last executing test programs: 4m57.822874736s ago: executing program 3 (id=7224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000300080000000800040002000000"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080", 0x9c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000008000000ac1e1f0105000d"], 0x20}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e86dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/164, 0xa4}], 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000300080000000800040002000000"], 0x40}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080", 0x9c}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000008000000ac1e1f0105000d"], 0x20}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e86dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/164, 0xa4}], 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) 4m57.734347349s ago: executing program 4 (id=7227): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e6000101000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000001c0)={@loopback, @empty, 0xfbff, "62113ef6ebde10a0db1716f38eb6528b4dcb950387def835e2a5558f634e6f25", 0x2, 0x8, 0x8001}, 0x3c) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a3100000000617267657400a4f700ad09f5c18fd0ec1e9d3db300480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699cbde02fa0c70000000000000000000000000000000008000240000054494d45520000000900020073797a3200"/153], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x60}}, 0x4) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 4m57.626477567s ago: executing program 3 (id=7230): r0 = socket$inet6(0xa, 0x80000, 0x2) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="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", 0xfa}, {&(0x7f0000000100)="6b5c311be4ddb02327ab2ebb0ddd824ecf0e023b9f296bd3ece8f97d6ab7b160b410584106f1366d296cc3581b47c0081235753f9baa1272c9a83b14d749613cd21412772ef52d47ce9e29dc70f8c2a052f654c8a81a22d4d81fb8b73b77e2ae673c0e40a9afd5cee095510b808ec31bab2624801a4703b36b5cac91acd908fd2383cea6d4ea6f3b1ac6720abbe7018c4f667ee3ff5e6f5c86e6cadd32df69a8a6bd61df87574b3cba2c55f0827d2921f0145acd95e109079f2349dc41dcac", 0xbf}], 0x2) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @local, 0x6ff}, 0x1c) (async) shutdown(r0, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000240), &(0x7f0000000280)=0x4) tee(r0, r0, 0x2, 0x6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80100, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000300)={0x57, 0x2}) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001640)={'ip6gre0\x00', &(0x7f00000015c0)={'syztnl2\x00', 0x0, 0x6, 0x7, 0x55, 0x9, 0x48, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, 0x700, 0x10, 0x1ff, 0x800}}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0xffffffde, 0xfffffffb, 0x5, 0x8000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x2}, 0x50) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00'}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x8, 0x7ff, 0x0, 0x2c00, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xd}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0x2, 0x7ba, 0xa, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x8}, 0x50) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a00)=@generic={&(0x7f00000019c0)='./file0\x00'}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@bloom_filter={0x1e, 0x9, 0x0, 0x2, 0x2, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x9}, 0x50) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xf, 0x22, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe43}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x9, 0x5, 0x9, 0x7, 0x1000}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @generic={0xd3, 0x6, 0x2, 0xfffb, 0x7}, @generic={0xe, 0x0, 0x9, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xae}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000580)='syzkaller\x00', 0x53, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x0, '\x00', r4, @fallback=0x23, r5, 0x8, &(0x7f00000016c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0x8, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001bc0)=[r6, r7, r8, r9, 0x1, r10, r11, r12, r13, r14], &(0x7f0000001c00)=[{0x2, 0x2, 0xf}, {0x1, 0x5, 0xf, 0xa}, {0x4, 0x5, 0xb}, {0x5, 0x4, 0xf, 0x9}, {0x5, 0x3, 0xe}], 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002fc0)={0x6, 0x15, &(0x7f0000001d40)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0xb7, 0x6, 0x8, 0x4, 0x1000}, @jmp={0x5, 0x0, 0x2, 0x2, 0x6, 0x18, 0x4}], &(0x7f0000001e00)='GPL\x00', 0x5, 0x1000, &(0x7f0000001e40)=""/4096, 0x40f00, 0x18, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000002e40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002e80)={0x3, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002ec0)=[r12, r10, r7, r6], &(0x7f0000002f00)=[{0x5, 0x3, 0xd, 0x3}, {0x4, 0x5, 0x4, 0x6}, {0x4, 0x4, 0xe}, {0x5, 0x5, 0x6, 0x6}, {0x2, 0x4, 0x1}, {0x3, 0x5, 0x9, 0x6}, {0x3, 0x4, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xb}, {0x1, 0x5, 0x10, 0x1}], 0x10, 0x344}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$smc(&(0x7f00000030c0), r3) sendmsg$SMC_PNETID_FLUSH(r15, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10800010}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0x8c, r16, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000003280)={&(0x7f0000003240)=""/57, 0x4000, 0x1800, 0x4, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000032c0)=@base={0x11, 0x200, 0x0, 0x16, 0x10804, r3, 0x6, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 4m57.507301179s ago: executing program 3 (id=7231): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@security={'security\x00', 0x64, 0x4, 0x280, 0x100000c, 0x150, 0x150, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x300, {0x0, 0x1000000000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x3}}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}, {0xffffffffffffffff, 0x6, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 4m57.426970848s ago: executing program 4 (id=7232): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8, 0x0, 0x0, 0x0, 0x4000000}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 4m57.408535315s ago: executing program 3 (id=7234): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0xf) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000000c0)=0x7fff, 0x4) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000002cc0)={@can, {0x0}, 0x0}, 0xa0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4m57.288786451s ago: executing program 4 (id=7237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x20c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1d0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b8, 0x1, [@m_simple={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x6, 0x80, 0x4adc}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x3, 0xf, 0xaf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x14c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x11d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x9, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x800, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0xf, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4024}, 0x14000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x128}, 0x8040) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$igmp(0x2, 0x3, 0x2) writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0", 0x37}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r10, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x4008000) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010025bd68f868bfa7aa24a6000008000400ff010000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x88, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9813}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6b34}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 4m54.050769567s ago: executing program 2 (id=7244): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept4(r4, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) accept4(r4, 0x0, &(0x7f0000000040), 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) (async) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async) 4m53.944505481s ago: executing program 2 (id=7246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xfffffff5}}, 0x68}}, 0x800) 4m53.943613763s ago: executing program 4 (id=7247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000200000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m53.722954512s ago: executing program 2 (id=7250): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r2, @ANYBLOB="080004"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2d, 0x7, 0x3, 0x53c6, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x10, 0x20, 0x80, 0x8}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000000600150005000000280016802400010001000000000000008900040000000000ff010000000000000000000000000001"], 0x4c}}, 0x0) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x2000001, 0x11, r1, 0x0) syz_emit_ethernet(0xf2, &(0x7f00000002c0)={@empty, @empty, @void, {@ipv4={0x800, @udp={{0x33, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @dev={0xac, 0x14, 0x14, 0x33}, {[@end, @timestamp={0x44, 0x8, 0xa8, 0x0, 0x6, [0x7]}, @rr={0x7, 0xf, 0x8a, [@multicast2, @private=0xa010100, @private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x4, [{@local}, {@multicast1, 0x2}, {@empty, 0x58000000}]}, @end, @cipso={0x86, 0x69, 0x1, [{0x6, 0x6, "42dad111"}, {0x6, 0xf, "a82293f6627b99bc0de7c1b568"}, {0x6, 0x11, "7bd742cd76f8c2e0db7043c6ec5167"}, {0x7, 0x5, "d17ca4"}, {0x2, 0x11, "f7d3a99ddf251329485be182bd1fd3"}, {0x7, 0x7, "c766ba4497"}, {0x7, 0x7, "6a70e4683f"}, {0x5, 0x5, '}i0'}, {0x5, 0xe, "7add9038a6851d02b5145303"}, {0x2, 0x6, "5d58e17c"}]}, @rr={0x7, 0x7, 0xb8, [@multicast1]}, @end, @generic={0x88, 0xf, "90a4044be19871613606dc8269"}]}}, {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15, 0xc3072, 0xffffffffffffffff, 0x0) 4m53.722695558s ago: executing program 4 (id=7251): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014350d00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000580)="3242703ecf43aa54fda9d7ade536", 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m53.603117531s ago: executing program 4 (id=7254): socket(0x2a, 0x1, 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r2, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 4m53.403042381s ago: executing program 2 (id=7256): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8001, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000020000000000000000008000400010000", 0x23) 4m53.289654936s ago: executing program 2 (id=7259): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x6040000, 0x0, 0x4040010}, 0x30) 4m51.973107244s ago: executing program 3 (id=7267): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x1000000000008, 0x8000000000, 0x1, 0x200, 0x1000000, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) close(0x3) 4m51.711111683s ago: executing program 3 (id=7269): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8001, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000020000000000000000008000400010000", 0x23) 4m51.679380577s ago: executing program 2 (id=7271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00040002800a000100000000000000cb1dfffa5af37a19f3e9d7b90000de49e2a6e8f5310ea00d055cc243e2e91bc22cab82c1d5e77f0e349233b1f9eb05f7d5"], 0x40}}, 0x0) 4m30.439417406s ago: executing program 32 (id=7265): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x5) socket$igmp(0x2, 0x3, 0x2) write(r3, &(0x7f0000003300)="ac", 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f00000001c0)="472b20dc3fb00ece94b804", 0xb}], 0x2) write(r2, 0x0, 0xfffffde8) r6 = socket$rxrpc(0x21, 0x2, 0xa) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x0) 4m30.390556357s ago: executing program 33 (id=7270): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000002d000100000000000000810008000c00", @ANYRES32=0x0, @ANYBLOB="0b000080976b640868603000080001800400f680"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xb}, {0x6, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000001a6b4263"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r8, @ANYRES64=0x77359400, @ANYRESHEX=r4, @ANYRES64=r5, @ANYRES32=r6, @ANYRES8=r7, @ANYBLOB="ebfaac251d27be4feb267e49b64dddfff75aebacb8ae68d4f74bea2e4c91565915f6e057460c62ccc318872f5f7d5ed58535f84917fb80d0956d6d57197479105c002c6132d5ac5fb560d996f290d2ed4a357e9f36c82072c0a05c7dd367b9acf0a75ff27b109181e87041f63b069bd91bd6f839a361079f5fd0c7556cfba77cad4adf7b6f541777892abf0a9df5f62c784edb50967269e14625d6c3ec39120dd0a482cbf70e10584adc97351af1cc3571aa0c288b2fdabd97ff5e6abb0ead02675ad76e9e4b7f199c5598f57c732ca56e2946f7e0dfb5952fa840ed02b6331df30185cee830482ca41883851600de6b", @ANYRES16=r11], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x914) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @remote}, 0xc) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000380)=[{0x4, 0x8, 0xff, 0x1}, {0x4, 0x5, 0x7, 0x6}, {0x200, 0x7f, 0x5, 0x5}, {0x7fff, 0x9, 0x6, 0x1ff}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) socket(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 4m30.309683129s ago: executing program 34 (id=7271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00040002800a000100000000000000cb1dfffa5af37a19f3e9d7b90000de49e2a6e8f5310ea00d055cc243e2e91bc22cab82c1d5e77f0e349233b1f9eb05f7d5"], 0x40}}, 0x0) 4m30.225990614s ago: executing program 35 (id=7269): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8001, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000020000000000000000008000400010000", 0x23) 4m30.080938695s ago: executing program 36 (id=7254): socket(0x2a, 0x1, 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r2, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 4m11.382497064s ago: executing program 8 (id=7284): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000002c0)="2db63928e377876cf3d12b24", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (fail_nth: 54) 4m10.924874528s ago: executing program 8 (id=7285): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 4m10.705852587s ago: executing program 8 (id=7287): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a001e00014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 4m10.558163149s ago: executing program 8 (id=7288): r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x34, 0x400, 0x70bd2a, 0x25dfdbfb, {0x11}, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="38855f36fbaca9d2da5e451e93b3fdbeab82f297e8d7c3325ee2ac53fe9377b7f51eb17abbace5c73650c9ec7abdb0a69a269ec945623c4b9c2521e832c9e57721bb813e60930cb99a60ecd854a6089a65de61d6738ff0b62982750715ce01a9abdb1de5682154c372ded543aa383d8234e7d5c64dc859d212c2efd37215c904a0a7358bd2c29769456786bd610bd3dccdfd388138c076761b3143", @typed={0x8, 0xfa, 0x0, 0x0, @uid=r2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x3b8, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_RATES={0x35c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0xc, 0x6d, 0x3, 0x9, 0x5, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x36, 0x48, 0xc, 0x36, 0x6, 0x18, 0x5, 0x30, 0x3, 0x2, 0x2, 0xe, 0x9, 0xc, 0x30, 0xc, 0x36, 0x2, 0x36, 0x3, 0x6, 0x0, 0x48, 0xb, 0x9, 0x3, 0xc, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x1, 0x6c, 0x60, 0x5, 0x18, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8000, 0x80, 0x9, 0x6, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x35, 0x4, 0x1ff, 0x6, 0x2, 0xf7ad]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x14, 0x3, 0x6, 0x4, 0x0, 0xffff, 0x9, 0x2]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x1, 0x4}, {}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0x4}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x6}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x6}, {0x4, 0x6}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6, 0x8001, 0xa5aa, 0x499, 0x8, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0xa}, {0x2, 0x5}, {0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x2}, {0x6}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0x4}, {0x7, 0x5}, {0x2}, {0x5, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x3}, {0x4, 0x2}, {}, {0x1, 0x6}, {0x6, 0x5}, {0x1}, {0x4, 0x9}, {0x2, 0x8}, {0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x6}, {0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x4, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x0, 0x1, 0x1, 0x7a01, 0xd5ec, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x60, 0xe8f159ef5b3cc2f3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc86, 0x8, 0x9, 0xffff, 0x3, 0xa8a, 0xe8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xfffc, 0x2, 0x200, 0xeaf, 0x7, 0x8]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x8, 0x0, 0xf45f, 0xff, 0x9849, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x55, 0x2, 0x5, 0x9, 0x8000, 0x401, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0xd, 0x2, 0xcd, 0x9, 0x7f, 0x800]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x36, 0x6c, 0x6c, 0xc, 0x1b, 0x30, 0x18, 0x24, 0x3, 0x36, 0xb, 0x9, 0x2, 0x6c, 0xc, 0x12, 0x1, 0x18, 0x4, 0x5, 0x9]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x6}, {0x7, 0x4}, {0x4, 0x2}, {0x3}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x2, 0x6}, {}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x9, 0x4e, 0x2, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x9, 0x12, 0x16, 0x5, 0x5, 0x1, 0x4, 0x6c, 0x2, 0x7a, 0x3, 0x3, 0x1b, 0x4, 0x9, 0x1, 0x60, 0xe49129d603b248da, 0x30, 0x5, 0x36, 0x12, 0x12, 0x30, 0x1e, 0x30]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x10, 0xda9, 0x8001, 0x401, 0x8000, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x0, 0x9, 0x3, 0x2, 0x12, 0x36, 0x12, 0x24, 0x15, 0x4, 0x60, 0x48, 0x0, 0x6c, 0x5, 0x60, 0x24, 0x1b, 0xb, 0x73, 0x9, 0xc, 0x3, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd38, 0xa, 0x1, 0x2, 0x7, 0x7ff, 0x6c5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x0, 0xd4, 0x3, 0xfff9, 0x9, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x0, 0xf336, 0x100, 0x3, 0x40, 0xbb]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x0, 0xb, 0x9, 0xfff7, 0x4, 0x5]}}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7fa6}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x884}, 0x48000) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r6) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x20000041) socketpair(0x21, 0x2, 0x80000001, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa8, 0x9, 0x6, 0x101, 0x70bd28, 0x25dfdbfb, {0x4}, [@nested={0x10, 0xcc, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x7}]}, @typed={0x8, 0x130, 0x0, 0x0, @uid=r2}, @generic="0df221e9a50e1691ff2be5a8a35fa443cdf3f05be78c911e166903a1", @generic="2a425a63b5565d9ec04ad50d169b1b42f0cd4d8cc77c73b8845d558e6dacbf45d142efc1f3191c1d859866aab6f209073ef6a80021ad7c814f139745e0f79dd657ebd6517be86716a601b1729f52cfdb6ff57c4f0847dca345f76a2a05"]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000081}, 0x80c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x1, 0x0, r11, 0x5, '\x00', r1, r8, 0x1, 0x5, 0x3}, 0x50) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x81000000, 0x4c}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0x20000010) syz_genetlink_get_family_id$fou(&(0x7f0000000dc0), r8) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r3) sendmsg$IPVS_CMD_FLUSH(r11, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x148, r12, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4e}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xce}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x82}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbc2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfe6}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r13, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x841) ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000001200)="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") r14 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r14}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c844}, 0x40010) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r15, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x84, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "16b14b2926dab518e670fc808707f5466ac7e68b44bc19d77be5e46f832a69c6"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "96b14984fc4f4ca29f35be0079a897074f23bdd442a53ea185d768c3e1e70954"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x200048c0}, 0x40800) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001600)='veth0_macvtap\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@bridge_delvlan={0x40, 0x71, 0x200, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 4m9.282133056s ago: executing program 8 (id=7291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd86, &(0x7f0000003380)={@random="9d3e485beb27", @random="78a4e8c9ab61", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd50, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xadd, {0x0, 0x6, "6b329f", 0x0, 0x3a, 0x0, @empty, @remote, [@hopopts={0x0, 0x19b, '\x00', [@pad1, @generic={0x7, 0xcd4, "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"}]}, @dstopts={0x3e, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0x1}, @generic={0x7}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xd5}]}, @routing={0x3c, 0x0, 0x2, 0x0, 0x780d0000}]}}}}}}}, 0x0) 4m8.882379086s ago: executing program 8 (id=7295): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) unshare(0x20000600) unshare(0x80) 3m53.644133101s ago: executing program 37 (id=7295): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) unshare(0x20000600) unshare(0x80) 2m43.222897276s ago: executing program 0 (id=8055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000300)) 2m42.855196694s ago: executing program 0 (id=8059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m42.564104605s ago: executing program 0 (id=8064): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x804) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000080), 0x0, 0x60, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast1}, &(0x7f0000000180)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup(r8, &(0x7f0000000080)='syz1\x00', 0x1ff) r9 = openat$cgroup(r8, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipmr_newroute={0x60, 0x18, 0x2, 0x70bd29, 0x25dfdbfc, {0x80, 0x10, 0x0, 0xd3, 0xff, 0x1, 0xfd, 0x6}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x2d42, 0x0, 0x9, r6}}, @RTA_SPORT={0x6, 0x1c, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_IIF={0x8, 0x3, r7}, @RTA_PREFSRC={0x8, 0x7, @local}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x60}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r12, 0x4010942a, &(0x7f0000000080)={0x0, 0x3ff}) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r11) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m42.111851775s ago: executing program 0 (id=8071): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x3000000, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 2m41.979378306s ago: executing program 0 (id=8075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2m41.816582438s ago: executing