 0x40, 0x200, 0x2, 0x1, 0x6, 0x7ff, 0x7, 0x80000001, 0x7, 0xffff, 0x80000000, 0x3, 0x8, 0x0, 0x0, 0x3, 0x10, 0x7, 0x4, 0x800, 0x4, 0x7, 0xfffffffb, 0x6, 0xac, 0x763b, 0x2a, 0xffff, 0xf3, 0x2, 0x0, 0x1ff, 0xffffffff, 0x2, 0xe, 0x8, 0x0, 0xfffffc01, 0xe, 0xfffffffe, 0x8, 0xffffffff, 0x2, 0xc, 0x5, 0x5, 0x2, 0xabb8, 0x5c9, 0x6, 0x3, 0x81, 0x20, 0x4, 0x2, 0xb, 0x100, 0x9, 0xffffff3a, 0x0, 0xfffffffc, 0x3, 0x6, 0x2040, 0xfc, 0xddc9, 0x4, 0x44, 0x1, 0x5, 0x5, 0x9, 0x6, 0x100, 0x10000, 0x6, 0x401, 0xff, 0x200, 0x800, 0x81, 0x30000, 0x7fff, 0x0, 0x5b, 0x200, 0x9, 0x9, 0x9, 0x1ff, 0x10, 0xfffffff7, 0x17df, 0x5, 0x0, 0x8001, 0x5, 0x4, 0xfff, 0x9, 0x6, 0x4, 0x6, 0x3, 0x6, 0x7, 0x9, 0x8, 0x8, 0x10000, 0x8, 0x6, 0x8, 0x101, 0xbb, 0xfffffff7, 0x3ff, 0x3, 0xc, 0x5, 0xffff45fe, 0x0, 0x8ef0, 0x4000000, 0x6, 0xffff, 0x9, 0x3, 0x7, 0x40, 0x7, 0x5, 0xa, 0x6d640ad3, 0xfffffffb, 0x6, 0x2000, 0x4, 0xff, 0x0, 0x2, 0x5, 0x7, 0x37, 0x5, 0xffffffff, 0x2, 0x5, 0x6, 0x7fff, 0x200, 0x401, 0x6, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0xffffffff, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x1000, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19m3.458460939s ago: executing program 5 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x25, 0x4, 0x2) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x7d4165c9) listen(r6, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r11 = socket$netlink(0x10, 0x3, 0x8000000004) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r13 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r13, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x54, 0x3ed, 0xc7c6870c588d97e9, 0x70bd26, 0x25dfdbfe, "9fec88b0f2dd772b2450bad85c0686893258aea92dd88b7837c23ae4069e1b5d10c41fbf6a949b301e668b4813841b932f32cc0bca147eb437856d4fe0801ba07e", ["", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1400000023791f8be99c7bd0a195d8c8aa8456e4fd8cac47b6b487e2c4309b5eb0f93ac0e73c65494dfb2c5d04616414b1b178", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) 19m3.449758661s ago: executing program 4 (id=2521): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x0) 19m3.430256547s ago: executing program 0 (id=2522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678aca8de61", @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) 19m1.604870313s ago: executing program 4 (id=2523): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bcc1d700006c"], 0x0) 19m1.129989611s ago: executing program 4 (id=2524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xf000000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) 19m0.230273621s ago: executing program 3 (id=2525): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x4, 0x81, 0x1fd, 0x0, 0xf29f}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x90) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb702000008000000182200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) socket$packet(0x11, 0x3, 0x300) r11 = socket(0x10, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r12 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r12, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @local, 0x1ff}, 0x1c) 18m59.737322033s ago: executing program 5 (id=2526): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @empty}}}], 0x20}}], 0x1, 0x8000004) 18m59.688373509s ago: executing program 4 (id=2527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r5, @ANYRES32=r8, @ANYRESHEX=r3], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r14 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r14, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 18m59.295541609s ago: executing program 5 (id=2528): unshare(0x20000400) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xffffffff, 0x1}}, 0x10) 18m58.852152316s ago: executing program 5 (id=2529): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x80}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c2e0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 18m58.382077828s ago: executing program 4 (id=2530): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) unshare(0x24000000) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x7, {0x3, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x895}, 0x40c0) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 18m58.376061646s ago: executing program 5 (id=2531): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffe64, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r12 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r13 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r14, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r11, r14, 0x25, 0x0, @val=@netkit={@void, @value=r11}}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r10, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "0016fdda770af9eee343bf61d5c221cac400fe4ba594"}]}, 0x4c}}, 0x24000880) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) 18m56.249235233s ago: executing program 3 (id=2532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x420000, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000640)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e00)={{r1, &(0x7f0000000680)='\x00', 0x40, &(0x7f00000006c0)={@align=0x1, {0x100, 0x1, 0x8, 0x2}}, 0xd, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x7, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000800)='%)-(!$\x00', &(0x7f0000000840)="b85240d908bc0591dafb1fd20f9f111a591266ea12306a1808da4f88d818b278c3bab852b2e98d43b66e29e36fb3c264", 0x30, 0x30}, {0x3, 0xd3e9, &(0x7f0000000880)='$\x00', &(0x7f00000008c0)="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", 0x1000, 0x2a}, {0x2, 0x3, &(0x7f00000018c0)='/dev/ppp\x00', &(0x7f0000001900)="d2fab43306c6d91ad9e7a5a37637d2f29eedbeb5a930b5c5eb4cb30580f6c4ec60de1265d41b2d4977fc2c940e64eedb3857a109d3be9ec03a21880ae63c115719afd81edce4867d4a7e43812796e1b05ae0ed4cec4e49608650f3ef311935", 0x5f, 0xa}, {0x2, 0x0, &(0x7f0000001980)='nl80211\x00', 0x0, 0x0, 0x18}, {0x2, 0x2e4d, &(0x7f0000001a00)='syzkaller0\x00', &(0x7f0000001a40)="614abe70104720497fcbd2bebfe010f3318ed5e9245a7f2eb12dc7fa9ca4f33854494312249005fff6887c28147024f9832dddc8f34b734ea6905ed0dbc3bbd3725b2d55a0854f158ac00202818d8caa5c73ef5c716f78dc5c4f370fb44d5641f6ce2789b9fe61458f67021a6bb005f4f79f777ff30158120336fe7ff3597b85235ff450f68cbfe4510397c92927", 0x8e, 0x1}, {0x2, 0x4, &(0x7f0000001b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001b40)="6b8d7aac4a4ca906342a09df918635970da30f3335adf688b7d8463770391ad5b4d92a38d856c5e8e6aabf35bf665a35573bd293f8dd4ae5071cc87f1479326acf5b0cd613f54dbc80b1490dae7e7729130c6bbe77c0d4295d43f62323c7142ad30a7c15372a60f031a9c9e8a0fa74603bd888", 0x73, 0x22}, {0x2, 0x61, &(0x7f0000001c00)='\xfb#}\']{\\\x00', &(0x7f0000001c40)="2f64133db8caf5009235e9fe974ce180c69693fc1c9e53e2e64a2330e2eada8aaf7b087c665c1f7676f72e952efad372a908572136aa621038f6ba39aaffa37ee714aa73782b607f24f3b54ce6ab264b727276beace8d79891e670f191fb471780090e7618b71a7627c92988445f60c5d313581c475a20737b9daf6fe36243bed2de5e2e", 0x84, 0x2}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050) recvfrom$inet(r3, &(0x7f0000001ec0), 0x0, 0x40000101, &(0x7f0000001f00)={0x2, 0x4e21, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r6}}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x294, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r6}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @nested={0x4, 0x3f}, @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d1962a9ddd6a1f2a7120d5726201021878bbf7b18ecb5c01f59bc1c9aa0a040b3a38f0b9d8be109c6a", @typed={0x103, 0x84, 0x0, 0x0, @binary="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"}, @typed={0xb, 0xe3, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9b, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da06549"]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 18m54.412355639s ago: executing program 5 (id=2533): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x5f0}}], 0x600, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x7}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x10}}]}, 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) close(0x3) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 18m54.007655596s ago: executing program 3 (id=2534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x56}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, 0x0, 0x40000) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r7, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 18m53.296710003s ago: executing program 33 (id=2511): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r7, 0x89f2, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 18m47.631953575s ago: executing program 34 (id=2522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678aca8de61", @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) 18m42.895255286s ago: executing program 35 (id=2530): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) unshare(0x24000000) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x7, {0x3, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x895}, 0x40c0) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 18m38.941151538s ago: executing program 36 (id=2533): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x5f0}}], 0x600, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x7}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x10}}]}, 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) close(0x3) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 18m38.768750219s ago: executing program 37 (id=2534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x56}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, 0x0, 0x40000) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r7, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 3.004523363s ago: executing program 9 (id=11316): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000200010009000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x10000004}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, 0x0, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4010744d, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="580100002f00010400000000fcdbdf250822c27182778b4c14be0a3001f2800c00180008ac0f000010000014000104fc0000000000000000", @ANYRES32=r9, @ANYBLOB="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"], 0x158}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.494211508s ago: executing program 9 (id=11325): unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) 2.305943392s ago: executing program 9 (id=11328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xe}, &(0x7f0000000200)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) readv(r3, 0x0, 0x0) 2.078944112s ago: executing program 9 (id=11333): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.990660921s ago: executing program 6 (id=11335): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000200010009000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x10000004}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, 0x0, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4010744d, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="580100002f00010400000000fcdbdf250822c27182778b4c14be0a3001f2800c00180008ac0f000010000014000104fc0000000000000000", @ANYRES32=r9, @ANYBLOB="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"], 0x158}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.888157391s ago: executing program 2 (id=11336): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000b0000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.791332983s ago: executing program 9 (id=11337): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)={r0}) socket$inet(0x2, 0x1, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001080)=r9, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 1.739783708s ago: executing program 8 (id=11339): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40005) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) socket$packet(0x11, 0x2, 0x300) 1.578069544s ago: executing program 2 (id=11341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000020000000900010073797a300000000044000000090a01040000bdadc662c8b2c618dca27463ea12c5d50000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d07000d4063efee00140000001022010000000000000000000584000a589a9a6492b75ef96927b29a3621246fa575584779e3d4a23d41524009de6cd66b28bc9eee8738edf5109c91414108e50262bb612da2ef5272addad7351978c9882b12a89869d911ec2ecf4eb40981f93484bff061a9844f8523b4de9c9b54fd61a602a1ad1250e684ab98b185dd072906f2c8acd2ccf680ec469d52da1a7949a3466d79bb980f346cc4cb66f94d49ca71115e7940c8d61134f7e7103fcdaeb9e5a682f812116bed6c8c4d53ee2f7b28e42f43f82f4dae6e427cfc9cb5b1873268d65f63f291ece296a4d9fa249827155fd606c29d9e3cdd4c8178f723bd0f6ad4ceb4b298d2695c69eabc266a4d65d20cb86bcfdd253362c75b2a"], 0x8c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 1.574062902s ago: executing program 6 (id=11342): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x3b8, 0x488, 0x3b8, 0x488, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) socketpair(0x27, 0x3, 0x9f15, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) 1.537342596s ago: executing program 8 (id=11343): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x48, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 1.503037244s ago: executing program 2 (id=11344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048800) 1.429605831s ago: executing program 7 (id=11345): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3be1fd000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 1.367378088s ago: executing program 2 (id=11346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xb00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 1.317811031s ago: executing program 6 (id=11347): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae777c8489cce5145f92615d4bdb1543b1eb6c546007f93452eaf09e2a1cff231", 0x40}], 0x1}, 0x24000045) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}, 0xffffff7f}], 0x40000000000027f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001e000103020000200097dda02c2b5ede4104000001"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="611228000000000061133c0000000000bf1000000000000025000200f7e4ffff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.12154767s ago: executing program 2 (id=11348): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.09251683s ago: executing program 7 (id=11349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@loopback, 0x80000, 0x1, 0x0, 0x1, 0xfff, 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x10000}, 0x9}) ioctl(r2, 0x1ff, &(0x7f00000000c0)="c51c124055bbb3d2ed7f2af4e7d5e062127642ed6e862caf974c72070554e9829a9217e17219735a614982f2be89cae0614ee5f11513c84b7ca1c0e9f777fdc31298ec4ad8210ef0e8f0d5a9c76b18dc66d3a89a8f2b0ff0985d7d6e83cb5ddd9c2dfee955493c") ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b90027bd7000fedbdf25170052d024331c0c13cf000008000300", @ANYRES32=r3, @ANYBLOB="2000308014000400403a050c5baee2004ef2b6d713459a7a0500020000000000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) 933.204542ms ago: executing program 2 (id=11350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x24020400) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x68040200) 743.622174ms ago: executing program 8 (id=11351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000780)={0xe4, r6, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0x0, 0x99, {0x4, 0x64}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x0, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS, @NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_ACTIVE]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_4ADDR={0x0, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00022dbd7000fbdbdf254500000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0f0051e2000000e9b4e35f00000000000000000062de07669c16a4dbf86a24608416e48ec16706dcfc9c324948c9", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="00000000050000000100"/28], 0x50) 725.942632ms ago: executing program 7 (id=11352): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000200010009000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x10000004}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, 0x0, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4010744d, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="580100002f00010400000000fcdbdf250822c27182778b4c14be0a3001f2800c00180008ac0f000010000014000104fc0000000000000000", @ANYRES32=r9, @ANYBLOB="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"], 0x158}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 614.283611ms ago: executing program 6 (id=11353): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) accept$unix(r3, &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x98, r1, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 533.016217ms ago: executing program 9 (id=11354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@remote, r5}, 0x14) unshare(0x40000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) 376.281297ms ago: executing program 6 (id=11355): socket$phonet(0x23, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000f500000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 368.962739ms ago: executing program 8 (id=11356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048800) 297.156348ms ago: executing program 7 (id=11357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x24, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x11000000, 0x40000}, 0x0) 206.081731ms ago: executing program 8 (id=11358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x2000000, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) 205.683207ms ago: executing program 6 (id=11359): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002980)=""/117, 0x75}, {&(0x7f0000002a00)=""/203, 0xcb}, {&(0x7f0000002b00)=""/183, 0xb7}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000002dc0)=""/184, 0xb8}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/33, 0x21}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/247, 0xf7}, {&(0x7f0000000000)=""/188, 0xbc}], 0x7}, 0x8}], 0x2, 0x2000, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5f, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 130.740924ms ago: executing program 7 (id=11360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ca", 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653", 0x5d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1}, 0xf0ff) sendmsg$sock(r3, &(0x7f0000000940)={&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)="c5d17ec3425f0fe055350eb621f5943893c1ac0b0428005b538d1b06b2bf28584bac7db015b66158d9cc1f2355d91fef4d24d6efd561ce9058fca6558c2f89aecbd10f05ef3c481632b9dbf6370412c833fb86163925435184481cae120bae77cb964457eea7b3dead8cdc4ffa6e29bcbf26f594faaef389297c0b1213d1ea416aea44490949255fc77df61a83f08130b03652ae1abdc9166336ae3c111e5481df56a443015ef4faf16c95bc5fd1eb5e11630ed4a539cf890bfabe15f2985be6a69aa9360bb9bd015b3176ae10ee861a50b725b953898b8cb708816950c6c11267a7708cc63d14a569d8c2a79da3edff27", 