last executing test programs: 19m58.56748947s ago: executing program 2 (id=4567): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000880), 0x0, 0x12020, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 19m57.602327677s ago: executing program 2 (id=4575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 19m57.353278923s ago: executing program 2 (id=4577): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000880), 0x0, 0x12020, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 19m56.575260446s ago: executing program 2 (id=4580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xff, 0x12}, 0x2c) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x85, 0x6, @broadcast}, 0x14) 19m56.385851881s ago: executing program 2 (id=4581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd70003c02000002"], 0x1c}}, 0x0) 19m56.258957121s ago: executing program 2 (id=4582): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x20, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, r9, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r10, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 19m42.239921092s ago: executing program 32 (id=4576): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc080) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x3, r1}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c000006fb00000427bd4bb9ffdbdf10021820fd", @ANYRES32, @ANYBLOB="140006000f00000000100000f8ffffffffffffff08000200ac1e010114000300776731000000000000000000000000001400030076657468315f746f5f7465616d000000140006000800000000080000020000000300000014000600030000000500000007000000001800000800010064010100"], 0x8c}}, 0x800) unshare(0x40600) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xfffffffffffffffd}, 0x94) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0x0, 0x0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x4, 0x0}, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x49db08f2e5bf3206}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000980)='wg1\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)={@map=0x1, r6, 0x7, 0x2028, 0x0, @void, @void, @value=r10}, 0x20) 19m42.104851793s ago: executing program 33 (id=4574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4}, 0x20) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x134, 0x134, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xf45}}, @datasec={0x5, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x7, 0xce7}], "8d0ccf"}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x3, 0x6, 0x189}, {0x9, 0xc075, 0x4}]}, @var={0xc, 0x0, 0x0, 0xe, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @datasec={0x9, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x10000, 0x3}, {0x1, 0x2, 0x7}, {0x4, 0x1, 0x2}], "1b"}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x5, 0x5}, {0xa, 0x5, 0x7fffffff}, {0x8, 0x3, 0x81}, {0x7, 0x4, 0x8}, {0xb, 0x3, 0x1000}, {0x3, 0x2, 0xfff}]}, @enum64={0x8, 0x2, 0x0, 0x13, 0x1, 0xb, [{0x9, 0x5e, 0xc1}, {0x7, 0x77, 0x1000}]}, @const={0x9, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x10, 0x5f, 0x61]}}, &(0x7f0000000900)=""/138, 0x151, 0x8a, 0x1, 0x1, 0x10000}, 0x28) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r6, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x16c2, @private2, 0x80000000}}, 0xfdf, 0x9}, &(0x7f0000000200)=0x90) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 19m41.174578918s ago: executing program 34 (id=4582): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x20, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, r9, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r10, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 13m16.543231871s ago: executing program 6 (id=7761): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) listen(r2, 0x4) 13m15.41789681s ago: executing program 6 (id=7766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900080006000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000000), &(0x7f0000000880)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000940)="619443", &(0x7f0000000a40)=""/106}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x8, 0x20}, &(0x7f0000000300)=0xc) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f0000000200)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0xfffffffffffffffc, {0x2, 0xff, 0x3}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081) 13m15.279644264s ago: executing program 6 (id=7768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000012000701000000000000000028001a000a01010200000000000080ffffff00000a010100003eedf3896da5bd71518b2f15b871"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 13m15.253287246s ago: executing program 6 (id=7769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000001640)=ANY=[], 0x204) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 13m14.962962121s ago: executing program 6 (id=7771): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060300000000000000009500a0072c90618200070000000900020073797a3100000000140007800800130000000fff08001240000000000500050000000000050004000000000015000300686173683a69702c706f72742cd0e530f37cbb0d8a66e4bd1da926ab6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a8008001e802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r8], 0x44}}, 0x2000800) 13m14.334665275s ago: executing program 6 (id=7775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='btrfs_convert_extent_bit\x00', r6, 0x0, 0x1}, 0x18) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) (fail_nth: 10) 13m13.95365729s ago: executing program 35 (id=7775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='btrfs_convert_extent_bit\x00', r6, 0x0, 0x1}, 0x18) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) (fail_nth: 10) 12m14.762771893s ago: executing program 8 (id=8199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000c5"], 0x0, 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0xa11}}], 0x18}}], 0x2, 0x4) 12m14.511141696s ago: executing program 8 (id=8206): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$inet(0x2, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000140)={'bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x170, 0x2, [@TCA_BASIC_EMATCHES={0x16c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x1}, "758d85df2866e00480ad6be43ffbf3b7d9096980df2f2868c492c85433e7e39d618514f7acf016dd6ffb3498008fc2852bbca2ddd87060fc1cfcb19581aee885e0706ddaeab11f9e0223d560618ab237ecf4dda9cb280711d276e690fdf16e575be0cebd05ce2f1ee6377f0ab720ddb6f015fabbf5820061a1"}}, @TCF_EM_U32={0x1c, 0x6, 0x0, 0x0, {{0xa, 0x3, 0x1}, {0x5, 0x7fffffff, 0x6, 0x3}}}, @TCF_EM_CONTAINER={0x28, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x5}, "b4cf7b778affdc43706aa825eaf24c7f73b58bee69d6c010399d"}}, @TCF_EM_META={0x54, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR="17a90908", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="6027337e4d1ed9e596", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="388adff62159382b92"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2d5, 0x3}, {0x5, 0x5}}}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ef16e7513a0399ebcd7f", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x10}, {{0x3, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0xcc}, {0xffff, 0x2, 0x0, "18f9"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x1a0}}, 0x20040054) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000000)=0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 12m13.693548069s ago: executing program 8 (id=8211): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000001a00"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='contention_end\x00', r2}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) (async) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) 12m13.183636868s ago: executing program 8 (id=8215): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbdfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x2, &(0x7f0000000040)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000240)=r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x10d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x201}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r11, 0x325}, 0x14}}, 0x0) write$tun(r8, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0xe, 0x6, "74dd16", 0x2c, 0x6, 0x0, @remote, @loopback, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x1, 0x8, 0x4, 0x1, 0x9, 0x3, 0x2, 0x4e24, 0x4e24}, 0x3, 0x3}, 0x3, 0x2}, 0x2}}}}}}}}}}, 0x66) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000300)=r12) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900011073797a300000000040000000160a0100000011f359182d2393bc40000000010073797a30000000000900020073797a3000000000140001800800014000000000f2ff02400000000030000000160a0101000b000000000000010000000900020073797a30000000000901010073797a3000009b412a7e0380140000001000010000000000000000000000000a"], 0xb8}}, 0x800) 12m12.501038035s ago: executing program 8 (id=8221): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$inet(0x2, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000140)={'bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x170, 0x2, [@TCA_BASIC_EMATCHES={0x16c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x1}, "758d85df2866e00480ad6be43ffbf3b7d9096980df2f2868c492c85433e7e39d618514f7acf016dd6ffb3498008fc2852bbca2ddd87060fc1cfcb19581aee885e0706ddaeab11f9e0223d560618ab237ecf4dda9cb280711d276e690fdf16e575be0cebd05ce2f1ee6377f0ab720ddb6f015fabbf5820061a1"}}, @TCF_EM_U32={0x1c, 0x6, 0x0, 0x0, {{0xa, 0x3, 0x1}, {0x5, 0x7fffffff, 0x6, 0x3}}}, @TCF_EM_CONTAINER={0x28, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x5}, "b4cf7b778affdc43706aa825eaf24c7f73b58bee69d6c010399d"}}, @TCF_EM_META={0x54, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR="17a90908", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="6027337e4d1ed9e596", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="388adff62159382b92"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2d5, 0x3}, {0x5, 0x5}}}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ef16e7513a0399ebcd7f", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x10}, {{0x3, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0xcc}, {0xffff, 0x2, 0x0, "18f9"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x1a0}}, 0x20040054) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000000)=0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 12m11.451442556s ago: executing program 8 (id=8227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x2c020400) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m11.033958285s ago: executing program 36 (id=8227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x2c020400) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m6.193033497s ago: executing program 7 (id=12691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000140), &(0x7f0000000180)=""/120, &(0x7f0000000340)="4013072e", &(0x7f00000003c0), 0xffffffff, 0x1, 0x4}, 0x38) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x5d) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000440)="9bb4eaa7111f9aea9f642a41096cfc29dea922967c4ed36bec79e9ebef780547d39f777b3c0e8eedbca2c1f2f72905381f9f08cd899ae88f4991865321fcc5f3e3377228a00017107222373b47f4f7e41676"}, 0x20) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 4m5.728209957s ago: executing program 7 (id=12694): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close(0x4) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x61d8, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, 0x0, 0x0, 0x400) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r3, 0x4, 0x7fff, 0x0, 0x0) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) 4m2.926868546s ago: executing program 7 (id=12715): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x48, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x40080) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x190, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10c18ddc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48770800}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f6393bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x618}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x496fdb1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7494}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5862}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c52c8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49858360}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x97ce4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77919d83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa699}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f68b15d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79aa0438}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x243d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x242}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c900e96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6248}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbe330d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a89669b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e24f43b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fac949a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x435d792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fd0b707}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x161c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff048a2}]}]}]}, 0x190}}, 0x15) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4m1.583094607s ago: executing program 7 (id=12728): sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYRES16=0x0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) (async) accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c0) (rerun: 32) socket(0x10, 0x80002, 0x0) 4m1.311615659s ago: executing program 7 (id=12730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240011030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4090, 0xffa}], 0x1}, 0xacd2}], 0x1, 0x10000, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x802, 0x1) write(r5, &(0x7f0000000440)="08008edf773c8000", 0x8) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000180000001801000020ff642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ff000000000099308d35a2c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e541400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0xbb728fc5b9cfbb51}, 0x24000840) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206010200000000000000000000000009000200c6797a31000000000c0007800800120000000000050005000a000000050004000047050000000300686173683a6e65742c6e65740000000005000100070000009f3ffc6b198bcdee70200e8c3f5e0befa6f71bc22002c7d013999845144ccbdd1cb34b152cc636be9983f49e67b6a78d87d489d6299ef66dc5401f1627c396ee53e425cf826b9197f934dedf449809506ffa07a23c023367fc24191fcd8da93ddc3984cd1961be8c815c30509aa54a0fd46dd9f252dc6f0f8171182c8ec0a5a40600000020d322a03c80fb5df23adcccfe405c65328f4b586800880569cca9286394ab0f7d"], 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x24000804) (async) read(r9, &(0x7f0000000040)=""/225, 0xe1) (async) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000065009fb3000000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) 4m1.011149688s ago: executing program 7 (id=12735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x60) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="f5af24bd7009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001000000f400f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3m45.887997683s ago: executing program 37 (id=12735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x60) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="f5af24bd7009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001000000f400f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m42.346771023s ago: executing program 9 (id=13375): r0 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}]}, {0x0, [0x2e, 0x61, 0x20]}}, 0x0, 0x20, 0x0, 0x1, 0x7}, 0x28) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 2m42.020077521s ago: executing program 9 (id=13377): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ff000000000099308d35a2c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2}) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000cc0)=0x8001, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m41.874484773s ago: executing program 9 (id=13381): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x20c, 0x7, {r2, r3/1000+60000}, {}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x24, 0x2, 0x0, 0x0, "a79b2f4a1cca10a69f3458b6fb2b595c9d1ca355cb147d34e085caea3349282152721af5cf578c21658066141ea44d93e8ca2fdc7c0d000a79e07eb0b5285905"}}, 0x80}, 0x1, 0x0, 0x0, 0x9bbb002d500b8911}, 0x2404c001) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000002c0)={0x4, 0x8001}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x15, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x32, 0x8, "1cea90ef2de492ebffaa92355dae15910a68e59b5708d499739446f524561088da533f6360f47ff5a57c7b4dab7c"}, @NFTA_OBJ_USERDATA={0x17, 0x8, "cd1382b3292c120a8854b87e9b4307c1c15295"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)=0x0) sendmsg$nl_netfilter(r4, &(0x7f00000016c0)={&(0x7f0000000480), 0xc, &(0x7f0000001680)={&(0x7f0000000500)={0x1170, 0x13, 0x2, 0x201, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x7}, [@typed={0x1004, 0x8b, 0x0, 0x0, @binary="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"}, @nested={0x83, 0x74, 0x0, 0x1, [@generic="364594cd1dec100c016c849e9f326eef97161a9645df64ae2ac58e064752e07822d52944c4277911488150336b11d5774876ec61ec61c2a74edae8084c0f6215f69df2830725c347b427aed6182893551fa19e7d6b090aedec14a8d8114597", @nested={0x4, 0xc0}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x4b4}, @typed={0x8, 0x24, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x102, 0x0, 0x0, @fd=r4}]}, @typed={0x4, 0x26}, @nested={0xd0, 0x54, 0x0, 0x1, [@generic="610e070829ff821ae297ebddb597b20166f01036e696918a082089612b96a8eb8caa9e5288171479488673c09979f94c6ac210cbed8b009d0f2105c31124e5f5299173205c694d4cfd951bfd877b02fc5288df8d575b7ef3df9a1f9fbb072292d3b23907cf6d5cd4acc4f8274d517a8d00f6c8214dd5e65f61ec91d08ea24fad0ccfa78cf254820c6fd8f90e67f3dc4233c0db599ad1e4c25ccde8b786e1aeb86476058580c6613cfb43ae95a748556d50fa531b9ea5702c922b914034e81d5529fe9386", @nested={0x4, 0xe8}, @nested={0x4, 0xa4}]}]}, 0x1170}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080d1) socket$inet_sctp(0x2, 0x1, 0x84) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000001700)) bind$inet(r6, &(0x7f0000001740)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)=@newae={0x164, 0x1e, 0x100, 0x70bd26, 0x25dfdbfc, {{@in6=@mcast1, 0x4d2, 0xa, 0xff}, @in=@private=0xa010100, 0x6, 0x3505}, [@offload={0xc, 0x1c, {r1, 0x3}}, @sa={0xe4, 0x6, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24, 0x400, 0x4e21, 0xf243, 0x2, 0x1a0, 0x20, 0x3b, r1}, {@in=@multicast1, 0x4d6, 0x2b}, @in=@broadcast, {0x400, 0x6, 0x1, 0x5, 0x6, 0x6, 0x92ef, 0x5}, {0xc7, 0x0, 0x1, 0x63bf}, {0x54, 0x3, 0x8}, 0x70bd2b, 0x0, 0x2, 0x3, 0x25, 0x86}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0xa}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x40041}, 0x4000001) sendmsg$nl_generic(r4, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a00)={0x130, 0x15, 0x205, 0x70bd2b, 0x25dfdbfd, {0x5}, [@typed={0x7, 0x40, 0x0, 0x0, @str='-N\x00'}, @nested={0x18, 0x149, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @fd=r7}, @nested={0x4, 0xd0}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r6}]}, @typed={0x4, 0x6}, @generic="ba2da1691e3c20157a047ba9da6c8bff7d1fab00e49549435d7985381ca536f5e73430a34365325146b91f1070dbf551ef7d4ec876e144979fb80354e11c8be8df0cd7897cedb0e5a1ddb1086c32c2a6107a9053454c8163f6fe708fe006b01254afd72a751578fb189921c99268ed5d62cdbeef2cf839a6b2de3f17bccb8b7b98fd0b05a26d68eae98d00476bca858e037a46748bf959f829f2eff30bae921ba7a36a048d020c7b3ba414e641b689a531bac4f10b0b0900aa260ddbdbf419c8052811a39240121af07aae92e1c716ab834162181a0343bd1938c62e094ddda5777203ba6ef0f6f36d5de13f2cafe0", @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001c00)={'team0\x00', &(0x7f0000001bc0)=@ethtool_ringparam={0x11, 