program 0 (id=8079): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) unshare(0x20000600) unshare(0x80) 2m26.573167832s ago: executing program 38 (id=8079): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) unshare(0x20000600) unshare(0x80) 4.210238569s ago: executing program 1 (id=9519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="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", 0x1000, 0x400400c9, &(0x7f0000001000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000001040)="edbebf0d94c47ac1ad8e78d7928fab04f71e99ecab45b78525c6855a3061b1e4b7b0f32ba52f4dc89a1f6daf30858924dee0d02441f5e676aa0a0d69f1f782d1d409f321320635e1664d6d66f84f088f32", 0x51) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000001300)={&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001180)=""/12, 0xc}, {&(0x7f00000011c0)=""/163, 0xa3}], 0x2, &(0x7f00000012c0)}, 0x100) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001340)) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001480)={0x0, r3}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@volatile={0x7}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000013c0)=""/82, 0x34, 0x52, 0x1, 0x7, 0x10000, @value=r4}, 0x28) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001500)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x110, 0x210, 0x320, 0x320, 0x320, 0x4, &(0x7f00000014c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0xc, {0xea4a}}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x20}, 0xff, 0x0, 0x6, 0x7, {@empty, {[0xff, 0x286d59528dc9986d, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x3b, 0x2, 0x5, 0x7, 0x8, 0x8, 'batadv0\x00', 'veth1_to_hsr\x00', {0xff}, {0x388c0b902c853a63}, 0x0, 0x6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000001980)={0x4fc, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000009140)={0x1, 0xfffffffffffffff8, 0x9}) r6 = accept$unix(r1, &(0x7f0000009180), &(0x7f0000009200)=0x6e) recvmsg$unix(r6, &(0x7f000000a880)={&(0x7f0000009240)=@abs, 0x6e, &(0x7f000000a780)=[{&(0x7f00000092c0)=""/33, 0x21}, {&(0x7f0000009300)=""/42, 0x2a}, {&(0x7f0000009340)=""/25, 0x19}, {&(0x7f0000009380)=""/178, 0xb2}, {&(0x7f0000009440)=""/250, 0xfa}, {&(0x7f0000009540)=""/175, 0xaf}, {&(0x7f0000009600)=""/4096, 0x1000}, {&(0x7f000000a600)=""/206, 0xce}, {&(0x7f000000a700)=""/118, 0x76}], 0x9, &(0x7f000000a840)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x40}, 0x40) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f000000a900)={0x3, 0x10, [0x101, 0x5, 0x950f, 0x3], &(0x7f000000a8c0)=[0x0, 0x0]}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f000000a940)={0xc, 0x9, 0x1}) getsockname$ax25(0xffffffffffffffff, &(0x7f000000a980)={{0x3, @rose}, [@remote, @bcast, @rose, @null, @bcast, @null, @default]}, &(0x7f000000aa00)=0x48) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f000000aa40)=0xa, 0x4) sendmsg$unix(r6, &(0x7f000000ac00)={&(0x7f000000aa80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000ab80)=[{&(0x7f000000ab00)="815d442731f9b8b60dc70fab33cfa333bcad789e70074db77cda2f52bce2e255eb7e4c19d6d0f74ac630d2c142967203e3da70cc1d4bb04f429c1db8891c21f2a423822d649ebbc4a0280e6ac35ec8fb2d690c910194230ef0b76427bda74f2e1555fd8337ba0850fc3a96869c258f", 0x6f}], 0x1, &(0x7f000000abc0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x38, 0x40804}, 0x3) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f000000ac40)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f000000ac80)=r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f000000ad00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r10, &(0x7f000000aec0)={&(0x7f000000acc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000ae80)={&(0x7f000000ad40)={0x108, r11, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x180}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf78}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xefce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}]}, 0x108}}, 0x40000) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f000000af00), 0x10540, 0x0) read$rfkill(r12, &(0x7f000000af40), 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f000000af80)={0xc}, 0x8) 3.826670978s ago: executing program 5 (id=9524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "db9f49b2609ceb2ef48b2730155717d8"}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x1f0, r4, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x5}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffb}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4058010}, 0x20008800) 3.277108232s ago: executing program 1 (id=9533): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket(0x2, 0x80805, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 3.206789053s ago: executing program 5 (id=9535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 3.033508043s ago: executing program 9 (id=9538): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x43}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x68}}, 0x8055) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x80) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000340)={0x8, 0x18, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0xb8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4db59e37}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "c3e451b3c574324b2ec8a7358d36b0dbd931a1de731d65e1690197590608df46a00d383f9cb5"}]}, @NFT_MSG_DELFLOWTABLE={0x12c, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x118, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x284}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000810) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000700)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e22, 0x3, @empty, 0xff}}, [0x2, 0x7fffffff, 0x8, 0x401, 0x7fbb, 0xd3ad, 0x8, 0x1, 0x80000000, 0xc5, 0x7ff, 0x2, 0x1, 0x1, 0x5]}, &(0x7f0000000840)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000880)={r6, @in6={{0xa, 0x4e21, 0xe1e, @rand_addr=' \x01\x00', 0x6}}, 0x0, 0x7}, &(0x7f0000000940)=0x90) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000980)=""/187, &(0x7f0000000a40)=0xbb) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000a80)={r7}, &(0x7f0000000ac0)=0x8) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = socket(0x25, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x6c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x9, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x880) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000d40)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r11, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f0000001180)={{'\x00', 0x1}, {0xf}, 0x130, 0x0, 0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)="1e576cbab48de96e078952cfe66649244b8a5f87ac69daffce3d4f31c1f983ec08dad713cda907f64bddbd53041c18b6d0de4ab6839b1c48b74e1e5b7fb50309ef5f90761617afd219849e3669812f067ed073eaf7961e096fd32c3b8bc6d6b7d86f6c0cef09c6aa9cd9f9ccab57a54e552a0bb63fc015becd4a8c438b62909342ffb3c33d94197053f441b792034e64318f2b2b68e33874e4bdf66d3d8497f3fce9f038c7d9429101bfc2b7867ee2e6c77900bf8173f1a3d7d450ab01bc581715a5d656106d3a7717b063a8576be35c5c64a9931ba2e68c141f4f230f7354397a6d587fa1783674ff9985d903ed6f910ce403189e6d462951936ecb991dd5498c8420a1e4ff6619e5e1e0da29497ebebec5c5f38d951538318d0e22c5853e4c8ce08ea57b1823244fbf374336034ce03bd407b0ca144e70cc4f951061decf66bcc6b06307c3a980ec47f1633e46a97cc88047a54cc5ef033f60b19ded", 0x15d, 0x0, &(0x7f00000010c0)={0x2, 0x66, {0x1, 0xc, 0x59, "cfdf53047d1d282f5eeb49ed3ab5fa977c7741baec7e69ab59408366462fa1e49cac8ff8257cb32aa60663e78200ccd48aa4feca16db1405a4eec1eb8fed7977140100f1c4f6fd802a7aaa1a69111656809b88e56ab69ffd68"}, 0x3c, "ca323e101f3e8f23b8588c2a9677793659c1de42423f2ea79d95682f8ef6b8abe70ed394d25805d49353c8ffae3a2ef6b5ad77de1a97aa0aa4d45333"}, 0xae}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000001200)) close(r3) close(r3) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r8) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r12, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x10}, @void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044090}, 0x20040800) 2.771042498s ago: executing program 9 (id=9539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0xfffffff5, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) 2.733290887s ago: executing program 5 (id=9542): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @mcast1, 0x9}}, 0x0, 0x0, 0x31, 0x0, "803c790e68512c1af8264e8185596013882dd3d57833cd55a0c861d90b56916174e4a1bf1b3790058676271dd1c7418caa9211ec7a6bc9aed03849050dcf39aa1f378d258a20714a54c7de3a11a9b506"}, 0xd8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @random="5c35fdcaed09", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0xd, [@private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x100000001}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000180009002dbd7000feffffdf1c140000fea0d976"], 0x1c}}, 0x4800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d932bbd700000000000010000000800030003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.699841274s ago: executing program 1 (id=9543): r0 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a001e00014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 2.630726246s ago: executing program 9 (id=9544): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1e, @multicast2}}, 0x5a4, 0xff}, &(0x7f0000000180)=0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ppoll(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)={[0x6]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x20048081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3, 0x8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x600000000000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 2.526740359s ago: executing program 7 (id=9547): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500280000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 2.521602901s ago: executing program 1 (id=9548): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000003f00005b670018000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000014000100000000000000fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf000000000000000000000000a92d8bb70312fc00dc4b019eb585f3"], 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000007c0)={0x5, &(0x7f0000000700)=[{0x646b3d1, 0x44, &(0x7f0000000440)="662448174f5d6feb24643fbe00b88005d96ff77f4fe6e0bb60dd51b192e1b212537a2c309bfd11c28c7b35890448e1976941d642dc4b813e73b32623e190d9c75bfea9be", 0x0, 0x1}, {0x9, 0x2, &(0x7f00000004c0)="e28c"}, {0x9, 0x24, &(0x7f0000000540)="5eb16b438ae149490f02feca8cbbc7e60c7835d599dfa38d3d4a8292f590f0e1753b8e17", 0x1}, {0x2, 0xea, &(0x7f0000000580)="7de4d6226d8c53f43efa4178998cfe884b9ea1776de68eb5ce9a09c69e53d9ab0fb4c007fda37bfa0556fe8cfe4ca913c00b71e0084f6f76130b484d19d9cd94c5620ed5a657e0a17084f7dba19c0879b3ef1d4c21f950a354cb6eaef439c9564e15c0948affc65c230c5927c05d40fd0165f1794cf73011fea8aefe9f4feceb0364b033f1c1fa0ab4d2f47b112466988333189a269559faed18bab2a52613ac5af7677de008815020257d5b22105911c88f0dab0d9ef52812c95a59811040d6f600aa3f935f440b3bfdc745ed7e0b4244295d4b30983b6c11682b52f7e245717c35aa4b9d2d4e436bc2", 0x0, 0x1}, {0x7f, 0x11, &(0x7f00000006c0)="671f0050e52acd932f01a00e48b582b331", 0x1}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x81, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x7d07, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r5) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00ddde87072ceddfd2000a0000000000", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[], 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r9, 0xa404}, {r10, 0x21}], 0x2, 0xfffffffe) close(0x4) 2.377294962s ago: executing program 7 (id=9550): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002d00)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x1, 0x10) (async, rerun: 32) socket(0x10, 0x3, 0x0) (rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000040), 0x4) (async, rerun: 64) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) (rerun: 64) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r11 = socket(0x1, 0x803, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r13, @ANYBLOB="1400020000000000000000000000e7"], 0x34}}, 0x0) 2.142454683s ago: executing program 7 (id=9553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x18, 0x80000, 0x81, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0xe, 0x0, 0x4, 0x5, 0x1, 0x800, 0x80000000, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x4, 0x732, 0xffffa627, 0xfff, 0xd74}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000380)={r3, 0xc}, &(0x7f0000000440)=0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bfd007df4a000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) close(0x4) 1.792566202s ago: executing program 5 (id=9555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x41000000, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 1.735012713s ago: executing program 6 (id=9556): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8001, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000004000000800040001000000", 0x24) 1.651361107s ago: executing program 6 (id=9557): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {0x2000}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.566359558s ago: executing program 1 (id=9558): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000008c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt(r0, 0x1, 0x8, &(0x7f00000008c0), 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x8000b, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'vlan1\x00'}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000400)="edd9bbafce2b58b2c3fb9a0958ab8b8fa122769cf20ff8a13ed1ad707109b82f75f14545354d8f64a593ddfe53a1528deaf40be78aed77dade234e8a6510fdbcefe19b41d61371559a10027d7473b1f6fbb125e0c157bdf7189c3550ae14a929b63a4e316b640bf1f4f6", 0x6a}, {&(0x7f0000000180)="f402d2623e31f6829bea0094d720664cae2c8b737f0b85e4965471e1fb70f7b8e8b1c07f6c8617c37b9bfe31634e8cb1ced01ba5", 0x34}, {&(0x7f0000000780)="96af6bdda7c849d56b3516f118bc36b75f7f3e9b6f1c3e4fe33bd0364cb70c2bfdaac6e4c68b99b42aa835aa78a250cf2158f224447d19f16a831641ce71f40249f103180c6303af4e374b51f6", 0x4d}, {&(0x7f0000000480)="cf00610347c9f235e43cdbdbeb647fc802ae1d0011acd1111e421d77cea2c190a685c39b8a42a3cf29b0659449eb8b2f46f13e", 0x33}, {&(0x7f0000000680)="867d75be191eb85e9cc79cdbfe0063c8428da611a00f86abfc7cba4af52173a4aa9bb5e5f2fb761a868eb0574b7d6a8cc91aaf7c4127dbf3b72e65d1e78395f774807cf9fa2726afebc03f04d0cf01572c475f8b77c866811125abc7c0a7783b8b26614e541c77e53a211c5d1e4eb662f704b87d2d0350c1d0555398940f6d55e236b6d73bbaef230c3f667c3b70341d149191", 0x93}, {&(0x7f00000018c0)="def24901682bfffbc24e78de95fe406f7f9c8667f11b4c551c1c9c8d3a76b4521bcdc675be36bfddde3f6d7342cc2a676d7fd35cade5954d2875fcb25cd5b56512c0f761229e7129b3d67f7d0f7a15b4d266bfd664be45a785e02ef3a37caa9f4e59541e3b9f21ebf1db8c6805beabb8e1530028661b13fcaf589d891ba72fbe5567b0f5bb955b1507c68d54a9083727a8e89ce3c63bc2be7903a359f090ed884514066ed9c95821ae15a2f286fe188950e9b3958d800e38c78e93c3c40a95906c", 0xc1}, {&(0x7f0000000b40)="e8bb12a14c9b24190568e61d05248809d303727ae20000000000000004c867b72a07aa60c27a3b938287a6f8a8d2d3ef18764127f4b4e15a0d16e100000000000000", 0x42}, {&(0x7f0000001a80)="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", 0x1061}, {&(0x7f0000000800)="1e67474b795e770aeca639b6894bfe165ed78bc1b4993eb83e47ae56157f25e04c158856beefbbeb8a4ea574b576047f149ac8eb1069d726b0b19c7eb5a0fed7b978fcc43cf7e3d2d361cc205665e5677e16879de9c1e6314eaef1442a63af301b081db879746c08d1bed2212569c6f77962a7f11c32091876a701d4a12ae28a552488fea36493e376dd72765353f164e4502ca2d9791efce52d33455cc5e2b5e326994bd5934d0a0ca4d44417ef0707a2c7e75ae395cace4ff253b34e", 0xbd}, {&(0x7f00000009c0)="cb99658d3cc181b82a6e3ca2ad2a0f42b83287a90f0d3021386c63befacc544eac1c62b6e5e154fde239f4663fbc9298fdfa74a1e63ccce12ca13ad014aa53129b4e3903418f0237ce92e3506d2055ceb30ca7c1f3adaf5c0a859a3766f793094b29f27c4c95d0e518378e44cfdba08ad633bbf4a06447b162c7f50ee9d56db333e4c3ca5876c30262bdd9af995020f5f5511bdbbe37697458b78458480804774ab9eaf2e9fe83823f566a1c4acf0fa2ce80eb810a5f400ff5652047fc3e624d", 0xc0}], 0xa}}], 0x1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.51064738s ago: executing program 9 (id=9559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2, 0x0, 0x10000, @value=r4}, 0x28) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x49, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0xa, 0x2, 0x73) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2, 0x0, 0x10000, @value=r4}, 0x28) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r5}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x49, &(0x7f0000000040), 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) 1.431026345s ago: executing program 6 (id=9560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1000000, 0x7fffffff}, 0x0, 0x0) 1.397103642s ago: executing program 9 (id=9561): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x80000001}, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x1, 0x407}, 0xf) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, r1}) socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffffffffffffff5a, &(0x7f00000000c0)}, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) 1.203914754s ago: executing program 7 (id=9562): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x44}}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x0, 0x4, 0x9, 0x8}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="850000008c000000760000000000000027000000000000009500000000000000034687c555414f938fe7d29a9d75a9a172f6d31ffa8ab4ad94e8ddb1e0f46e98fef0b13c16b6d7e42fd929acebcd1fa72f46fcf857b16280763713d199000663a6b01a00e8200000cec2f82d66bcb94d634bbdefe2a9b49e4fed986a58ebb29e1608c42c7bd55470dba6a1"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="5c00000013006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000000010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r7) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000fe7010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[], 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 882.731473ms ago: executing program 5 (id=9563): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) (async) accept(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r3, 0x0, 0x0, 0x80800) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="919f31e60f56df74b694d3cc94ed8834859e582836", 0x15}, {&(0x7f00000001c0)="4c1d5e", 0x3}, {&(0x7f0000000380)="b4228bf21275e95864bd837e4998ddfc714cfc8f320b738c", 0x18}], 0x3}], 0x1, 0x10) 654.460157ms ago: executing program 1 (id=9564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x1, &(0x7f00000009c0)="16", 0x9, 0x1, 0x8, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) r9 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x18) sendmsg$nl_generic(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14003d499ead8158387fffffffffffffff000000"], 0x14}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40080) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000eaa5001200000400000000f0474600", @ANYRESOCT=r6, @ANYRES64=r0, @ANYBLOB="00001000008cd26fed6c2c4a44cfdc00f6c9546bd61d8c1c9088f50141306e64dde697194a7cdb55a6e8c1d4b7aaed6f9cde1c8b6200e0d38c3efefd553d2c96cb49ecc92c219dc262704642dfbdad30d3a02687631a122545a53b34ea1d5437000d480e99e1cfa48fd76a1e8f77ff9b08de83e04fcd2f4287d5762080b3dd3801000000967266cd8021345a983887d6a7e0d29d826fc36024fc9ba7aa52bbf1b6425093ba3a152bad58f59257efadfea2eebd4abf08dc0172e8574cf5a7616847d9bf9166497119bfa7e509f4f0d5784752e4909e56a02873d8a848940e01529428aabd6e6dfdc5672024089bb79d4cce9df2eac7f1953e11424fdbf685a17e9d867b9276345956b4f1af6b4ced76fb48f062f79c1399cb56875162325b36c5b86018994adf5d21ba007c663315803015be0d6237951805ff1303c43a791b55d3a492a65dbc448c4d18a0e31d4a1d992fcaad16979846ad51a98378f8eca239992796f52aa83dea066601db1d2b978d94a6f90bfc8c371e990b0427a24ba46c3e5b758f1e7f3212446382d6a4362204c5c456cd8c42"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r10}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x9, 0x10, 0x0, 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f00000008c0)=""/85, 0x41100, 0x17, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000980)=[r10, r10, r10, r10, r10, 0xffffffffffffffff, r10, r2, 0x1]}, 0x94) 569.821164ms ago: executing program 6 (id=9565): socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8c4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000002700)="7182159d05118b143e133b2e78e4d4c045ed85e3bf8266604cd6e63dff2ba768781b2a9aef2643cc37dcb20f067677ff34eb0768325725cbd27c73637073a6590f000c5a4a16f384e20a8aa898428b50611b5d6603eed9e6000000000000008c05c1e3445f3b93cb8c241951a0d6e588f3840ccc3011bffa0124c9e6e6fe24cd819d3e42f1d7b2a68cc5abc301cd88219a6353fb4ec0ad2ca6f72ca7ed6de945219ae17d3fd2b8299b5aa61a5bda580404b29ea384950fdf6a4f63071733a2b01d32a508d2d6fa0dc261e638bf1968ae2ad756740b5408f64ec288ae00"/231, 0xe7}, {&(0x7f0000000300)="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", 0xca3}], 0x5}, 0x0) recvmsg$unix(r11, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2}, 0x40012220) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xfffffffffffffdbc, r13, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 434.709083ms ago: executing program 9 (id=9566): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000008c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt(r0, 0x1, 0x8, &(0x7f00000008c0), 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x8000b, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'vlan1\x00'}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000400)="edd9bbafce2b58b2c3fb9a0958ab8b8fa122769cf20ff8a13ed1ad707109b82f75f14545354d8f64a593ddfe53a1528deaf40be78aed77dade234e8a6510fdbcefe19b41d61371559a10027d7473b1f6fbb125e0c157bdf7189c3550ae14a929b63a4e316b640bf1f4f6", 0x6a}, {&(0x7f0000000180)="f402d2623e31f6829bea0094d720664cae2c8b737f0b85e4965471e1fb70f7b8e8b1c07f6c8617c37b9bfe31634e8cb1ced01ba5", 0x34}, {&(0x7f0000000780)="96af6bdda7c849d56b3516f118bc36b75f7f3e9b6f1c3e4fe33bd0364cb70c2bfdaac6e4c68b99b42aa835aa78a250cf2158f224447d19f16a831641ce71f40249f103180c6303af4e374b51f6", 0x4d}, {&(0x7f0000000480)="cf00610347c9f235e43cdbdbeb647fc802ae1d0011acd1111e421d77cea2c190a685c39b8a42a3cf29b0659449eb8b2f46f13e", 0x33}, {&(0x7f0000000680)="867d75be191eb85e9cc79cdbfe0063c8428da611a00f86abfc7cba4af52173a4aa9bb5e5f2fb761a868eb0574b7d6a8cc91aaf7c4127dbf3b72e65d1e78395f774807cf9fa2726afebc03f04d0cf01572c475f8b77c866811125abc7c0a7783b8b26614e541c77e53a211c5d1e4eb662f704b87d2d0350c1d0555398940f6d55e236b6d73bbaef230c3f667c3b70341d149191", 0x93}, {&(0x7f00000018c0)="def24901682bfffbc24e78de95fe406f7f9c8667f11b4c551c1c9c8d3a76b4521bcdc675be36bfddde3f6d7342cc2a676d7fd35cade5954d2875fcb25cd5b56512c0f761229e7129b3d67f7d0f7a15b4d266bfd664be45a785e02ef3a37caa9f4e59541e3b9f21ebf1db8c6805beabb8e1530028661b13fcaf589d891ba72fbe5567b0f5bb955b1507c68d54a9083727a8e89ce3c63bc2be7903a359f090ed884514066ed9c95821ae15a2f286fe188950e9b3958d800e38c78e93c3c40a95906c", 0xc1}, {&(0x7f0000000b40)="e8bb12a14c9b24190568e61d05248809d303727ae20000000000000004c867b72a07aa60c27a3b938287a6f8a8d2d3ef18764127f4b4e15a0d16e100000000000000", 