0xf1}, {&(0x7f0000000800)="61ee2607703d9827ff15d46c499c1b2efafb2481f1bcd89fea57e686d1db36920d6b5b6082af7b2c471ab627b330aa28b8e15a941d62a8f9e6359e2cee04b407a224a6d3", 0x44}], 0x2, &(0x7f00000008c0)=[@txtime={{0x18}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x200448c1}, 0x20040080) 130.325768ms ago: executing program 8 (id=11361): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt(r1, 0x5, 0x7fffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/3, 0x3}, 0x80000001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/23, 0x17}, 0x7e059758}], 0x2, 0x10002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {}, 0x3}) r3 = accept(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r4, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) 0s ago: executing program 7 (id=11362): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe000000200ffffffffffffffa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) kernel console output (not intermixed with test programs): e8/0x150 [ 1594.125136][ T8722] should_fail_ex+0x40c/0x560 [ 1594.125170][ T8722] should_failslab+0xa8/0x100 [ 1594.125200][ T8722] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1594.125224][ T8722] ? __alloc_skb+0x189/0x7a0 [ 1594.125249][ T8722] ? __alloc_skb+0x1d7/0x7a0 [ 1594.125271][ T8722] ? __local_bh_enable_ip+0xd0/0x130 [ 1594.125295][ T8722] __alloc_skb+0x1d7/0x7a0 [ 1594.125326][ T8722] netlink_sendmsg+0x5d4/0xb40 [ 1594.125357][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1594.125381][ T8722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1594.125410][ T8722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1594.125433][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1594.125455][ T8722] ____sys_sendmsg+0x9b9/0xa20 [ 1594.125474][ T8722] ? __might_fault+0xaf/0x130 [ 1594.125501][ T8722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.125531][ T8722] ? import_iovec+0x73/0xa0 [ 1594.125556][ T8722] ___sys_sendmsg+0x2a5/0x360 [ 1594.125574][ T8722] ? __lock_acquire+0x683/0x2cd0 [ 1594.125605][ T8722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.125663][ T8722] ? __fget_files+0x2a/0x420 [ 1594.125684][ T8722] ? __fget_files+0x3a2/0x420 [ 1594.125716][ T8722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1594.125739][ T8722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1594.125769][ T8722] ? __pfx_ksys_write+0x10/0x10 [ 1594.125804][ T8722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.125824][ T8722] do_syscall_64+0x174/0x580 [ 1594.125844][ T8722] ? trace_irq_disable+0x3b/0x140 [ 1594.125869][ T8722] ? clear_bhb_loop+0x40/0x90 [ 1594.125893][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.125912][ T8722] RIP: 0033:0x7fa2dbb9ce59 [ 1594.125934][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.125950][ T8722] RSP: 002b:00007fa2dcb31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.125969][ T8722] RAX: ffffffffffffffda RBX: 00007fa2dbe15fa0 RCX: 00007fa2dbb9ce59 [ 1594.125983][ T8722] RDX: 0000000000040800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1594.125995][ T8722] RBP: 00007fa2dcb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.126007][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.126018][ T8722] R13: 00007fa2dbe16038 R14: 00007fa2dbe15fa0 R15: 00007ffdd1094928 [ 1594.126052][ T8722] [ 1594.537495][ T8730] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1594.554712][ T8735] __nla_validate_parse: 11 callbacks suppressed [ 1594.554733][ T8735] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9903'. [ 1594.932592][ T8753] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9907'. [ 1594.965006][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9907'. [ 1595.046670][ T8749] bond54: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1595.119636][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9908'. [ 1595.142858][ T8755] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.9908'. [ 1595.154091][ T8749] bond54 (unregistering): Released all slaves [ 1595.160618][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9909'. [ 1595.186268][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9909'. [ 1595.323893][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9910'. [ 1595.512368][ T8762] x_tables: duplicate underflow at hook 2 [ 1595.666809][ T8764] ip6gretap0: left promiscuous mode [ 1595.727473][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.782685][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.914086][ T8764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1595.924910][ T8764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1595.940460][ T8764] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1595.957708][ T5842] lo speed is unknown, defaulting to 1000 [ 1595.964210][ T5842] syz1: Port: 1 Link ACTIVE [ 1595.966177][ T8767] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode [ 1596.023725][ T8767] mac80211_hwsim hwsim84 wlan0: entered allmulticast mode [ 1596.115557][ T8777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.137108][ T5746] lo speed is unknown, defaulting to 1000 [ 1596.320224][ T8783] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1596.540932][ T8797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.567169][ T8799] syzkaller1: entered promiscuous mode [ 1596.574817][ T8799] syzkaller1: entered allmulticast mode [ 1596.602733][ T8803] FAULT_INJECTION: forcing a failure. [ 1596.602733][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.651084][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.9.9924 Not tainted syzkaller #0 PREEMPT(full) [ 1596.651109][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1596.651120][ T8803] Call Trace: [ 1596.651128][ T8803] [ 1596.651135][ T8803] dump_stack_lvl+0xe8/0x150 [ 1596.651161][ T8803] should_fail_ex+0x40c/0x560 [ 1596.651194][ T8803] _copy_to_user+0x31/0xb0 [ 1596.651216][ T8803] simple_read_from_buffer+0xe1/0x170 [ 1596.651245][ T8803] proc_fail_nth_read+0x1bb/0x230 [ 1596.651271][ T8803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1596.651296][ T8803] ? rw_verify_area+0x24a/0x4c0 [ 1596.651320][ T8803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1596.651341][ T8803] vfs_read+0x213/0xa80 [ 1596.651370][ T8803] ? __pfx___mutex_lock+0x10/0x10 [ 1596.651393][ T8803] ? __pfx_vfs_read+0x10/0x10 [ 1596.651418][ T8803] ? __fget_files+0x2a/0x420 [ 1596.651443][ T8803] ? __fget_files+0x3a2/0x420 [ 1596.651462][ T8803] ? __fget_files+0x2a/0x420 [ 1596.651494][ T8803] ksys_read+0x150/0x270 [ 1596.651521][ T8803] ? __pfx_ksys_read+0x10/0x10 [ 1596.651554][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.651574][ T8803] do_syscall_64+0x174/0x580 [ 1596.651593][ T8803] ? trace_irq_disable+0x3b/0x140 [ 1596.651618][ T8803] ? clear_bhb_loop+0x40/0x90 [ 1596.651641][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.651657][ T8803] RIP: 0033:0x7fba8eb5d68e [ 1596.651677][ T8803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1596.651693][ T8803] RSP: 002b:00007fba8fa85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1596.651713][ T8803] RAX: ffffffffffffffda RBX: 00007fba8fa866c0 RCX: 00007fba8eb5d68e [ 1596.651727][ T8803] RDX: 000000000000000f RSI: 00007fba8fa860a0 RDI: 0000000000000004 [ 1596.651739][ T8803] RBP: 00007fba8fa86090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.651750][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.651761][ T8803] R13: 00007fba8ee16038 R14: 00007fba8ee15fa0 R15: 00007fffec6312c8 [ 1596.651790][ T8803] [ 1596.677291][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.098928][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9932'. [ 1597.148572][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9932'. [ 1597.211006][ T8829] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1597.658515][ T8854] netlink: 'syz.7.9942': attribute type 7 has an invalid length. [ 1597.683927][ T8858] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1597.685641][ T8854] netlink: 'syz.7.9942': attribute type 8 has an invalid length. [ 1598.176038][ T8883] netlink: 'syz.9.9952': attribute type 15 has an invalid length. [ 1598.252315][ T8885] gtp0: entered promiscuous mode [ 1598.263322][ T8885] gtp0: entered allmulticast mode [ 1598.270298][ T8891] netlink: 'syz.9.9957': attribute type 1 has an invalid length. [ 1598.282692][ T8891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1598.386639][ T8898] netlink: 'syz.9.9958': attribute type 1 has an invalid length. [ 1598.521640][ T8906] tipc: Enabling of bearer rejected, failed to enable media [ 1598.539732][ T8906] netlink: 'syz.7.9961': attribute type 1 has an invalid length. [ 1598.864063][ T8548] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.880949][ T8548] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.899715][ T8548] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.909181][ T8548] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1599.691084][ T8965] __nla_validate_parse: 10 callbacks suppressed [ 1599.691106][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9981'. [ 1599.875393][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9984'. [ 1600.079964][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9988'. [ 1600.295085][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9991'. [ 1600.324214][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9991'. [ 1600.357251][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9991'. [ 1600.599308][ T9014] IPVS: Error connecting to the multicast addr [ 1602.060386][ T9065] syzkaller1: entered promiscuous mode [ 1602.066113][ T9065] syzkaller1: entered allmulticast mode [ 1602.133138][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10011'. [ 1602.306888][ T9076] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10014'. [ 1602.329362][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10014'. [ 1602.366057][ T9076] netlink: 324 bytes leftover after parsing attributes in process `syz.9.10014'. [ 1602.876392][ T9100] netlink: 'syz.7.10023': attribute type 29 has an invalid length. [ 1603.115564][ T9113] netlink: 'syz.8.10028': attribute type 1 has an invalid length. [ 1603.134257][ T9113] netlink: 'syz.8.10028': attribute type 10 has an invalid length. [ 1603.421516][ T9130] tipc: Enabling of bearer rejected, failed to enable media [ 1603.455295][ T9130] netlink: 'syz.8.10034': attribute type 1 has an invalid length. [ 1603.466708][ T9134] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1603.785509][ T9155] netlink: 'syz.7.10043': attribute type 1 has an invalid length. [ 1603.807671][ T9155] netlink: 'syz.7.10043': attribute type 10 has an invalid length. [ 1604.310091][ T9181] netlink: 'syz.8.10051': attribute type 5 has an invalid length. [ 1604.596868][ T9193] netlink: 'syz.7.10055': attribute type 1 has an invalid length. [ 1604.613853][ T9193] netlink: 'syz.7.10055': attribute type 10 has an invalid length. [ 1604.624556][ T9197] netlink: 'syz.9.10058': attribute type 1 has an invalid length. [ 1604.906028][ T9218] __nla_validate_parse: 8 callbacks suppressed [ 1604.906047][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10062'. [ 1604.961919][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10063'. [ 1605.166792][ T9231] sctp: [Deprecated]: syz.7.10068 (pid 9231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1605.166792][ T9231] Use struct sctp_sack_info instead [ 1605.172905][ T9228] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1605.186183][ T9231] FAULT_INJECTION: forcing a failure. [ 1605.186183][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.225409][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.7.10068 Not tainted syzkaller #0 PREEMPT(full) [ 1605.225435][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1605.225446][ T9231] Call Trace: [ 1605.225454][ T9231] [ 1605.225462][ T9231] dump_stack_lvl+0xe8/0x150 [ 1605.225489][ T9231] should_fail_ex+0x40c/0x560 [ 1605.225522][ T9231] _copy_to_user+0x31/0xb0 [ 1605.225549][ T9231] simple_read_from_buffer+0xe1/0x170 [ 1605.225576][ T9231] proc_fail_nth_read+0x1bb/0x230 [ 1605.225602][ T9231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1605.225628][ T9231] ? rw_verify_area+0x24a/0x4c0 [ 1605.225654][ T9231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1605.225675][ T9231] vfs_read+0x213/0xa80 [ 1605.225704][ T9231] ? __pfx___mutex_lock+0x10/0x10 [ 1605.225726][ T9231] ? __pfx_vfs_read+0x10/0x10 [ 1605.225751][ T9231] ? __fget_files+0x2a/0x420 [ 1605.225777][ T9231] ? __fget_files+0x3a2/0x420 [ 1605.225797][ T9231] ? __fget_files+0x2a/0x420 [ 1605.225836][ T9231] ksys_read+0x150/0x270 [ 1605.225862][ T9231] ? __pfx_ksys_read+0x10/0x10 [ 1605.225895][ T9231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.225915][ T9231] do_syscall_64+0x174/0x580 [ 1605.225934][ T9231] ? trace_irq_disable+0x3b/0x140 [ 1605.225959][ T9231] ? clear_bhb_loop+0x40/0x90 [ 1605.225982][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.226000][ T9231] RIP: 0033:0x7f096875d68e [ 1605.226017][ T9231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1605.226033][ T9231] RSP: 002b:00007f096964bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1605.226052][ T9231] RAX: ffffffffffffffda RBX: 00007f096964c6c0 RCX: 00007f096875d68e [ 1605.226065][ T9231] RDX: 000000000000000f RSI: 00007f096964c0a0 RDI: 0000000000000006 [ 1605.226077][ T9231] RBP: 00007f096964c090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.226087][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.226098][ T9231] R13: 00007f0968a16038 R14: 00007f0968a15fa0 R15: 00007fff90054528 [ 1605.226130][ T9231] [ 1605.522802][ T9243] tipc: Enabling of bearer rejected, failed to enable media [ 1605.670583][ T9251] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10075'. [ 1605.770545][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1605.836377][ T9251] dummy0 (unregistering): left allmulticast mode [ 1605.888779][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10078'. [ 1606.222805][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10086'. [ 1606.484515][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10093'. [ 1606.655510][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10095'. [ 1606.664316][ T9309] syz_tun: entered allmulticast mode [ 1606.703320][ T9309] xt_hashlimit: size too large, truncated to 1048576 [ 1606.779687][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10098'. [ 1606.789186][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10097'. [ 1607.290063][ T9329] block nbd2: server does not support multiple connections per device. [ 1607.308901][ T9329] block nbd2: shutting down sockets [ 1607.866167][ T9364] gtp2: entered promiscuous mode [ 1607.896374][ T9364] gtp2: entered allmulticast mode [ 1608.000044][ T9375] syzkaller0 speed is unknown, defaulting to 1000 [ 1608.023937][ T9375] lo speed is unknown, defaulting to 1000 [ 1608.526633][ T9393] bond52: entered promiscuous mode [ 1608.539114][ T9393] 8021q: adding VLAN 0 to HW filter on device bond52 [ 1608.621573][ T9397] bridge33: entered promiscuous mode [ 1608.628969][ T9397] bond52: (slave bridge33): Enslaving as an active interface with an up link [ 1608.835408][ T9401] bond52 (unregistering): (slave bridge33): Releasing backup interface [ 1608.852522][ T9401] bridge33: left promiscuous mode [ 1608.858967][ T9406] block nbd2: server does not support multiple connections per device. [ 1608.872086][ T9401] bond52 (unregistering): Released all slaves [ 1608.876559][ T9406] block nbd2: shutting down sockets [ 1609.166598][ T9419] validate_nla: 1 callbacks suppressed [ 1609.166617][ T9419] netlink: 'syz.9.10132': attribute type 29 has an invalid length. [ 1609.297706][ T9425] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1609.842191][ T9449] FAULT_INJECTION: forcing a failure. [ 1609.842191][ T9449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.881492][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.6.10142 Not tainted syzkaller #0 PREEMPT(full) [ 1609.881519][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1609.881529][ T9449] Call Trace: [ 1609.881536][ T9449] [ 1609.881544][ T9449] dump_stack_lvl+0xe8/0x150 [ 1609.881572][ T9449] should_fail_ex+0x40c/0x560 [ 1609.881605][ T9449] _copy_from_iter+0x1d3/0x1660 [ 1609.881629][ T9449] ? rcu_is_watching+0x15/0xb0 [ 1609.881655][ T9449] ? __pfx__copy_from_iter+0x10/0x10 [ 1609.881671][ T9449] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1609.881704][ T9449] ? netlink_sendmsg+0x650/0xb40 [ 1609.881724][ T9449] ? skb_put+0x112/0x210 [ 1609.881744][ T9449] netlink_sendmsg+0x6c0/0xb40 [ 1609.881774][ T9449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1609.881797][ T9449] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1609.881824][ T9449] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1609.881847][ T9449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1609.881868][ T9449] ____sys_sendmsg+0x9b9/0xa20 [ 1609.881888][ T9449] ? __might_fault+0xaf/0x130 [ 1609.881917][ T9449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1609.881950][ T9449] ? import_iovec+0x73/0xa0 [ 1609.881975][ T9449] ___sys_sendmsg+0x2a5/0x360 [ 1609.881993][ T9449] ? __lock_acquire+0x683/0x2cd0 [ 1609.882017][ T9449] ? __pfx____sys_sendmsg+0x10/0x10 [ 1609.882073][ T9449] ? __fget_files+0x2a/0x420 [ 1609.882094][ T9449] ? __fget_files+0x3a2/0x420 [ 1609.882125][ T9449] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1609.882147][ T9449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1609.882176][ T9449] ? __pfx_ksys_write+0x10/0x10 [ 1609.882210][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.882229][ T9449] do_syscall_64+0x174/0x580 [ 1609.882249][ T9449] ? trace_irq_disable+0x3b/0x140 [ 1609.882274][ T9449] ? clear_bhb_loop+0x40/0x90 [ 1609.882297][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.882314][ T9449] RIP: 0033:0x7fd8aeb9ce59 [ 1609.882332][ T9449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.882347][ T9449] RSP: 002b:00007fd8afabf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1609.882367][ T9449] RAX: ffffffffffffffda RBX: 00007fd8aee16090 RCX: 00007fd8aeb9ce59 [ 1609.882380][ T9449] RDX: 0000000000040000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1609.882392][ T9449] RBP: 00007fd8afabf090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.882404][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.882415][ T9449] R13: 00007fd8aee16128 R14: 00007fd8aee16090 R15: 00007ffd8032e768 [ 1609.882451][ T9449] [ 1610.411055][ T9455] block nbd2: server does not support multiple connections per device. [ 1610.434206][ T9455] block nbd2: shutting down sockets [ 1610.462587][ T9458] __nla_validate_parse: 18 callbacks suppressed [ 1610.462607][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10145'. [ 1610.676799][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10150'. [ 1610.729812][ T9468] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.10149'. [ 1610.759826][ T9468] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1611.255222][ T9497] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1611.320815][ T9499] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10160'. [ 1611.372668][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10160'. [ 1611.396719][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10161'. [ 1611.510076][ T9505] netlink: 'syz.2.10163': attribute type 1 has an invalid length. [ 1611.545266][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10161'. [ 1611.962373][ T9480] batman_adv: batadv0: Interface deactivated: gretap3 [ 1612.024922][ T5746] uyz0: Port: 1 Link DOWN [ 1612.137145][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10166'. [ 1612.140350][ T9505] bond54: entered promiscuous mode [ 1612.168980][ T9505] bond54: entered allmulticast mode [ 1612.196580][ T9505] 8021q: adding VLAN 0 to HW filter on device bond54 [ 1612.263456][ T6075] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.281371][ T6075] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.292636][ T6075] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 44786 - 0 [ 1612.331563][ T6075] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.362178][ T6075] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.389223][ T6075] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 44786 - 0 [ 1612.429022][ T9537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.522650][ T6075] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.546036][ T6075] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.585703][ T6075] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 44786 - 0 [ 1612.625406][ T6075] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.650836][ T6075] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.671694][ T6075] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 44786 - 0 [ 1612.753141][ T9551] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10173'. [ 1612.784596][ T9553] netlink: 'syz.2.10174': attribute type 1 has an invalid length. [ 1612.812110][ T9553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10174'. [ 1612.840457][ T9553] netlink: 'syz.2.10174': attribute type 10 has an invalid length. [ 1612.874791][ T9553] bond0: (slave netdevsim1): Releasing backup interface [ 1612.889299][ T9553] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1612.903547][ T9553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1612.914044][ T9553] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1612.925594][ T9553] team0: Port device netdevsim1 added [ 1613.281449][ T9580] netlink: 'syz.8.10182': attribute type 2 has an invalid length. [ 1613.333333][ T9582] netlink: 'syz.7.10183': attribute type 1 has an invalid length. [ 1613.350958][ T9582] netlink: 'syz.7.10183': attribute type 2 has an invalid length. [ 1613.366464][ T9584] gtp2: entered promiscuous mode [ 1613.373183][ T9584] gtp2: entered allmulticast mode [ 1613.751277][ T9602] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1614.011982][ T9619] syzkaller0 speed is unknown, defaulting to 1000 [ 1614.043529][ T9619] lo speed is unknown, defaulting to 1000 [ 1614.680920][ T9644] .` (unregistering): left promiscuous mode [ 1614.694274][ T9644] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 1614.716433][ T9644] .` (unregistering): (slave netdevsim1): Releasing backup interface [ 1614.732775][ T9654] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1614.763570][ T9644] .` (unregistering): Released all slaves [ 1614.847111][ T9646] §: renamed from sit0 [ 1615.204413][ T9672] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1615.276162][ T9670] sctp: [Deprecated]: syz.9.10212 (pid 9670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1615.276162][ T9670] Use struct sctp_sack_info instead [ 1615.514706][ T9681] __nla_validate_parse: 15 callbacks suppressed [ 1615.514726][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10216'. [ 1615.612780][ T9685] netlink: 56 bytes leftover after parsing attributes in process `syz.8.10217'. [ 1615.834333][ T9693] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1615.999119][ T9702] netlink: 'syz.9.10224': attribute type 2 has an invalid length. [ 1616.183938][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10226'. [ 1616.223666][ T9709] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1616.300222][ T9715] FAULT_INJECTION: forcing a failure. [ 1616.300222][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.327608][ T9715] CPU: 1 UID: 0 PID: 9715 Comm: syz.7.10228 Not tainted syzkaller #0 PREEMPT(full) [ 1616.327634][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1616.327645][ T9715] Call Trace: [ 1616.327653][ T9715] [ 1616.327661][ T9715] dump_stack_lvl+0xe8/0x150 [ 1616.327688][ T9715] should_fail_ex+0x40c/0x560 [ 1616.327721][ T9715] should_failslab+0xa8/0x100 [ 1616.327750][ T9715] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1616.327777][ T9715] ? __alloc_skb+0x189/0x7a0 [ 1616.327802][ T9715] ? __alloc_skb+0x1d7/0x7a0 [ 1616.327823][ T9715] ? __local_bh_enable_ip+0xd0/0x130 [ 1616.327845][ T9715] __alloc_skb+0x1d7/0x7a0 [ 1616.327872][ T9715] netlink_sendmsg+0x5d4/0xb40 [ 1616.327902][ T9715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.327934][ T9715] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1616.327961][ T9715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1616.327983][ T9715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.328004][ T9715] ____sys_sendmsg+0x9b9/0xa20 [ 1616.328024][ T9715] ? __might_fault+0xaf/0x130 [ 1616.328052][ T9715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1616.328081][ T9715] ? import_iovec+0x73/0xa0 [ 1616.328105][ T9715] ___sys_sendmsg+0x2a5/0x360 [ 1616.328123][ T9715] ? __lock_acquire+0x683/0x2cd0 [ 1616.328147][ T9715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.328202][ T9715] ? __fget_files+0x2a/0x420 [ 1616.328223][ T9715] ? __fget_files+0x3a2/0x420 [ 1616.328255][ T9715] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1616.328278][ T9715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1616.328307][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 1616.328341][ T9715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.328361][ T9715] do_syscall_64+0x174/0x580 [ 1616.328381][ T9715] ? trace_irq_disable+0x3b/0x140 [ 1616.328406][ T9715] ? clear_bhb_loop+0x40/0x90 [ 1616.328429][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.328447][ T9715] RIP: 0033:0x7f096879ce59 [ 1616.328465][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.328479][ T9715] RSP: 002b:00007f096964c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1616.328498][ T9715] RAX: ffffffffffffffda RBX: 00007f0968a15fa0 RCX: 00007f096879ce59 [ 1616.328511][ T9715] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 1616.328522][ T9715] RBP: 00007f096964c090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.328533][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.328542][ T9715] R13: 00007f0968a16038 R14: 00007f0968a15fa0 R15: 00007fff90054528 [ 1616.328572][ T9715] [ 1616.643295][ T9720] openvswitch: netlink: Invalid VLAN frame [ 1616.796185][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10230'. [ 1616.880523][ T9732] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1616.949807][ T9734] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10236'. [ 1616.972766][ T9734] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10236'. [ 1616.997662][ T9734] netlink: 324 bytes leftover after parsing attributes in process `syz.9.10236'. [ 1617.048740][ T9736] netlink: 'syz.2.10237': attribute type 2 has an invalid length. [ 1617.054438][ T9738] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10238'. [ 1617.185322][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10240'. [ 1617.193252][ T9741] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1617.207310][ T9745] netlink: 'syz.7.10241': attribute type 1 has an invalid length. [ 1617.215234][ T9743] openvswitch: netlink: Flow key attr not present in new flow. [ 1617.269281][ T9743] netlink: 'syz.9.10240': attribute type 11 has an invalid length. [ 1617.531601][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10246'. [ 1617.873224][ T9779] bond0 (unregistering): left promiscuous mode [ 1617.889435][ T9779] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1617.916628][ T9779] team0: Port device bond0 removed [ 1617.931075][ T9779] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1617.953881][ T9779] bond0 (unregistering): Released all slaves [ 1618.008989][ T6075] tipc: Resetting bearer [ 1619.099521][ T9845] netlink: 'syz.2.10272': attribute type 1 has an invalid length. [ 1619.356293][ T9849] mac80211_hwsim hwsim85 syzkaller0: entered promiscuous mode [ 1619.417400][ T9849] mac80211_hwsim hwsim85 syzkaller0: entered allmulticast mode [ 1619.480290][ T9858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1619.577578][ T9866] gtp0: entered promiscuous mode [ 1619.604473][ T9866] gtp0: entered allmulticast mode [ 1619.906051][ T9890] netlink: 'syz.6.10284': attribute type 12 has an invalid length. [ 1620.549877][ T9926] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2859812202/2859812204 [ 1620.593798][ T9928] tipc: Enabling of bearer rejected, failed to enable media [ 1620.623959][ T9932] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2859812202/2859812204 [ 1620.635563][ T9932] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2859812202/2859812204 [ 1620.652792][ T9931] __nla_validate_parse: 14 callbacks suppressed [ 1620.652811][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10305'. [ 1620.726141][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10305'. [ 1621.125770][ T9962] macsec1: entered promiscuous mode [ 1621.147191][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10315'. [ 1621.391766][ T9974] netlink: 'syz.7.10318': attribute type 12 has an invalid length. [ 1621.422132][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10318'. [ 1621.699482][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10323'. [ 1621.756455][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10323'. [ 1621.787952][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10323'. [ 1621.892014][ T9992] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1622.271626][T10013] sctp: [Deprecated]: syz.8.10328 (pid 10013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1622.271626][T10013] Use struct sctp_sack_info instead [ 1622.272610][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10330'. [ 1622.300568][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10327'. [ 1622.333442][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10330'. [ 1622.583169][ T5291] netdevsim netdevsim9 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1622.618251][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1622.719457][T10025] veth9: entered allmulticast mode [ 1622.739620][T10025] bond55: (slave veth9): Enslaving as an active interface with an up link [ 1622.753418][T10031] gtp2: entered promiscuous mode [ 1622.759038][T10031] gtp2: entered allmulticast mode [ 1622.777471][T10012] bond55 (unregistering): (slave veth9): Releasing backup interface [ 1622.790059][T10012] bond55 (unregistering): Released all slaves [ 1623.067517][T10048] openvswitch: netlink: Invalid VLAN frame [ 1623.172479][T10051] netlink: 'syz.7.10340': attribute type 4 has an invalid length. [ 1623.632542][T10079] tipc: Enabling of bearer rejected, failed to enable media [ 1623.700231][T10080] netlink: 'syz.2.10347': attribute type 1 has an invalid length. [ 1623.735291][T10082] netlink: 'syz.8.10351': attribute type 7 has an invalid length. [ 1623.744114][T10082] netlink: 'syz.8.10351': attribute type 8 has an invalid length. [ 1624.202534][T10097] tipc: Enabled bearer , priority 0 [ 1624.349617][T10097] syzkaller0: entered promiscuous mode [ 1624.360360][T10097] syzkaller0: entered allmulticast mode [ 1624.373324][T10097] tipc: Resetting bearer [ 1624.425514][T10113] netlink: 'syz.7.10362': attribute type 1 has an invalid length. [ 1624.616847][ T6075] tipc: Resetting bearer [ 1624.635226][T10096] tipc: Resetting bearer [ 1624.655099][T10122] FAULT_INJECTION: forcing a failure. [ 1624.655099][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.696100][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.6.10367 Not tainted syzkaller #0 PREEMPT(full) [ 1624.696127][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1624.696140][T10122] Call Trace: [ 1624.696148][T10122] [ 1624.696156][T10122] dump_stack_lvl+0xe8/0x150 [ 1624.696184][T10122] should_fail_ex+0x40c/0x560 [ 1624.696216][T10122] _copy_from_user+0x2d/0xb0 [ 1624.696239][T10122] ___sys_sendmsg+0x1c6/0x360 [ 1624.696259][T10122] ? __lock_acquire+0x683/0x2cd0 [ 1624.696283][T10122] ? __pfx____sys_sendmsg+0x10/0x10 [ 1624.696300][T10122] ? __lock_acquire+0x683/0x2cd0 [ 1624.696324][T10122] ? kstrtouint+0x6e/0xe0 [ 1624.696390][T10122] __sys_sendmmsg+0x27c/0x4e0 [ 1624.696416][T10122] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1624.696434][T10122] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1624.696482][T10122] ? ksys_write+0x242/0x270 [ 1624.696510][T10122] ? __pfx_ksys_write+0x10/0x10 [ 1624.696543][T10122] __x64_sys_sendmmsg+0xa0/0xc0 [ 1624.696563][T10122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.696582][T10122] do_syscall_64+0x174/0x580 [ 1624.696600][T10122] ? trace_irq_disable+0x3b/0x140 [ 1624.696626][T10122] ? clear_bhb_loop+0x40/0x90 [ 1624.696648][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.696666][T10122] RIP: 0033:0x7fd8aeb9ce59 [ 1624.696682][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.696697][T10122] RSP: 002b:00007fd8afae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1624.696726][T10122] RAX: ffffffffffffffda RBX: 00007fd8aee15fa0 RCX: 00007fd8aeb9ce59 [ 1624.696740][T10122] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 1624.696751][T10122] RBP: 00007fd8afae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.696762][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1624.696773][T10122] R13: 00007fd8aee16038 R14: 00007fd8aee15fa0 R15: 00007ffd8032e768 [ 1624.696803][T10122] [ 1624.912156][T10124] netlink: 'syz.9.10368': attribute type 1 has an invalid length. [ 1624.937645][T10124] netlink: 'syz.9.10368': attribute type 10 has an invalid length. [ 1625.187396][T10131] FAULT_INJECTION: forcing a failure. [ 1625.187396][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.202275][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.6.10371 Not tainted syzkaller #0 PREEMPT(full) [ 1625.202301][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1625.202312][T10131] Call Trace: [ 1625.202319][T10131] [ 1625.202328][T10131] dump_stack_lvl+0xe8/0x150 [ 1625.202360][T10131] should_fail_ex+0x40c/0x560 [ 1625.202391][T10131] _copy_from_user+0x2d/0xb0 [ 1625.202413][T10131] do_sock_getsockopt+0x462/0x7e0 [ 1625.202438][T10131] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1625.202472][T10131] ? __fget_files+0x3a2/0x420 [ 1625.202493][T10131] ? __fget_files+0x2a/0x420 [ 1625.202521][T10131] __x64_sys_getsockopt+0x1a4/0x240 [ 1625.202545][T10131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.202564][T10131] do_syscall_64+0x174/0x580 [ 1625.202586][T10131] ? clear_bhb_loop+0x40/0x90 [ 1625.202606][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.202624][T10131] RIP: 0033:0x7fd8aeb9ce59 [ 1625.202641][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.202656][T10131] RSP: 002b:00007fd8afae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1625.202675][T10131] RAX: ffffffffffffffda RBX: 00007fd8aee15fa0 RCX: 00007fd8aeb9ce59 [ 1625.202687][T10131] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000003 [ 1625.202699][T10131] RBP: 00007fd8afae0090 R08: 0000200000000000 R09: 0000000000000000 [ 1625.202710][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.202720][T10131] R13: 00007fd8aee16038 R14: 00007fd8aee15fa0 R15: 00007ffd8032e768 [ 1625.202751][T10131] [ 1628.329573][T10096] tipc: Disabling bearer [ 1628.484317][T10138] __nla_validate_parse: 9 callbacks suppressed [ 1628.484338][T10138] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10375'. [ 1628.519547][T10140] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.10374'. [ 1628.540832][T10140] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1628.580949][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10376'. [ 1628.673996][T10146] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.10378'. [ 1628.777057][T10146] netlink: 'syz.2.10378': attribute type 1 has an invalid length. [ 1628.797240][T10155] netlink: 'syz.8.10382': attribute type 13 has an invalid length. [ 1628.832783][T10146] netlink: 'syz.2.10378': attribute type 1 has an invalid length. [ 1628.901173][T10159] netlink: 'syz.9.10383': attribute type 1 has an invalid length. [ 1628.938437][T10161] netlink: 'syz.7.10384': attribute type 1 has an invalid length. [ 1628.965986][T10161] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10384'. [ 1629.016332][T10161] netlink: 'syz.7.10384': attribute type 10 has an invalid length. [ 1629.057280][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10382'. [ 1629.069913][T10161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.093619][T10161] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1629.141800][T10161] team0: Port device netdevsim1 added [ 1629.499145][T10189] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.10389'. [ 1629.529599][T10189] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1629.672410][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10392'. [ 1629.842455][T10202] netlink: 'syz.2.10396': attribute type 1 has an invalid length. [ 1629.949544][T10210] netlink: 'syz.6.10398': attribute type 1 has an invalid length. [ 1629.969161][T10210] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10398'. [ 1630.004455][T10210] netlink: 'syz.6.10398': attribute type 10 has an invalid length. [ 1630.063968][T10210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1630.073548][T10210] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1630.082458][T10210] team0: Port device netdevsim1 added [ 1630.090867][T10213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10399'. [ 