0x2, 0x3, 0x9, 0xfffffffc, 0x5906, 0x6, 0x3, 0x5}}) socketpair(0x4, 0x6, 0x394, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(r8, &(0x7f0000001c80)={0x1d, r1}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000001cc0)={0x0, 0x9e, "532ceec24040a85353c87122107624fa18794b70f20ddd9e5918f997edf9337450a45e7c58b9c2a0bc8045e2a2b34513776b2886f4c0d7c0d1f0fc2d3b2274dbc9a36203ebc74ba473ff9f3a1c62ec07cbaeabfcb3e054dcfe89f5d4e7ce914d38d2957e1aa897e145567b03345310fbbd9e5e90b988ce16e2fb9079e7e132f1ca137b751704719d36366b92920fdbdcf0b059283d5cd0d152e2602fa6f7"}, &(0x7f0000001d80)=0xa6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001e80)={r10, 0xac, &(0x7f0000001dc0)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x5, @private2, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @private0, 0x9}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xfffffbff, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000001ec0)=0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000001f00)=0x100000000, 0x8) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000001f40)={r10, 0x4}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001f80), &(0x7f0000001fc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000020c0)={{r12}, &(0x7f0000002040), &(0x7f0000002080)}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xb}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r13 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r13, &(0x7f0000005600)=[{{&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)=""/125, 0x7d}], 0x1, &(0x7f0000002380)=""/240, 0xf0}, 0x9}, {{&(0x7f0000002480)=@ieee802154, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002500)=""/228, 0xe4}, {&(0x7f0000002600)=""/246, 0xf6}, {&(0x7f0000002700)=""/24, 0x18}, {&(0x7f0000002740)=""/187, 0xbb}, {&(0x7f0000002800)=""/34, 0x22}, {&(0x7f0000002840)=""/182, 0xb6}, {&(0x7f0000002900)=""/148, 0x94}], 0x7, &(0x7f0000002a40)=""/90, 0x5a}, 0x2}, {{&(0x7f0000002ac0)=@nl=@unspec, 0x80, &(0x7f0000003300)=[{&(0x7f0000002b40)=""/145, 0x91}, {&(0x7f0000002c00)=""/188, 0xbc}, {&(0x7f0000002cc0)=""/175, 0xaf}, {&(0x7f0000002d80)=""/209, 0xd1}, {&(0x7f0000002e80)=""/207, 0xcf}, {&(0x7f0000002f80)=""/106, 0x6a}, {&(0x7f0000003000)=""/85, 0x55}, {&(0x7f0000003080)=""/131, 0x83}, {&(0x7f0000003140)=""/176, 0xb0}, {&(0x7f0000003200)=""/252, 0xfc}], 0xa, &(0x7f00000033c0)=""/43, 0x2b}, 0x5}, {{&(0x7f0000003400)=@vsock, 0x80, &(0x7f0000004900)=[{&(0x7f0000003480)=""/224, 0xe0}, {&(0x7f0000003580)=""/234, 0xea}, {&(0x7f0000003680)=""/80, 0x50}, {&(0x7f0000003700)=""/46, 0x2e}, {&(0x7f0000003740)=""/168, 0xa8}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/205, 0xcd}], 0x7}}, {{&(0x7f0000004980)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004a00)=""/42, 0x2a}, {&(0x7f0000004a40)=""/239, 0xef}, {&(0x7f0000004b40)=""/239, 0xef}, {&(0x7f0000004c40)=""/59, 0x3b}, {&(0x7f0000004c80)=""/44, 0x2c}], 0x5, &(0x7f0000004d40)=""/163, 0xa3}, 0x3}, {{&(0x7f0000004e00)=@rc={0x1f, @none}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004e80)=""/64, 0x40}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)=""/183, 0xb7}], 0x3, &(0x7f0000005000)=""/229, 0xe5}, 0x10001}, {{&(0x7f0000005100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005540)=[{&(0x7f0000005180)=""/191, 0xbf}, {&(0x7f0000005240)=""/20, 0x14}, {&(0x7f0000005280)=""/234, 0xea}, {&(0x7f0000005380)=""/192, 0xc0}, {&(0x7f0000005440)=""/222, 0xde}], 0x5, &(0x7f00000055c0)=""/28, 0x1c}, 0x3}], 0x7, 0x40002100, 0x0) 2m40.851476609s ago: executing program 9 (id=13393): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe1, 0x31}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008880) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r8], 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe1, 0x31}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008880) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) (async) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r8], 0x40}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) (async) 2m40.575653566s ago: executing program 9 (id=13398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x7f, 0xfff, "c6c7e24e9912c3d74a24975bafbc87416ef49eca7d0489c57299ebde9289fa4ca09c02c1b9d50cfbda846a4aec741c583d3deba742aaf9ad439ed5d1913cf58cb1837726fda931a5c6bcde0e04f90c48827fe5248ad0bf21e3a025df172e47d1e31e9a603a5f599b1926ba4d998e92da53318a0cc84ddd24a07248e0340f8668a5132ef1076b6a15fc4c990acfa97d94ed452bd0d783bc9755e75d6b54037102339d4f77a1137d0d94c300f1208b595cf8354fa222c0254120f63b5f6f08b9a84e59834de70f44f39fed14bc25d683365956dfd24a002f2c6580e26273ca56b3940715f2868dbfeb45ea4c84377bbf736778532260f62e1fd0"}, 0x101, 0x4000000, &(0x7f0000000280)={0x22, 0x81, 0x7, 0x9d, 0x6}, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x8, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x800000000000000}, {0x0, 0x7ff}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) (rerun: 64) 2m40.030425467s ago: executing program 9 (id=13405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x60) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="f5af24bd7009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m24.808810047s ago: executing program 38 (id=13405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x60) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="f5af24bd7009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.499493318s ago: executing program 4 (id=14672): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0x81, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000200001000000000000000000020020000300000400000000b7664deb98e62667edf30213d6bd3dc55ea60da69aa1d9acebddc008551c50f3883a94870b2789dc680f029e2cf673a35c6f5ec552736f45d895b6742ee727df891ad910ba8c6a3a92faacc03629d22d3cfcd01182149202a393ecce17ca27938aae0053f4488fa3b644a034afb7fcc580c9c306c92d924f2dd059826fbf6c5e597832000bb4618d1bc8104f4a8ade6678a734ea46aa688736e6393d72db74238e0d36f794b4225bf2a6a165ce4ed335ed39f4bf859e65cf5bee30060110df1e8612019e14357bcceea312de611246dba3fe4a3a4ecbdadeb18b0bbe9220a40014333f2e55fccb3604a7321629756d74d0c4b93f3dedbcd3b3aeef669fd49ccdefb7198e4bd8ab5a249a3d97d3ecf2ec97883ee4c02e4bd1df85fd7fd41188c819e124b780a10218f7e37db6436c775ccf138a9fe05ec94c96ea52b8ccdd7d04b8861719031ebcf4bae244785a53dd6c861b551201cb495d308913e7784b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r12, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r13 = socket(0x10, 0x803, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@deltfilter={0x490, 0x2d, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xe, 0x9}, {0xf, 0x1}, {0x4, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x45c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0\x00'}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x163, 0x0, 0x5, 0x6, 0x9, 0x8, 0x1, 0x7fff, 0x8, 0x401, 0x8, 0x8, 0x8, 0x8001, 0xfffff91b, 0x8, 0x3, 0x800, 0x5, 0x1, 0x8000, 0x7, 0x1, 0x9, 0x9, 0x4, 0x8, 0x7, 0x2, 0x2, 0x8ab50000, 0xfffffff8, 0x2, 0x5, 0x9, 0x4, 0x103, 0x1, 0x2, 0x7f, 0x200, 0xe6, 0xfff, 0xb, 0x7ff, 0x4, 0x3, 0x0, 0xf6, 0x7fff, 0x2, 0xe82, 0x6036, 0x2, 0x80000001, 0x8001, 0x8, 0x6, 0x6676, 0xfffff800, 0x185, 0xfffffffd, 0x5, 0x4, 0x3ff, 0x9, 0x800, 0xfc, 0x9, 0x2, 0x200, 0x7ff, 0x7, 0xa, 0x10001, 0x6, 0x10001, 0xfffffca1, 0x6, 0xfae, 0x7f, 0x3ff, 0x9, 0x7, 0xd67, 0x6, 0x4, 0x7fff, 0x6, 0xfffffffb, 0x8, 0x5, 0x2ef0, 0x3, 0x1, 0x8, 0x7fffffff, 0x8, 0x6, 0x3ff, 0x8, 0x10001, 0x29, 0x8, 0x81d, 0x8000, 0xd, 0x7, 0x4, 0xfffffff7, 0xe27, 0x1, 0x1, 0x54f, 0x2, 0x6, 0xc, 0xfffffff1, 0x401, 0xdf, 0x1, 0x3, 0x2, 0x3, 0xffffffff, 0x80000000, 0x0, 0x8, 0x0, 0x7f, 0x1120, 0x3, 0xfff, 0xfffffff3, 0x9, 0xfff, 0xfffffff8, 0xfa4, 0x0, 0x450, 0x8, 0x6202b3f6, 0x6, 0x9c74, 0x7fff, 0x53546a1d, 0xe, 0x5, 0x7, 0x6, 0x1, 0x4, 0x7, 0x0, 0x4, 0x8, 0x1, 0x5, 0x100, 0x10001, 0x7f, 0xb3, 0x10001, 0x7fff, 0x5, 0x6, 0x7, 0xf, 0x0, 0x0, 0x400, 0x3, 0x1, 0x5, 0x0, 0x3, 0x1, 0x4, 0x87f0, 0x3, 0x8, 0x9, 0x5, 0x6, 0x105, 0xc000000, 0x7a76, 0x5, 0x1, 0xffff, 0x400, 0xb76, 0xfffffffa, 0xee9, 0x8c1, 0x5, 0x4, 0x0, 0x40c, 0x9, 0x7, 0x4, 0x7, 0x8, 0xfffffffa, 0x4b2932cc, 0x100, 0x110d, 0xc00000, 0x1000, 0x2, 0x3, 0xff, 0x2, 0xe, 0x5, 0xfff, 0x7, 0xfff, 0x7, 0xc, 0x6, 0x6, 0x1, 0x2, 0x7fffffff, 0xb, 0xa5cd, 0x9, 0x5, 0x3, 0x0, 0x8, 0x0, 0x8, 0x75, 0x4, 0x172, 0x4, 0x2, 0x4, 0x10, 0x3, 0x1, 0x200, 0x1000, 0x400, 0x4, 0xd, 0x5, 0x5, 0x0, 0x330, 0x5, 0x1, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3ff, 0x5, 0xd9, {0x8, 0x0, 0x4, 0x6, 0x2, 0x8}, {0xfd, 0x1, 0x1ff, 0x9, 0x6, 0x3}, 0x9, 0x23, 0x2}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}]}, 0x490}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008054}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) 3.1514911s ago: executing program 4 (id=14685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x3000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.991454856s ago: executing program 4 (id=14687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9}, [@printk={@d, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x103}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.700649705s ago: executing program 4 (id=14689): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0xb0ff}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.456275124s ago: executing program 4 (id=14691): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.200170035s ago: executing program 4 (id=14696): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000120000000000000001"], 0xfdef) 2.147450128s ago: executing program 0 (id=14698): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, 0x0, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000000014038030"], 0x14b0}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf250100000008000100030000002c000480050003000100000005000300000000000500030002000000050003000000000005000300030000000800020002"], 0x50}}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008890}, 0x20) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000020005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0x2, 0x4}, {0x4, 0xfffffffc}, {0x8, 0x7}]}]}, {0x0, [0x2e, 0x71, 0x30, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/95, 0x4d, 0x5f, 0x1, 0x80000001}, 0x28) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r13, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0d3328bd7000fedbdf256b00000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800e4ff", @ANYRES16=r12, @ANYBLOB="080029bd7000fedbdf25130000000c009900000024001c00000005001900"], 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x40849) writev(r11, &(0x7f0000000400), 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2000a42e41a48c2ec5fa23596dc5182a0e055456a8479bae00", @ANYRES8=r10, @ANYRES16=r12, @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x4000000) 1.970752799s ago: executing program 1 (id=14699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000240)) unshare(0x28040680) select(0x40, &(0x7f0000000000)={0x0, 0x200000000000005, 0x80000001, 0x81, 0x80, 0xd0f3, 0x8, 0x5}, 0x0, &(0x7f00000002c0)={0x69f, 0x100000001, 0x3ff, 0x2, 0x7ff, 0x4475593a, 0x101, 0x8001}, &(0x7f0000000200)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2517000000540006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000963e7917d56de1ace2fe62c0b4a647eb221c9aee79000000000000008190866114ee4b1a04000300"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1.690420844s ago: executing program 5 (id=14702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000000), 0xfffffffb, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140)='\a', 0x0}, 0x20) 1.522397205s ago: executing program 5 (id=14703): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000020048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.431595189s ago: executing program 5 (id=14704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000bbd687ed5521d54f8c2b59a1a8421c7c67fa75bf4d9451c499b7b36e00b5219f7d20e06edf8ffa0ca7832092452d3081836621dc5eba7c3f1eb3145e9f1bd5837e93ae5098b2ea1811907b450c36337b833fc98e97a8be63ac9fa6f0f7556c2abb16a352ee9529f8a6d3345107540d8b70af79ef2a53733387d843b53ffcca18994e4993d38f1bd3f6287a1d17909e2a40c5e7bc9655958a556a55425e4ceee944fe5dbdfdce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x1158}, 0x0) 1.38231132s ago: executing program 5 (id=14705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600"], &(0x7f0000000040)='syzkaller\x00', 0xf}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x3}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x0) socket(0x1, 0x5, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0xc054) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}]}, 0x34}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 1.247513548s ago: executing program 1 (id=14706): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000ffffff070000000000000001"], 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.178005256s ago: executing program 3 (id=14707): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 1.177712647s ago: executing program 0 (id=14708): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="39052bbd7000fddbdf250300000008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa11e7eede1826466}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4880) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80000003c0007010000000001000000027c00000400fc800c00018006000600800a000009"], 0xa8}, 0x1, 0x0, 0x0, 0xc008}, 0x40854) 1.098058295s ago: executing program 3 (id=14709): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e21000014000200626174616476300000000200000000000800010002000000080003"], 0x5c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x43a00023}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0xa4, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x20000080) 1.076570751s ago: executing program 0 (id=14710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000001955deee000000000500d4a5df070000080004000800000008"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xe925}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4, 0x0, 0x1000000}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r11 = accept4(r10, 0x0, 0x0, 0x80000) write(r11, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r11, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 951.436455ms ago: executing program 1 (id=14711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x28, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 951.276382ms ago: executing program 3 (id=14712): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xffffff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 837.978794ms ago: executing program 1 (id=14713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x12000000}, 0x800) 786.362225ms ago: executing program 3 (id=14714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (fail_nth: 12) 370.293064ms ago: executing program 0 (id=14715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000bbd687ed5521d54f8c2b59a1a8421c7c67fa75bf4d9451c499b7b36e00b5219f7d20e06edf8ffa0ca7832092452d3081836621dc5eba7c3f1eb3145e9f1bd5837e93ae5098b2ea1811907b450c36337b833fc98e97a8be63ac9fa6f0f7556c2abb16a352ee9529f8a6d3345107540d8b70af79ef2a53733387d843b53ffcca18994e4993d38f1bd3f6287a1d17909e2a40c5e7bc9655958a556a55425e4ceee944fe5dbdfdce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x1158}, 0x0) 242.008376ms ago: executing program 5 (id=14716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000070000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) 241.61613ms ago: executing program 1 (id=14717): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000110071184c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 241.462405ms ago: executing program 3 (id=14718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xff90}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) 119.238678ms ago: executing program 0 (id=14719): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 67.863899ms ago: executing program 5 (id=14720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300001f000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) 67.727663ms ago: executing program 1 (id=14721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200060060001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 67.427736ms ago: executing program 3 (id=14722): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0xdc2658be) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000940), &(0x7f0000000980)=r0}, 0x20) r4 = socket(0x1, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf"], 0xfc}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x27, 0x487, 0x81, 0x1b0e95b5}}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0xdc2658be) (async) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000940), &(0x7f0000000980)=r0}, 0x20) (async) socket(0x1, 0x3, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf"], 0xfc}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x27, 0x487, 0x81, 0x1b0e95b5}}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) (async) 0s ago: executing program 0 (id=14723): r0 = socket$kcm(0x2, 0x0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x26020480) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r2, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7ffd"}) kernel console output (not intermixed with test programs): rity 10 [ 1744.958637][T18749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14080'. [ 1744.968845][T18750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14078'. [ 1745.022895][T18749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14080'. [ 1745.356531][ T3628] IPVS: starting estimator thread 0... [ 1745.362475][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1745.435647][T18773] FAULT_INJECTION: forcing a failure. [ 1745.435647][T18773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.467674][T18773] CPU: 0 UID: 0 PID: 18773 Comm: syz.3.14086 Not tainted syzkaller #0 PREEMPT(full) [ 1745.467709][T18773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1745.467723][T18773] Call Trace: [ 1745.467733][T18773] [ 1745.467741][T18773] dump_stack_lvl+0x189/0x250 [ 1745.467775][T18773] ? __pfx____ratelimit+0x10/0x10 [ 1745.467811][T18773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1745.467839][T18773] ? __pfx__printk+0x10/0x10 [ 1745.467886][T18773] should_fail_ex+0x414/0x560 [ 1745.467922][T18773] _copy_to_user+0x31/0xb0 [ 1745.467950][T18773] generic_map_lookup_batch+0x8f2/0xcc0 [ 1745.467994][T18773] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1745.468021][T18773] ? __fget_files+0x2a/0x420 [ 1745.468057][T18773] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1745.468089][T18773] bpf_map_do_batch+0x282/0x630 [ 1745.468112][T18773] ? security_bpf+0x7e/0x300 [ 1745.468142][T18773] __sys_bpf+0x537/0x860 [ 1745.468178][T18773] ? __pfx___sys_bpf+0x10/0x10 [ 1745.468230][T18773] ? ksys_write+0x22a/0x250 [ 1745.468258][T18773] ? __pfx_ksys_write+0x10/0x10 [ 1745.468281][T18773] ? rcu_is_watching+0x15/0xb0 [ 1745.468317][T18773] __x64_sys_bpf+0x7c/0x90 [ 1745.468349][T18773] do_syscall_64+0xfa/0x3b0 [ 1745.468371][T18773] ? lockdep_hardirqs_on+0x9c/0x150 [ 1745.468406][T18773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.468429][T18773] ? clear_bhb_loop+0x60/0xb0 [ 1745.468466][T18773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.468489][T18773] RIP: 0033:0x7fe7ac38eec9 [ 1745.468510][T18773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1745.468529][T18773] RSP: 002b:00007fe7aa5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1745.468553][T18773] RAX: ffffffffffffffda RBX: 00007fe7ac5e5fa0 RCX: 00007fe7ac38eec9 [ 1745.468570][T18773] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1745.468585][T18773] RBP: 00007fe7aa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.468600][T18773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1745.468614][T18773] R13: 00007fe7ac5e6038 R14: 00007fe7ac5e5fa0 R15: 00007ffc64e60cc8 [ 1745.468651][T18773] [ 1745.689901][T18772] IPVS: using max 30 ests per chain, 72000 per kthread [ 1745.732175][T18778] netlink: 