0x42}, {&(0x7f0000001a80)="ddc6d73e3eab598a1387ee5354cc72bb968babd33eb79e5e60105e3047b5bbf2c5adf1d8921f1cfa85e8f5f49b72f8ed827c6908f14a74f71cd71644f58b99a66b37c1e121455e241e0f969c503eacdb8dff57cce19aca12f443ea25aba572e3045db97df853295b20f1d3be1190d16219bc0ff144bffae818d7ffb9a2f8a6b11adf1e4ddfb66034aa59f2facbf0a69bd8b9f13ccd7519c4d82facdf3fc177ed2fe214343863531744057bc5e8d7c0f80e1143929cbc4e350b1cddde195bb9b4bcd56e7189f39b5b24d31b0a4ddffec4426a851c0c4ea617606d2b31c2be84e96c1b454cc14939bc1e2787d2922b5f7be08aabc8a8678e5622b25271b38afba11e07d09ae1d61c01dab047f3233c9d70ba786eb3c42fccfcbba9f6e5429c9a31ffab0996a4a636ab007b11c7e9f7166cc6d58d3a49a44f5a85de2c7725436608299d1c89d07b0f3eb8c42331c82cd81a9d1c5d3cfc604922b4507b662aea453e5605307855a0b94309083f2135238339cb0c23b8c4f8bca5fe733cad110348186919732a48c92cee55b75aa0a03d85762ae527708935bf9aa9690a69877b5fa80d836e33d22f74b7711c26b35d78e94c8e55204755acbc17dbc16f699ea3868e2467c4078d36c6a6e196ac7f008ff7abc4b577ad4337630d64dd0291fc92243312d2cf2bafea4cf9b8b2fa1626cea60fd7e4f5236f0fd39fcd1be376b42d6c358f52e045d8aae403c9d3a94d22d96abdf9dcffe8371626cb1584dafd2e726e08d4c66963a9e91101f1bd7b582473931ccce9ab9e6dc50d83592d078447f57cfb021a466e35b99b0743369eabe3ac5a2a84c59c4dec1f07c00d88e0c9fc625cb5e1755b9ce855ea5ca9a2a3cf339da6dbc901d86f30f3ff1a54673987d7f01548e7bde5b5d8e1f2418df468d8200af1cb95d2216575bdc149c66cfb502c3ae3f0aeebc749b6e859dda940055aa83456eca7654f50cd9d4268fa5b41d259cf5cedaa48d2189b7f08dd09af7f81f97005a04b345808c6881ede7ee04f4e78a741128ae3025763a36b0e6757d7ce82a22efded030e9ca0c9ae2529659239d79dbcd6f1ec182d87c32618a549e1cc4e75267b47d3e47c0127dff01fa7b2c2a8db8d2692674e88dcd2724b9e318e28dc2c37b07359e275b15000716e1cef3e16a85dff3711356de8a7812caae1ff99afa7715d86aee2efd6c40fbeba95a85235df4e7932545f7d230820e271547b040599d2172d502820cbb452a6069f88e66ccdcea587d2977d16679f0095652f237eee5cdb1d75f72e59273b7820ba6c8d1b86121a69b15bf2e084fc790ee99dc47c0455800d0b28c3a9ff0a0e2d24a63045ed72acf1d7dea5f087e14b713a7d76f5dc0927facd00971158240751455c918542896eb9be5ea1d2f3767495d981f08bfe1d6bf7b2538c8c223e157771c05f49e14a3c805b36e1cb148020415018efb2c1e94a2b12346dda44db02d914b2806fd4044ae20cda72b3c8cec086cc27b352a08751db0a1491c03fe0d629a1c38abb0060498342849260fe4ab8246932150dbdb835e32d35a57cbb474e478e57b4c71cdc00af67f3bb99bbc7d99164e3cb2ba09c4756313d97944ad436664b52aa7673a2a7dd96b3d109ddb6446381f8ac5affea9a8f3371054223eaf92d9dea7618fbe95ff664e42de8f52f7fafbf66503976b097df05fe4711e7450901eeb39a26d9ba36f668a81019945cb3b1d1f4dacdebc93badca470f99f0a135b2abc154670a24f0e4e082d878039ab2fbb91d7d9b760d1e40db24d45e933c3de09129ad2b6feecb57bffb0974e600e7557dcb6994a0cdf2a1d0ac047e0e7d7b7b832272be0eaf9492fe2ad0ede221e5b15996abf075754f7e3b15a1fad2a64ca1d61a9f5a93b31135de6178352c4e482d0170452de9fe4d4c91df255b0e23741eb6a30ab2c993aa21fb5abc69a3d3ec97295ba529ed9724d393e4f5e279abe78144278ba7b9c62eafa4ba196906967268f5742ed7ae241601c00c6522094f246053bf0f55b7fe21acc5a059acc34f95da2d37991d8958700dd954bbf1f8b3e91457129b2f87f0e3eb3f83225032cab65e7df2b834f9f0e7861e8874c56b3a62533ab760a79b90510e45475d7638f1369ae2cf4043c3e64266dc0edc00b47cba6d67463903ae9076d09ccd04595a0d4b267e55a6b280f0fcd77f82a4097ef52d0cfcad1157064dbfca7f759d8b5f59efb6f9fa174ec736a96193953b2812e9732a0eeb1bed7ae42e0edddce79571463c2622c7a69d78ffabc3886aee9b7342c6b9ee61b92678257fa98373aa3adc2e65c436a656cb9c13bebc5669350145a5ad0049a9ca7a2e377a30ae0697bdb03932b3a9f7792c2e0ba239c4357a594addbf142c802f2f37f7a75886526c646cc2748e9368cccc0dede24ee16a1c15f412972432e2feb5fa8a07d70094ed76b8d2454ef7233d3ccbcf461428d6176c25683002b028692cd6a1ce7e39f092517baf9ee44be6126091362084804a8a8060321ed48458e73b2d22dca74a09f7d12f332b79d3b780afb446707bcfe4deec9e640f39da187c7f6cb6e66580909b386532a7ff01d77bfc2042fb89118e0e8d2c940c9b774e612273b81b89e46c0e3fc2c4e52c488b8791fa99240932b13a7bd2ae26cd50cff2168c43566abf92dfd59c5b98448557f55af46ac74f5587f1b8b858aae8e6a965657a31a6bde7265618222a560796f59940f07db6b54550006964fdda09ce48510cdf3f40809b3c6aa7a7920ac18471ad192d85443937acad7a87e0e02b319e1b955fb80fdea99ed4bfe9e0aac07fd80beb4d1e5e9bbbf6766622a054897583caf702fa7eeace42401d0398d12576dfff1751eca28e8a9f129ba1a010f1a45b3cca5eb3e3e524d9f74ed0f50c4c0b1e7671939d30b6fb05faf0851947838b6fe7079f9731b0fff13510b655c28c2c934c7570543c05eef4550773c886e1b6627e178d715040d16e05477e632fee6ab7912508b61ef798c06cc2bc7d314d72818e35227169c1d7370b95891dd5a422f6827206891bd6ec639b5ecbc96894f297aefba7b33447c4f2125112a70ea4e2fef72c9b24933952234f6802965564f2b2e213241e8c93912de572afa023fcd174e6c90b8a03c9eb89d8dee96e4cf9223e98253fac2ec7ade2e689a9eca417d18769b8a91e746547df9f196496e1f4694a533a23c74f0ca153b426a05453fd80eeaff803a4334220499b8bfac3acfda5a60e370ff94529e0f6037e5e152ea45a70274ab74102c55040efeb60671a3f2e0ad471fc9b75304ae97cb3c2ca683fa6c9abb2d7e6ac5a87165e5a79e65773b495bf23163ed276f58046d0b611acd2c8c8c2104dadf6d08b5bee66799d37b34752f3be48e55d690090929cf6e7f70405f231437c92ed39a5b623aaf99857afbd9e75ee29edee9c66879c019172c8696b6d93cf3da23d45d6d3803fe61e4285f244216be5b6ae77a56163122de8c29eef7943ddad4928bf45cca8b720d66d73ccc38a730d62f4c25bca5f743981b2d25117988d9006fc834f9e9b9ee154d48bc036ede4e94fdb5b8c9ef8c244bb9e78e9038a43b7d97c955ca2bd19247b5e2146d2fb8f374324ce7f8bf0431e0584306f53bf3cbc53337dd58d718a5e3e405f4276068602c61fac632400d8cc0b2799173af521905a373127c1509e531654ddc270c1adac55d07a9cc83462f24a0cce52b4ac1110b9cc5c16081be771c703502d059221c430931aaa83aabe5b86ea43d2bec4865b789b596ffa8017b63e6b8274ecfad1dbad43ec2bdac7d9ffbc2583420a14e54266f2dc90bc8e0fca18547fccea8421418ee30fb3db1affa2150dad3d836a292103ae473812241f8f5f3534207eaf654e160afff6506132d5f67b906a4e3691fc2938e126f7282a3ea116a46900134040c44dc17662f0ae46f0f8b78ab76388097d892e7fdb07fa589a1f902acc17ae62446c0ec341146cb948782f962d9b071a3b0d0f585869d9b26affa66e0779fee9ea1be060bb171b77035511e7ac2eb0a5772c678c033e656fadff91e36a7419e9df66d884dce8f0f3a614d4cb7268c452df98f1c338532f259f47b27461ebbb0b56e3ac53198679fc9f6b5dc1554f4962c7f5e35b996f0b2676c5194da62fc022d1a9e543ebae42e11e7d114c1f9ed1b78708ca02893540c0572fda19022d2b2415dce85cd68d452176ea1d488efbd2cf375f6f6ba141949ddac955ff3042b20e7f6daed7caaf1a0786643b2751c12bf83b4fafb619fa5aca2ca5382fdf3d607eebc59f68c3f9ba9c070b8211fdcf51e27e092394f6a1d6cd8875ebfcab23483fb7f42f8fe2ee35e31b380f0a6ea9c4f88a03b2db6cf9354327bb44f220a0a8690ffd69dab7cda35b643c50be07940905e56e6a7ffc5af9704c8f1548d49118ff80d3b80584c682200d25e9946dae2cf26675c37b41f50c6b51c85aa6c702a00877ae187db47c7135a9cfb706349da70f3ed3b93ac5a4e5b83dffaed3c8dc5210827359075c723b164e0fdd5343c8bf1a5902d1a6938a015935fb40820dcd4b278801a59237ec278bcd25828ec6143ee5f072f2f078befe0d24c71822dbb0c003625209f215609d1a871e9b13c3b79e2baad8dca957e165597209d82722229dd93c277b8a7df3fa16efafe84244c580c671c8555bf7d3c3d2f187d76d961e11dfc68dbdffaff644ebdb36b36e66d4444cedfe2d41b3017d94194f588db9d4f8db028af9023c9ece2bbeb8259229b29dd2a2f0246103e10b447108a651d247d5cd53a7e5cc6faaa0e9690419cdab5d9a9589ae52940d7f1f1c3f9d50b5ac1c10715f7538058faeaf54e3805e8742ce1cdb15870670e68e2edc34503ebe7f3387922a1f347452e11ce90e4ee65a027881c93ce9005d46c1e1e816dff248c85db29f813286ad8f837da86d0ac7b2ebd11f2ac079c5dee66611c7d37f9ae37a821f94c89cc60c77f2bb9d7982886d72251387f945ada362208613e0a06b424283d96fd4901bc8579ac384d68455f7c6f4d924e1062a04bfbeb35246c9c9ea706fea95a259252ce93df439bc0ecf656869ed493e35f95f4043931fb53035e4b019e3c3b99cd5f7f1ce0904f85477aa4fe5cc332bb24013fd9768fad0f7e805d0893088974159e75abd7d134ff31aa321232a54d7773bdc6e4678295f5400c4f1f39d518ab83e348242623a554fa8be5e70149b741150a4fec4f1d71028737f28eb372cd97f61bd3d89e99219850f465388386d00959e30cf4b5168782397bbeb1b78019cf5ef8423c9e1ee0eff7460f6f54f181445adc8a39befce70c8b08eb58bda96d8d8f77a5a579bbb968a85ce8121915d6881d78bb15dabf89c27555149c43595fb534c0a159d37d422bdf4af0a029e3271a537af5258f3f880170763c4111b6126869962f1e7498077c8578fffae54da07954a9debe74a1901d531aa16286c4f9b48280ebfdd5e1a3d5044f99b4f448e9c96452dd956277b0dd17c99ccecbe085ba63cbe06f8ae57aab93a2ccb504fa151ed9d51bb1d8f6f9b2661b1c13202f1e29476ebd2b232535f13c3669935408a50b7faf23600d77b89addc6192574c16256e148d43cdf0b09036bb9d31c5bdda1dfde0649e49ce5a9bbfd6e18e29568c14e5620edb6f35ba6c91f1421985b101b0ee89fc0342e5218c5eb5207c0766af8d4d4a3c7653efd34fce50f35dd266f01ddf49dd088933d00cd549050109b3bc7d9cf6296ccd46b947838158c9ca8e727efbb093cbf6864db41505bd0cbca12064f89a80f61d98a3dffafb719085e3238b28b19f92e33bd36a4b14c19c0e07bb2b06a5acf39d65e36352e5cca3ec936275db18f986cc3bb7cb4e0b0881dd284eef091b241de6bc756a8e29ca2aa5776dc801a14254c924e61e8c40bdc169fe165d4057", 0x1061}, {&(0x7f0000000800)="1e67474b795e770aeca639b6894bfe165ed78bc1b4993eb83e47ae56157f25e04c158856beefbbeb8a4ea574b576047f149ac8eb1069d726b0b19c7eb5a0fed7b978fcc43cf7e3d2d361cc205665e5677e16879de9c1e6314eaef1442a63af301b081db879746c08d1bed2212569c6f77962a7f11c32091876a701d4a12ae28a552488fea36493e376dd72765353f164e4502ca2d9791efce52d33455cc5e2b5e326994bd5934d0a0ca4d44417ef0707a2c7e75ae395cace4ff253b34e", 0xbd}, {&(0x7f00000009c0)="cb99658d3cc181b82a6e3ca2ad2a0f42b83287a90f0d3021386c63befacc544eac1c62b6e5e154fde239f4663fbc9298fdfa74a1e63ccce12ca13ad014aa53129b4e3903418f0237ce92e3506d2055ceb30ca7c1f3adaf5c0a859a3766f793094b29f27c4c95d0e518378e44cfdba08ad633bbf4a06447b162c7f50ee9d56db333e4c3ca5876c30262bdd9af995020f5f5511bdbbe37697458b78458480804774ab9eaf2e9fe83823f566a1c4acf0fa2ce80eb810a5f400ff5652047fc3e624d", 0xc0}], 0xa}}], 0x1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 409.844116ms ago: executing program 6 (id=9567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 352.345032ms ago: executing program 6 (id=9568): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c"], 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@can={0x1d, r4}, 0x80, 0x0}, 0x12000800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x10, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400000010000400f5000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 292.720476ms ago: executing program 7 (id=9569): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000005e000000000000ff17000000020000002900000037"], 0x30}, 0xc4) 130.781976ms ago: executing program 7 (id=9570): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="140000001600", 0x6}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x68040200) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r4, 0x3f38e000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000170000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000680)='tlb_flush\x00', r5, 0x0, 0x6b8}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@can={{0x4, 0x1}, 0x2, 0x0, 0x0, 0x0, "84f470d9b9180f33"}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x20) shutdown(r6, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) 0s ago: executing program 5 (id=9571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 1047.122025][T32354] netlink: 'syz.7.8731': attribute type 29 has an invalid length. [ 1047.149603][T32354] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8731'. [ 1047.195884][T32354] netlink: 'syz.7.8731': attribute type 2 has an invalid length. [ 1047.224989][T32354] netlink: 'syz.7.8731': attribute type 3 has an invalid length. [ 1047.247233][T32354] netlink: 15 bytes leftover after parsing attributes in process `syz.7.8731'. [ 1047.273044][T32346] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8729'. [ 1047.313541][T32346] tc_dump_action: action bad kind [ 1047.354069][T32361] xt_cluster: node mask cannot exceed total number of nodes [ 1047.585985][T32370] tun0: tun_chr_ioctl cmd 1074025675 [ 1047.591640][T32370] tun0: persist enabled [ 1047.705015][T32378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8739'. [ 1047.963625][T32385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8743'. [ 1048.026332][T32385] netlink: 'syz.5.8743': attribute type 30 has an invalid length. [ 1048.145732][T32397] FAULT_INJECTION: forcing a failure. [ 1048.145732][T32397] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.180548][T32397] CPU: 1 UID: 0 PID: 32397 Comm: syz.5.8748 Not tainted syzkaller #0 PREEMPT(full) [ 1048.180579][T32397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1048.180594][T32397] Call Trace: [ 1048.180603][T32397] [ 1048.180614][T32397] dump_stack_lvl+0x189/0x250 [ 1048.180651][T32397] ? __pfx____ratelimit+0x10/0x10 [ 1048.180677][T32397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.180708][T32397] ? __pfx__printk+0x10/0x10 [ 1048.180750][T32397] should_fail_ex+0x414/0x560 [ 1048.180790][T32397] should_failslab+0xa8/0x100 [ 1048.180816][T32397] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1048.180847][T32397] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1048.180885][T32397] ? sctp_add_bind_addr+0x8c/0x370 [ 1048.180910][T32397] ? sctp_add_bind_addr+0xb0/0x370 [ 1048.180943][T32397] sctp_add_bind_addr+0x8c/0x370 [ 1048.180976][T32397] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1048.181009][T32397] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1048.181036][T32397] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1048.181067][T32397] ? sctp_v6_is_any+0x64/0x80 [ 1048.181097][T32397] ? sctp_copy_one_addr+0x93/0x360 [ 1048.181129][T32397] sctp_bind_addr_copy+0xb3/0x3c0 [ 1048.181158][T32397] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1048.181187][T32397] sctp_connect_new_asoc+0x2e0/0x690 [ 1048.181225][T32397] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1048.181256][T32397] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1048.181288][T32397] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1048.181313][T32397] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1048.181344][T32397] sctp_sendmsg+0x155c/0x2810 [ 1048.181391][T32397] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1048.181429][T32397] ? aa_sk_perm+0x81e/0x950 [ 1048.181467][T32397] ? __pfx_aa_sk_perm+0x10/0x10 [ 1048.181501][T32397] ? sock_rps_record_flow+0x19/0x410 [ 1048.181538][T32397] ? inet_sendmsg+0x2f4/0x370 [ 1048.181577][T32397] __sock_sendmsg+0x19c/0x270 [ 1048.181610][T32397] __sys_sendto+0x3bd/0x520 [ 1048.181647][T32397] ? __pfx___sys_sendto+0x10/0x10 [ 1048.181678][T32397] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1048.181721][T32397] ? __fget_files+0x3a0/0x420 [ 1048.181755][T32397] ? ksys_write+0x22a/0x250 [ 1048.181789][T32397] ? __pfx_ksys_write+0x10/0x10 [ 1048.181824][T32397] __x64_sys_sendto+0xde/0x100 [ 1048.181862][T32397] do_syscall_64+0xfa/0xfa0 [ 1048.181895][T32397] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.181922][T32397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.181943][T32397] ? clear_bhb_loop+0x60/0xb0 [ 1048.181971][T32397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.181993][T32397] RIP: 0033:0x7f196db8efc9 [ 1048.182012][T32397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.182032][T32397] RSP: 002b:00007f196ea5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1048.182055][T32397] RAX: ffffffffffffffda RBX: 00007f196dde5fa0 RCX: 00007f196db8efc9 [ 1048.182072][T32397] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1048.182086][T32397] RBP: 00007f196ea5c090 R08: 0000200000000080 R09: 000000000000001c [ 1048.182101][T32397] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1048.182115][T32397] R13: 00007f196dde6038 R14: 00007f196dde5fa0 R15: 00007ffd9b551408 [ 1048.182153][T32397] [ 1048.965744][T32431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8761'. [ 1048.982653][T32431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8761'. [ 1048.998629][T32434] netlink: get zone limit has 4 unknown bytes [ 1049.116642][T32442] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8764'. [ 1049.131625][T32444] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1049.147898][T32442] netlink: 'syz.7.8764': attribute type 1 has an invalid length. [ 1049.155897][T32442] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8764'. [ 1049.273921][T32451] vxcan1 speed is unknown, defaulting to 1000 [ 1049.320476][T32456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8769'. [ 1050.041048][T32485] 8021q: VLANs not supported on syzkaller1 [ 1050.150811][T32487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8779'. [ 1050.185414][T32487] tipc: Enabling of bearer rejected, failed to enable media [ 1050.856574][T32502] netlink: 'syz.1.8785': attribute type 2 has an invalid length. [ 1050.928994][T32502] 9: entered promiscuous mode [ 1051.534796][T32532] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8796'. [ 1051.565849][T32532] vlan2: entered promiscuous mode [ 1051.571754][T32532] vlan0: entered promiscuous mode [ 1051.713922][T32529] syzkaller0: entered promiscuous mode [ 1051.719660][T32529] syzkaller0: entered allmulticast mode [ 1051.853096][T32536] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8797'. [ 1051.873199][T32536] IPVS: Error connecting to the multicast addr [ 1052.426279][T32550] vxcan1 speed is unknown, defaulting to 1000 [ 1052.587784][T32555] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 1052.611941][T32555] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 1052.762616][T32561] netlink: 'syz.1.8806': attribute type 13 has an invalid length. [ 1052.817267][T32561] gretap0: refused to change device tx_queue_len [ 1052.848671][T32561] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1053.849301][T32587] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.945181][T32587] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.082176][T32587] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.172842][T32587] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.366771][ T1169] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.422315][ T1169] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.453479][ T1169] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.526996][ T1337] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.930771][T32621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8823'. [ 1055.326546][T32645] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8831'. [ 1055.341501][T32642] netlink: 'syz.1.8830': attribute type 1 has an invalid length. [ 1055.355434][T32648] FAULT_INJECTION: forcing a failure. [ 1055.355434][T32648] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.396333][T32648] CPU: 0 UID: 0 PID: 32648 Comm: syz.5.8832 Not tainted syzkaller #0 PREEMPT(full) [ 1055.396365][T32648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1055.396381][T32648] Call Trace: [ 1055.396390][T32648] [ 1055.396400][T32648] dump_stack_lvl+0x189/0x250 [ 1055.396436][T32648] ? __pfx____ratelimit+0x10/0x10 [ 1055.396462][T32648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.396494][T32648] ? __pfx__printk+0x10/0x10 [ 1055.396534][T32648] should_fail_ex+0x414/0x560 [ 1055.396574][T32648] should_failslab+0xa8/0x100 [ 1055.396599][T32648] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1055.396630][T32648] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1055.396658][T32648] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1055.396683][T32648] ? sctp_add_bind_addr+0x8c/0x370 [ 1055.396717][T32648] sctp_add_bind_addr+0x8c/0x370 [ 1055.396750][T32648] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1055.396782][T32648] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1055.396810][T32648] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1055.396840][T32648] ? sctp_v6_is_any+0x64/0x80 [ 1055.396871][T32648] ? sctp_copy_one_addr+0x93/0x360 [ 1055.396902][T32648] sctp_bind_addr_copy+0xb3/0x3c0 [ 1055.396931][T32648] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1055.396959][T32648] sctp_connect_new_asoc+0x2e0/0x690 [ 1055.396996][T32648] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1055.397027][T32648] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1055.397060][T32648] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1055.397084][T32648] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1055.397114][T32648] sctp_sendmsg+0x155c/0x2810 [ 1055.397167][T32648] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1055.397203][T32648] ? aa_sk_perm+0x81e/0x950 [ 1055.397240][T32648] ? __pfx_aa_sk_perm+0x10/0x10 [ 1055.397274][T32648] ? sock_rps_record_flow+0x19/0x410 [ 1055.397312][T32648] ? inet_sendmsg+0x2f4/0x370 [ 1055.397348][T32648] __sock_sendmsg+0x19c/0x270 [ 1055.397382][T32648] __sys_sendto+0x3bd/0x520 [ 1055.397419][T32648] ? __pfx___sys_sendto+0x10/0x10 [ 1055.397450][T32648] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1055.397495][T32648] ? __fget_files+0x3a0/0x420 [ 1055.397530][T32648] ? ksys_write+0x22a/0x250 [ 1055.397565][T32648] ? __pfx_ksys_write+0x10/0x10 [ 1055.397607][T32648] __x64_sys_sendto+0xde/0x100 [ 1055.397646][T32648] do_syscall_64+0xfa/0xfa0 [ 1055.397671][T32648] ? lockdep_hardirqs_on+0x9c/0x150 [ 1055.397698][T32648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.397720][T32648] ? clear_bhb_loop+0x60/0xb0 [ 1055.397747][T32648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.397769][T32648] RIP: 0033:0x7f196db8efc9 [ 1055.397789][T32648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.397808][T32648] RSP: 002b:00007f196ea5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1055.397833][T32648] RAX: ffffffffffffffda RBX: 00007f196dde5fa0 RCX: 00007f196db8efc9 [ 1055.397849][T32648] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1055.397863][T32648] RBP: 00007f196ea5c090 R08: 00002000000000c0 R09: 000000000000001c [ 1055.397879][T32648] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000002 [ 1055.397892][T32648] R13: 00007f196dde6038 R14: 00007f196dde5fa0 R15: 00007ffd9b551408 [ 1055.397930][T32648] [ 1055.437439][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8830'. [ 1055.755113][T32658] vxcan1 speed is unknown, defaulting to 1000 [ 1056.215963][T32673] veth0: entered promiscuous mode [ 1056.229820][T32663] vxcan1 speed is unknown, defaulting to 1000 [ 1056.238747][T32673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8840'. [ 1056.304465][T32674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8840'. [ 1056.304489][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8840'. [ 1056.511645][T32674] veth0 (unregistering): left promiscuous mode [ 1056.810521][T32680] netlink: 280 bytes leftover after parsing attributes in process `syz.1.8842'. [ 1057.030152][T32683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8843'. [ 1057.239236][T32686] gtp0: entered promiscuous mode [ 1057.244790][T32686] gtp0: entered allmulticast mode [ 1057.260066][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.591774][T32695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.821482][T32702] tipc: Enabled bearer , priority 0 [ 1057.831656][T32702] syzkaller0: entered promiscuous mode [ 1057.837734][T32702] syzkaller0: entered allmulticast mode [ 1057.878334][T32702] tipc: Resetting bearer [ 1057.889518][T32701] tipc: Resetting bearer [ 1057.941547][T32701] tipc: Disabling bearer [ 1058.136434][T32712] netlink: 'syz.1.8853': attribute type 12 has an invalid length. [ 1058.167803][T32712] netlink: 'syz.1.8853': attribute type 29 has an invalid length. [ 1058.175994][T32712] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8853'. [ 1058.186871][T32712] netlink: 'syz.1.8853': attribute type 2 has an invalid length. [ 1058.197749][T32712] netlink: 23 bytes leftover after parsing attributes in process `syz.1.8853'. [ 1058.434867][T32723] netlink: 'syz.1.8857': attribute type 2 has an invalid length. [ 1058.458067][T32726] lo: entered allmulticast mode [ 1058.661312][T32729] vxcan1 speed is unknown, defaulting to 1000 [ 1058.698212][T32732] FAULT_INJECTION: forcing a failure. [ 1058.698212][T32732] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.786935][T32732] CPU: 0 UID: 0 PID: 32732 Comm: syz.1.8860 Not tainted syzkaller #0 PREEMPT(full) [ 1058.786969][T32732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1058.786985][T32732] Call Trace: [ 1058.786994][T32732] [ 1058.787003][T32732] dump_stack_lvl+0x189/0x250 [ 1058.787040][T32732] ? __pfx____ratelimit+0x10/0x10 [ 1058.787074][T32732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.787105][T32732] ? __pfx__printk+0x10/0x10 [ 1058.787143][T32732] should_fail_ex+0x414/0x560 [ 1058.787181][T32732] should_failslab+0xa8/0x100 [ 1058.787205][T32732] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1058.787236][T32732] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1058.787261][T32732] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1058.787286][T32732] ? sctp_add_bind_addr+0x8c/0x370 [ 1058.787320][T32732] sctp_add_bind_addr+0x8c/0x370 [ 1058.787353][T32732] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1058.787385][T32732] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1058.787412][T32732] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1058.787443][T32732] ? sctp_v6_is_any+0x64/0x80 [ 1058.787473][T32732] ? sctp_copy_one_addr+0x93/0x360 [ 1058.787505][T32732] sctp_bind_addr_copy+0xb3/0x3c0 [ 1058.787534][T32732] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1058.787563][T32732] sctp_connect_new_asoc+0x2e0/0x690 [ 1058.787601][T32732] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1058.787633][T32732] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1058.787667][T32732] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1058.787691][T32732] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1058.787721][T32732] sctp_sendmsg+0x155c/0x2810 [ 1058.787769][T32732] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1058.787806][T32732] ? aa_sk_perm+0x81e/0x950 [ 1058.787843][T32732] ? __pfx_aa_sk_perm+0x10/0x10 [ 1058.787877][T32732] ? sock_rps_record_flow+0x19/0x410 [ 1058.787916][T32732] ? inet_sendmsg+0x2f4/0x370 [ 1058.787953][T32732] __sock_sendmsg+0x19c/0x270 [ 1058.787986][T32732] __sys_sendto+0x3bd/0x520 [ 1058.788023][T32732] ? __pfx___sys_sendto+0x10/0x10 [ 1058.788064][T32732] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1058.788109][T32732] ? __fget_files+0x3a0/0x420 [ 1058.788144][T32732] ? ksys_write+0x22a/0x250 [ 1058.788178][T32732] ? __pfx_ksys_write+0x10/0x10 [ 1058.788214][T32732] __x64_sys_sendto+0xde/0x100 [ 1058.788252][T32732] do_syscall_64+0xfa/0xfa0 [ 1058.788278][T32732] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.788306][T32732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.788328][T32732] ? clear_bhb_loop+0x60/0xb0 [ 1058.788356][T32732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.788378][T32732] RIP: 0033:0x7fcbfcb8efc9 [ 1058.788398][T32732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.788418][T32732] RSP: 002b:00007fcbfd9bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1058.788442][T32732] RAX: ffffffffffffffda RBX: 00007fcbfcde5fa0 RCX: 00007fcbfcb8efc9 [ 1058.788459][T32732] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1058.788479][T32732] RBP: 00007fcbfd9bc090 R08: 0000200000000080 R09: 000000000000001c [ 1058.788495][T32732] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1058.788508][T32732] R13: 00007fcbfcde6038 R14: 00007fcbfcde5fa0 R15: 00007ffd871875b8 [ 1058.788546][T32732] [ 1059.157341][T32715] lo: left allmulticast mode [ 1059.493414][T32740] netlink: 'syz.7.8862': attribute type 21 has an invalid length. [ 1060.523276][ T305] vxcan1 speed is unknown, defaulting to 1000 [ 1060.787979][ T318] __nla_validate_parse: 5 callbacks suppressed [ 1060.788003][ T318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8877'. [ 1060.858311][ T318] team0: entered promiscuous mode [ 1060.884590][ T318] team_slave_0: entered promiscuous mode [ 1060.913511][ T318] team_slave_1: entered promiscuous mode [ 1060.943750][ T318] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1060.971511][ T318] team0: left promiscuous mode [ 1060.976365][ T318] team_slave_0: left promiscuous mode [ 1060.991976][ T318] team_slave_1: left promiscuous mode [ 1061.567897][ T344] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 1061.613158][ T347] FAULT_INJECTION: forcing a failure. [ 1061.613158][ T347] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.650273][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz.6.8887 Not tainted syzkaller #0 PREEMPT(full) [ 1061.650303][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1061.650315][ T347] Call Trace: [ 1061.650323][ T347] [ 1061.650331][ T347] dump_stack_lvl+0x189/0x250 [ 1061.650360][ T347] ? __pfx____ratelimit+0x10/0x10 [ 1061.650382][ T347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1061.650416][ T347] ? __pfx__printk+0x10/0x10 [ 1061.650448][ T347] should_fail_ex+0x414/0x560 [ 1061.650481][ T347] should_failslab+0xa8/0x100 [ 1061.650502][ T347] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1061.650528][ T347] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1061.650551][ T347] ? sctp_add_bind_addr+0x8c/0x370 [ 1061.650579][ T347] sctp_add_bind_addr+0x8c/0x370 [ 1061.650605][ T347] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1061.650631][ T347] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1061.650654][ T347] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1061.650679][ T347] ? sctp_v6_is_any+0x64/0x80 [ 1061.650704][ T347] ? sctp_copy_one_addr+0x93/0x360 [ 1061.650729][ T347] sctp_bind_addr_copy+0xb3/0x3c0 [ 1061.650752][ T347] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1061.650776][ T347] sctp_connect_new_asoc+0x2e0/0x690 [ 1061.650806][ T347] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1061.650832][ T347] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1061.650859][ T347] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1061.650879][ T347] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1061.650903][ T347] sctp_sendmsg+0x155c/0x2810 [ 1061.650941][ T347] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1061.650970][ T347] ? aa_sk_perm+0x81e/0x950 [ 1061.650995][ T347] ? __lock_acquire+0xab9/0xd20 [ 1061.651016][ T347] ? __pfx_aa_sk_perm+0x10/0x10 [ 1061.651044][ T347] ? sock_rps_record_flow+0x19/0x410 [ 1061.651074][ T347] ? inet_sendmsg+0x2f4/0x370 [ 1061.651104][ T347] __sock_sendmsg+0x19c/0x270 [ 1061.651131][ T347] ____sys_sendmsg+0x52d/0x830 [ 1061.651154][ T347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.651181][ T347] ? import_iovec+0x74/0xa0 [ 1061.651207][ T347] ___sys_sendmsg+0x21f/0x2a0 [ 1061.651227][ T347] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.651278][ T347] ? __fget_files+0x2a/0x420 [ 1061.651295][ T347] ? __fget_files+0x3a0/0x420 [ 1061.651322][ T347] __sys_sendmmsg+0x227/0x430 [ 1061.651345][ T347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1061.651372][ T347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1061.651434][ T347] ? ksys_write+0x22a/0x250 [ 1061.651463][ T347] ? __pfx_ksys_write+0x10/0x10 [ 1061.651493][ T347] __x64_sys_sendmmsg+0xa0/0xc0 [ 1061.651513][ T347] do_syscall_64+0xfa/0xfa0 [ 1061.651535][ T347] ? lockdep_hardirqs_on+0x9c/0x150 [ 1061.651556][ T347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.651575][ T347] ? clear_bhb_loop+0x60/0xb0 [ 1061.651597][ T347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.651615][ T347] RIP: 0033:0x7f5f81d8efc9 [ 1061.651632][ T347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.651648][ T347] RSP: 002b:00007f5f82b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1061.651668][ T347] RAX: ffffffffffffffda RBX: 00007f5f81fe5fa0 RCX: 00007f5f81d8efc9 [ 1061.651682][ T347] RDX: 0000000000000001 RSI: 0000200000002800 RDI: 0000000000000005 [ 1061.651694][ T347] RBP: 00007f5f82b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.651706][ T347] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 1061.651717][ T347] R13: 00007f5f81fe6038 R14: 00007f5f81fe5fa0 R15: 00007ffcc4489da8 [ 1061.651747][ T347] [ 1062.135320][ T358] FAULT_INJECTION: forcing a failure. [ 1062.135320][ T358] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.150574][ T358] CPU: 0 UID: 0 PID: 358 Comm: syz.6.8892 Not tainted syzkaller #0 PREEMPT(full) [ 1062.150606][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1062.150621][ T358] Call Trace: [ 1062.150630][ T358] [ 1062.150641][ T358] dump_stack_lvl+0x189/0x250 [ 1062.150676][ T358] ? __pfx____ratelimit+0x10/0x10 [ 1062.150703][ T358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.150741][ T358] ? __pfx__printk+0x10/0x10 [ 1062.150772][ T358] ? __pfx___might_resched+0x10/0x10 [ 1062.150795][ T358] ? fs_reclaim_acquire+0x7d/0x100 [ 1062.150835][ T358] should_fail_ex+0x414/0x560 [ 1062.150873][ T358] should_failslab+0xa8/0x100 [ 1062.150898][ T358] __kvmalloc_node_noprof+0x158/0x910 [ 1062.150933][ T358] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1062.150966][ T358] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1062.151003][ T358] __nf_unregister_net_hook+0x4f6/0x700 [ 1062.151036][ T358] nf_unregister_net_hooks+0xcb/0x140 [ 1062.151063][ T358] nf_ct_netns_put+0x36d/0x520 [ 1062.151084][ T358] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 1062.151121][ T358] nft_connlimit_destroy+0x5a/0xb0 [ 1062.151142][ T358] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 1062.151177][ T358] nft_set_elem_expr_setup+0x5e7/0x830 [ 1062.151224][ T358] nf_tables_newsetelem+0x24b1/0x4330 [ 1062.151303][ T358] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1062.151329][ T358] ? __lock_acquire+0xab9/0xd20 [ 1062.151397][ T358] ? nla_validate_array+0xfc/0x260 [ 1062.151460][ T358] ? __pfx___nla_validate_parse+0x10/0x10 [ 1062.151490][ T358] ? __lock_acquire+0xab9/0xd20 [ 1062.151525][ T358] ? nfnl_pernet+0x23/0x240 [ 1062.151566][ T358] ? __nla_parse+0x40/0x60 [ 1062.151595][ T358] nfnetlink_rcv+0x11d9/0x2590 [ 1062.151668][ T358] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1062.151726][ T358] ? ref_tracker_free+0x63a/0x7d0 [ 1062.151783][ T358] ? __netlink_deliver_tap+0x807/0x850 [ 1062.151817][ T358] ? netlink_deliver_tap+0x2e/0x1b0 [ 1062.151872][ T358] netlink_unicast+0x82f/0x9e0 [ 1062.151914][ T358] ? __pfx_netlink_unicast+0x10/0x10 [ 1062.151948][ T358] ? netlink_sendmsg+0x642/0xb30 [ 1062.151966][ T358] ? skb_put+0x11b/0x210 [ 1062.152005][ T358] netlink_sendmsg+0x805/0xb30 [ 1062.152038][ T358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.152063][ T358] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1062.152100][ T358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1062.152121][ T358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.152143][ T358] __sock_sendmsg+0x21c/0x270 [ 1062.152177][ T358] ____sys_sendmsg+0x505/0x830 [ 1062.152207][ T358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.152242][ T358] ? import_iovec+0x74/0xa0 [ 1062.152275][ T358] ___sys_sendmsg+0x21f/0x2a0 [ 1062.152301][ T358] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.152370][ T358] ? __fget_files+0x2a/0x420 [ 1062.152390][ T358] ? __fget_files+0x3a0/0x420 [ 1062.152424][ T358] __x64_sys_sendmsg+0x19b/0x260 [ 1062.152451][ T358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1062.152487][ T358] ? __pfx_ksys_write+0x10/0x10 [ 1062.152523][ T358] ? do_syscall_64+0xbe/0xfa0 [ 1062.152556][ T358] do_syscall_64+0xfa/0xfa0 [ 1062.152581][ T358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1062.152609][ T358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.152631][ T358] ? clear_bhb_loop+0x60/0xb0 [ 1062.152659][ T358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.152680][ T358] RIP: 0033:0x7f5f81d8efc9 [ 1062.152701][ T358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.152727][ T358] RSP: 002b:00007f5f82b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.152751][ T358] RAX: ffffffffffffffda RBX: 00007f5f81fe5fa0 RCX: 00007f5f81d8efc9 [ 1062.152767][ T358] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1062.152782][ T358] RBP: 00007f5f82b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.152795][ T358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1062.152808][ T358] R13: 00007f5f81fe6038 R14: 00007f5f81fe5fa0 R15: 00007ffcc4489da8 [ 1062.152847][ T358] [ 1062.674454][ T364] nicvf0: entered promiscuous mode [ 1062.694837][ T362] vxcan1 speed is unknown, defaulting to 1000 [ 1063.041718][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8900'. [ 1063.083428][ T382] team0: entered promiscuous mode [ 1063.088819][ T382] team_slave_0: entered promiscuous mode [ 1063.095076][ T382] team_slave_1: entered promiscuous mode [ 1063.109144][ T382] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1063.120656][ T382] team0: left promiscuous mode [ 1063.125489][ T382] team_slave_0: left promiscuous mode [ 1063.131878][ T382] team_slave_1: left promiscuous mode [ 1063.588977][ T401] netlink: 208 bytes leftover after parsing attributes in process `syz.7.8909'. [ 1063.602456][ T398] vxcan1 speed is unknown, defaulting to 1000 [ 1064.068652][ T406] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8906'. [ 1064.099448][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8913'. [ 1064.143694][ T422] vlan2: entered promiscuous mode [ 1064.252656][ T427] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8915'. [ 1064.302419][ T427] IPVS: Error connecting to the multicast addr [ 1064.408605][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8916'. [ 1064.519426][ T430] vlan2: entered promiscuous mode [ 1064.565354][ T430] vlan0: entered promiscuous mode [ 1064.975037][T27970] svc: failed to register nfsdv3 RPC service (errno 512). [ 1064.993925][T27970] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1065.986344][ T468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8929'. [ 1066.017347][ T468] vlan2: entered promiscuous mode [ 1066.030189][ T468] vlan0: entered promiscuous mode [ 1066.153056][ T472] FAULT_INJECTION: forcing a failure. [ 1066.153056][ T472] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1066.168134][ T472] CPU: 0 UID: 0 PID: 472 Comm: syz.6.8927 Not tainted syzkaller #0 PREEMPT(full) [ 1066.168166][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1066.168181][ T472] Call Trace: [ 1066.168191][ T472] [ 1066.168201][ T472] dump_stack_lvl+0x189/0x250 [ 1066.168238][ T472] ? __pfx____ratelimit+0x10/0x10 [ 1066.168266][ T472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1066.168296][ T472] ? __pfx__printk+0x10/0x10 [ 1066.168322][ T472] ? fs_reclaim_acquire+0x7d/0x100 [ 1066.168367][ T472] should_fail_ex+0x414/0x560 [ 1066.168407][ T472] prepare_alloc_pages+0x213/0x610 [ 1066.168438][ T472] __alloc_frozen_pages_noprof+0x123/0x370 [ 1066.168466][ T472] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1066.168507][ T472] ? policy_nodemask+0x27c/0x720 [ 1066.168536][ T472] alloc_pages_mpol+0x232/0x4a0 [ 1066.168564][ T472] vma_alloc_folio_noprof+0xe4/0x200 [ 1066.168591][ T472] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1066.168629][ T472] folio_prealloc+0x30/0x180 [ 1066.168664][ T472] do_wp_page+0x1231/0x5800 [ 1066.168719][ T472] ? __pfx_do_wp_page+0x10/0x10 [ 1066.168746][ T472] ? do_raw_spin_lock+0x121/0x290 [ 1066.168782][ T472] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1066.168825][ T472] __handle_mm_fault+0x1033/0x5400 [ 1066.168874][ T472] ? __pfx___handle_mm_fault+0x10/0x10 [ 1066.168930][ T472] ? find_vma+0xe7/0x160 [ 1066.168958][ T472] ? __pfx_find_vma+0x10/0x10 [ 1066.168998][ T472] handle_mm_fault+0x40a/0x8e0 [ 1066.169042][ T472] do_user_addr_fault+0x764/0x1380 [ 1066.169085][ T472] exc_page_fault+0x82/0x100 [ 1066.169122][ T472] asm_exc_page_fault+0x26/0x30 [ 1066.169143][ T472] RIP: 0010:__put_user_4+0xd/0x20 [ 1066.169171][ T472] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 68 03 00 90 90 90 90 90 90 90 90 90 90 [ 1066.169190][ T472] RSP: 0018:ffffc9000d77fc78 EFLAGS: 00050206 [ 1066.169212][ T472] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000005278 [ 1066.169226][ T472] RDX: 0000000000000000 RSI: ffffffff8d8f21fe RDI: ffffffff8bbf0460 [ 1066.169243][ T472] RBP: ffffc9000d77fea0 R08: 0000000000000000 R09: ffffffff820d5b70 [ 1066.169259][ T472] R10: dffffc0000000000 R11: fffffbfff1ef996f R12: 0000200000005240 [ 1066.169275][ T472] R13: 0000000000040000 R14: 0000200000005240 R15: 0000000000000000 [ 1066.169298][ T472] ? __might_fault+0xb0/0x130 [ 1066.169340][ T472] __sys_sendmmsg+0x25f/0x430 [ 1066.169370][ T472] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1066.169405][ T472] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1066.169457][ T472] ? ksys_write+0x22a/0x250 [ 1066.169491][ T472] ? __pfx_ksys_write+0x10/0x10 [ 1066.169529][ T472] __x64_sys_sendmmsg+0xa0/0xc0 [ 1066.169555][ T472] do_syscall_64+0xfa/0xfa0 [ 1066.169580][ T472] ? lockdep_hardirqs_on+0x9c/0x150 [ 1066.169607][ T472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.169628][ T472] ? clear_bhb_loop+0x60/0xb0 [ 1066.169656][ T472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.169676][ T472] RIP: 0033:0x7f5f81d8efc9 [ 1066.169694][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.169712][ T472] RSP: 002b:00007f5f82b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1066.169733][ T472] RAX: ffffffffffffffda RBX: 00007f5f81fe5fa0 RCX: 00007f5f81d8efc9 [ 1066.169749][ T472] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 1066.169763][ T472] RBP: 00007f5f82b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.169777][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.169789][ T472] R13: 00007f5f81fe6038 R14: 00007f5f81fe5fa0 R15: 00007ffcc4489da8 [ 1066.169827][ T472] [ 1066.632047][ T481] xt_cgroup: invalid path, errno=-2 [ 1066.778626][ T487] FAULT_INJECTION: forcing a failure. [ 1066.778626][ T487] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.793586][ T487] CPU: 0 UID: 0 PID: 487 Comm: syz.9.8937 Not tainted syzkaller #0 PREEMPT(full) [ 1066.793619][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1066.793634][ T487] Call Trace: [ 1066.793644][ T487] [ 1066.793654][ T487] dump_stack_lvl+0x189/0x250 [ 1066.793691][ T487] ? __pfx____ratelimit+0x10/0x10 [ 1066.793717][ T487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1066.793747][ T487] ? __pfx__printk+0x10/0x10 [ 1066.793776][ T487] ? __pfx___might_resched+0x10/0x10 [ 1066.793799][ T487] ? fs_reclaim_acquire+0x7d/0x100 [ 1066.793838][ T487] should_fail_ex+0x414/0x560 [ 1066.793876][ T487] should_failslab+0xa8/0x100 [ 1066.793900][ T487] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 1066.793933][ T487] ? __get_vm_area_node+0x13f/0x300 [ 1066.793969][ T487] __get_vm_area_node+0x13f/0x300 [ 1066.794004][ T487] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 1066.794036][ T487] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1066.794063][ T487] ? __lock_acquire+0xab9/0xd20 [ 1066.794101][ T487] ? __lock_acquire+0xab9/0xd20 [ 1066.794129][ T487] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1066.794163][ T487] ? __might_fault+0xb0/0x130 [ 1066.794209][ T487] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1066.794229][ T487] __vmalloc_noprof+0xb1/0xf0 [ 1066.794260][ T487] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1066.794287][ T487] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1066.794315][ T487] bpf_prog_alloc+0x3c/0x1a0 [ 1066.794340][ T487] bpf_prog_load+0x735/0x19e0 [ 1066.794376][ T487] ? __pfx_bpf_prog_load+0x10/0x10 [ 1066.794424][ T487] ? bpf_lsm_bpf+0x9/0x20 [ 1066.794448][ T487] ? security_bpf+0x7e/0x300 [ 1066.794478][ T487] __sys_bpf+0x507/0x860 [ 1066.794501][ T487] ? __pfx___sys_bpf+0x10/0x10 [ 1066.794540][ T487] ? ksys_write+0x22a/0x250 [ 1066.794574][ T487] ? __pfx_ksys_write+0x10/0x10 [ 1066.794611][ T487] __x64_sys_bpf+0x7c/0x90 [ 1066.794644][ T487] do_syscall_64+0xfa/0xfa0 [ 1066.794669][ T487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1066.794695][ T487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.794717][ T487] ? clear_bhb_loop+0x60/0xb0 [ 1066.794743][ T487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.794765][ T487] RIP: 0033:0x7f302f78efc9 [ 1066.794785][ T487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.794806][ T487] RSP: 002b:00007f30305d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1066.794830][ T487] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78efc9 [ 1066.794846][ T487] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1066.794860][ T487] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.794874][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.794887][ T487] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1066.794923][ T487] [ 1066.795509][ T487] syz.9.8937: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1067.108199][ T487] CPU: 0 UID: 0 PID: 487 Comm: syz.9.8937 Not tainted syzkaller #0 PREEMPT(full) [ 1067.108230][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1067.108244][ T487] Call Trace: [ 1067.108253][ T487] [ 1067.108262][ T487] dump_stack_lvl+0x189/0x250 [ 1067.108300][ T487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.108330][ T487] ? __pfx__printk+0x10/0x10 [ 1067.108352][ T487] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1067.108383][ T487] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1067.108414][ T487] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1067.108447][ T487] warn_alloc+0x214/0x310 [ 1067.108487][ T487] ? __pfx_warn_alloc+0x10/0x10 [ 1067.108530][ T487] ? __get_vm_area_node+0x2b5/0x300 [ 1067.108570][ T487] __vmalloc_node_range_noprof+0x331/0x12d0 [ 1067.108605][ T487] ? __lock_acquire+0xab9/0xd20 [ 1067.108643][ T487] ? __lock_acquire+0xab9/0xd20 [ 1067.108672][ T487] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1067.108706][ T487] ? __might_fault+0xb0/0x130 [ 1067.108744][ T487] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1067.108765][ T487] __vmalloc_noprof+0xb1/0xf0 [ 1067.108796][ T487] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1067.108821][ T487] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1067.108849][ T487] bpf_prog_alloc+0x3c/0x1a0 [ 1067.108875][ T487] bpf_prog_load+0x735/0x19e0 [ 1067.108912][ T487] ? __pfx_bpf_prog_load+0x10/0x10 [ 1067.108968][ T487] ? bpf_lsm_bpf+0x9/0x20 [ 1067.108992][ T487] ? security_bpf+0x7e/0x300 [ 1067.109023][ T487] __sys_bpf+0x507/0x860 [ 1067.109047][ T487] ? __pfx___sys_bpf+0x10/0x10 [ 1067.109087][ T487] ? ksys_write+0x22a/0x250 [ 1067.109121][ T487] ? __pfx_ksys_write+0x10/0x10 [ 1067.109158][ T487] __x64_sys_bpf+0x7c/0x90 [ 1067.109192][ T487] do_syscall_64+0xfa/0xfa0 [ 1067.109219][ T487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1067.109246][ T487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.109268][ T487] ? clear_bhb_loop+0x60/0xb0 [ 1067.109295][ T487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.109317][ T487] RIP: 0033:0x7f302f78efc9 [ 1067.109338][ T487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.109359][ T487] RSP: 