1630.410872][T10221] syzkaller0 speed is unknown, defaulting to 1000 [ 1630.444126][T10221] lo speed is unknown, defaulting to 1000 [ 1630.521168][T10233] netlink: 'syz.6.10409': attribute type 1 has an invalid length. [ 1630.840676][T10247] mac80211_hwsim hwsim82 wlan0: left allmulticast mode [ 1631.748780][T10280] FAULT_INJECTION: forcing a failure. [ 1631.748780][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.841647][T10280] CPU: 1 UID: 0 PID: 10280 Comm: syz.6.10425 Not tainted syzkaller #0 PREEMPT(full) [ 1631.841673][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1631.841693][T10280] Call Trace: [ 1631.841701][T10280] [ 1631.841710][T10280] dump_stack_lvl+0xe8/0x150 [ 1631.841737][T10280] should_fail_ex+0x40c/0x560 [ 1631.841770][T10280] should_failslab+0xa8/0x100 [ 1631.841799][T10280] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1631.841823][T10280] ? __alloc_skb+0x189/0x7a0 [ 1631.841849][T10280] ? __alloc_skb+0x1d7/0x7a0 [ 1631.841872][T10280] ? __local_bh_enable_ip+0xd0/0x130 [ 1631.841898][T10280] __alloc_skb+0x1d7/0x7a0 [ 1631.841928][T10280] netlink_ack+0x136/0xb30 [ 1631.841951][T10280] ? __pfx___up_read+0x10/0x10 [ 1631.841990][T10280] rdma_nl_rcv+0x40a/0xa40 [ 1631.842171][T10280] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1631.842210][T10280] ? netlink_deliver_tap+0x2e/0x1b0 [ 1631.842230][T10280] ? netlink_deliver_tap+0x2e/0x1b0 [ 1631.842255][T10280] netlink_unicast+0x7bb/0x940 [ 1631.842292][T10280] netlink_sendmsg+0x813/0xb40 [ 1631.842322][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1631.842344][T10280] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1631.842372][T10280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1631.842394][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1631.842415][T10280] ____sys_sendmsg+0x9b9/0xa20 [ 1631.842435][T10280] ? __might_fault+0xaf/0x130 [ 1631.842463][T10280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1631.842491][T10280] ? import_iovec+0x73/0xa0 [ 1631.842515][T10280] ___sys_sendmsg+0x2a5/0x360 [ 1631.842533][T10280] ? get_pid_task+0x20/0x1f0 [ 1631.842560][T10280] ? __pfx____sys_sendmsg+0x10/0x10 [ 1631.842596][T10280] ? sb_end_write+0xe9/0x1c0 [ 1631.842628][T10280] ? __pfx_vfs_write+0x10/0x10 [ 1631.842661][T10280] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1631.842689][T10280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1631.842719][T10280] ? __pfx_ksys_write+0x10/0x10 [ 1631.842750][T10280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.842769][T10280] do_syscall_64+0x174/0x580 [ 1631.842786][T10280] ? trace_irq_disable+0x3b/0x140 [ 1631.842810][T10280] ? clear_bhb_loop+0x40/0x90 [ 1631.842832][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.842850][T10280] RIP: 0033:0x7fd8aeb9ce59 [ 1631.842874][T10280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.842888][T10280] RSP: 002b:00007fd8afae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1631.842908][T10280] RAX: ffffffffffffffda RBX: 00007fd8aee15fa0 RCX: 00007fd8aeb9ce59 [ 1631.842921][T10280] RDX: 0000000000004850 RSI: 0000200000002640 RDI: 0000000000000003 [ 1631.842932][T10280] RBP: 00007fd8afae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1631.842943][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.842954][T10280] R13: 00007fd8aee16038 R14: 00007fd8aee15fa0 R15: 00007ffd8032e768 [ 1631.842983][T10280] [ 1632.146148][T10284] FAULT_INJECTION: forcing a failure. [ 1632.146148][T10284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.159494][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.7.10427 Not tainted syzkaller #0 PREEMPT(full) [ 1632.159519][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1632.159531][T10284] Call Trace: [ 1632.159539][T10284] [ 1632.159547][T10284] dump_stack_lvl+0xe8/0x150 [ 1632.159575][T10284] should_fail_ex+0x40c/0x560 [ 1632.159609][T10284] _copy_to_user+0x31/0xb0 [ 1632.159633][T10284] simple_read_from_buffer+0xe1/0x170 [ 1632.159670][T10284] proc_fail_nth_read+0x1bb/0x230 [ 1632.159697][T10284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1632.159723][T10284] ? rw_verify_area+0x24a/0x4c0 [ 1632.159750][T10284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1632.159772][T10284] vfs_read+0x213/0xa80 [ 1632.159801][T10284] ? __pfx___mutex_lock+0x10/0x10 [ 1632.159825][T10284] ? __pfx_vfs_read+0x10/0x10 [ 1632.159850][T10284] ? __fget_files+0x2a/0x420 [ 1632.159876][T10284] ? __fget_files+0x3a2/0x420 [ 1632.159896][T10284] ? __fget_files+0x2a/0x420 [ 1632.159926][T10284] ksys_read+0x150/0x270 [ 1632.159953][T10284] ? __pfx_ksys_read+0x10/0x10 [ 1632.159986][T10284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.160006][T10284] do_syscall_64+0x174/0x580 [ 1632.160027][T10284] ? clear_bhb_loop+0x40/0x90 [ 1632.160050][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.160068][T10284] RIP: 0033:0x7f096875d68e [ 1632.160086][T10284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1632.160101][T10284] RSP: 002b:00007f096964bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1632.160120][T10284] RAX: ffffffffffffffda RBX: 00007f096964c6c0 RCX: 00007f096875d68e [ 1632.160134][T10284] RDX: 000000000000000f RSI: 00007f096964c0a0 RDI: 0000000000000004 [ 1632.160146][T10284] RBP: 00007f096964c090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.160156][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.160167][T10284] R13: 00007f0968a16038 R14: 00007f0968a15fa0 R15: 00007fff90054528 [ 1632.160199][T10284] [ 1632.423970][T10286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1632.469818][T10286] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 1632.552470][T10286] team0: Port device netdevsim1 added [ 1633.386794][T10322] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1633.505836][T10332] __nla_validate_parse: 13 callbacks suppressed [ 1633.505855][T10332] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10440'. [ 1633.862237][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10445'. [ 1633.886751][T10350] validate_nla: 11 callbacks suppressed [ 1633.886769][T10350] netlink: 'syz.6.10445': attribute type 1 has an invalid length. [ 1633.904309][T10350] netlink: 'syz.6.10445': attribute type 2 has an invalid length. [ 1634.196702][T10367] netlink: 'syz.2.10448': attribute type 1 has an invalid length. [ 1634.494279][T10382] netlink: 'syz.7.10454': attribute type 1 has an invalid length. [ 1634.503564][T10382] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10454'. [ 1634.517007][T10382] netlink: 'syz.7.10454': attribute type 10 has an invalid length. [ 1634.776934][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10459'. [ 1634.814150][T10395] netlink: 'syz.2.10459': attribute type 1 has an invalid length. [ 1634.833698][T10395] netlink: 'syz.2.10459': attribute type 2 has an invalid length. [ 1634.852510][T10397] IPVS: Error connecting to the multicast addr [ 1634.955549][T10403] netlink: 'syz.6.10462': attribute type 4 has an invalid length. [ 1635.389014][T10423] syzkaller0 speed is unknown, defaulting to 1000 [ 1635.394738][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10469'. [ 1635.408465][T10423] lo speed is unknown, defaulting to 1000 [ 1635.522782][T10430] FAULT_INJECTION: forcing a failure. [ 1635.522782][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1635.559269][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.2.10471 Not tainted syzkaller #0 PREEMPT(full) [ 1635.559303][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1635.559314][T10430] Call Trace: [ 1635.559321][T10430] [ 1635.559330][T10430] dump_stack_lvl+0xe8/0x150 [ 1635.559358][T10430] should_fail_ex+0x40c/0x560 [ 1635.559392][T10430] _copy_from_user+0x2d/0xb0 [ 1635.559423][T10430] kstrtouint_from_user+0xd6/0x180 [ 1635.559452][T10430] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1635.559496][T10430] proc_fail_nth_write+0x8e/0x210 [ 1635.559521][T10430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1635.559551][T10430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1635.559573][T10430] vfs_write+0x296/0xba0 [ 1635.559608][T10430] ? __pfx_vfs_write+0x10/0x10 [ 1635.559643][T10430] ? __x64_sys_sendmsg+0x1da/0x2a0 [ 1635.559674][T10430] ksys_write+0x150/0x270 [ 1635.559701][T10430] ? __pfx_ksys_write+0x10/0x10 [ 1635.559734][T10430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.559753][T10430] do_syscall_64+0x174/0x580 [ 1635.559772][T10430] ? trace_irq_disable+0x3b/0x140 [ 1635.559798][T10430] ? clear_bhb_loop+0x40/0x90 [ 1635.559820][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.559838][T10430] RIP: 0033:0x7f44a1f5d68e [ 1635.559857][T10430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1635.559873][T10430] RSP: 002b:00007f44a2e0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1635.559893][T10430] RAX: ffffffffffffffda RBX: 00007f44a2e0b6c0 RCX: 00007f44a1f5d68e [ 1635.559910][T10430] RDX: 0000000000000001 RSI: 00007f44a2e0b0a0 RDI: 0000000000000004 [ 1635.559921][T10430] RBP: 00007f44a2e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.559932][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.559943][T10430] R13: 00007f44a2216038 R14: 00007f44a2215fa0 R15: 00007ffed20e24b8 [ 1635.559976][T10430] [ 1635.805923][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10472'. [ 1636.225946][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10477'. [ 1636.613552][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10484'. [ 1636.680433][T10462] netlink: 'syz.7.10484': attribute type 1 has an invalid length. [ 1636.689032][T10462] netlink: 'syz.7.10484': attribute type 2 has an invalid length. [ 1636.821953][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10487'. [ 1636.939429][T10472] bond0: Setting coupled_control to off (0) [ 1637.162032][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10490'. [ 1637.172133][T10485] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1637.602944][T10496] ip6_tnl_xmit_ctl: 505 callbacks suppressed [ 1637.602964][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.631749][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.655578][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.683523][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.714054][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.735084][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.750672][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.766256][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.780663][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.792360][T10496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1638.165128][T10523] syzkaller1: entered promiscuous mode [ 1638.179101][T10523] syzkaller1: entered allmulticast mode [ 1638.421300][T10536] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1638.573324][T10541] __nla_validate_parse: 1 callbacks suppressed [ 1638.573343][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10511'. [ 1638.635645][T10541] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1638.776307][T10545] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10512'. [ 1638.838729][T10552] syzkaller0 speed is unknown, defaulting to 1000 [ 1638.869044][T10552] lo speed is unknown, defaulting to 1000 [ 1639.211088][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10519'. [ 1639.770484][T10590] FAULT_INJECTION: forcing a failure. [ 1639.770484][T10590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.791931][T10590] CPU: 0 UID: 0 PID: 10590 Comm: syz.2.10529 Not tainted syzkaller #0 PREEMPT(full) [ 1639.791956][T10590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1639.791968][T10590] Call Trace: [ 1639.791974][T10590] [ 1639.791981][T10590] dump_stack_lvl+0xe8/0x150 [ 1639.792007][T10590] should_fail_ex+0x40c/0x560 [ 1639.792039][T10590] _copy_from_iter+0x1d3/0x1660 [ 1639.792062][T10590] ? rcu_is_watching+0x15/0xb0 [ 1639.792087][T10590] ? __pfx__copy_from_iter+0x10/0x10 [ 1639.792102][T10590] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1639.792133][T10590] ? netlink_sendmsg+0x650/0xb40 [ 1639.792151][T10590] ? skb_put+0x112/0x210 [ 1639.792172][T10590] netlink_sendmsg+0x6c0/0xb40 [ 1639.792196][T10590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1639.792217][T10590] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1639.792241][T10590] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1639.792261][T10590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1639.792280][T10590] ____sys_sendmsg+0x9b9/0xa20 [ 1639.792304][T10590] ? __might_fault+0xaf/0x130 [ 1639.792330][T10590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1639.792355][T10590] ? import_iovec+0x73/0xa0 [ 1639.792378][T10590] ___sys_sendmsg+0x2a5/0x360 [ 1639.792395][T10590] ? __lock_acquire+0x683/0x2cd0 [ 1639.792417][T10590] ? __pfx____sys_sendmsg+0x10/0x10 [ 1639.792467][T10590] ? __fget_files+0x2a/0x420 [ 1639.792487][T10590] ? __fget_files+0x3a2/0x420 [ 1639.792518][T10590] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1639.792539][T10590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1639.792568][T10590] ? __pfx_ksys_write+0x10/0x10 [ 1639.792611][T10590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.792638][T10590] do_syscall_64+0x174/0x580 [ 1639.792659][T10590] ? trace_irq_disable+0x3b/0x140 [ 1639.792684][T10590] ? clear_bhb_loop+0x40/0x90 [ 1639.792707][T10590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.792725][T10590] RIP: 0033:0x7f44a1f9ce59 [ 1639.792748][T10590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.792764][T10590] RSP: 002b:00007f44a2e0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1639.792784][T10590] RAX: ffffffffffffffda RBX: 00007f44a2215fa0 RCX: 00007f44a1f9ce59 [ 1639.792798][T10590] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1639.792815][T10590] RBP: 00007f44a2e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.792825][T10590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.792836][T10590] R13: 00007f44a2216038 R14: 00007f44a2215fa0 R15: 00007ffed20e24b8 [ 1639.792867][T10590] [ 1639.797361][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10529'. [ 1640.231631][T10599] macsec2: entered promiscuous mode [ 1640.237075][T10599] team_slave_1: entered promiscuous mode [ 1640.557091][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10536'. [ 1640.559025][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10539'. [ 1640.592621][T10607] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1640.849190][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10539'. [ 1641.028759][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10544'. [ 1641.055373][T10635] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1641.526230][T10655] validate_nla: 3 callbacks suppressed [ 1641.526250][T10655] netlink: 'syz.2.10550': attribute type 1 has an invalid length. [ 1642.486949][T10676] netlink: 'syz.7.10556': attribute type 1 has an invalid length. [ 1642.627104][T10651] bridge0: left allmulticast mode [ 1642.639242][T10651] bond49: left promiscuous mode [ 1642.644702][T10651] bond49: left allmulticast mode [ 1642.656327][T10651] erspan1: left promiscuous mode [ 1642.669630][T10651] erspan1: left allmulticast mode [ 1642.677587][T10651] ip6tnl2: left allmulticast mode [ 1642.735570][T10651] bond54: left promiscuous mode [ 1642.742228][T10651] bond54: left allmulticast mode [ 1642.754745][T10651] veth9: left allmulticast mode [ 1642.772856][T10655] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR [ 1642.783965][T10659] gretap3: entered allmulticast mode [ 1643.112263][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10558'. [ 1643.164674][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10559'. [ 1643.314818][T10694] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1643.664175][T10713] __nla_validate_parse: 2 callbacks suppressed [ 1643.664194][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10562'. [ 1644.072850][T10723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1644.323502][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10574'. [ 1644.364458][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10575'. [ 1644.393874][T10740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1644.401181][T10740] IPv6: NLM_F_CREATE should be set when creating new route [ 1644.408480][T10740] IPv6: NLM_F_CREATE should be set when creating new route [ 1644.415740][T10740] IPv6: NLM_F_CREATE should be set when creating new route [ 1644.453911][T10739] team0: entered promiscuous mode [ 1644.473739][T10739] team0: entered allmulticast mode [ 1644.490920][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.518728][T10745] netlink: 'syz.2.10576': attribute type 12 has an invalid length. [ 1644.538101][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10576'. [ 1644.560660][T10745] bond0: option primary_reselect: invalid value (8) [ 1645.083026][T10759] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1645.125409][T10759] netlink: 'syz.7.10582': attribute type 4 has an invalid length. [ 1645.173466][ T5746] lo speed is unknown, defaulting to 1000 [ 1645.181213][T10760] netlink: 'syz.7.10582': attribute type 4 has an invalid length. [ 1645.189309][ T5746] syz1: Port: 1 Link DOWN [ 1645.206979][ T5746] lo speed is unknown, defaulting to 1000 [ 1645.234551][ T5746] lo speed is unknown, defaulting to 1000 [ 1645.236789][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10583'. [ 1645.274807][T10763] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1645.275419][ T5746] syz1: Port: 1 Link ACTIVE [ 1645.499491][T10769] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10585'. [ 1645.528096][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10585'. [ 1645.631979][T10776] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10587'. [ 1645.686682][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10586'. [ 1645.846390][T10788] lo: Caught tx_queue_len zero misconfig [ 1645.944742][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10590'. [ 1646.158771][T10799] netlink: 'syz.9.10594': attribute type 12 has an invalid length. [ 1646.166842][T10799] bond0: option primary_reselect: invalid value (8) [ 1646.460053][T10814] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1646.612492][T27144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.630464][T27144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.676153][T10822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.739851][T10828] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1646.805913][T10833] bond0: option arp_all_targets: invalid value (8) [ 1647.886198][T10884] gtp2: entered promiscuous mode [ 1647.897547][T10884] gtp2: entered allmulticast mode [ 1648.294141][T10903] netlink: 'syz.8.10625': attribute type 1 has