'syz.5.14084': attribute type 6 has an invalid length. [ 1745.927192][T18780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14087'. [ 1745.960676][ T3628] tipc: Node number set to 134418688 [ 1746.002382][T18780] netlink: 'syz.0.14087': attribute type 5 has an invalid length. [ 1746.159868][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1746.343195][T18799] vlan2: entered promiscuous mode [ 1746.366832][T18799] team0: entered promiscuous mode [ 1746.379069][T18799] team_slave_0: entered promiscuous mode [ 1746.385661][T18799] team_slave_1: entered promiscuous mode [ 1746.399911][ C0] net_ratelimit: 1 callbacks suppressed [ 1746.399934][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1746.412913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1746.475738][T18798] tipc: Enabling of bearer rejected, already enabled [ 1746.507796][T18801] lo speed is unknown, defaulting to 1000 [ 1746.829168][T18801] syzkaller0 speed is unknown, defaulting to 1000 [ 1747.380384][T18826] lo speed is unknown, defaulting to 1000 [ 1747.440275][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1747.447531][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1747.900396][T18858] tap0: tun_chr_ioctl cmd 2147767507 [ 1748.203408][T18826] syzkaller0 speed is unknown, defaulting to 1000 [ 1748.479855][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1748.487152][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1748.909383][T18880] __nla_validate_parse: 6 callbacks suppressed [ 1748.909405][T18880] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14117'. [ 1748.989124][T18886] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 1749.103543][T18893] tipc: Enabled bearer , priority 0 [ 1749.171471][T18893] syzkaller0: entered promiscuous mode [ 1749.177185][T18893] syzkaller0: entered allmulticast mode [ 1749.207114][T18893] tipc: Resetting bearer [ 1749.316816][T18892] tipc: Resetting bearer [ 1749.519930][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1749.527361][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1749.608100][T18907] Bluetooth: MGMT ver 1.23 [ 1749.735483][T18909] netlink: 'syz.4.14124': attribute type 10 has an invalid length. [ 1750.559824][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1750.567160][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1751.599943][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1751.607151][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1752.639730][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1752.646973][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1753.679857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1753.687133][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1753.761492][T18892] tipc: Disabling bearer [ 1753.795460][T18909] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1753.805284][T18910] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1753.926549][T18933] FAULT_INJECTION: forcing a failure. [ 1753.926549][T18933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.931543][T18927] lo speed is unknown, defaulting to 1000 [ 1753.941360][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.5.14130 Not tainted syzkaller #0 PREEMPT(full) [ 1753.941396][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1753.941412][T18933] Call Trace: [ 1753.941422][T18933] [ 1753.941434][T18933] dump_stack_lvl+0x189/0x250 [ 1753.941472][T18933] ? __pfx____ratelimit+0x10/0x10 [ 1753.941512][T18933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1753.941544][T18933] ? __pfx__printk+0x10/0x10 [ 1753.941599][T18933] should_fail_ex+0x414/0x560 [ 1753.941640][T18933] _copy_to_user+0x31/0xb0 [ 1753.941684][T18933] generic_map_lookup_batch+0x8f2/0xcc0 [ 1753.941737][T18933] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1753.941769][T18933] ? __fget_files+0x2a/0x420 [ 1753.941809][T18933] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1753.941844][T18933] bpf_map_do_batch+0x282/0x630 [ 1753.941870][T18933] ? security_bpf+0x7e/0x300 [ 1753.941906][T18933] __sys_bpf+0x537/0x860 [ 1753.941944][T18933] ? __pfx___sys_bpf+0x10/0x10 [ 1753.942004][T18933] ? ksys_write+0x22a/0x250 [ 1753.942038][T18933] ? __pfx_ksys_write+0x10/0x10 [ 1753.942066][T18933] ? rcu_is_watching+0x15/0xb0 [ 1753.942105][T18933] __x64_sys_bpf+0x7c/0x90 [ 1753.942140][T18933] do_syscall_64+0xfa/0x3b0 [ 1753.942165][T18933] ? lockdep_hardirqs_on+0x9c/0x150 [ 1753.942203][T18933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.942228][T18933] ? clear_bhb_loop+0x60/0xb0 [ 1753.942258][T18933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.942283][T18933] RIP: 0033:0x7fa5c978eec9 [ 1753.942307][T18933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1753.942328][T18933] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1753.942355][T18933] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1753.942374][T18933] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1753.942391][T18933] RBP: 00007fa5ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.942407][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.942421][T18933] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1753.942462][T18933] [ 1754.099381][T18936] FAULT_INJECTION: forcing a failure. [ 1754.099381][T18936] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.252352][T18936] CPU: 1 UID: 0 PID: 18936 Comm: syz.1.14131 Not tainted syzkaller #0 PREEMPT(full) [ 1754.252389][T18936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1754.252406][T18936] Call Trace: [ 1754.252416][T18936] [ 1754.252428][T18936] dump_stack_lvl+0x189/0x250 [ 1754.252464][T18936] ? __pfx____ratelimit+0x10/0x10 [ 1754.252505][T18936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1754.252537][T18936] ? __pfx__printk+0x10/0x10 [ 1754.252594][T18936] should_fail_ex+0x414/0x560 [ 1754.252636][T18936] should_failslab+0xa8/0x100 [ 1754.252680][T18936] __kmalloc_cache_noprof+0x70/0x3d0 [ 1754.252712][T18936] ? sctp_add_bind_addr+0x8c/0x370 [ 1754.252746][T18936] sctp_add_bind_addr+0x8c/0x370 [ 1754.252781][T18936] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1754.252816][T18936] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1754.252850][T18936] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1754.252882][T18936] ? sctp_v6_is_any+0x64/0x80 [ 1754.252914][T18936] ? sctp_copy_one_addr+0x93/0x360 [ 1754.252948][T18936] sctp_bind_addr_copy+0xb3/0x3c0 [ 1754.252978][T18936] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1754.253024][T18936] sctp_connect_new_asoc+0x2e0/0x690 [ 1754.253063][T18936] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1754.253097][T18936] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1754.253134][T18936] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1754.253160][T18936] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1754.253194][T18936] sctp_sendmsg+0x155c/0x2810 [ 1754.253282][T18936] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1754.253323][T18936] ? aa_sk_perm+0x81e/0x950 [ 1754.253363][T18936] ? __pfx_aa_sk_perm+0x10/0x10 [ 1754.253402][T18936] ? sock_rps_record_flow+0x19/0x410 [ 1754.253445][T18936] ? inet_sendmsg+0x2f4/0x370 [ 1754.253490][T18936] __sock_sendmsg+0x19c/0x270 [ 1754.253533][T18936] __sys_sendto+0x3bd/0x520 [ 1754.253563][T18936] ? __pfx___sys_sendto+0x10/0x10 [ 1754.253587][T18936] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1754.253632][T18936] ? __fget_files+0x3a0/0x420 [ 1754.253756][T18936] ? ksys_write+0x22a/0x250 [ 1754.253787][T18936] ? __pfx_ksys_write+0x10/0x10 [ 1754.253810][T18936] ? rcu_is_watching+0x15/0xb0 [ 1754.253843][T18936] __x64_sys_sendto+0xde/0x100 [ 1754.253873][T18936] do_syscall_64+0xfa/0x3b0 [ 1754.253895][T18936] ? lockdep_hardirqs_on+0x9c/0x150 [ 1754.253929][T18936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.253953][T18936] ? clear_bhb_loop+0x60/0xb0 [ 1754.253981][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.254003][T18936] RIP: 0033:0x7f217db8eec9 [ 1754.254024][T18936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1754.254044][T18936] RSP: 002b:00007f217eace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1754.254068][T18936] RAX: ffffffffffffffda RBX: 00007f217dde5fa0 RCX: 00007f217db8eec9 [ 1754.254085][T18936] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1754.254100][T18936] RBP: 00007f217eace090 R08: 0000200000000080 R09: 000000000000001c [ 1754.254115][T18936] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1754.254129][T18936] R13: 00007f217dde6038 R14: 00007f217dde5fa0 R15: 00007fff3a915098 [ 1754.254167][T18936] [ 1754.620372][T18940] netlink: 'syz.4.14133': attribute type 5 has an invalid length. [ 1754.719783][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1754.727032][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1754.781428][T18927] syzkaller0 speed is unknown, defaulting to 1000 [ 1755.029445][T18957] FAULT_INJECTION: forcing a failure. [ 1755.029445][T18957] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.043861][T18957] CPU: 1 UID: 0 PID: 18957 Comm: syz.5.14139 Not tainted syzkaller #0 PREEMPT(full) [ 1755.043902][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1755.043916][T18957] Call Trace: [ 1755.043925][T18957] [ 1755.043934][T18957] dump_stack_lvl+0x189/0x250 [ 1755.043967][T18957] ? __pfx____ratelimit+0x10/0x10 [ 1755.044002][T18957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.044029][T18957] ? __pfx__printk+0x10/0x10 [ 1755.044078][T18957] should_fail_ex+0x414/0x560 [ 1755.044113][T18957] should_failslab+0xa8/0x100 [ 1755.044136][T18957] __kmalloc_cache_noprof+0x70/0x3d0 [ 1755.044156][T18957] ? sctp_add_bind_addr+0x8c/0x370 [ 1755.044178][T18957] sctp_add_bind_addr+0x8c/0x370 [ 1755.044199][T18957] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1755.044220][T18957] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1755.044237][T18957] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1755.044257][T18957] ? sctp_v6_is_any+0x64/0x80 [ 1755.044278][T18957] ? sctp_copy_one_addr+0x93/0x360 [ 1755.044298][T18957] sctp_bind_addr_copy+0xb3/0x3c0 [ 1755.044317][T18957] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1755.044345][T18957] sctp_connect_new_asoc+0x2e0/0x690 [ 1755.044370][T18957] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1755.044394][T18957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1755.044415][T18957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1755.044436][T18957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1755.044459][T18957] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1755.044475][T18957] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1755.044496][T18957] sctp_sendmsg+0x155c/0x2810 [ 1755.044527][T18957] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1755.044551][T18957] ? aa_sk_perm+0x81e/0x950 [ 1755.044577][T18957] ? __pfx_aa_sk_perm+0x10/0x10 [ 1755.044600][T18957] ? sock_rps_record_flow+0x19/0x410 [ 1755.044630][T18957] ? inet_sendmsg+0x2f4/0x370 [ 1755.044654][T18957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1755.044681][T18957] __sock_sendmsg+0x19c/0x270 [ 1755.044708][T18957] __sys_sendto+0x3bd/0x520 [ 1755.044727][T18957] ? __pfx___sys_sendto+0x10/0x10 [ 1755.044741][T18957] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1755.044769][T18957] ? __fget_files+0x3a0/0x420 [ 1755.044800][T18957] ? ksys_write+0x22a/0x250 [ 1755.044828][T18957] ? __pfx_ksys_write+0x10/0x10 [ 1755.044851][T18957] ? rcu_is_watching+0x15/0xb0 [ 1755.044890][T18957] __x64_sys_sendto+0xde/0x100 [ 1755.044918][T18957] do_syscall_64+0xfa/0x3b0 [ 1755.044943][T18957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.044966][T18957] ? clear_bhb_loop+0x60/0xb0 [ 1755.044994][T18957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.045016][T18957] RIP: 0033:0x7fa5c978eec9 [ 1755.045037][T18957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.045058][T18957] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1755.045076][T18957] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1755.045089][T18957] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1755.045099][T18957] RBP: 00007fa5ca6c6090 R08: 0000200000000280 R09: 000000000000001c [ 1755.045110][T18957] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 1755.045120][T18957] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1755.045147][T18957] [ 1755.630933][T18955] vlan3: entered promiscuous mode [ 1755.762447][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1755.769852][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1755.823472][T18969] FAULT_INJECTION: forcing a failure. [ 1755.823472][T18969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.839335][T18969] CPU: 1 UID: 0 PID: 18969 Comm: syz.4.14142 Not tainted syzkaller #0 PREEMPT(full) [ 1755.839370][T18969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1755.839385][T18969] Call Trace: [ 1755.839395][T18969] [ 1755.839405][T18969] dump_stack_lvl+0x189/0x250 [ 1755.839440][T18969] ? __pfx____ratelimit+0x10/0x10 [ 1755.839477][T18969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.839506][T18969] ? __pfx__printk+0x10/0x10 [ 1755.839556][T18969] should_fail_ex+0x414/0x560 [ 1755.839592][T18969] _copy_to_user+0x31/0xb0 [ 1755.839621][T18969] generic_map_lookup_batch+0x8a0/0xcc0 [ 1755.839667][T18969] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1755.839696][T18969] ? __fget_files+0x2a/0x420 [ 1755.839739][T18969] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1755.839770][T18969] bpf_map_do_batch+0x282/0x630 [ 1755.839792][T18969] ? security_bpf+0x7e/0x300 [ 1755.839823][T18969] __sys_bpf+0x537/0x860 [ 1755.839858][T18969] ? __pfx___sys_bpf+0x10/0x10 [ 1755.839906][T18969] ? ksys_write+0x22a/0x250 [ 1755.839935][T18969] ? __pfx_ksys_write+0x10/0x10 [ 1755.839958][T18969] ? rcu_is_watching+0x15/0xb0 [ 1755.839990][T18969] __x64_sys_bpf+0x7c/0x90 [ 1755.840021][T18969] do_syscall_64+0xfa/0x3b0 [ 1755.840044][T18969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1755.840074][T18969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.840094][T18969] ? clear_bhb_loop+0x60/0xb0 [ 1755.840120][T18969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.840140][T18969] RIP: 0033:0x7fae5e38eec9 [ 1755.840160][T18969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.840179][T18969] RSP: 002b:00007fae5f271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1755.840201][T18969] RAX: ffffffffffffffda RBX: 00007fae5e5e5fa0 RCX: 00007fae5e38eec9 [ 1755.840218][T18969] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1755.840232][T18969] RBP: 00007fae5f271090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.840246][T18969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.840260][T18969] R13: 00007fae5e5e6038 R14: 00007fae5e5e5fa0 R15: 00007ffd2fe3d958 [ 1755.840296][T18969] [ 1756.424350][T18977] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode [ 1756.432308][T18977] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode [ 1756.739029][T18985] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14147'. [ 1756.798542][T18994] vlan0: entered promiscuous mode [ 1756.803887][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1756.804095][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1757.131571][T19008] FAULT_INJECTION: forcing a failure. [ 1757.131571][T19008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1757.175026][T19008] CPU: 1 UID: 0 PID: 19008 Comm: syz.0.14154 Not tainted syzkaller #0 PREEMPT(full) [ 1757.175060][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1757.175075][T19008] Call Trace: [ 1757.175083][T19008] [ 1757.175094][T19008] dump_stack_lvl+0x189/0x250 [ 1757.175126][T19008] ? __pfx____ratelimit+0x10/0x10 [ 1757.175162][T19008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1757.175188][T19008] ? __pfx__printk+0x10/0x10 [ 1757.175237][T19008] should_fail_ex+0x414/0x560 [ 1757.175273][T19008] _copy_to_user+0x31/0xb0 [ 1757.175303][T19008] generic_map_lookup_batch+0x8f2/0xcc0 [ 1757.175373][T19008] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1757.175402][T19008] ? __fget_files+0x2a/0x420 [ 1757.175437][T19008] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1757.175468][T19008] bpf_map_do_batch+0x282/0x630 [ 1757.175491][T19008] ? security_bpf+0x7e/0x300 [ 1757.175522][T19008] __sys_bpf+0x537/0x860 [ 1757.175558][T19008] ? __pfx___sys_bpf+0x10/0x10 [ 1757.175610][T19008] ? ksys_write+0x22a/0x250 [ 1757.175639][T19008] ? __pfx_ksys_write+0x10/0x10 [ 1757.175663][T19008] ? rcu_is_watching+0x15/0xb0 [ 1757.175697][T19008] __x64_sys_bpf+0x7c/0x90 [ 1757.175735][T19008] do_syscall_64+0xfa/0x3b0 [ 1757.175757][T19008] ? lockdep_hardirqs_on+0x9c/0x150 [ 1757.175790][T19008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.175813][T19008] ? clear_bhb_loop+0x60/0xb0 [ 1757.175841][T19008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.175863][T19008] RIP: 0033:0x7fdd0d18eec9 [ 1757.175883][T19008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.175902][T19008] RSP: 002b:00007fdd0e010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1757.175925][T19008] RAX: ffffffffffffffda RBX: 00007fdd0d3e5fa0 RCX: 00007fdd0d18eec9 [ 1757.175942][T19008] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1757.175957][T19008] RBP: 00007fdd0e010090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.175971][T19008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1757.175985][T19008] R13: 00007fdd0d3e6038 R14: 00007fdd0d3e5fa0 R15: 00007fffc71238e8 [ 1757.176022][T19008] [ 1757.681407][T20395] block nbd9: Possible stuck request ffff888025415080: control (read@0,1024B). Runtime 1440 seconds [ 1757.693123][T20395] block nbd9: Possible stuck request ffff888025415240: control (read@1024,1024B). Runtime 1440 seconds [ 1757.694842][ T56] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1757.704475][T20395] block nbd9: Possible stuck request ffff888025415400: control (read@2048,1024B). Runtime 1440 seconds [ 1757.724553][T20395] block nbd9: Possible stuck request ffff8880254155c0: control (read@3072,1024B). Runtime 1440 seconds [ 1757.767396][T19032] netlink: 'syz.4.14155': attribute type 1 has an invalid length. [ 1757.839850][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1757.847041][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1758.067660][T19011] lo speed is unknown, defaulting to 1000 [ 1758.101931][T19037] tipc: Enabled bearer , priority 0 [ 1758.111053][T19037] syzkaller0: entered promiscuous mode [ 1758.116585][T19037] syzkaller0: entered allmulticast mode [ 1758.215284][T19040] tipc: Resetting bearer [ 1758.240978][T19036] tipc: Resetting bearer [ 1758.306658][T19036] tipc: Disabling bearer [ 1758.822795][T19074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14170'. [ 1758.835869][T19074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14170'. [ 1758.862240][T19076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14171'. [ 1758.874657][T19048] lo speed is unknown, defaulting to 1000 [ 1758.880730][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1758.880987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1758.885948][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14171'. [ 1759.151846][T19048] syzkaller0 speed is unknown, defaulting to 1000 [ 1759.261691][T19011] syzkaller0 speed is unknown, defaulting to 1000 [ 1759.275221][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14174'. [ 1759.443058][T19086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14176'. [ 1759.582815][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14176'. [ 1759.638503][T20395] block nbd3: Possible stuck request ffff888024e15080: control (read@0,1024B). Runtime 1590 seconds [ 1759.652365][T20395] block nbd3: Possible stuck request ffff888024e15240: control (read@1024,1024B). Runtime 1590 seconds [ 1759.664973][T20395] block nbd3: Possible stuck request ffff888024e15400: control (read@2048,1024B). Runtime 1590 seconds [ 1759.677376][T20395] block nbd3: Possible stuck request ffff888024e155c0: control (read@3072,1024B). Runtime 1590 seconds [ 