002b:00007f30305d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1067.109382][ T487] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78efc9 [ 1067.109400][ T487] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1067.109414][ T487] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.109428][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.109441][ T487] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1067.109478][ T487] [ 1067.109493][ T487] Mem-Info: [ 1067.302299][ T500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8941'. [ 1067.318981][ T487] active_anon:6426 inactive_anon:0 isolated_anon:0 [ 1067.318981][ T487] active_file:3943 inactive_file:40294 isolated_file:0 [ 1067.318981][ T487] unevictable:768 dirty:395 writeback:0 [ 1067.318981][ T487] slab_reclaimable:13798 slab_unreclaimable:178585 [ 1067.318981][ T487] mapped:40058 shmem:1359 pagetables:1150 [ 1067.318981][ T487] sec_pagetables:0 bounce:0 [ 1067.318981][ T487] kernel_misc_reclaimable:0 [ 1067.318981][ T487] free:1209865 free_pcp:17495 free_cma:0 [ 1067.472753][ T504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1067.482823][ T487] Node 0 active_anon:25804kB inactive_anon:0kB active_file:15772kB inactive_file:160976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160232kB dirty:1580kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14672kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1067.523180][ T487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1067.573143][ T487] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.619151][ T487] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1067.622337][ T500] macvtap1: entered promiscuous mode [ 1067.630625][ T500] mac80211_hwsim hwsim91 wlan1: entered promiscuous mode [ 1067.631047][ T487] Node 0 DMA32 free:920204kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25904kB inactive_anon:0kB active_file:15772kB inactive_file:160976kB unevictable:1536kB writepending:1580kB zspages:0kB present:3129332kB managed:2565196kB mlocked:0kB bounce:0kB free_pcp:56860kB local_pcp:31744kB free_cma:0kB [ 1067.674199][ T487] lowmem_reserve[]: 0 0 0 0 0 [ 1067.679377][ T487] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.713361][ T487] lowmem_reserve[]: 0 0 0 0 0 [ 1067.718166][ T487] Node 1 Normal free:3903796kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13176kB local_pcp:3236kB free_cma:0kB [ 1067.772783][ T487] lowmem_reserve[]: 0 0 0 0 0 [ 1067.778084][ T487] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1067.792533][ T487] Node 0 DMA32: 2498*4kB (UME) 953*8kB (UME) 284*16kB (UME) 487*32kB (UME) 242*64kB (UME) 92*128kB (UME) 36*256kB (UME) 19*512kB (UM) 19*1024kB (UM) 9*2048kB (UME) 195*4096kB (M) = 920560kB [ 1067.868738][ T487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1067.895554][ T487] Node 1 Normal: 183*4kB (UE) 49*8kB (UME) 47*16kB (UME) 143*32kB (UME) 34*64kB (UME) 11*128kB (UME) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 950*4096kB (UME) = 3903796kB [ 1067.921351][ T487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.931122][ T487] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1067.940952][ T487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.951197][ T487] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1067.962191][ T487] 45593 total pagecache pages [ 1067.966923][ T487] 0 pages in swap cache [ 1067.974590][ T487] Free swap = 124996kB [ 1067.978808][ T487] Total swap = 124996kB [ 1067.983461][ T487] 2097051 pages RAM [ 1067.987388][ T487] 0 pages HighMem/MovableOnly [ 1067.997050][ T487] 424110 pages reserved [ 1068.001715][ T487] 0 pages cma reserved [ 1068.209174][ T527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.310801][ T532] vxcan1 speed is unknown, defaulting to 1000 [ 1068.332915][ T537] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1068.355548][ T541] netlink: 'syz.7.8954': attribute type 6 has an invalid length. [ 1068.363888][ T541] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8954'. [ 1068.375532][ T537] syzkaller1: linktype set to 823 [ 1068.616999][ T548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8955'. [ 1068.922050][ T554] netlink: 'syz.1.8957': attribute type 12 has an invalid length. [ 1068.931633][ T554] netlink: 'syz.1.8957': attribute type 29 has an invalid length. [ 1068.941113][ T554] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8957'. [ 1068.952651][ T554] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8957'. [ 1069.083851][ T567] netlink: 176 bytes leftover after parsing attributes in process `syz.9.8959'. [ 1069.235499][ T562] syzkaller1: entered promiscuous mode [ 1069.241339][ T562] syzkaller1: entered allmulticast mode [ 1069.360647][ T574] macsec1: entered promiscuous mode [ 1069.370670][ T574] bridge0: port 3(macsec1) entered blocking state [ 1069.377853][ T574] bridge0: port 3(macsec1) entered disabled state [ 1069.387923][ T574] macsec1: entered allmulticast mode [ 1069.393844][ T574] bridge0: entered allmulticast mode [ 1069.403648][ T574] macsec1: left allmulticast mode [ 1069.408954][ T574] bridge0: left allmulticast mode [ 1069.453891][ T573] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8962'. [ 1069.480583][ T573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8962'. [ 1070.011164][ T593] vlan2: entered promiscuous mode [ 1070.176619][ T597] vxcan1 speed is unknown, defaulting to 1000 [ 1070.634477][ T616] netlink: 'syz.9.8976': attribute type 2 has an invalid length. [ 1070.942204][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 1071.207971][ T629] __nla_validate_parse: 6 callbacks suppressed [ 1071.207995][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8979'. [ 1071.552815][ T639] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1071.572160][ T639] bond3 (unregistering): Released all slaves [ 1071.628306][ T649] netlink: 'syz.7.8986': attribute type 1 has an invalid length. [ 1071.714620][ T646] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1071.750635][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8986'. [ 1071.754567][ T649] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1071.785670][ T652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1071.800008][ T652] bond8: (slave batadv1): making interface the new active one [ 1071.809451][ T652] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 1071.819331][ T654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8988'. [ 1071.829744][ T654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8988'. [ 1072.319325][ T657] bond8 (unregistering): (slave batadv1): Releasing active interface [ 1072.331749][ T657] bond8 (unregistering): Released all slaves [ 1072.706376][ T688] tipc: New replicast peer: 255.255.255.255 [ 1072.737599][ T688] tipc: Enabled bearer , priority 10 [ 1073.124782][ T697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9002'. [ 1073.162666][ T697] vlan2: entered promiscuous mode [ 1073.599174][ T715] vxcan1 speed is unknown, defaulting to 1000 [ 1073.650210][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9009'. [ 1073.657225][ T723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.722735][ T723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9010'. [ 1074.450526][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9017'. [ 1074.485582][ T751] vlan2: entered promiscuous mode [ 1075.410638][ T776] netlink: 'syz.7.9026': attribute type 1 has an invalid length. [ 1075.418446][ T776] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9026'. [ 1075.467178][ T779] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9027'. [ 1075.782088][ T794] netlink: 'syz.6.9034': attribute type 21 has an invalid length. [ 1076.271482][ T815] __nla_validate_parse: 1 callbacks suppressed [ 1076.271499][ T815] netlink: 88 bytes leftover after parsing attributes in process `syz.7.9040'. [ 1076.290851][ T815] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9040'. [ 1076.383781][ T818] tipc: Enabled bearer , priority 0 [ 1076.392492][ T818] syzkaller0: entered promiscuous mode [ 1076.398030][ T818] syzkaller0: entered allmulticast mode [ 1076.408772][ T818] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1076.434816][ T818] tipc: Resetting bearer [ 1076.445198][ T818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9041'. [ 1076.457510][ T817] tipc: Resetting bearer [ 1076.478203][ T817] tipc: Disabling bearer [ 1076.665566][ T822] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9043'. [ 1076.948310][ T836] FAULT_INJECTION: forcing a failure. [ 1076.948310][ T836] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.965419][ T836] CPU: 0 UID: 0 PID: 836 Comm: syz.1.9050 Not tainted syzkaller #0 PREEMPT(full) [ 1076.965452][ T836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1076.965467][ T836] Call Trace: [ 1076.965476][ T836] [ 1076.965486][ T836] dump_stack_lvl+0x189/0x250 [ 1076.965523][ T836] ? __pfx____ratelimit+0x10/0x10 [ 1076.965550][ T836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1076.965580][ T836] ? __pfx__printk+0x10/0x10 [ 1076.965607][ T836] ? __pfx___might_resched+0x10/0x10 [ 1076.965632][ T836] ? fs_reclaim_acquire+0x7d/0x100 [ 1076.965673][ T836] should_fail_ex+0x414/0x560 [ 1076.965713][ T836] should_failslab+0xa8/0x100 [ 1076.965738][ T836] __kvmalloc_node_noprof+0x158/0x910 [ 1076.965774][ T836] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1076.965807][ T836] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1076.965843][ T836] __nf_unregister_net_hook+0x4f6/0x700 [ 1076.965878][ T836] nf_unregister_net_hooks+0xcb/0x140 [ 1076.965914][ T836] nf_defrag_ipv6_disable+0x95/0xe0 [ 1076.965953][ T836] nf_ct_netns_put+0x375/0x520 [ 1076.965975][ T836] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 1076.966014][ T836] nft_connlimit_destroy+0x5a/0xb0 [ 1076.966034][ T836] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 1076.966069][ T836] nft_set_elem_expr_setup+0x5e7/0x830 [ 1076.966116][ T836] nf_tables_newsetelem+0x24b1/0x4330 [ 1076.966196][ T836] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1076.966222][ T836] ? __lock_acquire+0xab9/0xd20 [ 1076.966271][ T836] ? nla_validate_array+0xfc/0x260 [ 1076.966334][ T836] ? __pfx___nla_validate_parse+0x10/0x10 [ 1076.966364][ T836] ? __lock_acquire+0xab9/0xd20 [ 1076.966399][ T836] ? nfnl_pernet+0x23/0x240 [ 1076.966441][ T836] ? __nla_parse+0x40/0x60 [ 1076.966470][ T836] nfnetlink_rcv+0x11d9/0x2590 [ 1076.966546][ T836] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1076.966598][ T836] ? ref_tracker_free+0x63a/0x7d0 [ 1076.966655][ T836] ? __netlink_deliver_tap+0x807/0x850 [ 1076.966689][ T836] ? netlink_deliver_tap+0x2e/0x1b0 [ 1076.966746][ T836] netlink_unicast+0x82f/0x9e0 [ 1076.966788][ T836] ? __pfx_netlink_unicast+0x10/0x10 [ 1076.966822][ T836] ? netlink_sendmsg+0x642/0xb30 [ 1076.966841][ T836] ? skb_put+0x11b/0x210 [ 1076.966880][ T836] netlink_sendmsg+0x805/0xb30 [ 1076.966920][ T836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.966946][ T836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1076.966981][ T836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1076.967003][ T836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.967025][ T836] __sock_sendmsg+0x21c/0x270 [ 1076.967059][ T836] ____sys_sendmsg+0x505/0x830 [ 1076.967090][ T836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.967126][ T836] ? import_iovec+0x74/0xa0 [ 1076.967159][ T836] ___sys_sendmsg+0x21f/0x2a0 [ 1076.967187][ T836] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.967256][ T836] ? __fget_files+0x2a/0x420 [ 1076.967277][ T836] ? __fget_files+0x3a0/0x420 [ 1076.967312][ T836] __x64_sys_sendmsg+0x19b/0x260 [ 1076.967340][ T836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1076.967376][ T836] ? __pfx_ksys_write+0x10/0x10 [ 1076.967413][ T836] ? do_syscall_64+0xbe/0xfa0 [ 1076.967446][ T836] do_syscall_64+0xfa/0xfa0 [ 1076.967472][ T836] ? lockdep_hardirqs_on+0x9c/0x150 [ 1076.967500][ T836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.967522][ T836] ? clear_bhb_loop+0x60/0xb0 [ 1076.967550][ T836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.967572][ T836] RIP: 0033:0x7fcbfcb8efc9 [ 1076.967593][ T836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.967612][ T836] RSP: 002b:00007fcbfd9bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.967637][ T836] RAX: ffffffffffffffda RBX: 00007fcbfcde5fa0 RCX: 00007fcbfcb8efc9 [ 1076.967654][ T836] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1076.967669][ T836] RBP: 00007fcbfd9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.967683][ T836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.967697][ T836] R13: 00007fcbfcde6038 R14: 00007fcbfcde5fa0 R15: 00007ffd871875b8 [ 1076.967737][ T836] [ 1077.410333][ T840] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1077.416835][ T840] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1077.427952][ T840] netlink: 'syz.9.9052': attribute type 3 has an invalid length. [ 1077.435885][ T840] netlink: 'syz.9.9052': attribute type 1 has an invalid length. [ 1077.443699][ T840] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.9052'. [ 1077.491272][ T838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9051'. [ 1077.516717][ T838] tipc: Enabling of bearer rejected, failed to enable media [ 1077.564373][ T843] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9054'. [ 1077.593763][ T843] vlan2: entered promiscuous mode [ 1077.598887][ T843] team0: entered promiscuous mode [ 1077.605784][ T843] team_slave_1: entered promiscuous mode [ 1077.698425][ T850] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9056'. [ 1077.763162][ T851] vxcan1 speed is unknown, defaulting to 1000 [ 1077.798014][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9059'. [ 1077.963243][ T861] tls_set_device_offload: netdev not found [ 1078.472231][ T873] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9064'. [ 1078.502603][ T873] IPVS: Error connecting to the multicast addr [ 1079.320980][ T898] vxcan1 speed is unknown, defaulting to 1000 [ 1079.448818][ T902] syzkaller0: entered promiscuous mode [ 1079.458194][ T902] syzkaller0: entered allmulticast mode [ 1079.494522][ T902] netlink: zone id is out of range [ 1079.506688][ T902] netlink: zone id is out of range [ 1079.521095][ T902] netlink: set zone limit has 8 unknown bytes [ 1079.908666][ T925] team0: Port device team_slave_0 removed [ 1079.913381][ T928] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1080.003650][ T931] tc_dump_action: action bad kind [ 1081.357837][ T962] vxcan1 speed is unknown, defaulting to 1000 [ 1081.609524][ T977] __nla_validate_parse: 10 callbacks suppressed [ 1081.609550][ T977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9096'. [ 1081.639476][ T977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9096'. [ 1081.656340][ T977] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1081.798125][ T985] netlink: 'syz.1.9099': attribute type 1 has an invalid length. [ 1081.816819][ T985] netlink: 'syz.1.9099': attribute type 2 has an invalid length. [ 1082.644070][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1082.707907][ T1008] batadv0: entered promiscuous mode [ 1082.752370][ T1008] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1082.772329][ T1008] batadv0: left promiscuous mode [ 1083.194499][ T1021] syzkaller1: entered promiscuous mode [ 1083.220856][ T1021] syzkaller1: entered allmulticast mode [ 1083.296369][ T1037] FAULT_INJECTION: forcing a failure. [ 1083.296369][ T1037] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.321354][ T1037] CPU: 1 UID: 0 PID: 1037 Comm: syz.7.9115 Not tainted syzkaller #0 PREEMPT(full) [ 1083.321385][ T1037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.321399][ T1037] Call Trace: [ 1083.321409][ T1037] [ 1083.321418][ T1037] dump_stack_lvl+0x189/0x250 [ 1083.321464][ T1037] ? __pfx____ratelimit+0x10/0x10 [ 1083.321490][ T1037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1083.321519][ T1037] ? __pfx__printk+0x10/0x10 [ 1083.321559][ T1037] should_fail_ex+0x414/0x560 [ 1083.321598][ T1037] should_failslab+0xa8/0x100 [ 1083.321622][ T1037] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1083.321653][ T1037] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1083.321679][ T1037] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1083.321705][ T1037] ? sctp_add_bind_addr+0x8c/0x370 [ 1083.321733][ T1037] ? sctp_add_bind_addr+0xb0/0x370 [ 1083.321764][ T1037] sctp_add_bind_addr+0x8c/0x370 [ 1083.321796][ T1037] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1083.321828][ T1037] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1083.321855][ T1037] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1083.321884][ T1037] ? sctp_v6_is_any+0x64/0x80 [ 1083.321913][ T1037] ? sctp_copy_one_addr+0x93/0x360 [ 1083.321943][ T1037] sctp_bind_addr_copy+0xb3/0x3c0 [ 1083.321971][ T1037] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1083.321999][ T1037] sctp_connect_new_asoc+0x2e0/0x690 [ 1083.322034][ T1037] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1083.322066][ T1037] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1083.322097][ T1037] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1083.322121][ T1037] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1083.322148][ T1037] sctp_sendmsg+0x155c/0x2810 [ 1083.322188][ T1037] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1083.322217][ T1037] ? aa_sk_perm+0x81e/0x950 [ 1083.322242][ T1037] ? __lock_acquire+0xab9/0xd20 [ 1083.322263][ T1037] ? __pfx_aa_sk_perm+0x10/0x10 [ 1083.322290][ T1037] ? sock_rps_record_flow+0x19/0x410 [ 1083.322320][ T1037] ? inet_sendmsg+0x2f4/0x370 [ 1083.322350][ T1037] __sock_sendmsg+0x19c/0x270 [ 1083.322377][ T1037] ____sys_sendmsg+0x52d/0x830 [ 1083.322401][ T1037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.322427][ T1037] ? import_iovec+0x74/0xa0 [ 1083.322462][ T1037] ___sys_sendmsg+0x21f/0x2a0 [ 1083.322483][ T1037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.322534][ T1037] ? __fget_files+0x2a/0x420 [ 1083.322550][ T1037] ? __fget_files+0x3a0/0x420 [ 1083.322576][ T1037] __sys_sendmmsg+0x227/0x430 [ 1083.322600][ T1037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1083.322627][ T1037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1083.322668][ T1037] ? ksys_write+0x22a/0x250 [ 1083.322696][ T1037] ? __pfx_ksys_write+0x10/0x10 [ 1083.322726][ T1037] __x64_sys_sendmmsg+0xa0/0xc0 [ 1083.322746][ T1037] do_syscall_64+0xfa/0xfa0 [ 1083.322768][ T1037] ? lockdep_hardirqs_on+0x9c/0x150 [ 1083.322789][ T1037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.322807][ T1037] ? clear_bhb_loop+0x60/0xb0 [ 1083.322829][ T1037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.322846][ T1037] RIP: 0033:0x7fdbecb8efc9 [ 1083.322863][ T1037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.322880][ T1037] RSP: 002b:00007fdbed9c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1083.322900][ T1037] RAX: ffffffffffffffda RBX: 00007fdbecde5fa0 RCX: 00007fdbecb8efc9 [ 1083.322913][ T1037] RDX: 0000000000000001 RSI: 0000200000002800 RDI: 0000000000000006 [ 1083.322925][ T1037] RBP: 00007fdbed9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.322937][ T1037] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 1083.322948][ T1037] R13: 00007fdbecde6038 R14: 00007fdbecde5fa0 R15: 00007ffe28666498 [ 1083.322978][ T1037] [ 1083.762433][ T1043] FAULT_INJECTION: forcing a failure. [ 1083.762433][ T1043] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.775407][ T1043] CPU: 0 UID: 0 PID: 1043 Comm: syz.5.9116 Not tainted syzkaller #0 PREEMPT(full) [ 1083.775439][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.775454][ T1043] Call Trace: [ 1083.775463][ T1043] [ 1083.775473][ T1043] dump_stack_lvl+0x189/0x250 [ 1083.775508][ T1043] ? __pfx____ratelimit+0x10/0x10 [ 1083.775534][ T1043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1083.775565][ T1043] ? __pfx__printk+0x10/0x10 [ 1083.775606][ T1043] should_fail_ex+0x414/0x560 [ 1083.775646][ T1043] should_failslab+0xa8/0x100 [ 1083.775671][ T1043] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1083.775703][ T1043] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1083.775729][ T1043] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1083.775755][ T1043] ? sctp_add_bind_addr+0x8c/0x370 [ 1083.775789][ T1043] sctp_add_bind_addr+0x8c/0x370 [ 1083.775822][ T1043] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1083.775853][ T1043] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1083.775880][ T1043] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1083.775912][ T1043] ? sctp_v4_is_any+0x35/0x60 [ 1083.775939][ T1043] ? sctp_copy_one_addr+0x93/0x360 [ 1083.775970][ T1043] sctp_bind_addr_copy+0xb3/0x3c0 [ 1083.775998][ T1043] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1083.776025][ T1043] sctp_connect_new_asoc+0x2e0/0x690 [ 1083.776063][ T1043] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1083.776098][ T1043] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1083.776131][ T1043] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1083.776163][ T1043] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1083.776206][ T1043] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1083.776230][ T1043] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1083.776260][ T1043] sctp_sendmsg+0x155c/0x2810 [ 1083.776306][ T1043] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1083.776342][ T1043] ? aa_sk_perm+0x81e/0x950 [ 1083.776378][ T1043] ? __pfx_aa_sk_perm+0x10/0x10 [ 1083.776412][ T1043] ? sock_rps_record_flow+0x19/0x410 [ 1083.776449][ T1043] ? inet_sendmsg+0x2f4/0x370 [ 1083.776478][ T1043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1083.776505][ T1043] __sock_sendmsg+0x19c/0x270 [ 1083.776537][ T1043] __sys_sendto+0x3bd/0x520 [ 1083.776574][ T1043] ? __pfx___sys_sendto+0x10/0x10 [ 1083.776604][ T1043] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1083.776649][ T1043] ? __fget_files+0x3a0/0x420 [ 1083.776680][ T1043] ? ksys_write+0x22a/0x250 [ 1083.776715][ T1043] ? __pfx_ksys_write+0x10/0x10 [ 1083.776750][ T1043] __x64_sys_sendto+0xde/0x100 [ 1083.776787][ T1043] do_syscall_64+0xfa/0xfa0 [ 1083.776812][ T1043] ? lockdep_hardirqs_on+0x9c/0x150 [ 1083.776839][ T1043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.776861][ T1043] ? clear_bhb_loop+0x60/0xb0 [ 1083.776889][ T1043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.776910][ T1043] RIP: 0033:0x7f196db8efc9 [ 1083.776931][ T1043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.776949][ T1043] RSP: 002b:00007f196ea5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1083.776973][ T1043] RAX: ffffffffffffffda RBX: 00007f196dde5fa0 RCX: 00007f196db8efc9 [ 1083.776989][ T1043] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1083.777003][ T1043] RBP: 00007f196ea5c090 R08: 0000200000000140 R09: 000000000000001c [ 1083.777018][ T1043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.777030][ T1043] R13: 00007f196dde6038 R14: 00007f196dde5fa0 R15: 00007ffd9b551408 [ 1083.777065][ T1043] [ 1083.785128][ T1038] vxcan1 speed is unknown, defaulting to 1000 [ 1083.946574][ T1044] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9117'. [ 1084.138902][ T1044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9117'. [ 1084.193421][ T1054] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 1084.496165][ T1059] team_slave_0 (unregistering): left promiscuous mode [ 1084.522765][ T1059] team0: Port device team_slave_0 removed [ 1084.794563][ T1083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9128'. [ 1084.854423][ T1083] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1085.100259][ T1095] lo: entered allmulticast mode [ 1085.139495][ T1090] vxcan1 speed is unknown, defaulting to 1000 [ 1085.175238][ T1097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9132'. [ 1085.228428][ T1097] bond4: entered promiscuous mode [ 1085.236457][ T1097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1085.425676][ T1105] nbd7: detected capacity change from 0 to 63 [ 1085.446661][ T1107] block nbd7: NBD_DISCONNECT [ 1085.451848][ T1107] block nbd7: Disconnected due to user request. [ 1085.458325][ T1107] block nbd7: shutting down sockets [ 1085.508801][ T1097] bond4 (unregistering): Released all slaves [ 1085.713446][ T1111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9136'. [ 1085.723329][ T1111] openvswitch: netlink: EtherType 500 is less than min 600 [ 1085.825115][ T1089] lo: left allmulticast mode [ 1086.696635][ T1134] vxcan3: entered allmulticast mode [ 1086.784598][ T1140] netlink: 'syz.5.9145': attribute type 6 has an invalid length. [ 1087.222190][ T1148] FAULT_INJECTION: forcing a failure. [ 1087.222190][ T1148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.249805][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: syz.9.9148 Not tainted syzkaller #0 PREEMPT(full) [ 1087.249837][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1087.249852][ T1148] Call Trace: [ 1087.249861][ T1148] [ 1087.249871][ T1148] dump_stack_lvl+0x189/0x250 [ 1087.249906][ T1148] ? __pfx____ratelimit+0x10/0x10 [ 1087.249932][ T1148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.249963][ T1148] ? __pfx__printk+0x10/0x10 [ 1087.249986][ T1148] ? __might_fault+0xb0/0x130 [ 1087.250031][ T1148] should_fail_ex+0x414/0x560 [ 1087.250071][ T1148] _copy_from_user+0x2d/0xb0 [ 1087.250109][ T1148] ___sys_sendmsg+0x158/0x2a0 [ 1087.250137][ T1148] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.250204][ T1148] ? __fget_files+0x2a/0x420 [ 1087.250226][ T1148] ? __fget_files+0x3a0/0x420 [ 1087.250259][ T1148] __x64_sys_sendmsg+0x19b/0x260 [ 1087.250286][ T1148] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.250321][ T1148] ? __pfx_ksys_write+0x10/0x10 [ 1087.250359][ T1148] ? do_syscall_64+0xbe/0xfa0 [ 1087.250391][ T1148] do_syscall_64+0xfa/0xfa0 [ 1087.250416][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 1087.250444][ T1148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.250467][ T1148] ? clear_bhb_loop+0x60/0xb0 [ 1087.250494][ T1148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.250517][ T1148] RIP: 0033:0x7f302f78efc9 [ 1087.250538][ T1148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.250558][ T1148] RSP: 002b:00007f30305d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.250582][ T1148] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78efc9 [ 1087.250598][ T1148] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 1087.250613][ T1148] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.250627][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.250641][ T1148] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1087.250678][ T1148] [ 1087.539357][ T1151] tipc: Enabling of bearer rejected, already enabled [ 1087.567925][ T1151] tipc: Resetting bearer [ 1087.777324][ T1163] lo speed is unknown, defaulting to 1000 [ 1087.784863][ T1163] lo speed is unknown, defaulting to 1000 [ 1087.812425][ T1163] lo speed is unknown, defaulting to 1000 [ 1087.864762][ T1163] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1087.974950][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.014334][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.022751][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.030769][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.038743][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.040404][ T1170] FAULT_INJECTION: forcing a failure. [ 1088.040404][ T1170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.061624][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.069922][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.078046][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.089419][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.098254][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.106605][ T1163] lo speed is unknown, defaulting to 1000 [ 1088.116640][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: syz.9.9157 Not tainted syzkaller #0 PREEMPT(full) [ 1088.116669][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.116684][ T1170] Call Trace: [ 1088.116693][ T1170] [ 1088.116703][ T1170] dump_stack_lvl+0x189/0x250 [ 1088.116741][ T1170] ? __pfx____ratelimit+0x10/0x10 [ 1088.116774][ T1170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.116805][ T1170] ? __pfx__printk+0x10/0x10 [ 1088.116826][ T1170] ? __might_fault+0xb0/0x130 [ 1088.116870][ T1170] should_fail_ex+0x414/0x560 [ 1088.116908][ T1170] _copy_from_user+0x2d/0xb0 [ 1088.116939][ T1170] generic_map_update_batch+0x525/0x7f0 [ 1088.116984][ T1170] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1088.117014][ T1170] ? __fget_files+0x2a/0x420 [ 1088.117040][ T1170] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1088.117069][ T1170] bpf_map_do_batch+0x39b/0x630 [ 1088.117099][ T1170] __sys_bpf+0x690/0x860 [ 1088.117122][ T1170] ? __pfx___sys_bpf+0x10/0x10 [ 1088.117179][ T1170] __x64_sys_bpf+0x7c/0x90 [ 1088.117213][ T1170] do_syscall_64+0xfa/0xfa0 [ 1088.117240][ T1170] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.117266][ T1170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.117289][ T1170] ? clear_bhb_loop+0x60/0xb0 [ 1088.117316][ T1170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.117338][ T1170] RIP: 0033:0x7f302f78efc9 [ 1088.117358][ T1170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.117377][ T1170] RSP: 002b:00007f30305d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1088.117401][ T1170] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78efc9 [ 1088.117417][ T1170] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 1088.117432][ T1170] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.117446][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.117459][ T1170] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1088.117496][ T1170] [ 1088.389046][ T1174] netlink: 'syz.9.9160': attribute type 21 has an invalid length. [ 1088.403673][ T1174] netlink: 128 bytes leftover after parsing attributes in process `syz.9.9160'. [ 1088.428588][ T1174] netlink: 'syz.9.9160': attribute type 5 has an invalid length. [ 1088.437286][ T1174] netlink: 'syz.9.9160': attribute type 6 has an invalid length. [ 1088.446845][ T1174] netlink: 3 bytes leftover after parsing attributes in process `syz.9.9160'. [ 1088.557147][ T1186] FAULT_INJECTION: forcing a failure. [ 1088.557147][ T1186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.575472][ T1186] CPU: 0 UID: 0 PID: 1186 Comm: syz.6.9163 Not tainted syzkaller #0 PREEMPT(full) [ 1088.575505][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.575520][ T1186] Call Trace: [ 1088.575529][ T1186] [ 1088.575539][ T1186] dump_stack_lvl+0x189/0x250 [ 1088.575576][ T1186] ? __pfx____ratelimit+0x10/0x10 [ 1088.575601][ T1186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.575631][ T1186] ? __pfx__printk+0x10/0x10 [ 1088.575655][ T1186] ? __might_fault+0xb0/0x130 [ 1088.575714][ T1186] should_fail_ex+0x414/0x560 [ 1088.575753][ T1186] _copy_from_user+0x2d/0xb0 [ 1088.575784][ T1186] __sys_bpf+0x1e3/0x860 [ 1088.575809][ T1186] ? __pfx___sys_bpf+0x10/0x10 [ 1088.575850][ T1186] ? ksys_write+0x22a/0x250 [ 1088.575885][ T1186] ? __pfx_ksys_write+0x10/0x10 [ 1088.575924][ T1186] __x64_sys_bpf+0x7c/0x90 [ 1088.575958][ T1186] do_syscall_64+0xfa/0xfa0 [ 1088.575991][ T1186] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.576019][ T1186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.576041][ T1186] ? clear_bhb_loop+0x60/0xb0 [ 1088.576069][ T1186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.576091][ T1186] RIP: 0033:0x7f5f81d8efc9 [ 1088.576111][ T1186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.576131][ T1186] RSP: 002b:00007f5f82b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1088.576156][ T1186] RAX: ffffffffffffffda RBX: 00007f5f81fe5fa0 RCX: 00007f5f81d8efc9 [ 1088.576173][ T1186] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000000 [ 1088.576188][ T1186] RBP: 00007f5f82b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.576203][ T1186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.576216][ T1186] R13: 00007f5f81fe6038 R14: 00007f5f81fe5fa0 R15: 00007ffcc4489da8 [ 1088.576253][ T1186] [ 1088.670546][ T1190] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 1088.983322][ T1199] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9168'. [ 1089.151759][ T1203] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9170'. [ 1089.387850][ T1214] netlink: 'syz.1.9175': attribute type 1 has an invalid length. [ 1089.473475][ T1214] bond1: entered promiscuous mode [ 1089.479163][ T1214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1089.556182][ T1223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9177'. [ 1089.569952][ T1218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1089.591752][ T1218] bond1: (slave bond2): making interface the new active one [ 1089.609387][ T1218] bond2: entered promiscuous mode [ 1089.617095][ T1218] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1089.809398][ T1231] vxcan1 speed is unknown, defaulting to 1000 [ 1090.155547][ T1231] lo speed is unknown, defaulting to 1000 [ 1090.415064][ T1258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9189'. [ 1090.540818][ T5150] Bluetooth: hci6: command 0x0406 tx timeout [ 1090.567346][ T1258] vxcan1 speed is unknown, defaulting to 1000 [ 1090.665977][ T1269] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9193'. [ 1090.704207][ T1270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9192'. [ 1090.998227][ T1279] FAULT_INJECTION: forcing a failure. [ 1090.998227][ T1279] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.001768][ T1258] lo speed is unknown, defaulting to 1000 [ 1091.011393][ T1279] CPU: 1 UID: 0 PID: 1279 Comm: syz.1.9197 Not tainted syzkaller #0 PREEMPT(full) [ 1091.011423][ T1279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1091.011438][ T1279] Call Trace: [ 1091.011456][ T1279] [ 1091.011466][ T1279] dump_stack_lvl+0x189/0x250 [ 1091.011502][ T1279] ? __pfx____ratelimit+0x10/0x10 [ 1091.011529][ T1279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1091.011559][ T1279] ? __pfx__printk+0x10/0x10 [ 1091.011600][ T1279] should_fail_ex+0x414/0x560 [ 1091.011638][ T1279] should_failslab+0xa8/0x100 [ 1091.011659][ T1279] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1091.011693][ T1279] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1091.011721][ T1279] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1091.011752][ T1279] ? sctp_add_bind_addr+0x8c/0x370 [ 1091.011791][ T1279] sctp_add_bind_addr+0x8c/0x370 [ 1091.011829][ T1279] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1091.011866][ T1279] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1091.011899][ T1279] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1091.011932][ T1279] ? sctp_v6_is_any+0x64/0x80 [ 1091.011967][ T1279] ? sctp_copy_one_addr+0x93/0x360 [ 1091.012003][ T1279] sctp_bind_addr_copy+0xb3/0x3c0 [ 1091.012035][ T1279] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1091.012069][ T1279] sctp_connect_new_asoc+0x2e0/0x690 [ 1091.012110][ T1279] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1091.012146][ T1279] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1091.012183][ T1279] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1091.012211][ T1279] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1091.012245][ T1279] sctp_sendmsg+0x155c/0x2810 [ 1091.012296][ T1279] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1091.012337][ T1279] ? aa_sk_perm+0x81e/0x950 [ 1091.012371][ T1279] ? __lock_acquire+0xab9/0xd20 [ 1091.012398][ T1279] ? __pfx_aa_sk_perm+0x10/0x10 [ 1091.012436][ T1279] ? sock_rps_record_flow+0x19/0x410 [ 1091.012485][ T1279] ? inet_sendmsg+0x2f4/0x370 [ 1091.012527][ T1279] __sock_sendmsg+0x19c/0x270 [ 1091.012565][ T1279] ____sys_sendmsg+0x52d/0x830 [ 1091.012600][ T1279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1091.012638][ T1279] ? import_iovec+0x74/0xa0 [ 1091.012673][ T1279] ___sys_sendmsg+0x21f/0x2a0 [ 1091.012702][ T1279] ? __pfx____sys_sendmsg+0x10/0x10 [ 1091.012775][ T1279] ? __fget_files+0x2a/0x420 [ 1091.012798][ T1279] ? __fget_files+0x3a0/0x420 [ 1091.012836][ T1279] __sys_sendmmsg+0x227/0x430 [ 1091.012869][ T1279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1091.012907][ T1279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1091.012965][ T1279] ? ksys_write+0x22a/0x250 [ 1091.013003][ T1279] ? __pfx_ksys_write+0x10/0x10 [ 1091.013046][ T1279] __x64_sys_sendmmsg+0xa0/0xc0 [ 1091.013073][ T1279] do_syscall_64+0xfa/0xfa0 [ 1091.013102][ T1279] ? lockdep_hardirqs_on+0x9c/0x150 [ 1091.013133][ T1279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.013159][ T1279] ? clear_bhb_loop+0x60/0xb0 [ 1091.013191][ T1279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.013216][ T1279] RIP: 0033:0x7fcbfcb8efc9 [ 1091.013240][ T1279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.013262][ T1279] RSP: 002b:00007fcbfd9bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1091.013289][ T1279] RAX: ffffffffffffffda RBX: 00007fcbfcde5fa0 RCX: 00007fcbfcb8efc9 [ 1091.013307][ T1279] RDX: 0000000000000001 RSI: 0000200000002800 RDI: 0000000000000005 [ 1091.013322][ T1279] RBP: 00007fcbfd9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.013339][ T1279] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 1091.013353][ T1279] R13: 00007fcbfcde6038 R14: 00007fcbfcde5fa0 R15: 00007ffd871875b8 [ 1091.013396][ T1279] [ 1091.182530][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.550912][ T1283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9198'. [ 1091.867062][ T1301] netlink: 'syz.1.9200': attribute type 10 has an invalid length. [ 1091.877663][ T1300] vxcan1 speed is unknown, defaulting to 1000 [ 1091.880098][ T1299] Bluetooth: MGMT ver 1.23 [ 1091.911548][ T1304] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1091.919206][ T1304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.951708][ T1301] team0: Failed to send options change via netlink (err -105) [ 1091.959335][ T1301] team0: Port device dummy0 added [ 1092.191085][ T1302] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9201'. [ 1092.310730][ T1311] netlink: 'syz.5.9205': attribute type 1 has an invalid length. [ 1092.397928][ T1313] FAULT_INJECTION: forcing a failure. [ 1092.397928][ T1313] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.410699][ T1313] CPU: 0 UID: 0 PID: 1313 Comm: syz.9.9206 Not tainted syzkaller #0 PREEMPT(full) [ 1092.410729][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1092.410744][ T1313] Call Trace: [ 1092.410753][ T1313] [ 1092.410763][ T1313] dump_stack_lvl+0x189/0x250 [ 1092.410800][ T1313] ? __pfx____ratelimit+0x10/0x10 [ 1092.410826][ T1313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.410857][ T1313] ? __pfx__printk+0x10/0x10 [ 1092.410885][ T1313] ? __lock_acquire+0xab9/0xd20 [ 1092.410918][ T1313] should_fail_ex+0x414/0x560 [ 1092.410959][ T1313] should_failslab+0xa8/0x100 [ 1092.410984][ T1313] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 1092.411024][ T1313] ? pfn_valid+0x125/0x4d0 [ 1092.411044][ T1313] ? pfn_valid+0x440/0x4d0 [ 1092.411069][ T1313] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 1092.411112][ T1313] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1092.411144][ T1313] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 1092.411193][ T1313] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1092.411231][ T1313] ? 0xffffffffa0205540 [ 1092.411272][ T1313] ? 0xffffffffa020164c [ 1092.411290][ T1313] ? 0xffffffffa02016c8 [ 1092.411307][ T1313] ? 0xffffffffa0201748 [ 1092.411366][ T1313] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1092.411402][ T1313] ? _copy_from_user+0x94/0xb0 [ 1092.411430][ T1313] ? bpf_test_init+0x113/0x150 [ 1092.411461][ T1313] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1092.411499][ T1313] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 1092.411553][ T1313] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1092.411593][ T1313] ? __fget_files+0x2a/0x420 [ 1092.411621][ T1313] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1092.411656][ T1313] bpf_prog_test_run+0x2c7/0x340 [ 1092.411686][ T1313] __sys_bpf+0x562/0x860 [ 1092.411709][ T1313] ? __pfx___sys_bpf+0x10/0x10 [ 1092.411751][ T1313] ? ksys_write+0x22a/0x250 [ 1092.411786][ T1313] ? __pfx_ksys_write+0x10/0x10 [ 1092.411825][ T1313] __x64_sys_bpf+0x7c/0x90 [ 1092.411859][ T1313] do_syscall_64+0xfa/0xfa0 [ 1092.411885][ T1313] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.411916][ T1313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.411938][ T1313] ? clear_bhb_loop+0x60/0xb0 [ 1092.411966][ T1313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.411988][ T1313] RIP: 0033:0x7f302f78efc9 [ 1092.412008][ T1313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.412028][ T1313] RSP: 002b:00007f30305d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.412052][ T1313] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78efc9 [ 1092.412069][ T1313] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1092.412083][ T1313] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.412097][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1092.412111][ T1313] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1092.412148][ T1313] [ 1092.433643][ T1311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1092.730586][ T1300] lo speed is unknown, defaulting to 1000 [ 1093.034546][ T1321] netlink: 'syz.9.9209': attribute type 5 has an invalid length. [ 1093.172644][ T1321] geneve3: entered promiscuous mode [ 1093.178041][ T1321] geneve3: entered allmulticast mode [ 1093.240597][ T1338] team_slave_1: left promiscuous mode [ 1093.256430][ T1338] team0: Port device team_slave_1 removed [ 1093.269442][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.278778][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.288926][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.298624][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.312640][ T1338] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1093.334342][ T7467] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1093.356770][ T7467] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1093.470072][ T7467] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1093.478782][ T7467] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1093.541403][ T1356] __nla_validate_parse: 4 callbacks suppressed [ 1093.541425][ T1356] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9219'. [ 1093.673898][ T1363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9222'. [ 1093.874284][ T1362] syzkaller1: entered promiscuous mode [ 1093.886851][ T1362] syzkaller1: entered allmulticast mode [ 1094.261968][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 1094.894756][ T1411] bridge_slave_0: left allmulticast mode [ 1094.919845][ T1411] bridge_slave_0: left promiscuous mode [ 1094.935913][ T1411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.955086][ T1414] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9240'. [ 1094.972668][ T1411] bridge_slave_1: left allmulticast mode [ 1094.978637][ T1411] bridge_slave_1: left promiscuous mode [ 1094.985288][ T1411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.000740][ T1411] veth0_to_bond: left allmulticast mode [ 1095.007459][ T1411] veth0_to_bond: left promiscuous mode [ 1095.014785][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9240'. [ 1095.024944][ T1411] bridge4: port 2(veth0_to_bond) entered disabled state [ 1095.032201][ T1418] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9240'. [ 1095.046502][ T1411] bond0: (slave bond_slave_0): Releasing backup interface [ 1095.062601][ T1411] bond0: (slave bond_slave_1): Releasing backup interface [ 1095.072802][ T1411] team0: Failed to send options change via netlink (err -105) [ 1095.082447][ T1411] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1095.092421][ T1411] team0: Port device team_slave_0 removed [ 1095.100319][ T1411] team0: Failed to send options change via netlink (err -105) [ 1095.109465][ T1411] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1095.128167][ T1411] team0: Port device team_slave_1 removed [ 1095.135925][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.145637][ T1411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1095.172340][ T1414] team0: Failed to send options change via netlink (err -105) [ 1095.189149][ T1414] team0: Mode changed to "loadbalance" [ 1095.237052][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9240'. [ 1095.617305][ T1441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1095.818450][ T1454] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.855865][ T1458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9251'. [ 1095.887954][ T1451] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9246'. [ 1095.900831][ T1455] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1095.917573][ T1451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9246'. [ 1095.951044][ T1454] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.988895][ T1464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9254'. [ 1096.017272][ T1454] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.097800][ T1454] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.283828][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.341333][T27836] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.377566][T27836] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.427059][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.170382][ T1486] vlan2: entered promiscuous mode [ 1097.175799][ T1486] team0: entered promiscuous mode [ 1097.718974][ T1507] sctp: [Deprecated]: syz.7.9270 (pid 1507) Use of int in max_burst socket option deprecated. [ 1097.718974][ T1507] Use struct sctp_assoc_value instead [ 1097.757965][ T1512] netlink: 'syz.5.9269': attribute type 2 has an invalid length. [ 1097.808959][ T1514] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1097.816913][ T1514] team0: Device ipvlan2 is already an upper device of the team interface [ 1097.901377][ T1516] vlan2: entered promiscuous mode [ 1098.245177][ T1528] netlink: zone id is out of range [ 1098.277378][ T1530] FAULT_INJECTION: forcing a failure. [ 