an invalid length. [ 1648.304547][T10903] netlink: 'syz.8.10625': attribute type 2 has an invalid length. [ 1648.601156][T10918] netlink: 'syz.6.10631': attribute type 12 has an invalid length. [ 1648.690875][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.871780][T10931] __nla_validate_parse: 9 callbacks suppressed [ 1648.871798][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10634'. [ 1648.896682][T10932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10634'. [ 1648.968997][T10937] openvswitch: netlink: Message has 16 unknown bytes. [ 1649.095139][T10945] netlink: 'syz.9.10639': attribute type 1 has an invalid length. [ 1649.108807][T10945] netlink: 'syz.9.10639': attribute type 2 has an invalid length. [ 1649.205470][T10953] FAULT_INJECTION: forcing a failure. [ 1649.205470][T10953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.228957][T10953] CPU: 0 UID: 0 PID: 10953 Comm: syz.7.10641 Not tainted syzkaller #0 PREEMPT(full) [ 1649.228983][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1649.228994][T10953] Call Trace: [ 1649.229001][T10953] [ 1649.229010][T10953] dump_stack_lvl+0xe8/0x150 [ 1649.229037][T10953] should_fail_ex+0x40c/0x560 [ 1649.229070][T10953] _copy_to_user+0x31/0xb0 [ 1649.229094][T10953] simple_read_from_buffer+0xe1/0x170 [ 1649.229121][T10953] proc_fail_nth_read+0x1bb/0x230 [ 1649.229147][T10953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1649.229174][T10953] ? rw_verify_area+0x24a/0x4c0 [ 1649.229200][T10953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1649.229222][T10953] vfs_read+0x213/0xa80 [ 1649.229253][T10953] ? __pfx___mutex_lock+0x10/0x10 [ 1649.229275][T10953] ? __pfx_vfs_read+0x10/0x10 [ 1649.229301][T10953] ? __fget_files+0x2a/0x420 [ 1649.229326][T10953] ? __fget_files+0x3a2/0x420 [ 1649.229346][T10953] ? __fget_files+0x2a/0x420 [ 1649.229376][T10953] ksys_read+0x150/0x270 [ 1649.229403][T10953] ? __pfx_ksys_read+0x10/0x10 [ 1649.229437][T10953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.229456][T10953] do_syscall_64+0x174/0x580 [ 1649.229474][T10953] ? trace_irq_disable+0x3b/0x140 [ 1649.229501][T10953] ? clear_bhb_loop+0x40/0x90 [ 1649.229523][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.229541][T10953] RIP: 0033:0x7f096875d68e [ 1649.229559][T10953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1649.229574][T10953] RSP: 002b:00007f096964bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1649.229594][T10953] RAX: ffffffffffffffda RBX: 00007f096964c6c0 RCX: 00007f096875d68e [ 1649.229608][T10953] RDX: 000000000000000f RSI: 00007f096964c0a0 RDI: 0000000000000003 [ 1649.229619][T10953] RBP: 00007f096964c090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.229631][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.229642][T10953] R13: 00007f0968a16038 R14: 00007f0968a15fa0 R15: 00007fff90054528 [ 1649.229674][T10953] [ 1649.258857][T10951] syzkaller1: entered promiscuous mode [ 1649.457113][T10951] syzkaller1: entered allmulticast mode [ 1649.811488][T10970] gtp2: entered promiscuous mode [ 1649.821181][T10970] gtp2: entered allmulticast mode [ 1649.829725][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10650'. [ 1650.049107][T10982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1650.079510][T10991] netlink: 'syz.9.10652': attribute type 1 has an invalid length. [ 1650.123657][T10991] netlink: 'syz.9.10652': attribute type 2 has an invalid length. [ 1650.243813][T11002] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10657'. [ 1650.255240][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10657'. [ 1650.334845][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10656'. [ 1650.417577][T11001] bond0: option miimon: invalid value (18446744073709551607) [ 1650.425526][T11001] bond0: option miimon: allowed values 0 - 2147483647 [ 1650.439394][T11001] bond0 (unregistering): Released all slaves [ 1650.509712][T11012] syzkaller0 speed is unknown, defaulting to 1000 [ 1650.520513][T11012] lo speed is unknown, defaulting to 1000 [ 1650.572668][T19554] block nbd2: Receive control failed (result -32) [ 1651.000542][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10662'. [ 1651.190527][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10666'. [ 1651.325390][T11046] netlink: 14 bytes leftover after parsing attributes in process `syz.8.10668'. [ 1651.366688][T11048] netlink: 'syz.2.10669': attribute type 1 has an invalid length. [ 1651.376844][T11046] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10668'. [ 1651.394614][T11048] netlink: 'syz.2.10669': attribute type 2 has an invalid length. [ 1651.989712][T11068] syzkaller0 speed is unknown, defaulting to 1000 [ 1652.024241][T11068] lo speed is unknown, defaulting to 1000 [ 1652.160397][T11080] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1652.191961][T11080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1652.648865][T11104] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1652.762574][T11108] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 1653.782772][T11137] netlink: 'syz.6.10694': attribute type 4 has an invalid length. [ 1653.814981][T11128] syzkaller1: entered promiscuous mode [ 1653.836751][T11128] syzkaller1: entered allmulticast mode [ 1654.470375][T11146] bond44: entered promiscuous mode [ 1654.477304][T11146] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1654.565513][T11155] openvswitch: netlink: IPv4 tun info is not correct [ 1654.951403][T11167] __nla_validate_parse: 4 callbacks suppressed [ 1654.951422][T11167] netlink: 14 bytes leftover after parsing attributes in process `syz.7.10706'. [ 1654.973856][T11172] netlink: 68 bytes leftover after parsing attributes in process `syz.8.10709'. [ 1654.986852][T11173] netlink: 'syz.9.10708': attribute type 21 has an invalid length. [ 1654.996767][T11167] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10706'. [ 1655.231546][T11187] FAULT_INJECTION: forcing a failure. [ 1655.231546][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.271910][T11187] CPU: 1 UID: 0 PID: 11187 Comm: syz.7.10715 Not tainted syzkaller #0 PREEMPT(full) [ 1655.271934][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1655.271945][T11187] Call Trace: [ 1655.271952][T11187] [ 1655.271961][T11187] dump_stack_lvl+0xe8/0x150 [ 1655.271990][T11187] should_fail_ex+0x40c/0x560 [ 1655.272024][T11187] _copy_from_iter+0x1d3/0x1660 [ 1655.272047][T11187] ? rcu_is_watching+0x15/0xb0 [ 1655.272076][T11187] ? __pfx__copy_from_iter+0x10/0x10 [ 1655.272091][T11187] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1655.272125][T11187] ? netlink_sendmsg+0x650/0xb40 [ 1655.272148][T11187] ? skb_put+0x112/0x210 [ 1655.272169][T11187] netlink_sendmsg+0x6c0/0xb40 [ 1655.272199][T11187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1655.272222][T11187] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1655.272251][T11187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1655.272274][T11187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1655.272296][T11187] ____sys_sendmsg+0x9b9/0xa20 [ 1655.272316][T11187] ? __might_fault+0xaf/0x130 [ 1655.272343][T11187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1655.272368][T11187] ? import_iovec+0x73/0xa0 [ 1655.272392][T11187] ___sys_sendmsg+0x2a5/0x360 [ 1655.272422][T11187] ? __lock_acquire+0x683/0x2cd0 [ 1655.272447][T11187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1655.272507][T11187] ? __fget_files+0x2a/0x420 [ 1655.272528][T11187] ? __fget_files+0x3a2/0x420 [ 1655.272558][T11187] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1655.272581][T11187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1655.272610][T11187] ? __pfx_ksys_write+0x10/0x10 [ 1655.272643][T11187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.272663][T11187] do_syscall_64+0x174/0x580 [ 1655.272684][T11187] ? trace_irq_disable+0x3b/0x140 [ 1655.272709][T11187] ? clear_bhb_loop+0x40/0x90 [ 1655.272731][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.272749][T11187] RIP: 0033:0x7f096879ce59 [ 1655.272767][T11187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.272782][T11187] RSP: 002b:00007f096964c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.272802][T11187] RAX: ffffffffffffffda RBX: 00007f0968a15fa0 RCX: 00007f096879ce59 [ 1655.272816][T11187] RDX: 0000000000040000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1655.272828][T11187] RBP: 00007f096964c090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.272840][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.272851][T11187] R13: 00007f0968a16038 R14: 00007f0968a15fa0 R15: 00007fff90054528 [ 1655.272882][T11187] [ 1655.693552][T11210] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10718'. [ 1656.014744][T11224] netlink: 14 bytes leftover after parsing attributes in process `syz.7.10725'. [ 1656.053454][T11224] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10725'. [ 1656.234071][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10730'. [ 1656.263873][T11239] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10731'. [ 1656.493000][T11250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1656.503806][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10735'. [ 1656.532964][T11248] IPVS: Error connecting to the multicast addr [ 1656.552483][T11252] IPVS: Error connecting to the multicast addr [ 1656.668826][T11256] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.10739'. [ 1656.725405][T11256] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1657.086954][T11280] netlink: 'syz.7.10750': attribute type 15 has an invalid length. [ 1657.156555][T11284] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1657.264084][T11287] gtp0: entered promiscuous mode [ 1657.277067][T11287] gtp0: entered allmulticast mode [ 1657.450381][T11294] FAULT_INJECTION: forcing a failure. [ 1657.450381][T11294] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.468071][T11294] CPU: 1 UID: 0 PID: 11294 Comm: syz.7.10754 Not tainted syzkaller #0 PREEMPT(full) [ 1657.468098][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1657.468110][T11294] Call Trace: [ 1657.468118][T11294] [ 1657.468126][T11294] dump_stack_lvl+0xe8/0x150 [ 1657.468154][T11294] should_fail_ex+0x40c/0x560 [ 1657.468200][T11294] should_failslab+0xa8/0x100 [ 1657.468227][T11294] ? skb_clone+0x212/0x3a0 [ 1657.468248][T11294] kmem_cache_alloc_noprof+0x87/0x650 [ 1657.468279][T11294] skb_clone+0x212/0x3a0 [ 1657.468303][T11294] __netlink_deliver_tap+0x413/0x860 [ 1657.468336][T11294] ? netlink_deliver_tap+0x2e/0x1b0 [ 1657.468358][T11294] netlink_deliver_tap+0x19c/0x1b0 [ 1657.468379][T11294] netlink_unicast+0x77f/0x940 [ 1657.468418][T11294] netlink_sendmsg+0x813/0xb40 [ 1657.468447][T11294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1657.468470][T11294] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1657.468498][T11294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1657.468520][T11294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1657.468542][T11294] ____sys_sendmsg+0x9b9/0xa20 [ 1657.468562][T11294] ? __might_fault+0xaf/0x130 [ 1657.468591][T11294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1657.468621][T11294] ? import_iovec+0x73/0xa0 [ 1657.468646][T11294] ___sys_sendmsg+0x2a5/0x360 [ 1657.468664][T11294] ? __lock_acquire+0x683/0x2cd0 [ 1657.468688][T11294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1657.468745][T11294] ? __fget_files+0x2a/0x420 [ 1657.468765][T11294] ? __fget_files+0x3a2/0x420 [ 1657.468796][T11294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1657.468818][T11294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1657.468845][T11294] ? __pfx_ksys_write+0x10/0x10 [ 1657.468875][T11294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.468894][T11294] do_syscall_64+0x174/0x580 [ 1657.468916][T11294] ? clear_bhb_loop+0x40/0x90 [ 1657.468938][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.468955][T11294] RIP: 0033:0x7f096879ce59 [ 1657.468972][T11294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.468987][T11294] RSP: 002b:00007f096964c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1657.469006][T11294] RAX: ffffffffffffffda RBX: 00007f0968a15fa0 RCX: 00007f096879ce59 [ 1657.469018][T11294] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1657.469028][T11294] RBP: 00007f096964c090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.469038][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.469048][T11294] R13: 00007f0968a16038 R14: 00007f0968a15fa0 R15: 00007fff90054528 [ 1657.469079][T11294] [ 1657.469508][T11294] IPVS: Error connecting to the multicast addr [ 1657.823024][T11299] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1657.872475][T11299] macsec3: entered allmulticast mode [ 1657.888005][T11299] bond0: entered allmulticast mode [ 1657.893297][T11299] geneve3: entered allmulticast mode [ 1657.910147][T11299] geneve3: entered promiscuous mode [ 1657.932051][T11299] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1657.943672][T11299] bond0: left allmulticast mode [ 1657.949173][T11299] geneve3: left allmulticast mode [ 1657.967613][ T6866] geneve3: left promiscuous mode [ 1658.123686][T11309] netlink: 'syz.8.10760': attribute type 29 has an invalid length. [ 1658.763478][T11342] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1658.869984][T11340] netlink: 'syz.2.10771': attribute type 4 has an invalid length. [ 1659.005095][T11351] netlink: 'syz.6.10776': attribute type 1 has an invalid length. [ 1659.039444][T11351] netlink: 'syz.6.10776': attribute type 2 has an invalid length. [ 1659.785733][T11384] syzkaller0 speed is unknown, defaulting to 1000 [ 1659.810109][T11384] lo speed is unknown, defaulting to 1000 [ 1659.902123][T11391] netlink: 'syz.7.10788': attribute type 1 has an invalid length. [ 1659.920111][T11391] netlink: 'syz.7.10788': attribute type 2 has an invalid length. [ 1660.054643][T11400] __nla_validate_parse: 9 callbacks suppressed [ 1660.054661][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10790'. [ 1660.364541][T11413] netlink: 128 bytes leftover after parsing attributes in process `syz.9.10794'. [ 1660.537367][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10795'. [ 1660.549538][T11417] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1660.577516][T11419] netlink: 'syz.9.10797': attribute type 5 has an invalid length. [ 1660.806135][T11431] FAULT_INJECTION: forcing a failure. [ 1660.806135][T11431] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.818827][T11431] CPU: 1 UID: 0 PID: 11431 Comm: syz.8.10801 Not tainted syzkaller #0 PREEMPT(full) [ 1660.818852][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1660.818863][T11431] Call Trace: [ 1660.818870][T11431] [ 1660.818877][T11431] dump_stack_lvl+0xe8/0x150 [ 1660.818904][T11431] should_fail_ex+0x40c/0x560 [ 1660.818936][T11431] should_failslab+0xa8/0x100 [ 1660.818962][T11431] ? skb_clone+0x212/0x3a0 [ 1660.818982][T11431] kmem_cache_alloc_noprof+0x87/0x650 [ 1660.819017][T11431] skb_clone+0x212/0x3a0 [ 1660.819044][T11431] bpf_clone_redirect+0x170/0x4b0 [ 1660.819076][T11431] ? bpf_test_run+0x1d1/0x830 [ 1660.819095][T11431] bpf_prog_ef3c9f3224492a8c+0x65/0x71 [ 1660.819115][T11431] ? __kernel_text_address+0xd/0x30 [ 1660.819152][T11431] ? __pfx___schedule+0x10/0x10 [ 1660.819168][T11431] ? ktime_get+0x45/0x220 [ 1660.819205][T11431] ? preempt_schedule_thunk+0x16/0x30 [ 1660.819232][T11431] ? preempt_schedule_common+0x82/0xd0 [ 1660.819250][T11431] ? bpf_test_run+0x1d1/0x830 [ 1660.819278][T11431] ? bpf_test_timer_continue+0x10c/0x320 [ 1660.819304][T11431] bpf_test_run+0x354/0x830 [ 1660.819345][T11431] ? __pfx_bpf_test_run+0x10/0x10 [ 1660.819375][T11431] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1660.819396][T11431] ? csum_partial+0x239/0x2c0 [ 1660.819432][T11431] ? convert___skb_to_skb+0x3d/0x5b0 [ 1660.819454][T11431] bpf_prog_test_run_skb+0xe35/0x2230 [ 1660.819502][T11431] ? __fget_files+0x3a2/0x420 [ 1660.819523][T11431] ? __fget_files+0x2a/0x420 [ 1660.819549][T11431] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1660.819570][T11431] bpf_prog_test_run+0x2c5/0x340 [ 1660.819592][T11431] __sys_bpf+0x643/0x950 [ 1660.819620][T11431] ? __pfx___sys_bpf+0x10/0x10 [ 1660.819660][T11431] ? ksys_write+0x242/0x270 [ 1660.819688][T11431] ? __pfx_ksys_write+0x10/0x10 [ 1660.819716][T11431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.819736][T11431] __x64_sys_bpf+0x7c/0x90 [ 1660.819760][T11431] do_syscall_64+0x174/0x580 [ 1660.819779][T11431] ? trace_irq_disable+0x3b/0x140 [ 1660.819804][T11431] ? clear_bhb_loop+0x40/0x90 [ 1660.819827][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.819845][T11431] RIP: 0033:0x7fa2dbb9ce59 [ 1660.819862][T11431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.819877][T11431] RSP: 002b:00007fa2dcb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1660.819896][T11431] RAX: ffffffffffffffda RBX: 00007fa2dbe15fa0 RCX: 00007fa2dbb9ce59 [ 1660.819910][T11431] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1660.819922][T11431] RBP: 00007fa2dcb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.819933][T11431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1660.819944][T11431] R13: 00007fa2dbe16038 R14: 00007fa2dbe15fa0 R15: 00007ffdd1094928 [ 1660.819974][T11431] [ 1661.306787][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10802'. [ 1661.480122][T11438] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1661.563606][T11438] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10803'. [ 1661.595003][T11444] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10803'. [ 1661.672488][ T30] audit: type=1800 audit(1781328124.147:15): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10804" name="r" dev="tmpfs" ino=7994 res=0 errno=0 [ 1662.030998][T11465] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10811'. [ 1662.052882][T11461] netlink: 14 bytes leftover after parsing attributes in process `syz.8.10812'. [ 1662.101812][T11461] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10812'. [ 1662.256491][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10815'. [ 1662.271548][T11472] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1662.727474][T11500] syzkaller1: entered promiscuous mode [ 1662.749767][T11500] syzkaller1: entered allmulticast mode [ 1663.616402][T11541] FAULT_INJECTION: forcing a failure. [ 1663.616402][T11541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.653064][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.8.10833 Not tainted syzkaller #0 PREEMPT(full) [ 1663.653090][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1663.653101][T11541] Call Trace: [ 1663.653109][T11541] [ 1663.653118][T11541] dump_stack_lvl+0xe8/0x150 [ 1663.653144][T11541] should_fail_ex+0x40c/0x560 [ 1663.653179][T11541] _copy_to_user+0x31/0xb0 [ 1663.653203][T11541] simple_read_from_buffer+0xe1/0x170 [ 1663.653231][T11541] proc_fail_nth_read+0x1bb/0x230 [ 1663.653258][T11541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1663.653284][T11541] ? rw_verify_area+0x24a/0x4c0 [ 1663.653309][T11541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1663.653331][T11541] vfs_read+0x213/0xa80 [ 1663.653361][T11541] ? __pfx___mutex_lock+0x10/0x10 [ 1663.653383][T11541] ? __pfx_vfs_read+0x10/0x10 [ 1663.653409][T11541] ? __fget_files+0x2a/0x420 [ 1663.653437][T11541] ? __fget_files+0x3a2/0x420 [ 1663.653457][T11541] ? __fget_files+0x2a/0x420 [ 1663.653488][T11541] ksys_read+0x150/0x270 [ 1663.653515][T11541] ? __pfx_ksys_read+0x10/0x10 [ 1663.653549][T11541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.653569][T11541] do_syscall_64+0x174/0x580 [ 1663.653588][T11541] ? trace_irq_disable+0x3b/0x140 [ 1663.653614][T11541] ? clear_bhb_loop+0x40/0x90 [ 1663.653636][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.653654][T11541] RIP: 0033:0x7fa2dbb5d68e [ 1663.653671][T11541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1663.653687][T11541] RSP: 002b:00007fa2dcb30fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1663.653707][T11541] RAX: ffffffffffffffda RBX: 00007fa2dcb316c0 RCX: 00007fa2dbb5d68e [ 1663.653721][T11541] RDX: 000000000000000f RSI: 00007fa2dcb310a0 RDI: 0000000000000005 [ 1663.653730][T11541] RBP: 00007fa2dcb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.653741][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.653758][T11541] R13: 00007fa2dbe16038 R14: 00007fa2dbe15fa0 R15: 00007ffdd1094928 [ 1663.653792][T11541] [ 1664.135404][T11564] netlink: 'syz.2.10840': attribute type 1 has an invalid length. [ 1664.155150][T11564] netlink: 'syz.2.10840': attribute type 2 has an invalid length. [ 1664.883131][T11596] netlink: 'syz.8.10853': attribute type 1 has an invalid length. [ 1664.910573][T11596] netlink: 'syz.8.10853': attribute type 2 has an invalid length. [ 1665.092793][T11609] __nla_validate_parse: 5 callbacks suppressed [ 1665.092815][T11609] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10855'. [ 1665.146888][T11609] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1665.380850][T11624] gtp1: entered promiscuous mode [ 1665.402333][T11624] gtp1: entered allmulticast mode [ 1665.471235][T11631] team0: Device vlan0 failed to change mtu [ 1665.641386][ T8548] tipc: Resetting bearer [ 1665.659039][T11637] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1665.725190][T11637] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1665.732663][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10870'. [ 1666.051824][T11654] team_slave_1: left promiscuous mode [ 1666.082245][T11659] pimreg: entered allmulticast mode [ 1666.099529][T27144] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.119450][T27144] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.151149][T27144] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.183879][T11660] pimreg: left allmulticast mode [ 1666.291529][T27144] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.351433][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10880'. [ 1666.402208][T11678] vlan40: entered promiscuous mode [ 1666.426482][T11678] syz_tun: entered promiscuous mode [ 1666.515843][T11680] tipc: Resetting bearer [ 1666.533902][T11680] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1667.424726][T11740] netlink: 'syz.2.10903': attribute type 1 has an invalid length. [ 1667.585308][T11746] gtp2: entered promiscuous mode [ 1667.591129][T11746] gtp2: entered allmulticast mode [ 1667.692484][T11753] netlink: 'syz.2.10909': attribute type 5 has an invalid length. [ 1667.831569][T11760] xt_hl: Unknown TTL match mode: 237 [ 1667.920676][T11760] syzkaller0: entered promiscuous mode [ 1667.926328][T11760] syzkaller0: entered allmulticast mode [ 1667.952159][T11760] ipvlan0: Caught tx_queue_len zero misconfig [ 1668.331361][T11788] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10923'. [ 1668.575372][T11798] xt_policy: output policy not valid in PREROUTING and INPUT [ 1669.119306][T11813] netlink: 'syz.6.10928': attribute type 5 has an invalid length. [ 1669.364285][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1669.375461][T11828] netlink: 'syz.2.10936': attribute type 7 has an invalid length. [ 1669.395274][T11828] netlink: 'syz.2.10936': attribute type 8 has an invalid length. [ 1669.415933][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1669.770772][T11845] netlink: 'syz.9.10943': attribute type 12 has an invalid length. [ 1669.802286][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10943'. [ 1669.835276][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10944'. [ 1669.856623][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.881826][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10944'. [ 1670.052481][T11868] FAULT_INJECTION: forcing a failure. [ 1670.052481][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.065390][T11868] CPU: 1 UID: 0 PID: 11868 Comm: syz.6.10950 Not tainted syzkaller #0 PREEMPT(full) [ 1670.065413][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1670.065423][T11868] Call Trace: [ 1670.065431][T11868] [ 1670.065438][T11868] dump_stack_lvl+0xe8/0x150 [ 1670.065466][T11868] should_fail_ex+0x40c/0x560 [ 1670.065498][T11868] should_failslab+0xa8/0x100 [ 1670.065524][T11868] ? skb_clone+0x212/0x3a0 [ 1670.065544][T11868] kmem_cache_alloc_noprof+0x87/0x650 [ 1670.065576][T11868] skb_clone+0x212/0x3a0 [ 1670.065599][T11868] __netlink_deliver_tap+0x413/0x860 [ 1670.065631][T11868] ? netlink_deliver_tap+0x2e/0x1b0 [ 1670.065651][T11868] netlink_deliver_tap+0x19c/0x1b0 [ 1670.065672][T11868] netlink_unicast+0x77f/0x940 [ 1670.065708][T11868] netlink_sendmsg+0x813/0xb40 [ 1670.065736][T11868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.065767][T11868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1670.065794][T11868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1670.065815][T11868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.065836][T11868] ____sys_sendmsg+0x9b9/0xa20 [ 1670.065855][T11868] ? __might_fault+0xaf/0x130 [ 1670.065883][T11868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1670.065912][T11868] ? import_iovec+0x73/0xa0 [ 1670.065935][T11868] ___sys_sendmsg+0x2a5/0x360 [ 1670.065953][T11868] ? __lock_acquire+0x683/0x2cd0 [ 1670.065976][T11868] ? __pfx____sys_sendmsg+0x10/0x10 [ 1670.066029][T11868] ? __fget_files+0x2a/0x420 [ 1670.066049][T11868] ? __fget_files+0x3a2/0x420 [ 1670.066080][T11868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1670.066102][T11868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1670.066130][T11868] ? __pfx_ksys_write+0x10/0x10 [ 1670.066165][T11868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.066185][T11868] do_syscall_64+0x174/0x580 [ 1670.066207][T11868] ? clear_bhb_loop+0x40/0x90 [ 1670.066229][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.066247][T11868] RIP: 0033:0x7fd8aeb9ce59 [ 1670.066264][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.066279][T11868] RSP: 002b:00007fd8afae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.066298][T11868] RAX: ffffffffffffffda RBX: 00007fd8aee15fa0 RCX: 00007fd8aeb9ce59 [ 1670.066313][T11868] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 1670.066324][T11868] RBP: 00007fd8afae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.066335][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.066346][T11868] R13: 00007fd8aee16038 R14: 00007fd8aee15fa0 R15: 00007ffd8032e768 [ 1670.066377][T11868] [ 1670.336742][T11866] nbd: nbd2 already in use [ 1670.345964][T11866] block nbd2: NBD_DISCONNECT [ 1670.352089][T11866] block nbd2: Send disconnect failed -32 [ 1670.382494][T11866] block nbd2: shutting down sockets [ 1670.422303][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10951'. [ 1670.432292][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10951'. [ 1670.698989][T11857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.712873][T11880] netlink: 'syz.8.10953': attribute type 15 has an invalid length. [ 1670.732076][T11882] netlink: 'syz.7.10954': attribute type 4 has an invalid length. [ 1670.732996][T11857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.803777][T11857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1670.815265][T11857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1670.844244][T11857] veth1_vlan: left promiscuous mode [ 1670.851396][T11857] ve: left promiscuous mode [ 1670.857086][T11857] ve: entered promiscuous mode [ 1670.866748][T11857] veth1_vlan: entered promiscuous mode [ 1670.887695][T11857] veth1_macvtap: left promiscuous mode [ 1670.895114][T11857] veth0_macvtap: left promiscuous mode [ 1670.904211][T11857] veth0_macvtap: entered promiscuous mode [ 1670.923368][T11857] veth1_macvtap: entered promiscuous mode [ 1670.940731][T11857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1670.954712][T11857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1670.972601][T11857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1670.988555][T11857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1671.011815][T11857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1671.024823][T11857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1671.040108][T11857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1671.052599][T11857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1671.061929][T11857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1671.075857][T11857] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1671.106073][T11857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1671.126887][T11857] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1671.139253][T11857] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1671.150789][T11857] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1671.161379][T11857] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1671.174187][T11857] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1671.201119][T11857] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1671.217023][T11857] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1671.235335][T11857] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1671.246073][T11857] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1671.262766][T11857] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1671.272580][T11857] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1671.281903][T11857] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1671.293479][T11857] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1671.301993][T11857] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1671.314914][T11857] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1671.324037][T11857] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1671.335441][T11857] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1671.343718][T11857] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1671.354063][T11857] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1671.366484][T11857] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1671.378710][T11857] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1671.390435][T11857] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1671.400804][T11857] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1671.413738][T11857] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1671.423060][T11857] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1671.432405][T11857] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1671.444311][T11857] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1671.456692][T11857] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1671.472252][T11857] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1671.499185][T11857] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1671.508601][T11857] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1671.521430][T11857] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1671.534166][T11857] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1671.545236][T11857] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1671.556137][T11857] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1671.569594][T11857] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1671.580923][T11857] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1671.595293][T11857] 8021q: adding VLAN 0 to HW filter on device bond45 [ 1671.613297][T11857] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1671.623627][T11857] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1671.656151][T11857] 8021q: adding VLAN 0 to HW filter on device bond46 [ 1671.665803][T11857] 8021q: adding VLAN 0 to HW filter on device bond47 [ 1671.674906][T11857] 8021q: adding VLAN 0 to HW filter on device bond48 [ 1671.700643][T11857] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1671.735624][T11879] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1671.878239][ T8556] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.899055][ T8556] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.914998][T11898] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.10958'. [ 1671.927833][ T8556] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.953954][ T8556] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.960256][T11900] netlink: 'syz.9.10959': attribute type 12 has an invalid length. [ 1671.972418][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10959'. [ 1672.015586][T11898] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1672.079120][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10960'. [ 1672.115185][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10961'. [ 1672.125678][T28506] lo speed is unknown, defaulting to 1000 [ 1672.145719][ T8556] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1672.156652][T28506] syz1: Port: 1 Link DOWN [ 1672.164304][ T8556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.188743][ T8556] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1672.207328][ T8556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.220041][T11911] netlink: 'syz.7.10963': attribute type 1 has an invalid length. [ 1672.230379][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10960'. [ 1672.239467][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10962'. [ 1672.250029][T11905] bond0: option arp_validate: invalid value (8) [ 1672.257566][T16486] lo speed is unknown, defaulting to 1000 [ 1672.330071][T11911] 8021q: adding VLAN 0 to HW filter on device bond48 [ 1672.341272][T11918] netlink: 'syz.9.10964': attribute type 6 has an invalid length. [ 1672.362023][T11911] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10963'. [ 1672.444174][ T8552] ip6_tnl_xmit_ctl: 302 callbacks suppressed [ 1672.444192][ T8552] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1672.467499][ T8552] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1672.479039][ T6865] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1673.288507][ T6865] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1673.369998][T16486] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1675.582712][T11929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1675.803691][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10975'. [ 1675.814319][T11958] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1676.244672][T11981] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10984'. [ 1676.267031][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10984'. [ 1676.488141][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1676.494809][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10988'. [ 1676.547055][T11996] netlink: 'syz.2.10987': attribute type 1 has an invalid length. [ 1676.603292][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10989'. [ 1676.771596][T12006] gtp0: entered promiscuous mode [ 1676.783921][T12006] gtp0: entered allmulticast mode [ 1677.001479][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10997'. [ 1677.015288][T12021] openvswitch: netlink: Invalid VLAN frame [ 1677.143930][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11002'. [ 1677.163383][T12027] bond0: option arp_validate: invalid value (8) [ 1677.290206][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11005'. [ 1677.340532][T12044] netlink: 'syz.7.11006': attribute type 1 has an invalid length. [ 1677.646031][T12054] syzkaller0 speed is unknown, defaulting to 1000 [ 1677.710386][T12054] lo speed is unknown, defaulting to 1000 [ 1677.836904][T12062] bond0: Removing last ns target with arp_interval on [ 1677.941375][T12073] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11015'. [ 1678.161677][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11017'. [ 1678.380022][T12091] netlink: 'syz.2.11021': attribute type 1 has an invalid length. [ 1678.523299][T12080] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1678.757450][T12101] FAULT_INJECTION: forcing a failure. [ 1678.757450][T12101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.781478][T12101] CPU: 0 UID: 0 PID: 12101 Comm: syz.6.11026 Not tainted syzkaller #0 PREEMPT(full) [ 1678.781504][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1678.781515][T12101] Call Trace: [ 1678.781523][T12101] [ 1678.781531][T12101] dump_stack_lvl+0xe8/0x150 [ 1678.781566][T12101] should_fail_ex+0x40c/0x560 [ 1678.781601][T12101] _copy_from_user+0x2d/0xb0 [ 1678.781623][T12101] ___sys_sendmsg+0x1c6/0x360 [ 1678.781642][T12101] ? __lock_acquire+0x683/0x2cd0 [ 1678.781665][T12101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.781718][T12101] ? __fget_files+0x2a/0x420 [ 1678.781739][T12101] ? __fget_files+0x3a2/0x420 [ 1678.781770][T12101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1678.781792][T12101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.781822][T12101] ? __pfx_ksys_write+0x10/0x10 [ 1678.781855][T12101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.781876][T12101] do_syscall_64+0x174/0x580 [ 1678.781896][T12101] ? trace_irq_disable+0x3b/0x140 [ 1678.781921][T12101] ? clear_bhb_loop+0x40/0x90 [ 1678.781944][T12101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.781961][T12101] RIP: 0033:0x7fd8aeb9ce59 [ 1678.781978][T12101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.781993][T12101] RSP: 002b:00007fd8afae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.782013][T12101] RAX: ffffffffffffffda RBX: 00007fd8aee15fa0 RCX: 00007fd8aeb9ce59 [ 1678.782026][T12101] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1678.782038][T12101] RBP: 00007fd8afae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.782050][T12101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.782059][T12101] R13: 