1759.919823][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1759.927015][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1760.168043][T19105] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14182'. [ 1760.188835][T19105] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14182'. [ 1760.245737][T19108] netlink: 'syz.1.14183': attribute type 5 has an invalid length. [ 1760.428435][T19114] tipc: Enabled bearer , priority 0 [ 1760.461621][T19114] syzkaller0: entered promiscuous mode [ 1760.478216][T19114] syzkaller0: entered allmulticast mode [ 1760.557659][T19113] lo speed is unknown, defaulting to 1000 [ 1760.565058][T19114] tipc: Resetting bearer [ 1760.593379][T19112] tipc: Resetting bearer [ 1760.666395][T19124] netlink: 'syz.3.14190': attribute type 10 has an invalid length. [ 1760.676631][T19112] tipc: Disabling bearer [ 1760.959796][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1760.967055][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1761.002008][T19124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1761.438168][T19153] netlink: 'syz.4.14201': attribute type 2 has an invalid length. [ 1761.519831][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1761.519873][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1761.560425][T15798] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1761.568209][T19163] FAULT_INJECTION: forcing a failure. [ 1761.568209][T19163] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.582420][T19163] CPU: 0 UID: 0 PID: 19163 Comm: syz.1.14203 Not tainted syzkaller #0 PREEMPT(full) [ 1761.582449][T19163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1761.582461][T19163] Call Trace: [ 1761.582469][T19163] [ 1761.582477][T19163] dump_stack_lvl+0x189/0x250 [ 1761.582504][T19163] ? __pfx____ratelimit+0x10/0x10 [ 1761.582533][T19163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1761.582555][T19163] ? __pfx__printk+0x10/0x10 [ 1761.582595][T19163] should_fail_ex+0x414/0x560 [ 1761.582625][T19163] should_failslab+0xa8/0x100 [ 1761.582651][T19163] __kmalloc_cache_noprof+0x70/0x3d0 [ 1761.582673][T19163] ? sctp_add_bind_addr+0x8c/0x370 [ 1761.582697][T19163] sctp_add_bind_addr+0x8c/0x370 [ 1761.582721][T19163] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1761.582744][T19163] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1761.582763][T19163] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1761.582785][T19163] ? sctp_v6_is_any+0x64/0x80 [ 1761.582808][T19163] ? sctp_copy_one_addr+0x93/0x360 [ 1761.582831][T19163] sctp_bind_addr_copy+0xb3/0x3c0 [ 1761.582851][T19163] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1761.582883][T19163] sctp_connect_new_asoc+0x2e0/0x690 [ 1761.582911][T19163] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1761.582934][T19163] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1761.582960][T19163] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1761.582978][T19163] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1761.583001][T19163] sctp_sendmsg+0x155c/0x2810 [ 1761.583036][T19163] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1761.583065][T19163] ? aa_sk_perm+0x81e/0x950 [ 1761.583093][T19163] ? __pfx_aa_sk_perm+0x10/0x10 [ 1761.583120][T19163] ? sock_rps_record_flow+0x19/0x410 [ 1761.583151][T19163] ? inet_sendmsg+0x2f4/0x370 [ 1761.583181][T19163] __sock_sendmsg+0x19c/0x270 [ 1761.583211][T19163] __sys_sendto+0x3bd/0x520 [ 1761.583232][T19163] ? __pfx___sys_sendto+0x10/0x10 [ 1761.583263][T19163] ? __might_fault+0xb0/0x130 [ 1761.583282][T19163] ? bpf_trace_run2+0x186/0x4b0 [ 1761.583333][T19163] ? rcu_is_watching+0x15/0xb0 [ 1761.583356][T19163] __x64_sys_sendto+0xde/0x100 [ 1761.583379][T19163] do_syscall_64+0xfa/0x3b0 [ 1761.583396][T19163] ? lockdep_hardirqs_on+0x9c/0x150 [ 1761.583423][T19163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.583441][T19163] ? clear_bhb_loop+0x60/0xb0 [ 1761.583463][T19163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.583481][T19163] RIP: 0033:0x7f217db8eec9 [ 1761.583497][T19163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1761.583513][T19163] RSP: 002b:00007f217eace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1761.583532][T19163] RAX: ffffffffffffffda RBX: 00007f217dde5fa0 RCX: 00007f217db8eec9 [ 1761.583545][T19163] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1761.583557][T19163] RBP: 00007f217eace090 R08: 0000200000000080 R09: 000000000000001c [ 1761.583569][T19163] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1761.583579][T19163] R13: 00007f217dde6038 R14: 00007f217dde5fa0 R15: 00007fff3a915098 [ 1761.583608][T19163] [ 1761.957386][T19113] syzkaller0 speed is unknown, defaulting to 1000 [ 1761.999871][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1762.007107][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1762.197522][T19172] vlan3: entered promiscuous mode [ 1762.568640][T19185] __nla_validate_parse: 11 callbacks suppressed [ 1762.568663][T19185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14210'. [ 1762.588915][T19185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14210'. [ 1762.675612][T19190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14212'. [ 1762.687845][T19190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14212'. [ 1763.038425][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14214'. [ 1763.047728][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1763.047907][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1763.202114][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14218'. [ 1763.228781][T19215] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14220'. [ 1763.238938][T19215] netlink: 43 bytes leftover after parsing attributes in process `syz.1.14220'. [ 1763.250603][T19215] netlink: 'syz.1.14220': attribute type 5 has an invalid length. [ 1763.253577][T19211] netlink: 'syz.4.14218': attribute type 7 has an invalid length. [ 1763.259368][T19215] netlink: 43 bytes leftover after parsing attributes in process `syz.1.14220'. [ 1763.303683][T19213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14219'. [ 1763.324432][T19211] netlink: 'syz.4.14218': attribute type 8 has an invalid length. [ 1763.507661][T19220] lo speed is unknown, defaulting to 1000 [ 1764.080354][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1764.087677][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1764.127922][T19228] lo speed is unknown, defaulting to 1000 [ 1764.130468][T19220] syzkaller0 speed is unknown, defaulting to 1000 [ 1764.415568][T19265] FAULT_INJECTION: forcing a failure. [ 1764.415568][T19265] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.431028][T19265] CPU: 0 UID: 0 PID: 19265 Comm: syz.4.14233 Not tainted syzkaller #0 PREEMPT(full) [ 1764.431061][T19265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1764.431077][T19265] Call Trace: [ 1764.431086][T19265] [ 1764.431097][T19265] dump_stack_lvl+0x189/0x250 [ 1764.431130][T19265] ? __pfx____ratelimit+0x10/0x10 [ 1764.431167][T19265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1764.431196][T19265] ? __pfx__printk+0x10/0x10 [ 1764.431248][T19265] should_fail_ex+0x414/0x560 [ 1764.431286][T19265] should_failslab+0xa8/0x100 [ 1764.431319][T19265] __kmalloc_cache_noprof+0x70/0x3d0 [ 1764.431347][T19265] ? sctp_add_bind_addr+0x8c/0x370 [ 1764.431378][T19265] sctp_add_bind_addr+0x8c/0x370 [ 1764.431410][T19265] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1764.431440][T19265] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1764.431465][T19265] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1764.431492][T19265] ? sctp_v6_is_any+0x64/0x80 [ 1764.431522][T19265] ? sctp_copy_one_addr+0x93/0x360 [ 1764.431552][T19265] sctp_bind_addr_copy+0xb3/0x3c0 [ 1764.431578][T19265] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1764.431618][T19265] sctp_connect_new_asoc+0x2e0/0x690 [ 1764.431654][T19265] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1764.431687][T19265] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1764.431718][T19265] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1764.431755][T19265] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1764.431787][T19265] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1764.431810][T19265] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1764.431840][T19265] sctp_sendmsg+0x155c/0x2810 [ 1764.431886][T19265] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1764.431921][T19265] ? aa_sk_perm+0x81e/0x950 [ 1764.431957][T19265] ? __pfx_aa_sk_perm+0x10/0x10 [ 1764.431991][T19265] ? sock_rps_record_flow+0x19/0x410 [ 1764.432031][T19265] ? inet_sendmsg+0x2f4/0x370 [ 1764.432064][T19265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1764.432103][T19265] __sock_sendmsg+0x19c/0x270 [ 1764.432140][T19265] __sys_sendto+0x3bd/0x520 [ 1764.432167][T19265] ? __pfx___sys_sendto+0x10/0x10 [ 1764.432188][T19265] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1764.432228][T19265] ? __fget_files+0x3a0/0x420 [ 1764.432273][T19265] ? ksys_write+0x22a/0x250 [ 1764.432302][T19265] ? __pfx_ksys_write+0x10/0x10 [ 1764.432326][T19265] ? rcu_is_watching+0x15/0xb0 [ 1764.432358][T19265] __x64_sys_sendto+0xde/0x100 [ 1764.432387][T19265] do_syscall_64+0xfa/0x3b0 [ 1764.432412][T19265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.432435][T19265] ? clear_bhb_loop+0x60/0xb0 [ 1764.432463][T19265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.432485][T19265] RIP: 0033:0x7fae5e38eec9 [ 1764.432505][T19265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1764.432525][T19265] RSP: 002b:00007fae5f271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1764.432548][T19265] RAX: ffffffffffffffda RBX: 00007fae5e5e5fa0 RCX: 00007fae5e38eec9 [ 1764.432565][T19265] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1764.432580][T19265] RBP: 00007fae5f271090 R08: 0000200000000280 R09: 000000000000001c [ 1764.432596][T19265] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 1764.432610][T19265] R13: 00007fae5e5e6038 R14: 00007fae5e5e5fa0 R15: 00007ffd2fe3d958 [ 1764.432648][T19265] [ 1765.113074][T27625] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1765.119845][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1765.127863][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1765.391905][T19228] syzkaller0 speed is unknown, defaulting to 1000 [ 1765.519807][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1765.644160][T19280] tipc: Enabling of bearer rejected, already enabled [ 1766.159910][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1766.167178][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1766.518931][T19320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.788324][T19319] lo speed is unknown, defaulting to 1000 [ 1767.200278][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1767.207517][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1767.314946][T27631] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1767.482569][T19364] netlink: 'syz.4.14263': attribute type 7 has an invalid length. [ 1767.513295][T19364] netlink: 'syz.4.14263': attribute type 8 has an invalid length. [ 1767.577179][T19374] netlink: 'syz.1.14265': attribute type 13 has an invalid length. [ 1767.639448][T19375] netlink: 'syz.1.14265': attribute type 1 has an invalid length. [ 1767.693518][T19379] __nla_validate_parse: 18 callbacks suppressed [ 1767.693542][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14268'. [ 1767.762251][T19374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.769924][T19374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.239798][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1768.247031][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1768.288304][T19374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1768.702242][T19319] syzkaller0 speed is unknown, defaulting to 1000 [ 1768.726799][ T56] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.745757][ T56] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1768.769965][ T56] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.790684][ T56] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1768.906433][ T56] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.916058][ T56] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1768.926314][ T56] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.936808][ T56] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1768.952629][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14274'. [ 1768.964713][T19397] vlan3: entered promiscuous mode [ 1769.209960][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1769.219779][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1769.289246][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1769.296592][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1769.842325][T26153] block nbd1: Possible stuck request ffff888024da0000: control (read@0,1024B). Runtime 1620 seconds [ 1769.853971][T26153] block nbd1: Possible stuck request ffff888024da01c0: control (read@1024,1024B). Runtime 1620 seconds [ 1769.865384][T26153] block nbd1: Possible stuck request ffff888024da0380: control (read@2048,1024B). Runtime 1620 seconds [ 1769.878115][T26153] block nbd1: Possible stuck request ffff888024da0540: control (read@3072,1024B). Runtime 1620 seconds [ 1770.012788][T19419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14281'. [ 1770.319834][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1770.327235][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1770.638178][T19438] FAULT_INJECTION: forcing a failure. [ 1770.638178][T19438] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.666448][T19435] netlink: zone id is out of range [ 1770.675592][T19437] vlan3: entered promiscuous mode [ 1770.682163][T19435] netlink: zone id is out of range [ 1770.687490][T19438] CPU: 0 UID: 0 PID: 19438 Comm: syz.3.14290 Not tainted syzkaller #0 PREEMPT(full) [ 1770.687527][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1770.687542][T19438] Call Trace: [ 1770.687552][T19438] [ 1770.687562][T19438] dump_stack_lvl+0x189/0x250 [ 1770.687595][T19438] ? __pfx____ratelimit+0x10/0x10 [ 1770.687632][T19438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.687660][T19438] ? __pfx__printk+0x10/0x10 [ 1770.687711][T19438] should_fail_ex+0x414/0x560 [ 1770.687748][T19438] should_failslab+0xa8/0x100 [ 1770.687781][T19438] __kmalloc_cache_noprof+0x70/0x3d0 [ 1770.687808][T19438] ? sctp_add_bind_addr+0x8c/0x370 [ 1770.687839][T19438] sctp_add_bind_addr+0x8c/0x370 [ 1770.687870][T19438] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1770.687900][T19438] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1770.687926][T19438] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1770.687953][T19438] ? sctp_v6_is_any+0x64/0x80 [ 1770.687983][T19438] ? sctp_copy_one_addr+0x93/0x360 [ 1770.688012][T19438] sctp_bind_addr_copy+0xb3/0x3c0 [ 1770.688039][T19438] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1770.688080][T19438] sctp_connect_new_asoc+0x2e0/0x690 [ 1770.688115][T19438] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1770.688145][T19438] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1770.688179][T19438] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1770.688201][T19438] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1770.688231][T19438] sctp_sendmsg+0x155c/0x2810 [ 1770.688283][T19438] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1770.688318][T19438] ? aa_sk_perm+0x81e/0x950 [ 1770.688354][T19438] ? __pfx_aa_sk_perm+0x10/0x10 [ 1770.688388][T19438] ? sock_rps_record_flow+0x19/0x410 [ 1770.688428][T19438] ? inet_sendmsg+0x2f4/0x370 [ 1770.688467][T19438] __sock_sendmsg+0x19c/0x270 [ 1770.688505][T19438] __sys_sendto+0x3bd/0x520 [ 1770.688533][T19438] ? __pfx___sys_sendto+0x10/0x10 [ 1770.688554][T19438] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1770.688594][T19438] ? __fget_files+0x3a0/0x420 [ 1770.688639][T19438] ? ksys_write+0x22a/0x250 [ 1770.688669][T19438] ? __pfx_ksys_write+0x10/0x10 [ 1770.688693][T19438] ? rcu_is_watching+0x15/0xb0 [ 1770.688725][T19438] __x64_sys_sendto+0xde/0x100 [ 1770.688754][T19438] do_syscall_64+0xfa/0x3b0 [ 1770.688776][T19438] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.688811][T19438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.688834][T19438] ? clear_bhb_loop+0x60/0xb0 [ 1770.688861][T19438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.688882][T19438] RIP: 0033:0x7fe7ac38eec9 [ 1770.688902][T19438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.688921][T19438] RSP: 002b:00007fe7aa5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1770.688945][T19438] RAX: ffffffffffffffda RBX: 00007fe7ac5e5fa0 RCX: 00007fe7ac38eec9 [ 1770.688962][T19438] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1770.688977][T19438] RBP: 00007fe7aa5f6090 R08: 0000200000000080 R09: 000000000000001c [ 1770.688992][T19438] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1770.689006][T19438] R13: 00007fe7ac5e6038 R14: 00007fe7ac5e5fa0 R15: 00007ffc64e60cc8 [ 1770.689044][T19438] [ 1771.156535][T19442] netlink: 'syz.4.14293': attribute type 10 has an invalid length. [ 1771.590783][T19466] FAULT_INJECTION: forcing a failure. [ 1771.590783][T19466] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.605020][T19466] CPU: 1 UID: 0 PID: 19466 Comm: syz.5.14303 Not tainted syzkaller #0 PREEMPT(full) [ 1771.605052][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1771.605067][T19466] Call Trace: [ 1771.605076][T19466] [ 1771.605087][T19466] dump_stack_lvl+0x189/0x250 [ 1771.605120][T19466] ? __pfx____ratelimit+0x10/0x10 [ 1771.605156][T19466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1771.605193][T19466] ? __pfx__printk+0x10/0x10 [ 1771.605242][T19466] should_fail_ex+0x414/0x560 [ 1771.605279][T19466] should_failslab+0xa8/0x100 [ 1771.605311][T19466] __kmalloc_cache_noprof+0x70/0x3d0 [ 1771.605339][T19466] ? sctp_add_bind_addr+0x8c/0x370 [ 1771.605369][T19466] sctp_add_bind_addr+0x8c/0x370 [ 1771.605399][T19466] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1771.605428][T19466] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1771.605453][T19466] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1771.605487][T19466] ? sctp_v6_is_any+0x64/0x80 [ 1771.605517][T19466] ? sctp_copy_one_addr+0x93/0x360 [ 1771.605546][T19466] sctp_bind_addr_copy+0xb3/0x3c0 [ 1771.605573][T19466] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1771.605611][T19466] sctp_connect_new_asoc+0x2e0/0x690 [ 1771.605646][T19466] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1771.605679][T19466] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1771.605710][T19466] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1771.605740][T19466] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1771.605772][T19466] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1771.605795][T19466] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1771.605824][T19466] sctp_sendmsg+0x155c/0x2810 [ 1771.605870][T19466] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1771.605905][T19466] ? aa_sk_perm+0x81e/0x950 [ 1771.605939][T19466] ? __pfx_aa_sk_perm+0x10/0x10 [ 1771.605973][T19466] ? sock_rps_record_flow+0x19/0x410 [ 1771.606012][T19466] ? inet_sendmsg+0x2f4/0x370 [ 1771.606045][T19466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1771.606084][T19466] __sock_sendmsg+0x19c/0x270 [ 1771.606122][T19466] __sys_sendto+0x3bd/0x520 [ 1771.606150][T19466] ? __pfx___sys_sendto+0x10/0x10 [ 1771.606179][T19466] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1771.606220][T19466] ? __fget_files+0x3a0/0x420 [ 1771.606265][T19466] ? ksys_write+0x22a/0x250 [ 1771.606294][T19466] ? __pfx_ksys_write+0x10/0x10 [ 1771.606318][T19466] ? rcu_is_watching+0x15/0xb0 [ 1771.606350][T19466] __x64_sys_sendto+0xde/0x100 [ 1771.606379][T19466] do_syscall_64+0xfa/0x3b0 [ 1771.606405][T19466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.606427][T19466] ? clear_bhb_loop+0x60/0xb0 [ 1771.606456][T19466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.606478][T19466] RIP: 