1098.277378][ T1530] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.290407][ T1530] CPU: 1 UID: 0 PID: 1530 Comm: syz.9.9277 Not tainted syzkaller #0 PREEMPT(full) [ 1098.290439][ T1530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1098.290453][ T1530] Call Trace: [ 1098.290463][ T1530] [ 1098.290473][ T1530] dump_stack_lvl+0x189/0x250 [ 1098.290510][ T1530] ? __pfx____ratelimit+0x10/0x10 [ 1098.290536][ T1530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.290567][ T1530] ? __pfx__printk+0x10/0x10 [ 1098.290597][ T1530] ? __pfx___might_resched+0x10/0x10 [ 1098.290622][ T1530] ? fs_reclaim_acquire+0x7d/0x100 [ 1098.290663][ T1530] should_fail_ex+0x414/0x560 [ 1098.290711][ T1530] should_failslab+0xa8/0x100 [ 1098.290737][ T1530] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1098.290770][ T1530] ? __alloc_skb+0x112/0x2d0 [ 1098.290811][ T1530] __alloc_skb+0x112/0x2d0 [ 1098.290849][ T1530] __ip_append_data+0x2dae/0x40c0 [ 1098.290887][ T1530] ? rt_is_expired+0x1c/0x2d0 [ 1098.290927][ T1530] ? __pfx_raw_getfrag+0x10/0x10 [ 1098.290976][ T1530] ? ipv4_mtu+0x23/0x650 [ 1098.291004][ T1530] ? __pfx___ip_append_data+0x10/0x10 [ 1098.291034][ T1530] ? ipv4_mtu+0x53b/0x650 [ 1098.291057][ T1530] ? ipv4_mtu+0x23/0x650 [ 1098.291082][ T1530] ? __pfx_ipv4_mtu+0x10/0x10 [ 1098.291107][ T1530] ? ip_setup_cork+0x577/0x9a0 [ 1098.291133][ T1530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.291164][ T1530] ip_append_data+0x10e/0x190 [ 1098.291198][ T1530] ? __pfx_raw_getfrag+0x10/0x10 [ 1098.291231][ T1530] raw_sendmsg+0x13d8/0x18b0 [ 1098.291281][ T1530] ? __pfx_raw_sendmsg+0x10/0x10 [ 1098.291318][ T1530] ? do_wp_page+0x161d/0x5800 [ 1098.291359][ T1530] ? aa_sk_perm+0x81e/0x950 [ 1098.291396][ T1530] ? __pfx_aa_sk_perm+0x10/0x10 [ 1098.291424][ T1530] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1098.291463][ T1530] ? sock_rps_record_flow+0x19/0x410 [ 1098.291499][ T1530] ? inet_sendmsg+0x2f4/0x370 [ 1098.291530][ T1530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1098.291556][ T1530] __sock_sendmsg+0x19c/0x270 [ 1098.291589][ T1530] ____sys_sendmsg+0x52d/0x830 [ 1098.291619][ T1530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.291653][ T1530] ? import_iovec+0x74/0xa0 [ 1098.291686][ T1530] ___sys_sendmsg+0x21f/0x2a0 [ 1098.291719][ T1530] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.291793][ T1530] ? __might_fault+0xb0/0x130 [ 1098.291830][ T1530] __sys_sendmmsg+0x227/0x430 [ 1098.291860][ T1530] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1098.291894][ T1530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1098.291946][ T1530] ? ksys_write+0x22a/0x250 [ 1098.291982][ T1530] ? __pfx_ksys_write+0x10/0x10 [ 1098.292020][ T1530] __x64_sys_sendmmsg+0xa0/0xc0 [ 1098.292046][ T1530] do_syscall_64+0xfa/0xfa0 [ 1098.292073][ T1530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.292099][ T1530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.292121][ T1530] ? clear_bhb_loop+0x60/0xb0 [ 1098.292149][ T1530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.292171][ T1530] RIP: 0033:0x7f302f78efc9 [ 1098.292192][ T1530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.292211][ T1530] RSP: 002b:00007f30305d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1098.292237][ T1530] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78efc9 [ 1098.292253][ T1530] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 1098.292268][ T1530] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.292282][ T1530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.292296][ T1530] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1098.292334][ T1530] [ 1099.262226][ T1557] __nla_validate_parse: 4 callbacks suppressed [ 1099.262247][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9286'. [ 1099.278383][ T1536] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1099.511446][ T1567] netlink: 'syz.9.9292': attribute type 11 has an invalid length. [ 1099.578818][ T1577] veth0: entered promiscuous mode [ 1099.602730][ T1577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9293'. [ 1099.675965][ T1579] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9294'. [ 1099.834520][ T1585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9297'. [ 1099.889461][ T1589] netlink: 'syz.7.9298': attribute type 4 has an invalid length. [ 1099.921878][ T1590] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9299'. [ 1099.929423][ T1589] netlink: 'syz.7.9298': attribute type 4 has an invalid length. [ 1099.961245][ T1590] IPVS: Error connecting to the multicast addr [ 1100.030894][ T1594] FAULT_INJECTION: forcing a failure. [ 1100.030894][ T1594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.063126][ T1594] CPU: 1 UID: 0 PID: 1594 Comm: syz.6.9300 Not tainted syzkaller #0 PREEMPT(full) [ 1100.063157][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1100.063173][ T1594] Call Trace: [ 1100.063182][ T1594] [ 1100.063193][ T1594] dump_stack_lvl+0x189/0x250 [ 1100.063228][ T1594] ? __pfx____ratelimit+0x10/0x10 [ 1100.063255][ T1594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1100.063286][ T1594] ? __pfx__printk+0x10/0x10 [ 1100.063310][ T1594] ? __might_fault+0xb0/0x130 [ 1100.063355][ T1594] should_fail_ex+0x414/0x560 [ 1100.063395][ T1594] _copy_from_user+0x2d/0xb0 [ 1100.063425][ T1594] ___sys_sendmsg+0x158/0x2a0 [ 1100.063452][ T1594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.063516][ T1594] ? __fget_files+0x2a/0x420 [ 1100.063546][ T1594] ? __fget_files+0x3a0/0x420 [ 1100.063579][ T1594] __x64_sys_sendmsg+0x19b/0x260 [ 1100.063606][ T1594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.063640][ T1594] ? __pfx_ksys_write+0x10/0x10 [ 1100.063677][ T1594] ? do_syscall_64+0xbe/0xfa0 [ 1100.063709][ T1594] do_syscall_64+0xfa/0xfa0 [ 1100.063734][ T1594] ? lockdep_hardirqs_on+0x9c/0x150 [ 1100.063762][ T1594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.063784][ T1594] ? clear_bhb_loop+0x60/0xb0 [ 1100.063813][ T1594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.063835][ T1594] RIP: 0033:0x7f5f81d8efc9 [ 1100.063855][ T1594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.063874][ T1594] RSP: 002b:00007f5f7fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.063901][ T1594] RAX: ffffffffffffffda RBX: 00007f5f81fe6090 RCX: 00007f5f81d8efc9 [ 1100.063917][ T1594] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 1100.063932][ T1594] RBP: 00007f5f7fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.063946][ T1594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.063960][ T1594] R13: 00007f5f81fe6128 R14: 00007f5f81fe6090 R15: 00007ffcc4489da8 [ 1100.063997][ T1594] [ 1100.066781][ T1596] siw: device registration error -23 [ 1100.430830][ T1599] netlink: 'syz.9.9302': attribute type 1 has an invalid length. [ 1100.479033][ T1599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1100.511461][ T1603] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1100.542766][ T1603] bond3: (slave batadv1): making interface the new active one [ 1100.574750][ T1599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9302'. [ 1100.601365][ T1603] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1100.733345][ T30] audit: type=1804 audit(1761279202.877:7): pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.9305" name="/newroot/471/cgroup.controllers" dev="tmpfs" ino=2417 res=1 errno=0 [ 1100.758142][ T30] audit: type=1800 audit(1761279202.877:8): pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9305" name="cgroup.controllers" dev="tmpfs" ino=2417 res=0 errno=0 [ 1100.972486][ T1599] bond3 (unregistering): (slave batadv1): Releasing active interface [ 1100.985181][ T1599] bond3 (unregistering): Released all slaves [ 1101.026397][ T1612] netlink: 'syz.7.9307': attribute type 2 has an invalid length. [ 1101.197973][ T1621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9310'. [ 1101.343769][ T1632] netlink: 'syz.9.9314': attribute type 29 has an invalid length. [ 1101.354863][ T1632] netlink: 'syz.9.9314': attribute type 29 has an invalid length. [ 1101.364559][ T1632] netlink: 500 bytes leftover after parsing attributes in process `syz.9.9314'. [ 1101.375863][ T1632] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9314'. [ 1102.187260][ T1668] FAULT_INJECTION: forcing a failure. [ 1102.187260][ T1668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.202481][ T1668] CPU: 0 UID: 0 PID: 1668 Comm: syz.9.9326 Not tainted syzkaller #0 PREEMPT(full) [ 1102.202512][ T1668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1102.202527][ T1668] Call Trace: [ 1102.202537][ T1668] [ 1102.202546][ T1668] dump_stack_lvl+0x189/0x250 [ 1102.202583][ T1668] ? __pfx____ratelimit+0x10/0x10 [ 1102.202610][ T1668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1102.202640][ T1668] ? __pfx__printk+0x10/0x10 [ 1102.202678][ T1668] should_fail_ex+0x414/0x560 [ 1102.202717][ T1668] _copy_to_user+0x31/0xb0 [ 1102.202747][ T1668] simple_read_from_buffer+0xe1/0x170 [ 1102.202787][ T1668] proc_fail_nth_read+0x1b3/0x220 [ 1102.202819][ T1668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.202852][ T1668] ? rw_verify_area+0x2a6/0x4d0 [ 1102.202880][ T1668] ? __lock_acquire+0xab9/0xd20 [ 1102.202900][ T1668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.202931][ T1668] vfs_read+0x200/0xa30 [ 1102.202960][ T1668] ? fdget_pos+0x247/0x320 [ 1102.202986][ T1668] ? __pfx___mutex_lock+0x10/0x10 [ 1102.203017][ T1668] ? __pfx_vfs_read+0x10/0x10 [ 1102.203049][ T1668] ? __fget_files+0x2a/0x420 [ 1102.203075][ T1668] ? __fget_files+0x3a0/0x420 [ 1102.203094][ T1668] ? __fget_files+0x2a/0x420 [ 1102.203127][ T1668] ksys_read+0x145/0x250 [ 1102.203160][ T1668] ? __pfx_ksys_read+0x10/0x10 [ 1102.203201][ T1668] ? do_syscall_64+0xbe/0xfa0 [ 1102.203233][ T1668] do_syscall_64+0xfa/0xfa0 [ 1102.203258][ T1668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1102.203285][ T1668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.203314][ T1668] ? clear_bhb_loop+0x60/0xb0 [ 1102.203341][ T1668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.203363][ T1668] RIP: 0033:0x7f302f78d9dc [ 1102.203383][ T1668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1102.203403][ T1668] RSP: 002b:00007f30305d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1102.203427][ T1668] RAX: ffffffffffffffda RBX: 00007f302f9e5fa0 RCX: 00007f302f78d9dc [ 1102.203443][ T1668] RDX: 000000000000000f RSI: 00007f30305d20a0 RDI: 0000000000000004 [ 1102.203457][ T1668] RBP: 00007f30305d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.203470][ T1668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.203484][ T1668] R13: 00007f302f9e6038 R14: 00007f302f9e5fa0 R15: 00007ffc3df45528 [ 1102.203522][ T1668] [ 1102.479063][ T1672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9328'. [ 1102.772977][ T1684] FAULT_INJECTION: forcing a failure. [ 1102.772977][ T1684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.797270][ T1684] CPU: 0 UID: 0 PID: 1684 Comm: syz.6.9330 Not tainted syzkaller #0 PREEMPT(full) [ 1102.797302][ T1684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1102.797317][ T1684] Call Trace: [ 1102.797326][ T1684] [ 1102.797336][ T1684] dump_stack_lvl+0x189/0x250 [ 1102.797372][ T1684] ? __pfx____ratelimit+0x10/0x10 [ 1102.797399][ T1684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1102.797429][ T1684] ? __pfx__printk+0x10/0x10 [ 1102.797451][ T1684] ? __might_fault+0xb0/0x130 [ 1102.797495][ T1684] should_fail_ex+0x414/0x560 [ 1102.797534][ T1684] _copy_from_user+0x2d/0xb0 [ 1102.797563][ T1684] ___sys_recvmsg+0x12e/0x510 [ 1102.797594][ T1684] ? __pfx____sys_recvmsg+0x10/0x10 [ 1102.797653][ T1684] ? __might_fault+0xb0/0x130 [ 1102.797688][ T1684] do_recvmmsg+0x307/0x770 [ 1102.797721][ T1684] ? __pfx_do_recvmmsg+0x10/0x10 [ 1102.797746][ T1684] ? lockdep_hardirqs_on+0x9c/0x150 [ 1102.797806][ T1684] __x64_sys_recvmmsg+0x190/0x240 [ 1102.797834][ T1684] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1102.797863][ T1684] ? do_syscall_64+0xbe/0xfa0 [ 1102.797894][ T1684] do_syscall_64+0xfa/0xfa0 [ 1102.797919][ T1684] ? lockdep_hardirqs_on+0x9c/0x150 [ 1102.797945][ T1684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.797968][ T1684] ? clear_bhb_loop+0x60/0xb0 [ 1102.797995][ T1684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.798016][ T1684] RIP: 0033:0x7f5f81d8efc9 [ 1102.798035][ T1684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.798055][ T1684] RSP: 002b:00007f5f7ffd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1102.798079][ T1684] RAX: ffffffffffffffda RBX: 00007f5f81fe6180 RCX: 00007f5f81d8efc9 [ 1102.798096][ T1684] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1102.798111][ T1684] RBP: 00007f5f7ffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.798126][ T1684] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1102.798140][ T1684] R13: 00007f5f81fe6218 R14: 00007f5f81fe6180 R15: 00007ffcc4489da8 [ 1102.798177][ T1684] [ 1103.019243][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 1104.073677][ T1728] netlink: 'syz.5.9347': attribute type 39 has an invalid length. [ 1104.430768][ T1736] block nbd1: server does not support multiple connections per device. [ 1104.450150][ T1736] block nbd1: shutting down sockets [ 1104.490504][ T1741] gretap0: entered promiscuous mode [ 1104.500655][ T1741] vlan2: entered promiscuous mode [ 1104.848389][ T1761] netlink: 'syz.5.9359': attribute type 4 has an invalid length. [ 1104.857599][ T1761] __nla_validate_parse: 2 callbacks suppressed [ 1104.857623][ T1761] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9359'. [ 1105.240971][ T1780] "syz.5.9367" (1780) uses obsolete ecb(arc4) skcipher [ 1105.573734][ T1793] FAULT_INJECTION: forcing a failure. [ 1105.573734][ T1793] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.660319][ T1793] CPU: 0 UID: 0 PID: 1793 Comm: syz.1.9369 Not tainted syzkaller #0 PREEMPT(full) [ 1105.660351][ T1793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1105.660366][ T1793] Call Trace: [ 1105.660375][ T1793] [ 1105.660385][ T1793] dump_stack_lvl+0x189/0x250 [ 1105.660456][ T1793] ? __pfx____ratelimit+0x10/0x10 [ 1105.660486][ T1793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1105.660517][ T1793] ? __pfx__printk+0x10/0x10 [ 1105.660546][ T1793] ? __pfx___might_resched+0x10/0x10 [ 1105.660570][ T1793] ? fs_reclaim_acquire+0x7d/0x100 [ 1105.660608][ T1793] should_fail_ex+0x414/0x560 [ 1105.660648][ T1793] should_failslab+0xa8/0x100 [ 1105.660672][ T1793] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1105.660703][ T1793] ? __alloc_skb+0x112/0x2d0 [ 1105.660733][ T1793] ? trace_sched_exit_tp+0x36/0x110 [ 1105.660772][ T1793] __alloc_skb+0x112/0x2d0 [ 1105.660809][ T1793] netlink_sendmsg+0x5c6/0xb30 [ 1105.660841][ T1793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.660866][ T1793] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1105.660902][ T1793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1105.660923][ T1793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.660946][ T1793] __sock_sendmsg+0x21c/0x270 [ 1105.660977][ T1793] ____sys_sendmsg+0x505/0x830 [ 1105.661006][ T1793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1105.661039][ T1793] ? import_iovec+0x74/0xa0 [ 1105.661071][ T1793] ___sys_sendmsg+0x21f/0x2a0 [ 1105.661095][ T1793] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.661164][ T1793] ? __fget_files+0x2a/0x420 [ 1105.661184][ T1793] ? __fget_files+0x3a0/0x420 [ 1105.661216][ T1793] __x64_sys_sendmsg+0x19b/0x260 [ 1105.661241][ T1793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1105.661284][ T1793] ? do_syscall_64+0xbe/0xfa0 [ 1105.661315][ T1793] do_syscall_64+0xfa/0xfa0 [ 1105.661343][ T1793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.661363][ T1793] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1105.661385][ T1793] ? clear_bhb_loop+0x60/0xb0 [ 1105.661412][ T1793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.661434][ T1793] RIP: 0033:0x7fcbfcb8efc9 [ 1105.661454][ T1793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.661474][ T1793] RSP: 002b:00007fcbfd99b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.661498][ T1793] RAX: ffffffffffffffda RBX: 00007fcbfcde6090 RCX: 00007fcbfcb8efc9 [ 1105.661515][ T1793] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 1105.661530][ T1793] RBP: 00007fcbfd99b090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.661544][ T1793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.661557][ T1793] R13: 00007fcbfcde6128 R14: 00007fcbfcde6090 R15: 00007ffd871875b8 [ 1105.661594][ T1793] [ 1105.981683][ T1798] tipc: Enabling of bearer rejected, already enabled [ 1106.297762][ T1807] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1106.788391][ T1826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9377'. [ 1106.846229][ T1822] vxcan1 speed is unknown, defaulting to 1000 [ 1106.921015][ T1831] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9383'. [ 1106.935003][ T1832] netlink: 'syz.6.9382': attribute type 1 has an invalid length. [ 1106.984799][ T1817] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1107.182883][ T1838] netlink: 'syz.6.9385': attribute type 2 has an invalid length. [ 1107.198675][ T1841] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9386'. [ 1107.215471][ T1841] netlink: 'syz.9.9386': attribute type 1 has an invalid length. [ 1107.448197][ T1851] No such timeout policy "syz1" [ 1107.463285][ T1851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9387'. [ 1107.670259][ T1849] netlink: 'syz.6.9388': attribute type 12 has an invalid length. [ 1107.684831][ T1833] vxcan1 speed is unknown, defaulting to 1000 [ 1107.756134][ T1822] lo speed is unknown, defaulting to 1000 [ 1108.049304][ T1863] ip6gretap0: entered promiscuous mode [ 1108.055547][ T1863] macsec1: entered promiscuous mode [ 1108.087972][ T1863] ip6gretap0: left promiscuous mode [ 1108.357102][ T1833] lo speed is unknown, defaulting to 1000 [ 1108.525290][ T1878] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1108.685326][ T1890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9401'. [ 1108.759381][ T1890] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1109.097009][ T1910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9405'. [ 1109.131300][ T1911] netlink: 'syz.5.9406': attribute type 1 has an invalid length. [ 1109.139339][ T1911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9406'. [ 1109.271565][ T1910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9405'. [ 1109.271974][T27836] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.318552][T27836] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.338469][T27836] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.378842][T27836] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.888204][ T1931] FAULT_INJECTION: forcing a failure. [ 1109.888204][ T1931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.922379][ T1931] CPU: 1 UID: 0 PID: 1931 Comm: syz.1.9412 Not tainted syzkaller #0 PREEMPT(full) [ 1109.922413][ T1931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1109.922427][ T1931] Call Trace: [ 1109.922436][ T1931] [ 1109.922446][ T1931] dump_stack_lvl+0x189/0x250 [ 1109.922482][ T1931] ? __pfx____ratelimit+0x10/0x10 [ 1109.922523][ T1931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.922553][ T1931] ? __pfx__printk+0x10/0x10 [ 1109.922577][ T1931] ? __might_fault+0xb0/0x130 [ 1109.922619][ T1931] should_fail_ex+0x414/0x560 [ 1109.922658][ T1931] _copy_from_user+0x2d/0xb0 [ 1109.922686][ T1931] generic_map_update_batch+0x525/0x7f0 [ 1109.922731][ T1931] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1109.922760][ T1931] ? __fget_files+0x2a/0x420 [ 1109.922789][ T1931] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1109.922817][ T1931] bpf_map_do_batch+0x39b/0x630 [ 1109.922846][ T1931] __sys_bpf+0x690/0x860 [ 1109.922870][ T1931] ? __pfx___sys_bpf+0x10/0x10 [ 1109.922907][ T1931] ? ksys_write+0x22a/0x250 [ 1109.922941][ T1931] ? __pfx_ksys_write+0x10/0x10 [ 1109.922980][ T1931] __x64_sys_bpf+0x7c/0x90 [ 1109.923011][ T1931] do_syscall_64+0xfa/0xfa0 [ 1109.923035][ T1931] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.923061][ T1931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.923083][ T1931] ? clear_bhb_loop+0x60/0xb0 [ 1109.923109][ T1931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.923129][ T1931] RIP: 0033:0x7fcbfcb8efc9 [ 1109.923150][ T1931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.923169][ T1931] RSP: 002b:00007fcbfd9bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1109.923193][ T1931] RAX: ffffffffffffffda RBX: 00007fcbfcde5fa0 RCX: 00007fcbfcb8efc9 [ 1109.923210][ T1931] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 1109.923224][ T1931] RBP: 00007fcbfd9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.923238][ T1931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.923251][ T1931] R13: 00007fcbfcde6038 R14: 00007fcbfcde5fa0 R15: 00007ffd871875b8 [ 1109.923286][ T1931] [ 1110.216489][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9415'. [ 1110.253266][ T1936] vxcan1 speed is unknown, defaulting to 1000 [ 1110.560166][ T1948] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9415'. [ 1110.644487][ T1944] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9413'. [ 1110.698935][ T1944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9413'. [ 1110.835061][ T1936] lo speed is unknown, defaulting to 1000 [ 1110.896997][ T1955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9418'. [ 1110.955940][ T1955] [†’Ì: entered promiscuous mode [ 1111.071405][ T1962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9420'. [ 1111.197497][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9421'. [ 1111.232838][ T1964] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1111.332108][ T1968] FAULT_INJECTION: forcing a failure. [ 1111.332108][ T1968] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.388110][ T1968] CPU: 0 UID: 0 PID: 1968 Comm: syz.6.9423 Not tainted syzkaller #0 PREEMPT(full) [ 1111.388143][ T1968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1111.388158][ T1968] Call Trace: [ 1111.388168][ T1968] [ 1111.388179][ T1968] dump_stack_lvl+0x189/0x250 [ 1111.388215][ T1968] ? __pfx____ratelimit+0x10/0x10 [ 1111.388242][ T1968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.388274][ T1968] ? __pfx__printk+0x10/0x10 [ 1111.388304][ T1968] ? __pfx___might_resched+0x10/0x10 [ 1111.388328][ T1968] ? fs_reclaim_acquire+0x7d/0x100 [ 1111.388378][ T1968] should_fail_ex+0x414/0x560 [ 1111.388419][ T1968] should_failslab+0xa8/0x100 [ 1111.388443][ T1968] __kmalloc_noprof+0xcb/0x7f0 [ 1111.388475][ T1968] ? tomoyo_encode+0x28b/0x550 [ 1111.388515][ T1968] tomoyo_encode+0x28b/0x550 [ 1111.388556][ T1968] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1111.388604][ T1968] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1111.388634][ T1968] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1111.388667][ T1968] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1111.388700][ T1968] ? sb_end_write+0xe9/0x1c0 [ 1111.388726][ T1968] ? vfs_write+0x956/0xb30 [ 1111.388797][ T1968] ? ksys_write+0x1e1/0x250 [ 1111.388834][ T1968] security_file_ioctl+0xcb/0x2d0 [ 1111.388862][ T1968] __se_sys_ioctl+0x47/0x170 [ 1111.388893][ T1968] do_syscall_64+0xfa/0xfa0 [ 1111.388917][ T1968] ? lockdep_hardirqs_on+0x9c/0x150 [ 1111.388944][ T1968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.388966][ T1968] ? clear_bhb_loop+0x60/0xb0 [ 1111.388993][ T1968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.389014][ T1968] RIP: 0033:0x7f5f81d8efc9 [ 1111.389035][ T1968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.389054][ T1968] RSP: 002b:00007f5f82b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.389079][ T1968] RAX: ffffffffffffffda RBX: 00007f5f81fe5fa0 RCX: 00007f5f81d8efc9 [ 1111.389096][ T1968] RDX: 0000000000000000 RSI: 0000000040107446 RDI: 0000000000000003 [ 1111.389110][ T1968] RBP: 00007f5f82b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.389124][ T1968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.389138][ T1968] R13: 00007f5f81fe6038 R14: 00007f5f81fe5fa0 R15: 00007ffcc4489da8 [ 1111.389177][ T1968] [ 1111.389634][ T1968] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1111.946246][ T1972] netlink: 56 bytes leftover after parsing attributes in process `syz.9.9424'. [ 1111.982503][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9424'. [ 1112.048432][ T1985] x_tables: duplicate underflow at hook 3 [ 1112.413425][ T1992] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9432'. [ 1112.445655][ T1992] !: entered promiscuous mode [ 1112.452009][ T1997] netlink: 'syz.1.9434': attribute type 11 has an invalid length. [ 1112.461175][ T1992] vlan2: entered promiscuous mode [ 1112.766403][ T2011] vlan2: entered promiscuous mode [ 1113.791515][ T2042] netlink: 'syz.6.9451': attribute type 1 has an invalid length. [ 1113.895446][ T2042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1114.056874][ T2051] vxcan1 speed is unknown, defaulting to 1000 [ 1114.483129][ T2051] lo speed is unknown, defaulting to 1000 [ 1114.486880][ T2061] vxcan1 speed is unknown, defaulting to 1000 [ 1114.701848][ T2074] FAULT_INJECTION: forcing a failure. [ 1114.701848][ T2074] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.714631][ T2074] CPU: 1 UID: 0 PID: 2074 Comm: syz.1.9461 Not tainted syzkaller #0 PREEMPT(full) [ 1114.714661][ T2074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1114.714674][ T2074] Call Trace: [ 1114.714684][ T2074] [ 1114.714694][ T2074] dump_stack_lvl+0x189/0x250 [ 1114.714730][ T2074] ? __pfx____ratelimit+0x10/0x10 [ 1114.714756][ T2074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.714786][ T2074] ? __pfx__printk+0x10/0x10 [ 1114.714812][ T2074] ? __lock_acquire+0xab9/0xd20 [ 1114.714846][ T2074] should_fail_ex+0x414/0x560 [ 1114.714886][ T2074] should_failslab+0xa8/0x100 [ 1114.714911][ T2074] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 1114.714950][ T2074] ? pfn_valid+0x125/0x4d0 [ 1114.714970][ T2074] ? pfn_valid+0x440/0x4d0 [ 1114.714994][ T2074] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 1114.715047][ T2074] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1114.715079][ T2074] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 1114.715127][ T2074] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1114.715164][ T2074] ? 