00007fd8aee16038 R14: 00007fd8aee15fa0 R15: 00007ffd8032e768 [ 1678.782091][T12101] [ 1680.063676][ T3362] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.081545][ T3362] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.101497][ T3362] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.121024][ T3362] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.130936][T12126] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1680.168154][ T3362] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.213134][ T3362] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.225262][ T3362] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.266994][ T3362] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.702640][T12158] openvswitch: netlink: Invalid VLAN frame [ 1680.769399][T12159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1680.773032][T12159] netlink: 'syz.2.11046': attribute type 21 has an invalid length. [ 1680.837213][T12161] __nla_validate_parse: 3 callbacks suppressed [ 1680.837232][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11048'. [ 1680.857611][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11049'. [ 1680.918576][T12161] netlink: 92 bytes leftover after parsing attributes in process `syz.6.11048'. [ 1681.068543][T12170] netlink: 128 bytes leftover after parsing attributes in process `syz.8.11052'. [ 1681.093160][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11051'. [ 1681.465533][T12191] FAULT_INJECTION: forcing a failure. [ 1681.465533][T12191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.474932][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11057'. [ 1681.506524][T12191] CPU: 1 UID: 0 PID: 12191 Comm: syz.2.11058 Not tainted syzkaller #0 PREEMPT(full) [ 1681.506550][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1681.506561][T12191] Call Trace: [ 1681.506569][T12191] [ 1681.506578][T12191] dump_stack_lvl+0xe8/0x150 [ 1681.506606][T12191] should_fail_ex+0x40c/0x560 [ 1681.506640][T12191] _copy_from_iter+0x1d3/0x1660 [ 1681.506662][T12191] ? unwind_next_frame+0x8f/0x2550 [ 1681.506687][T12191] ? __lock_acquire+0x683/0x2cd0 [ 1681.506706][T12191] ? __pfx__copy_from_iter+0x10/0x10 [ 1681.506740][T12191] tun_get_user+0x269/0x4350 [ 1681.506783][T12191] ? aa_file_perm+0x18b/0x15f0 [ 1681.506806][T12191] ? aa_file_perm+0x4ed/0x15f0 [ 1681.506822][T12191] ? __pfx_tun_get_user+0x10/0x10 [ 1681.506843][T12191] ? __lock_acquire+0x683/0x2cd0 [ 1681.506863][T12191] ? kstrtoull+0x12f/0x1d0 [ 1681.506895][T12191] ? ref_tracker_alloc+0x341/0x4b0 [ 1681.506914][T12191] ? get_pid_task+0x20/0x1f0 [ 1681.506936][T12191] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1681.506956][T12191] ? tun_get+0x1c/0x2f0 [ 1681.506973][T12191] ? tun_get+0x1c/0x2f0 [ 1681.506995][T12191] ? tun_get+0x1c/0x2f0 [ 1681.507011][T12191] ? tun_get+0x1c/0x2f0 [ 1681.507032][T12191] tun_chr_write_iter+0x113/0x200 [ 1681.507059][T12191] vfs_write+0x612/0xba0 [ 1681.507092][T12191] ? __pfx_vfs_write+0x10/0x10 [ 1681.507117][T12191] ? do_sys_openat2+0x14c/0x200 [ 1681.507134][T12191] ? kmem_cache_free+0x182/0x650 [ 1681.507156][T12191] ? fd_install+0x94/0x3d0 [ 1681.507186][T12191] ksys_write+0x150/0x270 [ 1681.507211][T12191] ? __pfx_ksys_write+0x10/0x10 [ 1681.507243][T12191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.507262][T12191] do_syscall_64+0x174/0x580 [ 1681.507283][T12191] ? clear_bhb_loop+0x40/0x90 [ 1681.507305][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.507323][T12191] RIP: 0033:0x7f44a1f9ce59 [ 1681.507340][T12191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.507355][T12191] RSP: 002b:00007f44a2e0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1681.507373][T12191] RAX: ffffffffffffffda RBX: 00007f44a2215fa0 RCX: 00007f44a1f9ce59 [ 1681.507386][T12191] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000005 [ 1681.507396][T12191] RBP: 00007f44a2e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.507406][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.507417][T12191] R13: 00007f44a2216038 R14: 00007f44a2215fa0 R15: 00007ffed20e24b8 [ 1681.507445][T12191] [ 1681.509398][T12194] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11059'. [ 1682.136340][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11065'. [ 1682.202546][T12220] netlink: 'syz.7.11067': attribute type 3 has an invalid length. [ 1682.223051][T12220] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11067'. [ 1682.309520][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11068'. [ 1682.751336][T12240] FAULT_INJECTION: forcing a failure. [ 1682.751336][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.765950][T12240] CPU: 1 UID: 0 PID: 12240 Comm: syz.6.11074 Not tainted syzkaller #0 PREEMPT(full) [ 1682.765975][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1682.765986][T12240] Call Trace: [ 1682.765994][T12240] [ 1682.766002][T12240] dump_stack_lvl+0xe8/0x150 [ 1682.766029][T12240] should_fail_ex+0x40c/0x560 [ 1682.766062][T12240] _copy_from_iter+0x1d3/0x1660 [ 1682.766085][T12240] ? rcu_is_watching+0x15/0xb0 [ 1682.766111][T12240] ? __pfx__copy_from_iter+0x10/0x10 [ 1682.766126][T12240] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1682.766158][T12240] ? netlink_sendmsg+0x650/0xb40 [ 1682.766178][T12240] ? skb_put+0x112/0x210 [ 1682.766199][T12240] netlink_sendmsg+0x6c0/0xb40 [ 1682.766227][T12240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1682.766250][T12240] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1682.766277][T12240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1682.766300][T12240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1682.766322][T12240] ____sys_sendmsg+0x9b9/0xa20 [ 1682.766341][T12240] ? __might_fault+0xaf/0x130 [ 1682.766370][T12240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1682.766398][T12240] ? import_iovec+0x73/0xa0 [ 1682.766422][T12240] ___sys_sendmsg+0x2a5/0x360 [ 1682.766440][T12240] ? __lock_acquire+0x683/0x2cd0 [ 1682.766463][T12240] ? __pfx____sys_sendmsg+0x10/0x10 [ 1682.766517][T12240] ? __fget_files+0x2a/0x420 [ 1682.766538][T12240] ? __fget_files+0x3a2/0x420 [ 1682.766569][T12240] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1682.766596][T12240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1682.766625][T12240] ? __pfx_ksys_write+0x10/0x10 [ 1682.766659][T12240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.766679][T12240] do_syscall_64+0x174/0x580 [ 1682.766698][T12240] ? trace_irq_disable+0x3b/0x140 [ 1682.766724][T12240] ? clear_bhb_loop+0x40/0x90 [ 1682.766753][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.766771][T12240] RIP: 0033:0x7fd8aeb9ce59 [ 1682.766788][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.766804][T12240] RSP: 002b:00007fd8afae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.766824][T12240] RAX: ffffffffffffffda RBX: 00007fd8aee15fa0 RCX: 00007fd8aeb9ce59 [ 1682.766838][T12240] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1682.766850][T12240] RBP: 00007fd8afae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.766861][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.766873][T12240] R13: 00007fd8aee16038 R14: 00007fd8aee15fa0 R15: 00007ffd8032e768 [ 1682.766904][T12240] [ 1683.209806][T12248] gtp0: entered promiscuous mode [ 1683.214881][T12248] gtp0: entered allmulticast mode [ 1683.499156][T12266] netlink: 'syz.8.11080': attribute type 1 has an invalid length. [ 1683.993985][T12286] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1684.597528][T12318] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1684.964597][T12332] netlink: 'syz.9.11106': attribute type 1 has an invalid length. [ 1684.982422][T12332] netlink: 'syz.9.11106': attribute type 10 has an invalid length. [ 1684.999807][T12332] netlink: 'syz.9.11106': attribute type 10 has an invalid length. [ 1685.119287][T12344] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1685.174815][T12345] netlink: 'syz.7.11111': attribute type 1 has an invalid length. [ 1685.286495][T12353] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1685.685007][T12372] bond0: option arp_all_targets: invalid value (8) [ 1686.372759][T12400] __nla_validate_parse: 20 callbacks suppressed [ 1686.372780][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11137'. [ 1686.434543][T12389] tipc: Resetting bearer [ 1686.474336][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11138'. [ 1686.595794][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11138'. [ 1686.830514][T12389] tipc: Resetting bearer [ 1687.345850][T12424] netlink: 180 bytes leftover after parsing attributes in process `syz.7.11146'. [ 1687.532515][T12442] netlink: 128 bytes leftover after parsing attributes in process `syz.8.11152'. [ 1687.546882][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11151'. [ 1687.556290][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11152'. [ 1687.745195][T12457] netlink: 'syz.2.11157': attribute type 29 has an invalid length. [ 1687.754522][T12454] netlink: 76 bytes leftover after parsing attributes in process `syz.8.11156'. [ 1687.998990][T12465] openvswitch: netlink: Invalid VLAN frame [ 1688.016623][T12467] netlink: 'syz.9.11161': attribute type 1 has an invalid length. [ 1688.131055][T12472] netlink: 'syz.6.11163': attribute type 1 has an invalid length. [ 1688.191331][T12472] 8021q: adding VLAN 0 to HW filter on device bond45 [ 1688.227058][T12475] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11164'. [ 1688.242636][T12472] netlink: 'syz.6.11163': attribute type 1 has an invalid length. [ 1688.253673][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11164'. [ 1688.716634][ T6075] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.729558][T12510] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1688.732579][ T6075] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.762398][ T6075] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1688.778684][T12513] netlink: 'syz.2.11177': attribute type 5 has an invalid length. [ 1688.789795][T12510] tipc: Resetting bearer [ 1688.852797][T16486] syzkaller0 speed is unknown, defaulting to 1000 [ 1688.875828][T12515] netlink: 'syz.9.11178': attribute type 4 has an invalid length. [ 1689.015459][T12522] tipc: Resetting bearer [ 1689.156807][T12532] SET target dimension over the limit! [ 1689.296760][ T3362] tipc: Resetting bearer [ 1689.556426][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.931221][T12574] FAULT_INJECTION: forcing a failure. [ 1689.931221][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.952915][T12575] block nbd0: reconnected socket [ 1689.959906][T19554] block nbd0: Receive control failed (result -107) [ 1689.969828][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.2.11198 Not tainted syzkaller #0 PREEMPT(full) [ 1689.969847][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1689.969856][T12574] Call Trace: [ 1689.969863][T12574] [ 1689.969869][T12574] dump_stack_lvl+0xe8/0x150 [ 1689.969892][T12574] should_fail_ex+0x40c/0x560 [ 1689.969919][T12574] _copy_from_iter+0x1d3/0x1660 [ 1689.969937][T12574] ? unwind_next_frame+0x8f/0x2550 [ 1689.969957][T12574] ? __lock_acquire+0x683/0x2cd0 [ 1689.969973][T12574] ? __pfx__copy_from_iter+0x10/0x10 [ 1689.970001][T12574] tun_get_user+0x524/0x4350 [ 1689.970030][T12574] ? aa_file_perm+0x18b/0x15f0 [ 1689.970048][T12574] ? aa_file_perm+0x4ed/0x15f0 [ 1689.970061][T12574] ? __pfx_tun_get_user+0x10/0x10 [ 1689.970077][T12574] ? __lock_acquire+0x683/0x2cd0 [ 1689.970093][T12574] ? kstrtoull+0x12f/0x1d0 [ 1689.970119][T12574] ? ref_tracker_alloc+0x341/0x4b0 [ 1689.970143][T12574] ? get_pid_task+0x20/0x1f0 [ 1689.970163][T12574] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1689.970179][T12574] ? tun_get+0x1c/0x2f0 [ 1689.970192][T12574] ? tun_get+0x1c/0x2f0 [ 1689.970209][T12574] ? tun_get+0x1c/0x2f0 [ 1689.970221][T12574] ? tun_get+0x1c/0x2f0 [ 1689.970238][T12574] tun_chr_write_iter+0x113/0x200 [ 1689.970263][T12574] vfs_write+0x612/0xba0 [ 1689.970292][T12574] ? __pfx_vfs_write+0x10/0x10 [ 1689.970314][T12574] ? do_sys_openat2+0x14c/0x200 [ 1689.970327][T12574] ? kmem_cache_free+0x182/0x650 [ 1689.970346][T12574] ? fd_install+0x94/0x3d0 [ 1689.970374][T12574] ksys_write+0x150/0x270 [ 1689.970397][T12574] ? __pfx_ksys_write+0x10/0x10 [ 1689.970426][T12574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.970446][T12574] do_syscall_64+0x174/0x580 [ 1689.970467][T12574] ? clear_bhb_loop+0x40/0x90 [ 1689.970487][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.970500][T12574] RIP: 0033:0x7f44a1f9ce59 [ 1689.970515][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.970528][T12574] RSP: 002b:00007f44a2e0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1689.970545][T12574] RAX: ffffffffffffffda RBX: 00007f44a2215fa0 RCX: 00007f44a1f9ce59 [ 1689.970558][T12574] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000005 [ 1689.970569][T12574] RBP: 00007f44a2e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.970579][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.970589][T12574] R13: 00007f44a2216038 R14: 00007f44a2215fa0 R15: 00007ffed20e24b8 [ 1689.970613][T12574] [ 1689.976709][T12575] netlink: 'syz.9.11197': attribute type 21 has an invalid length. [ 1690.555707][T12594] openvswitch: netlink: Invalid VLAN frame [ 1690.584712][T12596] netlink: 'syz.9.11206': attribute type 1 has an invalid length. [ 1690.615686][T12596] netlink: 'syz.9.11206': attribute type 10 has an invalid length. [ 1690.643484][T12596] netlink: 'syz.9.11206': attribute type 10 has an invalid length. [ 1690.922324][T12619] FAULT_INJECTION: forcing a failure. [ 1690.922324][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.962384][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.2.11214 Not tainted syzkaller #0 PREEMPT(full) [ 1690.962411][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1690.962422][T12619] Call Trace: [ 1690.962430][T12619] [ 1690.962438][T12619] dump_stack_lvl+0xe8/0x150 [ 1690.962467][T12619] should_fail_ex+0x40c/0x560 [ 1690.962499][T12619] _copy_from_user+0x2d/0xb0 [ 1690.962521][T12619] copy_from_sockptr+0x5e/0x90 [ 1690.962545][T12619] packet_setsockopt+0x33a/0x1510 [ 1690.962573][T12619] ? __pfx_packet_setsockopt+0x10/0x10 [ 1690.962603][T12619] ? aa_sk_perm+0x6d5/0x900 [ 1690.962631][T12619] ? fd_install+0x94/0x3d0 [ 1690.962654][T12619] ? __pfx_aa_sk_perm+0x10/0x10 [ 1690.962680][T12619] ? aa_sock_opt_perm+0xff/0x1a0 [ 1690.962709][T12619] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1690.962732][T12619] ? __pfx_packet_setsockopt+0x10/0x10 [ 1690.962756][T12619] do_sock_setsockopt+0x17c/0x1b0 [ 1690.962780][T12619] __x64_sys_setsockopt+0x13d/0x1b0 [ 1690.962801][T12619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.962821][T12619] do_syscall_64+0x174/0x580 [ 1690.962841][T12619] ? trace_irq_disable+0x3b/0x140 [ 1690.962867][T12619] ? clear_bhb_loop+0x40/0x90 [ 1690.962889][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.962907][T12619] RIP: 0033:0x7f44a1f9ce59 [ 1690.962925][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.962941][T12619] RSP: 002b:00007f44a2e0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1690.962961][T12619] RAX: ffffffffffffffda RBX: 00007f44a2215fa0 RCX: 00007f44a1f9ce59 [ 1690.962975][T12619] RDX: 0000000000000007 RSI: 0000000000000107 RDI: 0000000000000003 [ 1690.962986][T12619] RBP: 00007f44a2e0b090 R08: 0000000000000004 R09: 0000000000000000 [ 1690.962997][T12619] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1690.963009][T12619] R13: 00007f44a2216038 R14: 00007f44a2215fa0 R15: 00007ffed20e24b8 [ 1690.963040][T12619] [ 1691.482359][T12642] __nla_validate_parse: 53 callbacks suppressed [ 1691.482380][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11223'. [ 1691.520185][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11223'. [ 1691.869952][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11229'. [ 1691.937431][T12670] netlink: 84 bytes leftover after parsing attributes in process `syz.6.11229'. [ 1692.022480][T12673] hmac(sha224: entered promiscuous mode [ 1692.054183][T12676] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11234'. [ 1692.223065][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11237'. [ 1692.239586][T12679] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1692.797633][T12710] validate_nla: 1 callbacks suppressed [ 1692.797651][T12710] netlink: 'syz.7.11245': attribute type 15 has an invalid length. [ 1692.813785][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11245'. [ 1692.992726][T12717] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11247'. [ 1693.205199][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11252'. [ 1693.231476][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11252'. [ 1693.397440][T12738] syzkaller0 speed is unknown, defaulting to 1000 [ 1693.454501][T12738] lo speed is unknown, defaulting to 1000 [ 1693.945441][T12755] netlink: 'syz.8.11263': attribute type 1 has an invalid length. [ 1693.957021][T12760] netlink: 'syz.2.11265': attribute type 4 has an invalid length. [ 1694.301002][T12740] IPVS: Unknown mcast interface: sit0 [ 1694.422045][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.591853][T12783] netlink: 'syz.8.11275': attribute type 1 has an invalid length. [ 1694.794215][T12783] bond46: entered promiscuous mode [ 1694.830773][T12783] bond46: entered allmulticast mode [ 1694.836512][T12783] 8021q: adding VLAN 0 to HW filter on device bond46 [ 1694.914960][T12794] 8021q: adding VLAN 0 to HW filter on device bond49 [ 1694.989832][T12800] 8021q: adding VLAN 0 to HW filter on device bond50 [ 1695.000375][T12800] bond49: (slave bond50): Enslaving as an active interface with an up link [ 1695.050464][T12794] bond49 (unregistering): (slave bond50): Releasing backup interface [ 1695.129207][T12794] bond49 (unregistering): Released all slaves [ 1696.150218][T12846] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1696.587240][T12850] __nla_validate_parse: 18 callbacks suppressed [ 1696.587258][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11297'. [ 1696.625496][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11297'. [ 1696.646083][T12862] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1697.336672][T12899] netlink: 14 bytes leftover after parsing attributes in process `syz.9.11316'. [ 1697.372782][T12898] syzkaller0: entered promiscuous mode [ 1697.384430][T12898] syzkaller0: entered allmulticast mode [ 1697.413995][T12898] tipc: Enabled bearer , priority 0 [ 1697.417607][T12899] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11316'. [ 1697.451262][T12894] tipc: Resetting bearer [ 1697.459523][T12907] netlink: 'syz.6.11317': attribute type 4 has an invalid length. [ 