0033:0x7fa5c978eec9 [ 1771.606498][T19466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1771.606517][T19466] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1771.606541][T19466] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1771.606558][T19466] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1771.606573][T19466] RBP: 00007fa5ca6c6090 R08: 0000200000000280 R09: 000000000000001c [ 1771.606588][T19466] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 1771.606602][T19466] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1771.606640][T19466] [ 1772.292966][T19469] lo speed is unknown, defaulting to 1000 [ 1772.373718][T19479] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1772.386817][T19479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1772.400030][ C0] net_ratelimit: 4 callbacks suppressed [ 1772.400053][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1772.412928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1772.432842][T19479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1772.433477][T19477] FAULT_INJECTION: forcing a failure. [ 1772.433477][T19477] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.490286][T19477] CPU: 0 UID: 0 PID: 19477 Comm: syz.5.14308 Not tainted syzkaller #0 PREEMPT(full) [ 1772.490321][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1772.490336][T19477] Call Trace: [ 1772.490345][T19477] [ 1772.490355][T19477] dump_stack_lvl+0x189/0x250 [ 1772.490388][T19477] ? __pfx____ratelimit+0x10/0x10 [ 1772.490425][T19477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1772.490453][T19477] ? __pfx__printk+0x10/0x10 [ 1772.490494][T19477] ? __pfx___might_resched+0x10/0x10 [ 1772.490525][T19477] should_fail_ex+0x414/0x560 [ 1772.490562][T19477] should_failslab+0xa8/0x100 [ 1772.490594][T19477] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1772.490624][T19477] ? __alloc_skb+0x112/0x2d0 [ 1772.490652][T19477] __alloc_skb+0x112/0x2d0 [ 1772.490681][T19477] netlink_sendmsg+0x5c6/0xb30 [ 1772.490716][T19477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1772.490745][T19477] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1772.490779][T19477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1772.490812][T19477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1772.490837][T19477] __sock_sendmsg+0x21c/0x270 [ 1772.490873][T19477] ____sys_sendmsg+0x505/0x830 [ 1772.490907][T19477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1772.490945][T19477] ? import_iovec+0x74/0xa0 [ 1772.490974][T19477] ___sys_sendmsg+0x21f/0x2a0 [ 1772.491004][T19477] ? __pfx____sys_sendmsg+0x10/0x10 [ 1772.491080][T19477] ? __fget_files+0x2a/0x420 [ 1772.491111][T19477] ? __fget_files+0x3a0/0x420 [ 1772.491154][T19477] __x64_sys_sendmsg+0x19b/0x260 [ 1772.491185][T19477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1772.491224][T19477] ? __pfx_ksys_write+0x10/0x10 [ 1772.491248][T19477] ? rcu_is_watching+0x15/0xb0 [ 1772.491280][T19477] ? do_syscall_64+0xbe/0x3b0 [ 1772.491308][T19477] do_syscall_64+0xfa/0x3b0 [ 1772.491330][T19477] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.491365][T19477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.491388][T19477] ? clear_bhb_loop+0x60/0xb0 [ 1772.491416][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.491438][T19477] RIP: 0033:0x7fa5c978eec9 [ 1772.491459][T19477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.491478][T19477] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1772.491502][T19477] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1772.491519][T19477] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000f [ 1772.491534][T19477] RBP: 00007fa5ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.491548][T19477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.491562][T19477] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1772.491599][T19477] [ 1772.715030][T19469] syzkaller0 speed is unknown, defaulting to 1000 [ 1772.820394][T19479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1772.828509][T19479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1772.839297][T19478] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1773.265108][T19500] dvmrp0: entered allmulticast mode [ 1773.288064][T19502] tipc: Enabling of bearer rejected, failed to enable media [ 1773.439757][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1773.447044][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1773.598707][T15798] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.679756][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1773.816696][T15798] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.849039][T19512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14317'. [ 1773.931791][T19514] tipc: Enabled bearer , priority 0 [ 1773.939911][T19514] syzkaller0: entered promiscuous mode [ 1773.945489][T19514] syzkaller0: entered allmulticast mode [ 1774.068336][T15798] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.115219][T19513] tipc: Resetting bearer [ 1774.185500][T19513] tipc: Disabling bearer [ 1774.314062][T15798] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.479856][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1774.487090][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1774.575500][T19479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1774.589402][T19479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1774.602639][T19479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1774.622662][T19479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1774.631599][T19479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1774.708145][T19533] lo speed is unknown, defaulting to 1000 [ 1775.204720][T19554] netlink: 'syz.4.14330': attribute type 10 has an invalid length. [ 1775.483297][T19561] netlink: 'syz.5.14333': attribute type 10 has an invalid length. [ 1775.519740][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1775.527003][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1775.564097][T15798] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1775.682366][T15798] team0: Port device bridge0 removed [ 1775.751752][T15798] team0: Port device bridge1 removed [ 1775.833186][T15798] team0: Port device bridge2 removed [ 1776.026446][T15798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1776.043054][T15798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.061754][T15798] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1776.074243][T15798] bond0 (unregistering): Released all slaves [ 1776.290781][T15798] bond1 (unregistering): Released all slaves [ 1776.518230][T15798] bond2 (unregistering): Released all slaves [ 1776.559832][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1776.567150][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1776.721780][ T5857] Bluetooth: hci0: command tx timeout [ 1776.751400][T15798] bond3 (unregistering): Released all slaves [ 1776.880349][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1777.017370][T15798] bond4 (unregistering): Released all slaves [ 1777.248553][T15798] bond5 (unregistering): Released all slaves [ 1777.272967][T19533] syzkaller0 speed is unknown, defaulting to 1000 [ 1777.278064][T19540] lo speed is unknown, defaulting to 1000 [ 1777.285252][T19561] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1777.309771][T19562] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1777.455891][T19566] tipc: Enabling of bearer rejected, already enabled [ 1777.475594][T15798] tipc: Disabling bearer [ 1777.496156][T15798] tipc: Left network mode [ 1777.609099][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1777.616354][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1777.636312][T19567] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode [ 1777.652069][T19567] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode [ 1777.902290][T15798] mac80211_hwsim hwsim77 wlan1 (unregistering): left promiscuous mode [ 1778.033514][T19578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14337'. [ 1778.052158][T19536] lo speed is unknown, defaulting to 1000 [ 1778.138703][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14337'. [ 1778.507981][T19540] syzkaller0 speed is unknown, defaulting to 1000 [ 1778.640188][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1778.647514][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1778.702802][T19536] syzkaller0 speed is unknown, defaulting to 1000 [ 1778.714282][T19588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1778.811621][ T5857] Bluetooth: hci0: command tx timeout [ 1778.819192][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14341'. [ 1779.039306][T19589] macvlan3: entered promiscuous mode [ 1779.051242][T19589] macvlan3: entered allmulticast mode [ 1779.290139][T15798] hsr_slave_0: left promiscuous mode [ 1779.311309][T15798] hsr_slave_1: left promiscuous mode [ 1779.332028][T15798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1779.339507][T15798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.454256][T15798] team_slave_0: left promiscuous mode [ 1779.460154][T15798] team_slave_1: left promiscuous mode [ 1779.467173][T15798] veth1_macvtap: left promiscuous mode [ 1779.474025][T15798] veth0_macvtap: left promiscuous mode [ 1779.485663][T15798] veth0_vlan: left promiscuous mode [ 1779.679783][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1779.687008][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1779.845151][T15798] pim6reg (unregistering): left allmulticast mode [ 1780.677722][T15798] team0 (unregistering): Port device team_slave_1 removed [ 1780.719803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1780.726981][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1780.756754][T15798] team0 (unregistering): Port device team_slave_0 removed [ 1780.884225][T19479] Bluetooth: hci0: command tx timeout [ 1781.652416][T19604] tipc: Enabled bearer , priority 0 [ 1781.687931][T19615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14347'. [ 1781.702743][T19605] syzkaller0: entered promiscuous mode [ 1781.708391][T19605] syzkaller0: entered allmulticast mode [ 1781.714355][T19615] netlink: 43 bytes leftover after parsing attributes in process `syz.4.14347'. [ 1781.729422][T19615] netlink: 'syz.4.14347': attribute type 5 has an invalid length. [ 1781.742581][T19615] netlink: 43 bytes leftover after parsing attributes in process `syz.4.14347'. [ 1781.760223][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1781.767481][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1781.811651][T19613] tipc: Resetting bearer [ 1781.867074][T19613] tipc: Disabling bearer [ 1782.173236][T19536] chnl_net:caif_netlink_parms(): no params data found [ 1782.287452][T19633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14353'. [ 1782.327275][T19631] vlan0: entered promiscuous mode [ 1782.403659][T15798] IPVS: stop unused estimator thread 0... [ 1782.453693][T19640] netlink: 'syz.4.14356': attribute type 10 has an invalid length. [ 1782.585950][T19643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1782.756676][T19640] bond_slave_0: entered promiscuous mode [ 1782.762503][T19640] bond_slave_1: entered promiscuous mode [ 1782.775489][T19655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14360'. [ 1782.791710][T19640] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1782.798415][T19655] netlink: 43 bytes leftover after parsing attributes in process `syz.0.14360'. [ 1782.803945][T19640] bond1: (slave macvlan3): making interface the new active one [ 1782.808534][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1782.822829][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1782.845201][T19640] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 1782.855670][T19536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.867924][T19655] netlink: 'syz.0.14360': attribute type 5 has an invalid length. [ 1782.893389][T19536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.911206][T19536] bridge_slave_0: entered allmulticast mode [ 1782.930633][T19655] netlink: 43 bytes leftover after parsing attributes in process `syz.0.14360'. [ 1782.940872][T19536] bridge_slave_0: entered promiscuous mode [ 1782.952893][T19536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.960084][T19479] Bluetooth: hci0: command tx timeout [ 1782.966568][T19536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.985057][T19536] bridge_slave_1: entered allmulticast mode [ 1783.006207][T19536] bridge_slave_1: entered promiscuous mode [ 1783.135522][T19536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.158694][T19536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.228767][T19536] team0: Port device team_slave_0 added [ 1783.248299][T19536] team0: Port device team_slave_1 added [ 1783.332526][T19669] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1783.332554][T19536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.350275][T19669] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1783.361195][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.473648][T19536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.478901][T19674] netlink: 'syz.5.14367': attribute type 1 has an invalid length. [ 1783.502568][T19536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.513162][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.625098][T19536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.813278][T19536] hsr_slave_0: entered promiscuous mode [ 1783.839881][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1783.845597][T19536] hsr_slave_1: entered promiscuous mode [ 1783.847096][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1783.881451][T19536] debugfs: 'hsr0' already exists in 'hsr' [ 1783.892048][T19536] Cannot create hsr debugfs directory [ 1783.919923][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1783.937135][T19688] netlink: 'syz.4.14374': attribute type 29 has an invalid length. [ 1783.947658][T19688] netlink: 'syz.4.14374': attribute type 29 has an invalid length. [ 1783.957125][T19688] netlink: 'syz.4.14374': attribute type 29 has an invalid length. [ 1783.966457][T19688] netlink: 'syz.4.14374': attribute type 29 has an invalid length. [ 1784.045755][T19688] netlink: 'syz.4.14374': attribute type 29 has an invalid length. [ 1784.108303][T19688] netlink: 'syz.4.14374': attribute type 29 has an invalid length. [ 1784.467376][T19698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1784.731458][T19706] lo speed is unknown, defaulting to 1000 [ 1784.879978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1784.887246][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1785.356738][T19706] syzkaller0 speed is unknown, defaulting to 1000 [ 1785.364944][T19715] lo speed is unknown, defaulting to 1000 [ 1785.603054][T19536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1785.612460][T19726] FAULT_INJECTION: forcing a failure. [ 1785.612460][T19726] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.627352][T19726] CPU: 1 UID: 0 PID: 19726 Comm: syz.5.14382 Not tainted syzkaller #0 PREEMPT(full) [ 1785.627383][T19726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1785.627398][T19726] Call Trace: [ 1785.627407][T19726] [ 1785.627417][T19726] dump_stack_lvl+0x189/0x250 [ 1785.627452][T19726] ? __pfx____ratelimit+0x10/0x10 [ 1785.627487][T19726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1785.627515][T19726] ? __pfx__printk+0x10/0x10 [ 1785.627567][T19726] should_fail_ex+0x414/0x560 [ 1785.627605][T19726] should_failslab+0xa8/0x100 [ 1785.627637][T19726] __kmalloc_cache_noprof+0x70/0x3d0 [ 1785.627665][T19726] ? sctp_add_bind_addr+0x8c/0x370 [ 1785.627695][T19726] sctp_add_bind_addr+0x8c/0x370 [ 1785.627726][T19726] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1785.627760][T19726] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1785.627786][T19726] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1785.627814][T19726] ? sctp_v6_is_any+0x64/0x80 [ 1785.627843][T19726] ? sctp_copy_one_addr+0x93/0x360 [ 1785.627873][T19726] sctp_bind_addr_copy+0xb3/0x3c0 [ 1785.627900][T19726] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1785.627940][T19726] sctp_connect_new_asoc+0x2e0/0x690 [ 1785.627976][T19726] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1785.628006][T19726] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1785.628039][T19726] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1785.628062][T19726] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1785.628092][T19726] sctp_sendmsg+0x155c/0x2810 [ 1785.628145][T19726] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1785.628180][T19726] ? aa_sk_perm+0x81e/0x950 [ 1785.628217][T19726] ? __pfx_aa_sk_perm+0x10/0x10 [ 1785.628250][T19726] ? sock_rps_record_flow+0x19/0x410 [ 1785.628290][T19726] ? inet_sendmsg+0x2f4/0x370 [ 1785.628330][T19726] __sock_sendmsg+0x19c/0x270 [ 1785.628367][T19726] __sys_sendto+0x3bd/0x520 [ 1785.628395][T19726] ? __pfx___sys_sendto+0x10/0x10 [ 1785.628416][T19726] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1785.628456][T19726] ? __fget_files+0x3a0/0x420 [ 1785.628500][T19726] ? ksys_write+0x22a/0x250 [ 1785.628529][T19726] ? __pfx_ksys_write+0x10/0x10 [ 1785.628553][T19726] ? rcu_is_watching+0x15/0xb0 [ 1785.628586][T19726] __x64_sys_sendto+0xde/0x100 [ 1785.628615][T19726] do_syscall_64+0xfa/0x3b0 [ 1785.628636][T19726] ? lockdep_hardirqs_on+0x9c/0x150 [ 1785.628671][T19726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.628694][T19726] ? clear_bhb_loop+0x60/0xb0 [ 1785.628722][T19726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.628745][T19726] RIP: 0033:0x7fa5c978eec9 [ 1785.628765][T19726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.628785][T19726] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1785.628810][T19726] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1785.628826][T19726] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1785.628841][T19726] RBP: 00007fa5ca6c6090 R08: 0000200000000080 R09: 000000000000001c [ 1785.628857][T19726] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1785.628871][T19726] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1785.628909][T19726] [ 1785.634512][T19536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1785.919827][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1785.979424][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1786.063771][T19730] FAULT_INJECTION: forcing a failure. [ 1786.063771][T19730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.077740][T19730] CPU: 0 UID: 0 PID: 19730 Comm: syz.5.14384 Not tainted syzkaller #0 PREEMPT(full) [ 1786.077770][T19730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1786.077783][T19730] Call Trace: [ 1786.077793][T19730] [ 1786.077802][T19730] dump_stack_lvl+0x189/0x250 [ 1786.077834][T19730] ? __pfx____ratelimit+0x10/0x10 [ 1786.077870][T19730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1786.077895][T19730] ? __pfx__printk+0x10/0x10 [ 1786.077935][T19730] should_fail_ex+0x414/0x560 [ 1786.077965][T19730] _copy_to_user+0x31/0xb0 [ 1786.077984][T19536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1786.077994][T19730] generic_map_lookup_batch+0x8f2/0xcc0 [ 1786.078039][T19730] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1786.078068][T19730] ? __fget_files+0x2a/0x420 [ 1786.078111][T19730] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1786.078157][T19730] bpf_map_do_batch+0x282/0x630 [ 1786.078184][T19730] ? security_bpf+0x7e/0x300 [ 1786.078219][T19730] __sys_bpf+0x537/0x860 [ 1786.078260][T19730] ? __pfx___sys_bpf+0x10/0x10 [ 1786.078319][T19730] ? ksys_write+0x22a/0x250 [ 1786.078352][T19730] ? __pfx_ksys_write+0x10/0x10 [ 1786.078379][T19730] ? rcu_is_watching+0x15/0xb0 [ 1786.078417][T19730] __x64_sys_bpf+0x7c/0x90 [ 1786.078452][T19730] do_syscall_64+0xfa/0x3b0 [ 1786.078477][T19730] ? lockdep_hardirqs_on+0x9c/0x150 [ 1786.078515][T19730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.078541][T19730] ? clear_bhb_loop+0x60/0xb0 [ 1786.078571][T19730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.078596][T19730] RIP: 0033:0x7fa5c978eec9 [ 1786.078618][T19730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.078640][T19730] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1786.078667][T19730] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1786.078686][T19730] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1786.078703][T19730] RBP: 00007fa5ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.078718][T19730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1786.078734][T19730] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1786.078774][T19730] [ 1786.354377][T19536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1786.384521][T19715] syzkaller0 speed is unknown, defaulting to 1000 [ 1786.385947][T19737] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14386'. [ 1786.850683][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.912921][T19536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.952879][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.960165][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.967866][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1786.975124][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1787.071193][T15798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.078398][T15798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.447538][T15798] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1787.599504][T19766] FAULT_INJECTION: forcing a failure. [ 1787.599504][T19766] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.635695][T19766] CPU: 0 UID: 0 PID: 19766 Comm: syz.5.14395 Not tainted syzkaller #0 PREEMPT(full) [ 1787.635728][T19766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1787.635742][T19766] Call Trace: [ 1787.635765][T19766] [ 1787.635775][T19766] dump_stack_lvl+0x189/0x250 [ 1787.635808][T19766] ? __pfx____ratelimit+0x10/0x10 [ 1787.635843][T19766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.635871][T19766] ? __pfx__printk+0x10/0x10 [ 1787.635912][T19766] ? __pfx___might_resched+0x10/0x10 [ 1787.635936][T19766] ? fs_reclaim_acquire+0x7d/0x100 [ 1787.635973][T19766] should_fail_ex+0x414/0x560 [ 1787.636010][T19766] should_failslab+0xa8/0x100 [ 1787.636041][T19766] __kmalloc_noprof+0xcb/0x4f0 [ 1787.636066][T19766] ? kfree+0x4d/0x440 [ 1787.636087][T19766] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1787.636126][T19766] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1787.636161][T19766] ? tomoyo_domain+0xd9/0x130 [ 1787.636200][T19766] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1787.636226][T19766] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1787.636256][T19766] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1787.636303][T19766] ? __lock_acquire+0xab9/0xd20 [ 1787.636347][T19766] ? __fget_files+0x2a/0x420 [ 1787.636379][T19766] ? __fget_files+0x2a/0x420 [ 1787.636405][T19766] ? __fget_files+0x3a0/0x420 [ 1787.636432][T19766] ? __fget_files+0x2a/0x420 [ 1787.636464][T19766] security_file_ioctl+0xcb/0x2d0 [ 1787.636492][T19766] __se_sys_ioctl+0x47/0x170 [ 1787.636520][T19766] do_syscall_64+0xfa/0x3b0 [ 1787.636541][T19766] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.636575][T19766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.636598][T19766] ? clear_bhb_loop+0x60/0xb0 [ 1787.636626][T19766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.636647][T19766] RIP: 0033:0x7fa5c978eec9 [ 1787.636667][T19766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.636692][T19766] RSP: 002b:00007fa5ca6c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.636715][T19766] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978eec9 [ 1787.636732][T19766] RDX: 00002000000001c0 RSI: 000000000000894b RDI: 0000000000000003 [ 1787.636754][T19766] RBP: 00007fa5ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.636768][T19766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.636781][T19766] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1787.636816][T19766] [ 1787.637756][T19766] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1787.901287][T20395] block nbd9: Possible stuck request ffff888025415080: control (read@0,1024B). Runtime 1470 seconds [ 1787.913280][T20395] block nbd9: Possible stuck request ffff888025415240: control (read@1024,1024B). Runtime 1470 seconds [ 1787.929000][T20395] block nbd9: Possible stuck request ffff888025415400: control (read@2048,1024B). Runtime 1470 seconds [ 1787.944346][T20395] block nbd9: Possible stuck request ffff8880254155c0: control (read@3072,1024B). Runtime 1470 seconds [ 1787.979183][T19536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.999958][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1788.007302][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1788.203108][T19536] veth0_vlan: entered promiscuous mode [ 1788.264556][T19536] veth1_vlan: entered promiscuous mode [ 1788.287711][T19784] FAULT_INJECTION: forcing a failure. [ 1788.287711][T19784] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.347411][T19786] veth1_to_team: entered promiscuous mode [ 1788.361647][T19784] CPU: 1 UID: 0 PID: 19784 Comm: syz.0.14402 Not tainted syzkaller #0 PREEMPT(full) [ 1788.361680][T19784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1788.361694][T19784] Call Trace: [ 1788.361705][T19784] [ 1788.361715][T19784] dump_stack_lvl+0x189/0x250 [ 1788.361750][T19784] ? __pfx____ratelimit+0x10/0x10 [ 1788.361787][T19784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.361815][T19784] ? __pfx__printk+0x10/0x10 [ 1788.361866][T19784] should_fail_ex+0x414/0x560 [ 1788.361904][T19784] should_failslab+0xa8/0x100 [ 1788.361950][T19784] __kmalloc_cache_noprof+0x70/0x3d0 [ 1788.361979][T19784] ? sctp_add_bind_addr+0x8c/0x370 [ 1788.362011][T19784] sctp_add_bind_addr+0x8c/0x370 [ 1788.362042][T19784] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1788.362073][T19784] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1788.362100][T19784] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1788.362128][T19784] ? sctp_v6_is_any+0x64/0x80 [ 1788.362158][T19784] ? sctp_copy_one_addr+0x93/0x360 [ 1788.362188][T19784] sctp_bind_addr_copy+0xb3/0x3c0 [ 1788.362215][T19784] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1788.362256][T19784] sctp_connect_new_asoc+0x2e0/0x690 [ 1788.362293][T19784] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1788.362323][T19784] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1788.362356][T19784] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1788.362379][T19784] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1788.362410][T19784] sctp_sendmsg+0x155c/0x2810 [ 1788.362457][T19784] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1788.362492][T19784] ? aa_sk_perm+0x81e/0x950 [ 1788.362529][T19784] ? __pfx_aa_sk_perm+0x10/0x10 [ 1788.362564][T19784] ? sock_rps_record_flow+0x19/0x410 [ 1788.362603][T19784] ? inet_sendmsg+0x2f4/0x370 [ 1788.362644][T19784] __sock_sendmsg+0x19c/0x270 [ 1788.362684][T19784] __sys_sendto+0x3bd/0x520 [ 1788.362712][T19784] ? __pfx___sys_sendto+0x10/0x10 [ 1788.362734][T19784] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1788.362775][T19784] ? __fget_files+0x3a0/0x420 [ 1788.362820][T19784] ? ksys_write+0x22a/0x250 [ 1788.362850][T19784] ? __pfx_ksys_write+0x10/0x10 [ 1788.362874][T19784] ? rcu_is_watching+0x15/0xb0 [ 1788.362907][T19784] __x64_sys_sendto+0xde/0x100 [ 1788.362947][T19784] do_syscall_64+0xfa/0x3b0 [ 1788.362970][T19784] ? lockdep_hardirqs_on+0x9c/0x150 [ 1788.363005][T19784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.363028][T19784] ? clear_bhb_loop+0x60/0xb0 [ 1788.363057][T19784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.363079][T19784] RIP: 0033:0x7fdd0d18eec9 [ 1788.363100][T19784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.363121][T19784] RSP: 002b:00007fdd0e010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1788.363145][T19784] RAX: ffffffffffffffda RBX: 00007fdd0d3e5fa0 RCX: 00007fdd0d18eec9 [ 1788.363163][T19784] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1788.363177][T19784] RBP: 00007fdd0e010090 R08: 0000200000000080 R09: 000000000000001c [ 1788.363193][T19784] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1788.363207][T19784] R13: 00007fdd0d3e6038 R14: 00007fdd0d3e5fa0 R15: 00007fffc71238e8 [ 1788.363246][T19784] [ 1788.697266][T19786] bond0: entered promiscuous mode [ 1788.708574][T19786] bond_slave_0: entered promiscuous mode [ 1788.716076][T19786] bond_slave_1: entered promiscuous mode [ 1788.727668][T19786] dummy0: entered promiscuous mode [ 1788.734278][T19786] syz_tun: entered promiscuous mode [ 1788.740941][T19786] bridge0: entered promiscuous mode [ 1788.749117][T19786] debugfs: 'hsr1' already exists in 'hsr' [ 1788.756078][T19786] Cannot create hsr debugfs directory [ 1788.762633][T19786] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1788.784314][T19790] __nla_validate_parse: 2 callbacks suppressed [ 1788.784338][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14404'. [ 1788.808066][T19790] validate_nla: 26 callbacks suppressed [ 1788.808087][T19790] netlink: 'syz.4.14404': attribute type 7 has an invalid length. [ 1788.827040][T19790] netlink: 'syz.4.14404': attribute type 8 has an invalid length. [ 1788.837027][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14404'. [ 1788.838697][T19786] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1788.892766][T19786] hsr1: entered allmulticast mode [ 1788.902787][T19786] veth1_to_team: entered allmulticast mode [ 1788.908700][T19786] bond0: entered allmulticast mode [ 1788.949862][T19786] bond_slave_0: entered allmulticast mode [ 1788.966122][T19786] bond_slave_1: entered allmulticast mode [ 1788.982727][T19786] dummy0: entered allmulticast mode [ 1788.988019][T19786] syz_tun: entered allmulticast mode [ 1788.995054][T19786] bridge0: entered allmulticast mode [ 1789.036172][T19536] veth0_macvtap: entered promiscuous mode [ 1789.042639][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1789.051880][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1789.059127][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1789.106830][T19536] veth1_macvtap: entered promiscuous mode [ 1789.184023][T19536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1789.217866][T19536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1789.276290][ T8686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.289172][ T8686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.326134][ T8686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.347808][ T8686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.576247][T19808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1789.683008][T20395] block nbd3: Possible stuck request ffff888024e15080: control (read@0,1024B). Runtime 1620 seconds [ 1789.695008][T20395] block nbd3: Possible stuck request ffff888024e15240: control (read@1024,1024B). Runtime 1620 seconds [ 1789.703038][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.707893][T20395] block nbd3: Possible stuck request ffff888024e15400: control (read@2048,1024B). Runtime 1620 seconds [ 1789.741948][T20395] block nbd3: Possible stuck request ffff888024e155c0: control (read@3072,1024B). Runtime 1620 seconds [ 1789.754269][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.907597][T27625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.936249][T27625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.997166][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14416'. [ 1790.079735][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1790.087077][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1790.114177][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14304'. [ 1790.165954][T19824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1790.216814][T19832] bond0: (slave syz_tun): Releasing backup interface [ 1790.281468][T19832] syz_tun: left promiscuous mode [ 1790.290502][T19832] syz_tun: left allmulticast mode [ 1790.306827][T19832] bond0: (slave bridge0): Releasing backup interface [ 1790.316797][T19832] bridge0: left promiscuous mode [ 1790.331581][T19832] bridge0: left allmulticast mode [ 1790.338350][T19832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1790.366316][T19833] tipc: Enabled bearer , priority 0 [ 1790.392432][T19826] syzkaller0: entered promiscuous mode [ 1790.398328][T19826] syzkaller0: entered allmulticast mode [ 1790.502491][T19826] tipc: Resetting bearer [ 1790.517588][T19825] tipc: Resetting bearer [ 1790.577632][T19847] netlink: 'syz.4.14423': attribute type 10 has an invalid length. [ 1790.602669][T19848] netlink: 'syz.1.14422': attribute type 4 has an invalid length. [ 1790.611575][T19825] tipc: Disabling bearer [ 1790.656231][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14425'. [ 1790.858012][T19863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14430'. [ 1790.868344][T19863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14430'. [ 1790.935592][T19865] netlink: 'syz.5.14431': attribute type 10 has an invalid length. [ 1790.990784][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14432'. [ 1791.013951][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14434'. [ 1791.056142][T19865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1791.064621][T19871] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1791.119983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1791.127343][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1791.492609][T19885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14438'. [ 1791.601854][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1791.759801][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1792.446203][T19910] lo speed is unknown, defaulting to 1000 [ 1792.601470][T19923] netlink: 'syz.3.14451': attribute type 10 has an invalid length. [ 1792.661486][T19923] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1792.766389][T19924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1792.889832][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1793.199747][ C0] net_ratelimit: 2 callbacks suppressed [ 1793.199770][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1793.212815][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1793.369136][T19910] syzkaller0 speed is unknown, defaulting to 1000 [ 1793.807055][T19953] __nla_validate_parse: 5 callbacks suppressed [ 1793.807079][T19953] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14459'. [ 1794.004214][T19958] FAULT_INJECTION: forcing a failure. [ 1794.004214][T19958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1794.070547][T19958] CPU: 1 UID: 0 PID: 19958 Comm: syz.3.14462 Not tainted syzkaller #0 PREEMPT(full) [ 1794.070579][T19958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1794.070593][T19958] Call Trace: [ 1794.070602][T19958] [ 1794.070612][T19958] dump_stack_lvl+0x189/0x250 [ 1794.070645][T19958] ? __pfx____ratelimit+0x10/0x10 [ 1794.070681][T19958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1794.070708][T19958] ? __pfx__printk+0x10/0x10 [ 1794.070760][T19958] should_fail_ex+0x414/0x560 [ 1794.070802][T19958] _copy_to_user+0x31/0xb0 [ 1794.070831][T19958] generic_map_lookup_batch+0x8a0/0xcc0 [ 1794.070879][T19958] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1794.070908][T19958] ? __fget_files+0x2a/0x420 [ 1794.070944][T19958] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1794.070975][T19958] bpf_map_do_batch+0x282/0x630 [ 1794.070998][T19958] ? security_bpf+0x7e/0x300 [ 1794.071030][T19958] __sys_bpf+0x537/0x860 [ 1794.071066][T19958] ? __pfx___sys_bpf+0x10/0x10 [ 1794.071119][T19958] ? ksys_write+0x22a/0x250 [ 1794.071148][T19958] ? __pfx_ksys_write+0x10/0x10 [ 1794.071179][T19958] ? rcu_is_watching+0x15/0xb0 [ 1794.071212][T19958] __x64_sys_bpf+0x7c/0x90 [ 1794.071242][T19958] do_syscall_64+0xfa/0x3b0 [ 1794.071263][T19958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.071296][T19958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.071318][T19958] ? clear_bhb_loop+0x60/0xb0 [ 1794.071352][T19958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.071373][T19958] RIP: 0033:0x7f370818eec9 [ 1794.071395][T19958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.071415][T19958] RSP: 002b:00007f3708fd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1794.071439][T19958] RAX: ffffffffffffffda RBX: 00007f37083e5fa0 RCX: 00007f370818eec9 [ 1794.071455][T19958] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1794.071470][T19958] RBP: 00007f3708fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1794.071483][T19958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1794.071497][T19958] R13: 00007f37083e6038 R14: 00007f37083e5fa0 R15: 00007fffddc1f9a8 [ 1794.071533][T19958] [ 1794.240073][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1794.302803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1794.488038][ T30] audit: type=1107 audit(1759753739.122:92): pid=19961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1794.534027][T19966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14466'. [ 1794.597446][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14466'. [ 1794.621499][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14465'. [ 1794.954319][T19984] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14472'. [ 1795.025667][T19991] IPVS: length: 139 != 8 [ 1795.119960][T19994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14473'. [ 1795.143104][T19994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14473'. [ 1795.279735][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1795.286909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1795.501811][T19995] syzkaller0: entered allmulticast mode [ 1795.641866][T20003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14475'. [ 1795.659422][T20003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14475'. [ 1795.677911][T20006] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14476'. [ 1795.687761][T20008] syzkaller1: entered promiscuous mode [ 1795.694582][T20008] syzkaller1: entered allmulticast mode [ 1795.784455][T20008] lo speed is unknown, defaulting to 1000 [ 1795.990938][T20021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1796.034444][ T8684] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1796.185923][T20032] netlink: 'syz.4.14485': attribute type 1 has an invalid length. [ 1796.194364][T20032] netlink: 'syz.4.14485': attribute type 1 has an invalid length. [ 1796.237121][T20033] netlink: 'syz.3.14484': attribute type 5 has an invalid length. [ 1796.319755][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1796.327033][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1796.418786][T20008] syzkaller0 speed is unknown, defaulting to 1000 [ 1796.442339][T20040] netlink: 'syz.3.14489': attribute type 10 has an invalid length. [ 1796.781361][T20057] FAULT_INJECTION: forcing a failure. [ 1796.781361][T20057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1796.795778][T20057] CPU: 1 UID: 0 PID: 20057 Comm: syz.1.14491 Not tainted syzkaller #0 PREEMPT(full) [ 1796.795808][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1796.795823][T20057] Call Trace: [ 1796.795832][T20057] [ 1796.795842][T20057] dump_stack_lvl+0x189/0x250 [ 1796.795875][T20057] ? __pfx____ratelimit+0x10/0x10 [ 1796.795911][T20057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1796.795939][T20057] ? __pfx__printk+0x10/0x10 [ 1796.795988][T20057] should_fail_ex+0x414/0x560 [ 1796.796036][T20057] _copy_to_user+0x31/0xb0 [ 1796.796064][T20057] generic_map_lookup_batch+0x8a0/0xcc0 [ 1796.796112][T20057] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1796.796141][T20057] ? __fget_files+0x2a/0x420 [ 1796.796177][T20057] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1796.796209][T20057] bpf_map_do_batch+0x282/0x630 [ 1796.796232][T20057] ? security_bpf+0x7e/0x300 [ 1796.796262][T20057] __sys_bpf+0x537/0x860 [ 1796.796299][T20057] ? __pfx___sys_bpf+0x10/0x10 [ 1796.796352][T20057] ? ksys_write+0x22a/0x250 [ 1796.796382][T20057] ? __pfx_ksys_write+0x10/0x10 [ 1796.796405][T20057] ? rcu_is_watching+0x15/0xb0 [ 1796.796440][T20057] __x64_sys_bpf+0x7c/0x90 [ 1796.796471][T20057] do_syscall_64+0xfa/0x3b0 [ 1796.796494][T20057] ? lockdep_hardirqs_on+0x9c/0x150 [ 1796.796528][T20057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.796552][T20057] ? clear_bhb_loop+0x60/0xb0 [ 1796.796579][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.796602][T20057] RIP: 0033:0x7f217db8eec9 [ 1796.796622][T20057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.796643][T20057] RSP: 002b:00007f217eace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1796.796666][T20057] RAX: ffffffffffffffda RBX: 00007f217dde5fa0 RCX: 00007f217db8eec9 [ 1796.796683][T20057] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1796.796698][T20057] RBP: 00007f217eace090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.796713][T20057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.796727][T20057] R13: 00007f217dde6038 R14: 00007f217dde5fa0 R15: 00007fff3a915098 [ 1796.796764][T20057] [ 1796.814720][T20044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1797.360567][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1797.397997][T20075] netlink: 'syz.1.14497': attribute type 10 has an invalid length. [ 1797.565983][T20075] syz_tun: entered promiscuous mode [ 1797.576211][T20075] syz_tun: entered allmulticast mode [ 1797.592919][T20075] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1797.690545][T20076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1798.285172][T20085] lo speed is unknown, defaulting to 1000 [ 1798.399724][ C0] net_ratelimit: 1 callbacks suppressed [ 1798.399748][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1798.412759][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1798.574426][T20085] syzkaller0 speed is unknown, defaulting to 1000 [ 1798.943020][T20119] __nla_validate_parse: 13 callbacks suppressed [ 1798.943045][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14508'. [ 1798.991833][T20119] netlink: 'syz.5.14508': attribute type 7 has an invalid length. [ 1799.015534][T20119] netlink: 'syz.5.14508': attribute type 8 has an invalid length. [ 1799.027537][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14508'. [ 1799.310375][T20126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14510'. [ 1799.330902][T20126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14510'. [ 1799.355931][T20128] FAULT_INJECTION: forcing a failure. [ 1799.355931][T20128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.386408][T20128] CPU: 1 UID: 0 PID: 20128 Comm: syz.5.14511 Not tainted syzkaller #0 PREEMPT(full) [ 1799.386440][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1799.386455][T20128] Call Trace: [ 1799.386465][T20128] [ 1799.386474][T20128] dump_stack_lvl+0x189/0x250 [ 1799.386508][T20128] ? __pfx____ratelimit+0x10/0x10 [ 1799.386544][T20128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.386572][T20128] ? __pfx__printk+0x10/0x10 [ 1799.386619][T20128] should_fail_ex+0x414/0x560 [ 1799.386656][T20128] _copy_to_user+0x31/0xb0 [ 1799.386686][T20128] simple_read_from_buffer+0xe1/0x170 [ 1799.386721][T20128] proc_fail_nth_read+0x1b3/0x220 [ 1799.386748][T20128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1799.386774][T20128] ? rw_verify_area+0x2a6/0x4d0 [ 1799.386798][T20128] ? __lock_acquire+0xab9/0xd20 [ 1799.386818][T20128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1799.386842][T20128] vfs_read+0x1fd/0xa30 [ 1799.386867][T20128] ? fdget_pos+0x247/0x320 [ 1799.386903][T20128] ? __pfx___mutex_lock+0x10/0x10 [ 1799.386927][T20128] ? __pfx_vfs_read+0x10/0x10 [ 1799.386955][T20128] ? __fget_files+0x2a/0x420 [ 1799.386991][T20128] ? __fget_files+0x3a0/0x420 [ 1799.387028][T20128] ? __fget_files+0x2a/0x420 [ 1799.387071][T20128] ksys_read+0x145/0x250 [ 1799.387100][T20128] ? __pfx_ksys_read+0x10/0x10 [ 1799.387124][T20128] ? rcu_is_watching+0x15/0xb0 [ 1799.387157][T20128] ? do_syscall_64+0xbe/0x3b0 [ 1799.387185][T20128] do_syscall_64+0xfa/0x3b0 [ 1799.387207][T20128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.387241][T20128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.387265][T20128] ? clear_bhb_loop+0x60/0xb0 [ 1799.387293][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.387315][T20128] RIP: 0033:0x7fa5c978d8dc [ 1799.387337][T20128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1799.387358][T20128] RSP: 002b:00007fa5ca6c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1799.387381][T20128] RAX: ffffffffffffffda RBX: 00007fa5c99e5fa0 RCX: 00007fa5c978d8dc [ 1799.387398][T20128] RDX: 000000000000000f RSI: 00007fa5ca6c60a0 RDI: 0000000000000004 [ 1799.387413][T20128] RBP: 00007fa5ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.387427][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.387441][T20128] R13: 00007fa5c99e6038 R14: 00007fa5c99e5fa0 R15: 00007ffc3517aff8 [ 1799.387479][T20128] [ 1799.440467][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1799.635909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1799.764543][T20140] lo speed is unknown, defaulting to 1000 [ 1799.928151][T26153] block nbd1: Possible stuck request ffff888024da0000: control (read@0,1024B). Runtime 1650 seconds [ 1799.936946][T20147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14516'. [ 1799.939194][T26153] block nbd1: Possible stuck request ffff888024da01c0: control (read@1024,1024B). Runtime 1650 seconds [ 1799.962010][T26153] block nbd1: Possible stuck request ffff888024da0380: control (read@2048,1024B). Runtime 1650 seconds [ 1799.973674][T26153] block nbd1: Possible stuck request ffff888024da0540: control (read@3072,1024B). Runtime 1650 seconds [ 1800.255814][T20155] netlink: 'syz.4.14519': attribute type 10 has an invalid length. [ 1800.288716][T20161] netlink: 'syz.5.14522': attribute type 10 has an invalid length. [ 1800.335842][T20155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1800.360428][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14522'. [ 1800.400065][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1800.466034][T20140] syzkaller0 speed is unknown, defaulting to 1000 [ 1800.479727][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1800.486964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1800.561264][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1800.815628][T20167] lo speed is unknown, defaulting to 1000 [ 1800.877623][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14524'. [ 1801.163136][T20186] netlink: 'syz.4.14527': attribute type 1 has an invalid length. [ 1801.326362][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14530'. [ 1801.519715][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1801.526929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1801.621558][T20167] syzkaller0 speed is unknown, defaulting to 1000 [ 1802.438011][T20235] netlink: 'syz.1.14545': attribute type 13 has an invalid length. [ 1802.477120][T20235] netlink: 'syz.1.14545': attribute type 17 has an invalid length. [ 1802.559745][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1802.566977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1802.854951][T20250] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14549'. [ 1802.874044][T20251] netlink: 'syz.4.14550': attribute type 10 has an invalid length. [ 1802.962875][T20235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.012862][T20235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.532382][T20255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1803.585012][T20258] tipc: Enabling of bearer rejected, failed to enable media [ 1803.600415][ C0] net_ratelimit: 1 callbacks suppressed [ 1803.600436][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1803.613809][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1803.797561][T20245] lo speed is unknown, defaulting to 1000 [ 1803.995581][T20278] tipc: Enabling of bearer rejected, failed to enable media [ 1804.334638][T20239] lo speed is unknown, defaulting to 1000 [ 1804.347431][T20245] syzkaller0 speed is unknown, defaulting to 1000 [ 1804.640149][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1804.647331][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1804.818992][T20300] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14559'. [ 1804.849087][T20300] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14559'. [ 1804.928362][T20250] lo speed is unknown, defaulting to 1000 [ 1805.061861][T20306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14560'. [ 1805.392068][T20317] netlink: 2 bytes leftover after parsing attributes in process `syz.5.14562'. [ 1805.404089][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14562'. [ 1805.404294][T20319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14563'. [ 1805.414824][T20317] netlink: 2 bytes leftover after parsing attributes in process `syz.5.14562'. [ 1805.448674][T20250] syzkaller0 speed is unknown, defaulting to 1000 [ 1805.505281][T20239] syzkaller0 speed is unknown, defaulting to 1000 [ 1805.586437][T20317] lo speed is unknown, defaulting to 1000 [ 1805.680738][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1805.687917][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1805.798274][T20326] dvmrp8: entered allmulticast mode [ 1806.348158][T20325] lo speed is unknown, defaulting to 1000 [ 1806.497556][T20341] netlink: 'syz.0.14569': attribute type 21 has an invalid length. [ 1806.508791][T20324] dvmrp8: left allmulticast mode [ 1806.514782][T20341] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14569'. [ 1806.591832][T20341] netlink: 'syz.0.14569': attribute type 4 has an invalid length. [ 1806.600436][T20341] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14569'. [ 1806.649083][T20325] syzkaller0 speed is unknown, defaulting to 1000 [ 1806.664954][T20317] syzkaller0 speed is unknown, defaulting to 1000 [ 1806.719774][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1806.727103][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1806.744429][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14570'. [ 1807.759855][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1807.767151][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1807.875055][T20350] FAULT_INJECTION: forcing a failure. [ 1807.875055][T20350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.890277][T20350] CPU: 0 UID: 0 PID: 20350 Comm: syz.1.14573 Not tainted syzkaller #0 PREEMPT(full) [ 1807.890310][T20350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1807.890325][T20350] Call Trace: [ 1807.890334][T20350] [ 1807.890344][T20350] dump_stack_lvl+0x189/0x250 [ 1807.890379][T20350] ? __pfx____ratelimit+0x10/0x10 [ 1807.890415][T20350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.890443][T20350] ? __pfx__printk+0x10/0x10 [ 1807.890494][T20350] should_fail_ex+0x414/0x560 [ 1807.890532][T20350] _copy_to_user+0x31/0xb0 [ 1807.890561][T20350] simple_read_from_buffer+0xe1/0x170 [ 1807.890596][T20350] proc_fail_nth_read+0x1b3/0x220 [ 1807.890623][T20350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1807.890650][T20350] ? rw_verify_area+0x2a6/0x4d0 [ 1807.890673][T20350] ? __lock_acquire+0xab9/0xd20 [ 1807.890692][T20350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1807.890717][T20350] vfs_read+0x1fd/0xa30 [ 1807.890741][T20350] ? fdget_pos+0x247/0x320 [ 1807.890776][T20350] ? __pfx___mutex_lock+0x10/0x10 [ 1807.890800][T20350] ? __pfx_vfs_read+0x10/0x10 [ 1807.890829][T20350] ? __fget_files+0x2a/0x420 [ 1807.890864][T20350] ? __fget_files+0x3a0/0x420 [ 1807.890893][T20350] ? __fget_files+0x2a/0x420 [ 1807.890935][T20350] ksys_read+0x145/0x250 [ 1807.890988][T20350] ? __pfx_ksys_read+0x10/0x10 [ 1807.891011][T20350] ? rcu_is_watching+0x15/0xb0 [ 1807.891051][T20350] ? do_syscall_64+0xbe/0x3b0 [ 1807.891080][T20350] do_syscall_64+0xfa/0x3b0 [ 1807.891101][T20350] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.891136][T20350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.891158][T20350] ? clear_bhb_loop+0x60/0xb0 [ 1807.891187][T20350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.891209][T20350] RIP: 0033:0x7f217db8d8dc [ 1807.891230][T20350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1807.891250][T20350] RSP: 002b:00007f217eace030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1807.891273][T20350] RAX: ffffffffffffffda RBX: 00007f217dde5fa0 RCX: 00007f217db8d8dc [ 1807.891290][T20350] RDX: 000000000000000f RSI: 00007f217eace0a0 RDI: 0000000000000005 [ 1807.891308][T20350] RBP: 00007f217eace090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.891323][T20350] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 1807.891337][T20350] R13: 00007f217dde6038 R14: 00007f217dde5fa0 R15: 00007fff3a915098 [ 1807.891375][T20350] [ 1807.898089][T20353] vlan3: entered promiscuous mode [ 1808.530465][T20378] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1808.641440][T27625] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xdd [ 1808.681205][T20390] syzkaller0: entered promiscuous mode [ 1808.686958][T20390] syzkaller0: entered allmulticast mode [ 1808.799751][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1808.807000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1809.519755][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1809.728547][T20424] lo speed is unknown, defaulting to 1000 [ 1809.839736][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1809.847066][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1810.199428][T20424] syzkaller0 speed is unknown, defaulting to 1000 [ 1810.449343][T20461] __nla_validate_parse: 5 callbacks suppressed [ 1810.449365][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14602'. [ 1810.731665][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14603'. [ 1810.835607][T20470] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14605'. [ 1810.846911][T20470] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14605'. [ 1810.879704][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1810.887004][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1810.990901][ T140] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1811.267143][T20484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14611'. [ 1811.298092][T20484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14611'. [ 1811.314043][T20488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14613'. [ 1811.355825][T20488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14613'. [ 1811.394925][T20488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14613'. [ 1811.596496][T20495] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14614'. [ 1811.647638][T20492] lo speed is unknown, defaulting to 1000 [ 1811.725637][T20498] pimreg: entered allmulticast mode [ 1811.919770][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1811.927028][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1812.477345][T20515] lo speed is unknown, defaulting to 1000 [ 1812.541736][T20492] syzkaller0 speed is unknown, defaulting to 1000 [ 1812.585735][T20524] FAULT_INJECTION: forcing a failure. [ 1812.585735][T20524] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.599296][T20524] CPU: 0 UID: 0 PID: 20524 Comm: syz.4.14622 Not tainted syzkaller #0 PREEMPT(full) [ 1812.599341][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1812.599363][T20524] Call Trace: [ 1812.599379][T20524] [ 1812.599396][T20524] dump_stack_lvl+0x189/0x250 [ 1812.599440][T20524] ? __pfx____ratelimit+0x10/0x10 [ 1812.599482][T20524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1812.599515][T20524] ? __pfx__printk+0x10/0x10 [ 1812.599556][T20524] ? __pfx___might_resched+0x10/0x10 [ 1812.599580][T20524] ? fs_reclaim_acquire+0x7d/0x100 [ 1812.599617][T20524] should_fail_ex+0x414/0x560 [ 1812.599656][T20524] should_failslab+0xa8/0x100 [ 1812.599687][T20524] __kmalloc_cache_noprof+0x70/0x3d0 [ 1812.599715][T20524] ? nf_tables_newchain+0xfeb/0x2900 [ 1812.599751][T20524] nf_tables_newchain+0xfeb/0x2900 [ 1812.599805][T20524] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1812.599882][T20524] ? nfnl_pernet+0x23/0x240 [ 1812.599928][T20524] ? __nla_parse+0x40/0x60 [ 1812.599956][T20524] nfnetlink_rcv+0x11d9/0x2590 [ 1812.600033][T20524] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1812.600087][T20524] ? ref_tracker_free+0x63a/0x7d0 [ 1812.600155][T20524] ? __netlink_deliver_tap+0x807/0x850 [ 1812.600179][T20524] ? netlink_deliver_tap+0x2e/0x1b0 [ 1812.600225][T20524] netlink_unicast+0x82c/0x9e0 [ 1812.600269][T20524] ? __pfx_netlink_unicast+0x10/0x10 [ 1812.600305][T20524] ? netlink_sendmsg+0x642/0xb30 [ 1812.600326][T20524] ? skb_put+0x11b/0x210 [ 1812.600363][T20524] netlink_sendmsg+0x805/0xb30 [ 1812.600399][T20524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1812.600428][T20524] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1812.600463][T20524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1812.600498][T20524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1812.600532][T20524] __sock_sendmsg+0x21c/0x270 [ 1812.600569][T20524] ____sys_sendmsg+0x505/0x830 [ 1812.600604][T20524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1812.600643][T20524] ? import_iovec+0x74/0xa0 [ 1812.600678][T20524] ___sys_sendmsg+0x21f/0x2a0 [ 1812.600707][T20524] ? __pfx____sys_sendmsg+0x10/0x10 [ 1812.600776][T20524] ? __fget_files+0x2a/0x420 [ 1812.600806][T20524] ? __fget_files+0x3a0/0x420 [ 1812.600849][T20524] __x64_sys_sendmsg+0x19b/0x260 [ 1812.600886][T20524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1812.600922][T20524] ? __pfx_ksys_write+0x10/0x10 [ 1812.600945][T20524] ? rcu_is_watching+0x15/0xb0 [ 1812.600976][T20524] ? do_syscall_64+0xbe/0x3b0 [ 1812.601003][T20524] do_syscall_64+0xfa/0x3b0 [ 1812.601026][T20524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.601048][T20524] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1812.601070][T20524] ? clear_bhb_loop+0x60/0xb0 [ 1812.601098][T20524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.601121][T20524] RIP: 0033:0x7fae5e38eec9 [ 1812.601141][T20524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1812.601162][T20524] RSP: 002b:00007fae5f271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1812.601186][T20524] RAX: ffffffffffffffda RBX: 00007fae5e5e5fa0 RCX: 00007fae5e38eec9 [ 1812.601203][T20524] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000006 [ 1812.601218][T20524] RBP: 00007fae5f271090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.601233][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.601247][T20524] R13: 00007fae5e5e6038 R14: 00007fae5e5e5fa0 R15: 00007ffd2fe3d958 [ 1812.601284][T20524] [ 1812.989231][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1812.996594][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1813.263337][T20532] netlink: 'syz.5.14625': attribute type 10 has an invalid length. [ 1813.274894][T20515] syzkaller0 speed is unknown, defaulting to 1000 [ 1813.360210][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1813.719002][T20538] lo speed is unknown, defaulting to 1000 [ 1813.999780][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1814.007044][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1814.151564][T20561] netlink: 'syz.3.14632': attribute type 7 has an invalid length. [ 1814.160029][T20561] netlink: 'syz.3.14632': attribute type 8 has an invalid length. [ 1814.258461][ T8684] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1814.312645][T20538] syzkaller0 speed is unknown, defaulting to 1000 [ 1814.879809][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1815.040790][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1815.048123][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1815.463987][T20582] lo speed is unknown, defaulting to 1000 [ 1815.662279][T20594] syzkaller1: entered promiscuous mode [ 1815.688531][T20594] syzkaller1: entered allmulticast mode [ 1815.731639][T20599] __nla_validate_parse: 5 callbacks suppressed [ 1815.731659][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14644'. [ 1815.750918][T20599] FAULT_INJECTION: forcing a failure. [ 