0xffffffffa0205540 [ 1114.715206][ T2074] ? 0xffffffffa020164c [ 1114.715223][ T2074] ? 0xffffffffa02016c8 [ 1114.715240][ T2074] ? 0xffffffffa0201748 [ 1114.715289][ T2074] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1114.715325][ T2074] ? _copy_from_user+0x94/0xb0 [ 1114.715354][ T2074] ? bpf_test_init+0x113/0x150 [ 1114.715384][ T2074] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1114.715421][ T2074] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 1114.715473][ T2074] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1114.715513][ T2074] ? __fget_files+0x2a/0x420 [ 1114.715539][ T2074] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1114.715573][ T2074] bpf_prog_test_run+0x2c7/0x340 [ 1114.715601][ T2074] __sys_bpf+0x562/0x860 [ 1114.715625][ T2074] ? __pfx___sys_bpf+0x10/0x10 [ 1114.715666][ T2074] ? ksys_write+0x22a/0x250 [ 1114.715702][ T2074] ? __pfx_ksys_write+0x10/0x10 [ 1114.715740][ T2074] __x64_sys_bpf+0x7c/0x90 [ 1114.715775][ T2074] do_syscall_64+0xfa/0xfa0 [ 1114.715802][ T2074] ? lockdep_hardirqs_on+0x9c/0x150 [ 1114.715828][ T2074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.715851][ T2074] ? clear_bhb_loop+0x60/0xb0 [ 1114.715878][ T2074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.715900][ T2074] RIP: 0033:0x7fcbfcb8efc9 [ 1114.715920][ T2074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.715940][ T2074] RSP: 002b:00007fcbfd9bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.715965][ T2074] RAX: ffffffffffffffda RBX: 00007fcbfcde5fa0 RCX: 00007fcbfcb8efc9 [ 1114.715982][ T2074] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1114.715997][ T2074] RBP: 00007fcbfd9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.716017][ T2074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1114.716031][ T2074] R13: 00007fcbfcde6038 R14: 00007fcbfcde5fa0 R15: 00007ffd871875b8 [ 1114.716068][ T2074] [ 1115.212670][ T2082] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1115.216675][ T2083] netlink: 'syz.5.9464': attribute type 39 has an invalid length. [ 1115.317357][ T2061] lo speed is unknown, defaulting to 1000 [ 1115.516757][ T2085] __nla_validate_parse: 9 callbacks suppressed [ 1115.516779][ T2085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9466'. [ 1115.933174][ T2102] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9470'. [ 1115.972844][ T2102] tipc: Enabling of bearer rejected, failed to enable media [ 1116.424193][ T2118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9475'. [ 1116.463520][ T2118] netlink: 'syz.5.9475': attribute type 4 has an invalid length. [ 1116.658928][ T2127] netlink: 'syz.5.9478': attribute type 298 has an invalid length. [ 1116.691813][ T2124] tipc: Enabling of bearer rejected, already enabled [ 1116.709399][ T2124] syzkaller0: entered promiscuous mode [ 1116.715435][ T5150] Bluetooth: hci6: link tx timeout [ 1116.720755][ T5150] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1116.723237][ T2124] syzkaller0: entered allmulticast mode [ 1116.736547][ T5834] Bluetooth: hci6: link tx timeout [ 1116.742677][ T5834] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1116.753266][ T5834] Bluetooth: hci6: link tx timeout [ 1116.758523][ T5834] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1116.802496][ T2126] vxcan1 speed is unknown, defaulting to 1000 [ 1117.030350][ T2126] lo speed is unknown, defaulting to 1000 [ 1117.246719][ T2134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1117.318798][ T2134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1117.347175][ T2140] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9481'. [ 1117.864704][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1118.779901][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 1118.980816][ T2175] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9491'. [ 1119.161299][ T2179] vxcan1 speed is unknown, defaulting to 1000 [ 1119.451264][ T2196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1119.501564][ T2196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1119.831826][ T2212] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1119.869289][ T2212] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 1119.901210][ T2178] vxcan1 speed is unknown, defaulting to 1000 [ 1119.902238][ T2179] lo speed is unknown, defaulting to 1000 [ 1120.422635][ T2178] lo speed is unknown, defaulting to 1000 [ 1120.498626][ T2216] vxcan1 speed is unknown, defaulting to 1000 [ 1120.561810][ T2224] FAULT_INJECTION: forcing a failure. [ 1120.561810][ T2224] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.578713][ T2224] CPU: 1 UID: 0 PID: 2224 Comm: syz.5.9506 Not tainted syzkaller #0 PREEMPT(full) [ 1120.578743][ T2224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1120.578756][ T2224] Call Trace: [ 1120.578764][ T2224] [ 1120.578772][ T2224] dump_stack_lvl+0x189/0x250 [ 1120.578805][ T2224] ? __pfx____ratelimit+0x10/0x10 [ 1120.578831][ T2224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.578861][ T2224] ? __pfx__printk+0x10/0x10 [ 1120.578902][ T2224] should_fail_ex+0x414/0x560 [ 1120.578942][ T2224] should_failslab+0xa8/0x100 [ 1120.578966][ T2224] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1120.578997][ T2224] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1120.579025][ T2224] ? sctp_add_bind_addr+0x8c/0x370 [ 1120.579049][ T2224] ? sctp_add_bind_addr+0xb0/0x370 [ 1120.579083][ T2224] sctp_add_bind_addr+0x8c/0x370 [ 1120.579116][ T2224] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1120.579148][ T2224] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1120.579176][ T2224] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1120.579206][ T2224] ? sctp_v6_is_any+0x64/0x80 [ 1120.579237][ T2224] ? sctp_copy_one_addr+0x93/0x360 [ 1120.579269][ T2224] sctp_bind_addr_copy+0xb3/0x3c0 [ 1120.579298][ T2224] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1120.579326][ T2224] sctp_connect_new_asoc+0x2e0/0x690 [ 1120.579363][ T2224] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1120.579394][ T2224] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1120.579436][ T2224] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1120.579460][ T2224] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1120.579491][ T2224] sctp_sendmsg+0x155c/0x2810 [ 1120.579539][ T2224] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1120.579577][ T2224] ? aa_sk_perm+0x81e/0x950 [ 1120.579608][ T2224] ? __lock_acquire+0xab9/0xd20 [ 1120.579634][ T2224] ? __pfx_aa_sk_perm+0x10/0x10 [ 1120.579672][ T2224] ? sock_rps_record_flow+0x19/0x410 [ 1120.579708][ T2224] ? inet_sendmsg+0x2f4/0x370 [ 1120.579744][ T2224] __sock_sendmsg+0x19c/0x270 [ 1120.579776][ T2224] ____sys_sendmsg+0x52d/0x830 [ 1120.579806][ T2224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.579839][ T2224] ? import_iovec+0x74/0xa0 [ 1120.579870][ T2224] ___sys_sendmsg+0x21f/0x2a0 [ 1120.579895][ T2224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1120.579961][ T2224] ? __fget_files+0x2a/0x420 [ 1120.579980][ T2224] ? __fget_files+0x3a0/0x420 [ 1120.580014][ T2224] __sys_sendmmsg+0x227/0x430 [ 1120.580044][ T2224] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1120.580079][ T2224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1120.580129][ T2224] ? ksys_write+0x22a/0x250 [ 1120.580164][ T2224] ? __pfx_ksys_write+0x10/0x10 [ 1120.580202][ T2224] __x64_sys_sendmmsg+0xa0/0xc0 [ 1120.580227][ T2224] do_syscall_64+0xfa/0xfa0 [ 1120.580252][ T2224] ? lockdep_hardirqs_on+0x9c/0x150 [ 1120.580278][ T2224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.580299][ T2224] ? clear_bhb_loop+0x60/0xb0 [ 1120.580326][ T2224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.580347][ T2224] RIP: 0033:0x7f196db8efc9 [ 1120.580368][ T2224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.580387][ T2224] RSP: 002b:00007f196ea5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1120.580411][ T2224] RAX: ffffffffffffffda RBX: 00007f196dde5fa0 RCX: 00007f196db8efc9 [ 1120.580436][ T2224] RDX: 0000000000000001 RSI: 0000200000002800 RDI: 0000000000000005 [ 1120.580450][ T2224] RBP: 00007f196ea5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.580463][ T2224] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 1120.580476][ T2224] R13: 00007f196dde6038 R14: 00007f196dde5fa0 R15: 00007ffd9b551408 [ 1120.580513][ T2224] [ 1121.735114][ T2216] lo speed is unknown, defaulting to 1000 [ 1122.870897][ T2266] __nla_validate_parse: 5 callbacks suppressed [ 1122.870922][ T2266] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9518'. [ 1122.961836][ T2269] x_tables: duplicate underflow at hook 1 [ 1123.067685][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9521'. [ 1123.124039][ T2273] openvswitch: netlink: Key type 1798 is out of range max 32 [ 1123.229230][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9523'. [ 1123.318314][ T2285] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9524'. [ 1123.472147][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9528'. [ 1123.487341][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9528'. [ 1123.523243][ T2285] IPVS: Error connecting to the multicast addr [ 1123.707712][ T2298] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9530'. [ 1123.899364][ T2306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1123.988436][ T2306] bond0: entered promiscuous mode [ 1123.999565][ T2317] netlink: 5548 bytes leftover after parsing attributes in process `syz.6.9536'. [ 1124.020462][ T2306] bond_slave_0: entered promiscuous mode [ 1124.038277][ T2306] bond_slave_1: entered promiscuous mode [ 1124.068078][ T2306] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1124.078168][ T2306] bond0: left promiscuous mode [ 1124.086559][ T2306] bond_slave_0: left promiscuous mode [ 1124.096914][ T2306] bond_slave_1: left promiscuous mode [ 1124.166370][ T2320] ip6tnl2: entered promiscuous mode [ 1124.171808][ T2320] ip6tnl2: entered allmulticast mode [ 1124.178431][ T2320] team0: Device ip6tnl2 is of different type [ 1124.387112][ T2333] xt_connbytes: Forcing CT accounting to be enabled [ 1124.487345][ T2337] netlink: 'syz.1.9543': attribute type 30 has an invalid length. [ 1124.514858][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9542'. [ 1125.346905][ T2371] vxcan1: entered allmulticast mode [ 1125.508284][ T2375] xt_cluster: node mask cannot exceed total number of nodes [ 1125.740796][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 1126.868245][ T2420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.961994][ T2428] vxcan1 speed is unknown, defaulting to 1000 [ 1127.020007][ T31] INFO: task syz.0.8079:30385 blocked for more than 143 seconds. [ 1127.028047][ T31] Not tainted syzkaller #0 [ 1127.044997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1127.054008][ T31] task:syz.0.8079 state:D stack:25824 pid:30385 tgid:30383 ppid:28409 task_flags:0x400140 flags:0x00080002 [ 1127.069545][ T31] Call Trace: [ 1127.073896][ T31] [ 1127.076964][ T31] __schedule+0x1798/0x4cc0 [ 1127.081945][ T31] ? __lock_acquire+0xab9/0xd20 [ 1127.086959][ T31] ? __lock_acquire+0xab9/0xd20 [ 1127.092148][ T31] ? __pfx___schedule+0x10/0x10 [ 1127.097565][ T31] ? schedule+0x91/0x360 [ 1127.102977][ T31] schedule+0x165/0x360 [ 1127.107261][ T31] schedule_preempt_disabled+0x13/0x30 [ 1127.114366][ T31] __mutex_lock+0x7e6/0x1350 [ 1127.119093][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1127.124330][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1127.130922][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1127.136201][ T31] ? net_generic+0x1e/0x240 [ 1127.146366][ T31] ? net_generic+0x1e/0x240 [ 1127.153334][ T31] ? net_generic+0x1e/0x240 [ 1127.158418][ T31] ? net_generic+0x1e/0x240 [ 1127.164282][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1127.170354][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1127.176209][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1127.186737][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1127.192637][ T31] ? security_capable+0x7e/0x2e0 [ 1127.197858][ T31] genl_rcv_msg+0x60e/0x790 [ 1127.202714][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1127.208006][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1127.214286][ T31] netlink_rcv_skb+0x208/0x470 [ 1127.219313][ T31] ? __lock_acquire+0xab9/0xd20 [ 1127.225562][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1127.230933][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1127.236521][ T31] ? down_read+0x1ad/0x2e0 [ 1127.241376][ T31] genl_rcv+0x28/0x40 [ 1127.246636][ T31] netlink_unicast+0x82f/0x9e0 [ 1127.257980][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1127.263846][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1127.268977][ T31] ? skb_put+0x11b/0x210 [ 1127.273450][ T31] netlink_sendmsg+0x805/0xb30 [ 1127.278451][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1127.284892][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1127.290341][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1127.295833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1127.301561][ T31] __sock_sendmsg+0x21c/0x270 [ 1127.306434][ T31] ____sys_sendmsg+0x505/0x830 [ 1127.312225][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1127.317723][ T31] ? import_iovec+0x74/0xa0 [ 1127.322688][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1127.327517][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1127.333444][ T31] ? __fget_files+0x2a/0x420 [ 1127.338195][ T31] ? __fget_files+0x3a0/0x420 [ 1127.344177][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1127.349283][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1127.355101][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1127.360596][ T31] do_syscall_64+0xfa/0xfa0 [ 1127.365315][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.371213][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.377394][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1127.382270][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.388217][ T31] RIP: 0033:0x7f8e16d8efc9 [ 1127.392726][ T31] RSP: 002b:00007f8e17cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.401939][ T31] RAX: ffffffffffffffda RBX: 00007f8e16fe5fa0 RCX: 00007f8e16d8efc9 [ 1127.410105][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 1127.418199][ T31] RBP: 00007f8e16e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1127.426661][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.435327][ T31] R13: 00007f8e16fe6038 R14: 00007f8e16fe5fa0 R15: 00007ffca199a358 [ 1127.443632][ T31] [ 1127.446737][ T31] [ 1127.446737][ T31] Showing all locks held in the system: [ 1127.483644][ T2428] lo speed is unknown, defaulting to 1000 [ 1127.489122][ T31] 1 lock held by khungtaskd/31: [ 1127.495422][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1127.533806][ T31] 2 locks held by getty/5592: [ 1127.538705][ T31] #0: ffff88814caa10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1127.548972][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1127.560911][ T31] 3 locks held by kworker/u9:3/5834: [ 1127.566452][ T31] #0: ffff888022352948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1127.579042][ T31] #1: ffffc900040afba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1127.593085][ T31] #2: ffff888025128dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1127.603377][ T31] 2 locks held by syz.8.7295/27970: [ 1127.608616][ T31] #0: ffffffff8f330db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1127.616992][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1127.627499][ T31] 2 locks held by syz.0.8079/30385: [ 1127.633230][ T31] #0: ffffffff8f330db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1127.641901][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1127.652491][ T31] 1 lock held by syz.1.9564/2403: [ 1127.657554][ T31] #0: ffffffff8df42c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1127.667883][ T31] [ 1127.673215][ T31] ============================================= [ 1127.673215][ T31] [ 1127.682176][ T31] NMI backtrace for cpu 0 [ 1127.682198][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1127.682224][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1127.682239][ T31] Call Trace: [ 1127.682248][ T31] [ 1127.682257][ T31] dump_stack_lvl+0x189/0x250 [ 1127.682297][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1127.682329][ T31] ? __pfx__printk+0x10/0x10 [ 1127.682367][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1127.682404][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1127.682442][ T31] ? __pfx__printk+0x10/0x10 [ 1127.682470][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1127.682507][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1127.682545][ T31] watchdog+0xf60/0xfa0 [ 1127.682574][ T31] ? watchdog+0x1e2/0xfa0 [ 1127.682603][ T31] kthread+0x711/0x8a0 [ 1127.682637][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.682658][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.682690][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.682715][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.682738][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.682768][ T31] ret_from_fork+0x4bc/0x870 [ 1127.682795][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1127.682825][ T31] ? __switch_to_asm+0x39/0x70 [ 1127.682843][ T31] ? __switch_to_asm+0x33/0x70 [ 1127.682859][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.682890][ T31] ret_from_fork_asm+0x1a/0x30 [ 1127.682939][ T31] [ 1127.682949][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1127.833690][ C1] NMI backtrace for cpu 1 [ 1127.833709][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1127.833730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1127.833743][ C1] Workqueue: bat_events batadv_tt_purge [ 1127.833768][ C1] RIP: 0010:kasan_check_range+0xe/0x2c0 [ 1127.833790][ C1] Code: ff ff eb e1 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 53 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 49 39 f8 0f 82 82 02 [ 1127.833807][ C1] RSP: 0018:ffffc900001178e8 EFLAGS: 00000256 [ 1127.833823][ C1] RAX: 00000000ffffff01 RBX: ffff88804b602b80 RCX: ffffffff819df711 [ 1127.833837][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000117960 [ 1127.833850][ C1] RBP: ffffc900001179c8 R08: ffff88804b602b83 R09: 1ffff110096c0570 [ 1127.833864][ C1] R10: dffffc0000000000 R11: ffffed10096c0571 R12: ffff88804b602b90 [ 1127.833878][ C1] R13: ffff88804b602b88 R14: 1ffff110096c0572 R15: 1ffff110096c0571 [ 1127.833893][ C1] FS: 0000000000000000(0000) GS:ffff888126241000(0000) knlGS:0000000000000000 [ 1127.833909][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.833922][ C1] CR2: 00007fdbecdb12f8 CR3: 000000004ccd8000 CR4: 00000000003526f0 [ 1127.833938][ C1] Call Trace: [ 1127.833946][ C1] [ 1127.833957][ C1] do_raw_spin_lock+0x121/0x290 [ 1127.833986][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1127.834014][ C1] ? batadv_tt_purge+0x11b/0x9e0 [ 1127.834035][ C1] batadv_tt_purge+0x11b/0x9e0 [ 1127.834059][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1127.834081][ C1] process_scheduled_works+0xae1/0x17b0 [ 1127.834118][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1127.834148][ C1] worker_thread+0x8a0/0xda0 [ 1127.834183][ C1] kthread+0x711/0x8a0 [ 1127.834210][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1127.834230][ C1] ? __pfx_kthread+0x10/0x10 [ 1127.834255][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.834276][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.834297][ C1] ? __pfx_kthread+0x10/0x10 [ 1127.834321][ C1] ret_from_fork+0x4bc/0x870 [ 1127.834342][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1127.834365][ C1] ? __switch_to_asm+0x39/0x70 [ 1127.834381][ C1] ? __switch_to_asm+0x33/0x70 [ 1127.834396][ C1] ? __pfx_kthread+0x10/0x10 [ 1127.834421][ C1] ret_from_fork_asm+0x1a/0x30 [ 1127.834447][ C1]