1697.514252][T12894] tipc: Disabling bearer [ 1697.587468][T12913] netlink: 'syz.7.11320': attribute type 1 has an invalid length. [ 1697.605393][T12913] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11320'. [ 1697.629452][T12913] netlink: 'syz.7.11320': attribute type 10 has an invalid length. [ 1697.638509][T12913] netlink: 'syz.7.11320': attribute type 10 has an invalid length. [ 1697.646741][T12913] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1697.656621][T12913] team0: Port device netdevsim1 removed [ 1697.807549][T12923] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11324'. [ 1697.881772][T12929] netlink: 'syz.2.11322': attribute type 27 has an invalid length. [ 1697.897278][T12930] netlink: 'syz.8.11324': attribute type 6 has an invalid length. [ 1697.934802][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11324'. [ 1698.058535][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11329'. [ 1698.233450][T12948] netlink: 'syz.2.11332': attribute type 29 has an invalid length. [ 1698.263901][T12949] openvswitch: netlink: Invalid VLAN frame [ 1698.342358][T12959] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11335'. [ 1698.430981][T12959] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11335'. [ 1698.619645][T12971] netlink: 'syz.7.11340': attribute type 7 has an invalid length. [ 1698.632617][T12971] netlink: 'syz.7.11340': attribute type 8 has an invalid length. [ 1698.871519][T12983] syzkaller1: entered promiscuous mode [ 1698.891822][T12983] syzkaller1: entered allmulticast mode [ 1699.392263][T12999] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1699.541700][T13002] syzkaller0 speed is unknown, defaulting to 1000 [ 1699.559821][T13002] lo speed is unknown, defaulting to 1000 [ 1700.161818][T13014] ip6gretap0: left promiscuous mode [ 1700.292308][T13014] veth1_vlan: left promiscuous mode [ 1700.301931][T13014] ve: left promiscuous mode [ 1700.307500][T13014] ve: entered promiscuous mode [ 1700.326919][T13014] veth1_vlan: entered promiscuous mode [ 1700.344542][T13014] veth1_macvtap: left promiscuous mode [ 1700.352667][T13014] veth0_macvtap: left promiscuous mode [ 1700.364665][T13014] veth0_macvtap: entered promiscuous mode [ 1700.372480][T13014] veth1_macvtap: entered promiscuous mode [ 1700.383945][T13014] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 1700.391629][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1700.400635][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1700.409635][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1700.417562][T13014] mac80211_hwsim hwsim90 wlan0: left promiscuous mode [ 1700.433391][T13014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1700.446071][T13014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1700.457059][T13014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1700.471733][T13014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1700.481443][T13014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1700.492789][T13014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1700.505067][T13014] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1700.514885][T13014] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1700.531006][T13014] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1700.542756][T13014] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1700.556099][T13014] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1700.570163][T13014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1700.582678][T13014] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1700.593870][T13014] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1700.605554][T13014] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1700.614744][T13014] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1700.626334][T13014] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1700.642572][T13014] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1700.656288][T13014] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1700.669203][T13014] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1700.679629][T13014] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1700.687733][T13014] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1700.699945][T13014] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1700.710276][T13014] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1700.720155][T13014] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1700.731645][T13014] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1700.741858][T13014] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1700.751853][T13014] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1700.763858][T13014] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1700.775996][T13014] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1700.784623][T13014] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1700.793919][T13014] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1700.807199][T13014] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1700.825094][T13014] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1700.834154][T13014] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1700.847380][T13014] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1700.859490][T13014] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1700.872993][T13014] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1700.883386][T13014] bond39: left promiscuous mode [ 1700.889547][T13014] bridge27: left promiscuous mode [ 1700.895471][T13014] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1700.907271][T13014] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1700.917296][T13014] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1700.926399][T13014] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1700.936545][T13014] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1700.947730][T13014] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1700.986099][ T8552] [ 1700.988463][ T8552] ====================================================== [ 1700.995479][ T8552] WARNING: possible circular locking dependency detected [ 1701.002507][ T8552] syzkaller #0 Not tainted [ 1701.006914][ T8552] ------------------------------------------------------ [ 1701.013927][ T8552] kworker/u8:16/8552 is trying to acquire lock: [ 1701.020162][ T8552] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1701.029485][ T8552] [ 1701.029485][ T8552] but task is already holding lock: [ 1701.036843][ T8552] ffff88807c682530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 1701.046076][ T8552] [ 1701.046076][ T8552] which lock already depends on the new lock. [ 1701.046076][ T8552] [ 1701.056473][ T8552] [ 1701.056473][ T8552] the existing dependency chain (in reverse order) is: [ 1701.065479][ T8552] [ 1701.065479][ T8552] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 1701.073032][ T8552] __mutex_lock+0x19d/0x1590 [ 1701.078128][ T8552] __ipv6_dev_mc_inc+0x4e/0xa40 [ 1701.083480][ T8552] __ipv6_sock_mc_join+0x4f7/0x740 [ 1701.089092][ T8552] ipv6_mcast_join_leave+0x1a2/0x240 [ 1701.094889][ T8552] do_ipv6_setsockopt+0x19be/0x3190 [ 1701.100593][ T8552] ipv6_setsockopt+0x59/0x170 [ 1701.105799][ T8552] do_sock_setsockopt+0x17c/0x1b0 [ 1701.111338][ T8552] __x64_sys_setsockopt+0x13d/0x1b0 [ 1701.117046][ T8552] do_syscall_64+0x174/0x580 [ 1701.122147][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.128550][ T8552] [ 1701.128550][ T8552] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1701.136266][ T8552] lock_sock_nested+0x41/0x100 [ 1701.141547][ T8552] inet_shutdown+0x6a/0x390 [ 1701.146661][ T8552] nbd_mark_nsock_dead+0x2cb/0x550 [ 1701.152350][ T8552] recv_work+0x1cef/0x1e10 [ 1701.157277][ T8552] process_scheduled_works+0xa8e/0x14e0 [ 1701.163335][ T8552] worker_thread+0xa47/0xfb0 [ 1701.168428][ T8552] kthread+0x389/0x470 [ 1701.173000][ T8552] ret_from_fork+0x514/0xb70 [ 1701.178094][ T8552] ret_from_fork_asm+0x1a/0x30 [ 1701.183362][ T8552] [ 1701.183362][ T8552] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1701.190991][ T8552] __mutex_lock+0x19d/0x1590 [ 1701.196088][ T8552] nbd_queue_rq+0x373/0x1150 [ 1701.201186][ T8552] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1701.207321][ T8552] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1701.214201][ T8552] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1701.220683][ T8552] blk_mq_run_hw_queue+0x348/0x4f0 [ 1701.226297][ T8552] blk_mq_dispatch_list+0xd11/0xe10 [ 1701.232001][ T8552] blk_mq_flush_plug_list+0x45f/0x540 [ 1701.237882][ T8552] __blk_flush_plug+0x3ed/0x4d0 [ 1701.243326][ T8552] __submit_bio+0x465/0x560 [ 1701.248336][ T8552] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1701.254472][ T8552] block_read_full_folio+0x599/0x830 [ 1701.260267][ T8552] filemap_read_folio+0x12c/0x3a0 [ 1701.265800][ T8552] do_read_cache_folio+0x354/0x590 [ 1701.271416][ T8552] read_part_sector+0xb6/0x2b0 [ 1701.276704][ T8552] adfspart_check_ICS+0xb1/0x960 [ 1701.282144][ T8552] bdev_disk_changed+0x82b/0x1780 [ 1701.287669][ T8552] blkdev_get_whole+0x372/0x510 [ 1701.293077][ T8552] bdev_open+0x324/0xd70 [ 1701.297824][ T8552] blkdev_open+0x461/0x600 [ 1701.302745][ T8552] do_dentry_open+0x816/0x1380 [ 1701.308013][ T8552] vfs_open+0x3b/0x340 [ 1701.312581][ T8552] path_openat+0x2e3b/0x3890 [ 1701.317675][ T8552] do_file_open+0x23e/0x4a0 [ 1701.322685][ T8552] do_sys_openat2+0x113/0x200 [ 1701.327864][ T8552] __x64_sys_openat+0x138/0x170 [ 1701.333216][ T8552] do_syscall_64+0x174/0x580 [ 1701.338317][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.344711][ T8552] [ 1701.344711][ T8552] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1701.351904][ T8552] __mutex_lock+0x19d/0x1590 [ 1701.357000][ T8552] nbd_queue_rq+0xc1/0x1150 [ 1701.362013][ T8552] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1701.368062][ T8552] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1701.374892][ T8552] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1701.381378][ T8552] blk_mq_run_hw_queue+0x348/0x4f0 [ 1701.386990][ T8552] blk_mq_dispatch_list+0xd11/0xe10 [ 1701.392689][ T8552] blk_mq_flush_plug_list+0x45f/0x540 [ 1701.398566][ T8552] __blk_flush_plug+0x3ed/0x4d0 [ 1701.403919][ T8552] __submit_bio+0x465/0x560 [ 1701.408932][ T8552] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1701.415065][ T8552] block_read_full_folio+0x599/0x830 [ 1701.420855][ T8552] filemap_read_folio+0x12c/0x3a0 [ 1701.426384][ T8552] do_read_cache_folio+0x354/0x590 [ 1701.432001][ T8552] read_part_sector+0xb6/0x2b0 [ 1701.437268][ T8552] adfspart_check_ICS+0xb1/0x960 [ 1701.442708][ T8552] bdev_disk_changed+0x82b/0x1780 [ 1701.448239][ T8552] blkdev_get_whole+0x372/0x510 [ 1701.453599][ T8552] bdev_open+0x324/0xd70 [ 1701.458343][ T8552] blkdev_open+0x461/0x600 [ 1701.463264][ T8552] do_dentry_open+0x816/0x1380 [ 1701.468534][ T8552] vfs_open+0x3b/0x340 [ 1701.473106][ T8552] path_openat+0x2e3b/0x3890 [ 1701.478201][ T8552] do_file_open+0x23e/0x4a0 [ 1701.483220][ T8552] do_sys_openat2+0x113/0x200 [ 1701.488412][ T8552] __x64_sys_openat+0x138/0x170 [ 1701.493771][ T8552] do_syscall_64+0x174/0x580 [ 1701.498879][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.505284][ T8552] [ 1701.505284][ T8552] -> #3 (set->srcu){.+.+}-{0:0}: [ 1701.512460][ T8552] __synchronize_srcu+0xc9/0x2f0 [ 1701.517908][ T8552] elevator_switch+0x1e8/0x7b0 [ 1701.523181][ T8552] elevator_change+0x2fa/0x480 [ 1701.528448][ T8552] elevator_set_default+0x375/0x440 [ 1701.534150][ T8552] blk_register_queue+0x3f3/0x4e0 [ 1701.539681][ T8552] __add_disk+0x6cb/0xe30 [ 1701.544516][ T8552] add_disk_fwnode+0xfb/0x4b0 [ 1701.549698][ T8552] nbd_dev_add+0x733/0xb60 [ 1701.554619][ T8552] nbd_init+0x15f/0x1e0 [ 1701.559379][ T8552] do_one_initcall+0x250/0x870 [ 1701.564651][ T8552] do_initcall_level+0x10a/0x1a0 [ 1701.570169][ T8552] do_initcalls+0x59/0xa0 [ 1701.575013][ T8552] kernel_init_freeable+0x29d/0x3e0 [ 1701.580718][ T8552] kernel_init+0x1d/0x1d0 [ 1701.585552][ T8552] ret_from_fork+0x514/0xb70 [ 1701.590643][ T8552] ret_from_fork_asm+0x1a/0x30 [ 1701.595911][ T8552] [ 1701.595911][ T8552] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1701.603712][ T8552] __mutex_lock+0x19d/0x1590 [ 1701.608927][ T8552] elevator_change+0x1af/0x480 [ 1701.614222][ T8552] elevator_set_none+0xb5/0x140 [ 1701.619595][ T8552] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1701.625912][ T8552] nbd_start_device+0x189/0xb30 [ 1701.631278][ T8552] nbd_genl_connect+0x1597/0x1c10 [ 1701.636815][ T8552] genl_family_rcv_msg_doit+0x233/0x340 [ 1701.642937][ T8552] genl_rcv_msg+0x614/0x7a0 [ 1701.647953][ T8552] netlink_rcv_skb+0x226/0x4a0 [ 1701.653221][ T8552] genl_rcv+0x28/0x40 [ 1701.657708][ T8552] netlink_unicast+0x7bb/0x940 [ 1701.662984][ T8552] netlink_sendmsg+0x813/0xb40 [ 1701.668258][ T8552] ____sys_sendmsg+0x9b9/0xa20 [ 1701.673528][ T8552] ___sys_sendmsg+0x2a5/0x360 [ 1701.678709][ T8552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1701.684150][ T8552] do_syscall_64+0x174/0x580 [ 1701.689249][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.695651][ T8552] [ 1701.695651][ T8552] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1701.704242][ T8552] blk_alloc_queue+0x544/0x690 [ 1701.709512][ T8552] __blk_mq_alloc_disk+0x194/0x390 [ 1701.715131][ T8552] nbd_dev_add+0x494/0xb60 [ 1701.720054][ T8552] nbd_init+0x15f/0x1e0 [ 1701.724716][ T8552] do_one_initcall+0x250/0x870 [ 1701.729986][ T8552] do_initcall_level+0x10a/0x1a0 [ 1701.735433][ T8552] do_initcalls+0x59/0xa0 [ 1701.740279][ T8552] kernel_init_freeable+0x29d/0x3e0 [ 1701.746000][ T8552] kernel_init+0x1d/0x1d0 [ 1701.750851][ T8552] ret_from_fork+0x514/0xb70 [ 1701.755949][ T8552] ret_from_fork_asm+0x1a/0x30 [ 1701.761221][ T8552] [ 1701.761221][ T8552] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1701.768419][ T8552] __lock_acquire+0x1520/0x2cd0 [ 1701.773780][ T8552] lock_acquire+0x106/0x350 [ 1701.778786][ T8552] fs_reclaim_acquire+0x71/0x100 [ 1701.784238][ T8552] __kmalloc_cache_noprof+0x40/0x660 [ 1701.790034][ T8552] __ipv6_dev_mc_inc+0x447/0xa40 [ 1701.795479][ T8552] ipv6_add_dev+0xe36/0x13a0 [ 1701.800572][ T8552] ipv6_find_idev+0xb1/0x1c0 [ 1701.805666][ T8552] addrconf_init_auto_addrs+0x3fc/0xa50 [ 1701.811721][ T8552] addrconf_notify+0xb1e/0x1050 [ 1701.817080][ T8552] notifier_call_chain+0x1a5/0x3d0 [ 1701.822697][ T8552] netif_state_change+0x27d/0x3a0 [ 1701.828235][ T8552] __linkwatch_run_queue+0x52a/0x800 [ 1701.834029][ T8552] linkwatch_event+0x4c/0x60 [ 1701.839129][ T8552] process_scheduled_works+0xa8e/0x14e0 [ 1701.845181][ T8552] worker_thread+0xa47/0xfb0 [ 1701.850272][ T8552] kthread+0x389/0x470 [ 1701.854844][ T8552] ret_from_fork+0x514/0xb70 [ 1701.859936][ T8552] ret_from_fork_asm+0x1a/0x30 [ 1701.865204][ T8552] [ 1701.865204][ T8552] other info that might help us debug this: [ 1701.865204][ T8552] [ 1701.875407][ T8552] Chain exists of: [ 1701.875407][ T8552] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 1701.875407][ T8552] [ 1701.887991][ T8552] Possible unsafe locking scenario: [ 1701.887991][ T8552] [ 1701.895426][ T8552] CPU0 CPU1 [ 1701.900772][ T8552] ---- ---- [ 1701.906114][ T8552] lock(&idev->mc_lock); [ 1701.910424][ T8552] lock(sk_lock-AF_INET6); [ 1701.917448][ T8552] lock(&idev->mc_lock); [ 1701.924279][ T8552] lock(fs_reclaim); [ 1701.928246][ T8552] [ 1701.928246][ T8552] *** DEADLOCK *** [ 1701.928246][ T8552] [ 1701.936368][ T8552] 4 locks held by kworker/u8:16/8552: [ 1701.941716][ T8552] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1701.953363][ T8552] #1: ffffc900100d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1701.964326][ T8552] #2: ffffffff8fdc1500 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1701.973271][ T8552] #3: ffff88807c682530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 1701.982909][ T8552] [ 1701.982909][ T8552] stack backtrace: [ 1701.988784][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1701.988800][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1701.988811][ T8552] Workqueue: events_unbound linkwatch_event [ 1701.988828][ T8552] Call Trace: [ 1701.988836][ T8552] [ 1701.988844][ T8552] dump_stack_lvl+0xe8/0x150 [ 1701.988860][ T8552] print_circular_bug+0x2e1/0x300 [ 1701.988879][ T8552] check_noncircular+0x12e/0x150 [ 1701.988897][ T8552] __lock_acquire+0x1520/0x2cd0 [ 1701.988913][ T8552] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1701.988930][ T8552] ? rcu_is_watching+0x15/0xb0 [ 1701.988946][ T8552] ? trace_contention_end+0x3d/0x140 [ 1701.988963][ T8552] ? __mutex_lock+0x30f/0x1590 [ 1701.988980][ T8552] ? __kmalloc_cache_noprof+0x40/0x660 [ 1701.988999][ T8552] lock_acquire+0x106/0x350 [ 1701.989012][ T8552] ? __kmalloc_cache_noprof+0x40/0x660 [ 1701.989032][ T8552] ? __pfx___mutex_lock+0x10/0x10 [ 1701.989048][ T8552] fs_reclaim_acquire+0x71/0x100 [ 1701.989067][ T8552] ? __kmalloc_cache_noprof+0x40/0x660 [ 1701.989084][ T8552] __kmalloc_cache_noprof+0x40/0x660 [ 1701.989102][ T8552] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 1701.989118][ T8552] __ipv6_dev_mc_inc+0x447/0xa40 [ 1701.989133][ T8552] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 1701.989153][ T8552] ipv6_add_dev+0xe36/0x13a0 [ 1701.989170][ T8552] ipv6_find_idev+0xb1/0x1c0 [ 1701.989185][ T8552] addrconf_init_auto_addrs+0x3fc/0xa50 [ 1701.989204][ T8552] addrconf_notify+0xb1e/0x1050 [ 1701.989223][ T8552] notifier_call_chain+0x1a5/0x3d0 [ 1701.989242][ T8552] netif_state_change+0x27d/0x3a0 [ 1701.989261][ T8552] ? dev_activate+0xa8f/0x1150 [ 1701.989352][ T8552] ? __pfx_netif_state_change+0x10/0x10 [ 1701.989374][ T8552] __linkwatch_run_queue+0x52a/0x800 [ 1701.989393][ T8552] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1701.989410][ T8552] ? rcu_is_watching+0x15/0xb0 [ 1701.989425][ T8552] ? process_scheduled_works+0xa20/0x14e0 [ 1701.989438][ T8552] linkwatch_event+0x4c/0x60 [ 1701.989452][ T8552] process_scheduled_works+0xa8e/0x14e0 [ 1701.989475][ T8552] ? __pfx_process_scheduled_works+0x10/0x10 [ 1701.989491][ T8552] ? assign_work+0x3cf/0x5d0 [ 1701.989504][ T8552] worker_thread+0xa47/0xfb0 [ 1701.989527][ T8552] kthread+0x389/0x470 [ 1701.989543][ T8552] ? __pfx_worker_thread+0x10/0x10 [ 1701.989556][ T8552] ? __pfx_kthread+0x10/0x10 [ 1701.989572][ T8552] ret_from_fork+0x514/0xb70 [ 1701.989587][ T8552] ? __pfx_ret_from_fork+0x10/0x10 [ 1701.989600][ T8552] ? __switch_to+0xc89/0x1420 [ 1701.989618][ T8552] ? __pfx_kthread+0x10/0x10 [ 1701.989635][ T8552] ret_from_fork_asm+0x1a/0x30 [ 1701.989656][ T8552] [ 1702.280554][T27144] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.290953][T27144] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.312310][T27144] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0