1815.750918][T20599] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.765284][T20599] CPU: 0 UID: 0 PID: 20599 Comm: syz.1.14644 Not tainted syzkaller #0 PREEMPT(full) [ 1815.765322][T20599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1815.765337][T20599] Call Trace: [ 1815.765353][T20599] [ 1815.765363][T20599] dump_stack_lvl+0x189/0x250 [ 1815.765397][T20599] ? __pfx____ratelimit+0x10/0x10 [ 1815.765434][T20599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1815.765462][T20599] ? __pfx__printk+0x10/0x10 [ 1815.765502][T20599] ? __pfx___might_resched+0x10/0x10 [ 1815.765533][T20599] should_fail_ex+0x414/0x560 [ 1815.765571][T20599] should_failslab+0xa8/0x100 [ 1815.765603][T20599] __kmalloc_noprof+0xcb/0x4f0 [ 1815.765629][T20599] ? __kasan_kmalloc+0x93/0xb0 [ 1815.765653][T20599] ? nla_strdup+0x9d/0x140 [ 1815.765679][T20599] nla_strdup+0x9d/0x140 [ 1815.765704][T20599] nf_tables_newchain+0x1998/0x2900 [ 1815.765753][T20599] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1815.765823][T20599] ? nfnl_pernet+0x23/0x240 [ 1815.765869][T20599] ? __nla_parse+0x40/0x60 [ 1815.765896][T20599] nfnetlink_rcv+0x11d9/0x2590 [ 1815.765973][T20599] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1815.766028][T20599] ? ref_tracker_free+0x63a/0x7d0 [ 1815.766096][T20599] ? __netlink_deliver_tap+0x807/0x850 [ 1815.766120][T20599] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.766164][T20599] netlink_unicast+0x82c/0x9e0 [ 1815.766209][T20599] ? __pfx_netlink_unicast+0x10/0x10 [ 1815.766247][T20599] ? netlink_sendmsg+0x642/0xb30 [ 1815.766274][T20599] ? skb_put+0x11b/0x210 [ 1815.766304][T20599] netlink_sendmsg+0x805/0xb30 [ 1815.766339][T20599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.766378][T20599] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1815.766413][T20599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1815.766448][T20599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.766472][T20599] __sock_sendmsg+0x21c/0x270 [ 1815.766506][T20599] ____sys_sendmsg+0x505/0x830 [ 1815.766537][T20599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.766576][T20599] ? import_iovec+0x74/0xa0 [ 1815.766606][T20599] ___sys_sendmsg+0x21f/0x2a0 [ 1815.766636][T20599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.766706][T20599] ? __fget_files+0x2a/0x420 [ 1815.766734][T20599] ? __fget_files+0x3a0/0x420 [ 1815.766776][T20599] __x64_sys_sendmsg+0x19b/0x260 [ 1815.766806][T20599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.766843][T20599] ? __pfx_ksys_write+0x10/0x10 [ 1815.766866][T20599] ? rcu_is_watching+0x15/0xb0 [ 1815.766897][T20599] ? do_syscall_64+0xbe/0x3b0 [ 1815.766925][T20599] do_syscall_64+0xfa/0x3b0 [ 1815.766946][T20599] ? lockdep_hardirqs_on+0x9c/0x150 [ 1815.766980][T20599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.767003][T20599] ? clear_bhb_loop+0x60/0xb0 [ 1815.767032][T20599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.767053][T20599] RIP: 0033:0x7f217db8eec9 [ 1815.767075][T20599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1815.767095][T20599] RSP: 002b:00007f217eace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.767118][T20599] RAX: ffffffffffffffda RBX: 00007f217dde5fa0 RCX: 00007f217db8eec9 [ 1815.767135][T20599] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000006 [ 1815.767150][T20599] RBP: 00007f217eace090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.767164][T20599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.767178][T20599] R13: 00007f217dde6038 R14: 00007f217dde5fa0 R15: 00007fff3a915098 [ 1815.767216][T20599] [ 1816.108398][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1816.115674][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1816.283113][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14647'. [ 1816.435160][T20582] syzkaller0 speed is unknown, defaulting to 1000 [ 1816.506015][T20609] lo speed is unknown, defaulting to 1000 [ 1816.624917][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14648'. [ 1816.648034][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14646'. [ 1816.852265][T20626] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.14651'. [ 1816.925751][T20624] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14652'. [ 1816.935917][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14652'. [ 1816.975269][T20609] syzkaller0 speed is unknown, defaulting to 1000 [ 1817.047672][T20633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14653'. [ 1817.096577][T20632] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14652'. [ 1817.119785][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1817.127059][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1817.419766][T20623] lo speed is unknown, defaulting to 1000 [ 1817.839951][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1818.112215][T20657] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14661'. [ 1818.159785][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1818.167083][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1818.174461][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1818.207025][T20623] syzkaller0 speed is unknown, defaulting to 1000 [ 1818.290498][T20664] netlink: 'syz.4.14662': attribute type 3 has an invalid length. [ 1818.481912][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1818.500635][T20395] block nbd9: Possible stuck request ffff888025415080: control (read@0,1024B). Runtime 1500 seconds [ 1818.513472][T20395] block nbd9: Possible stuck request ffff888025415240: control (read@1024,1024B). Runtime 1500 seconds [ 1818.525426][T20395] block nbd9: Possible stuck request ffff888025415400: control (read@2048,1024B). Runtime 1500 seconds [ 1818.537817][T20395] block nbd9: Possible stuck request ffff8880254155c0: control (read@3072,1024B). Runtime 1500 seconds [ 1818.845001][T20687] netlink: 'syz.1.14667': attribute type 5 has an invalid length. [ 1819.034915][T20684] lo speed is unknown, defaulting to 1000 [ 1819.199689][ C0] net_ratelimit: 1 callbacks suppressed [ 1819.199712][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1819.212638][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1819.764262][T20395] block nbd3: Possible stuck request ffff888024e15080: control (read@0,1024B). Runtime 1650 seconds [ 1819.776103][T20395] block nbd3: Possible stuck request ffff888024e15240: control (read@1024,1024B). Runtime 1650 seconds [ 1819.787759][T20395] block nbd3: Possible stuck request ffff888024e15400: control (read@2048,1024B). Runtime 1650 seconds [ 1819.800926][T20395] block nbd3: Possible stuck request ffff888024e155c0: control (read@3072,1024B). Runtime 1650 seconds [ 1819.869053][T20703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.986327][T20689] lo speed is unknown, defaulting to 1000 [ 1820.014436][T20684] syzkaller0 speed is unknown, defaulting to 1000 [ 1820.211127][T20703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.239781][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1820.247046][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1820.681268][T20703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.704945][T20689] syzkaller0 speed is unknown, defaulting to 1000 [ 1820.796694][T20703] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.836642][T20723] __nla_validate_parse: 9 callbacks suppressed [ 1820.836664][T20723] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14675'. [ 1820.852869][T20723] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14675'. [ 1821.279747][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1821.287051][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1821.402805][ T1339] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.486045][ T1339] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.576004][ T1339] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.593839][T20736] lo speed is unknown, defaulting to 1000 [ 1821.634036][ T8686] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.816536][T20747] netlink: 'syz.3.14684': attribute type 10 has an invalid length. [ 1821.865543][T20747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.907245][T20747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.940441][T20751] FAULT_INJECTION: forcing a failure. [ 1821.940441][T20751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1822.002019][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.1.14686 Not tainted syzkaller #0 PREEMPT(full) [ 1822.002053][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1822.002067][T20751] Call Trace: [ 1822.002077][T20751] [ 1822.002087][T20751] dump_stack_lvl+0x189/0x250 [ 1822.002120][T20751] ? __pfx____ratelimit+0x10/0x10 [ 1822.002156][T20751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1822.002185][T20751] ? __pfx__printk+0x10/0x10 [ 1822.002235][T20751] should_fail_ex+0x414/0x560 [ 1822.002272][T20751] _copy_to_user+0x31/0xb0 [ 1822.002302][T20751] generic_map_lookup_batch+0x8a0/0xcc0 [ 1822.002352][T20751] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1822.002381][T20751] ? __fget_files+0x2a/0x420 [ 1822.002417][T20751] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1822.002448][T20751] bpf_map_do_batch+0x282/0x630 [ 1822.002472][T20751] ? security_bpf+0x7e/0x300 [ 1822.002502][T20751] __sys_bpf+0x537/0x860 [ 1822.002539][T20751] ? __pfx___sys_bpf+0x10/0x10 [ 1822.002593][T20751] ? ksys_write+0x22a/0x250 [ 1822.002622][T20751] ? __pfx_ksys_write+0x10/0x10 [ 1822.002646][T20751] ? rcu_is_watching+0x15/0xb0 [ 1822.002681][T20751] __x64_sys_bpf+0x7c/0x90 [ 1822.002713][T20751] do_syscall_64+0xfa/0x3b0 [ 1822.002735][T20751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1822.002769][T20751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.002793][T20751] ? clear_bhb_loop+0x60/0xb0 [ 1822.002821][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.002843][T20751] RIP: 0033:0x7f217db8eec9 [ 1822.002864][T20751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1822.002885][T20751] RSP: 002b:00007f217eace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1822.002909][T20751] RAX: ffffffffffffffda RBX: 00007f217dde5fa0 RCX: 00007f217db8eec9 [ 1822.002926][T20751] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1822.002941][T20751] RBP: 00007f217eace090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.002956][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1822.002970][T20751] R13: 00007f217dde6038 R14: 00007f217dde5fa0 R15: 00007fff3a915098 [ 1822.003012][T20751] [ 1822.303621][T20736] syzkaller0 speed is unknown, defaulting to 1000 [ 1822.321184][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1822.328402][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1822.506109][T20764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14691'. [ 1822.527607][T20764] netlink: 'syz.4.14691': attribute type 7 has an invalid length. [ 1822.535828][T20764] netlink: 'syz.4.14691': attribute type 8 has an invalid length. [ 1822.548772][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14691'. [ 1822.822262][T20773] syz_tun: Device is already in use. [ 1822.869243][T20781] syz_tun: Device is already in use. [ 1822.908687][T20783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14698'. [ 1822.922057][T20783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14698'. [ 1822.959931][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1823.359757][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1823.367246][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1823.600102][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1823.769871][T20814] netlink: 'syz.0.14708': attribute type 1 has an invalid length. [ 1823.777870][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14708'. [ 1823.798717][T20814] netlink: 112 bytes leftover after parsing attributes in process `syz.0.14708'. [ 1823.919206][T20816] bridge8: entered promiscuous mode [ 1823.926090][T20816] bridge8: entered allmulticast mode [ 1823.967796][T20820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14711'. [ 1824.027232][T20816] bridge8: left promiscuous mode [ 1824.037191][T20816] bridge8: left allmulticast mode [ 1824.195395][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14714'. [ 1824.205276][T20832] FAULT_INJECTION: forcing a failure. [ 1824.205276][T20832] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.218287][T20832] CPU: 0 UID: 0 PID: 20832 Comm: syz.3.14714 Not tainted syzkaller #0 PREEMPT(full) [ 1824.218318][T20832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1824.218332][T20832] Call Trace: [ 1824.218342][T20832] [ 1824.218352][T20832] dump_stack_lvl+0x189/0x250 [ 1824.218386][T20832] ? __pfx____ratelimit+0x10/0x10 [ 1824.218423][T20832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1824.218451][T20832] ? __pfx__printk+0x10/0x10 [ 1824.218492][T20832] ? __pfx___might_resched+0x10/0x10 [ 1824.218516][T20832] ? fs_reclaim_acquire+0x7d/0x100 [ 1824.218554][T20832] should_fail_ex+0x414/0x560 [ 1824.218593][T20832] should_failslab+0xa8/0x100 [ 1824.218625][T20832] __kmalloc_cache_noprof+0x70/0x3d0 [ 1824.218652][T20832] ? nfnetlink_rcv+0xf97/0x2590 [ 1824.218690][T20832] nfnetlink_rcv+0xf97/0x2590 [ 1824.218764][T20832] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1824.218828][T20832] ? ref_tracker_free+0x63a/0x7d0 [ 1824.218895][T20832] ? __netlink_deliver_tap+0x807/0x850 [ 1824.218917][T20832] ? netlink_deliver_tap+0x2e/0x1b0 [ 1824.218961][T20832] netlink_unicast+0x82c/0x9e0 [ 1824.219006][T20832] ? __pfx_netlink_unicast+0x10/0x10 [ 1824.219042][T20832] ? netlink_sendmsg+0x642/0xb30 [ 1824.219064][T20832] ? skb_put+0x11b/0x210 [ 1824.219093][T20832] netlink_sendmsg+0x805/0xb30 [ 1824.219129][T20832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1824.219158][T20832] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1824.219193][T20832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1824.219227][T20832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1824.219252][T20832] __sock_sendmsg+0x21c/0x270 [ 1824.219290][T20832] ____sys_sendmsg+0x505/0x830 [ 1824.219327][T20832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1824.219366][T20832] ? import_iovec+0x74/0xa0 [ 1824.219397][T20832] ___sys_sendmsg+0x21f/0x2a0 [ 1824.219427][T20832] ? __pfx____sys_sendmsg+0x10/0x10 [ 1824.219503][T20832] ? __fget_files+0x2a/0x420 [ 1824.219533][T20832] ? __fget_files+0x3a0/0x420 [ 1824.219576][T20832] __x64_sys_sendmsg+0x19b/0x260 [ 1824.219607][T20832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1824.219647][T20832] ? __pfx_ksys_write+0x10/0x10 [ 1824.219671][T20832] ? rcu_is_watching+0x15/0xb0 [ 1824.219704][T20832] ? do_syscall_64+0xbe/0x3b0 [ 1824.219733][T20832] do_syscall_64+0xfa/0x3b0 [ 1824.219755][T20832] ? lockdep_hardirqs_on+0x9c/0x150 [ 1824.219795][T20832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.219819][T20832] ? clear_bhb_loop+0x60/0xb0 [ 1824.219848][T20832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.219869][T20832] RIP: 0033:0x7f370818eec9 [ 1824.219891][T20832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.219911][T20832] RSP: 002b:00007f3708fd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.219935][T20832] RAX: ffffffffffffffda RBX: 00007f37083e5fa0 RCX: 00007f370818eec9 [ 1824.219952][T20832] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000006 [ 1824.219968][T20832] RBP: 00007f3708fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.219983][T20832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.219997][T20832] R13: 00007f37083e6038 R14: 00007f37083e5fa0 R15: 00007fffddc1f9a8 [ 1824.220034][T20832] [ 1824.534253][ C0] net_ratelimit: 1 callbacks suppressed [ 1824.534275][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1824.547067][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1824.740485][T20838] netlink: 'syz.5.14716': attribute type 5 has an invalid length. [ 1824.887278][ T31] INFO: task syz.9.13405:16700 blocked for more than 143 seconds. [ 1824.917267][ T31] Not tainted syzkaller #0 [ 1824.930088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1824.949781][ T31] task:syz.9.13405 state:D stack:24136 pid:16700 tgid:16699 ppid:10145 task_flags:0x400140 flags:0x00080002 [ 1824.965142][T20849] vlan0: entered promiscuous mode [ 1824.973642][ T31] Call Trace: [ 1824.976984][ T31] [ 1824.983154][ T31] __schedule+0x1798/0x4cc0 [ 1824.987745][ T31] ? __lock_acquire+0xab9/0xd20 [ 1824.994144][ T31] ? __lock_acquire+0xab9/0xd20 [ 1825.002079][ T31] ? __pfx___schedule+0x10/0x10 [ 1825.008486][ T31] ? schedule+0x91/0x360 [ 1825.014425][ T31] schedule+0x165/0x360 [ 1825.019487][ T31] schedule_preempt_disabled+0x13/0x30 [ 1825.026309][ T31] __mutex_lock+0x7e6/0x1350 [ 1825.032555][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1825.037474][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1825.044962][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1825.051400][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1825.056174][ T31] ? genlmsg_put+0x137/0x2e0 [ 1825.070841][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1825.076640][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1825.083735][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1825.089161][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 1825.099259][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1825.106611][ T31] ? stack_trace_save+0x9c/0xe0 [ 1825.113361][ T31] genl_rcv_msg+0x60e/0x790 [ 1825.118010][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1825.124595][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1825.132440][ T31] netlink_rcv_skb+0x208/0x470 [ 1825.137478][ T31] ? __lock_acquire+0xab9/0xd20 [ 1825.143254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1825.148543][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1825.162534][ T31] ? down_read+0x1ad/0x2e0 [ 1825.172926][ T31] genl_rcv+0x28/0x40 [ 1825.181622][ T31] netlink_unicast+0x82c/0x9e0 [ 1825.193720][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1825.209370][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1825.220792][ T31] ? skb_put+0x11b/0x210 [ 1825.225119][ T31] netlink_sendmsg+0x805/0xb30 [ 1825.239690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.252010][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1825.257229][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1825.263484][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.268965][ T31] __sock_sendmsg+0x21c/0x270 [ 1825.275187][ T31] ____sys_sendmsg+0x505/0x830 [ 1825.282101][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1825.287618][ T31] ? import_iovec+0x74/0xa0 [ 1825.293860][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1825.298677][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1825.306064][ T31] ? __fget_files+0x2a/0x420 [ 1825.313385][ T31] ? __fget_files+0x3a0/0x420 [ 1825.318318][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1825.324459][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1825.331207][ T31] ? rcu_is_watching+0x15/0xb0 [ 1825.336238][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1825.342361][ T31] do_syscall_64+0xfa/0x3b0 [ 1825.347053][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1825.353470][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.360522][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1825.365443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.372965][ T31] RIP: 0033:0x7f961758eec9 [ 1825.377594][ T31] RSP: 002b:00007f961845e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1825.386981][ T31] RAX: ffffffffffffffda RBX: 00007f96177e5fa0 RCX: 00007f961758eec9 [ 1825.396238][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1825.406077][ T31] RBP: 00007f9617611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1825.415399][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.424488][ T31] R13: 00007f96177e6038 R14: 00007f96177e5fa0 R15: 00007ffd2b495ad8 [ 1825.434483][ T31] [ 1825.454315][ T31] [ 1825.454315][ T31] Showing all locks held in the system: [ 1825.475198][ T31] 1 lock held by khungtaskd/31: [ 1825.480949][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1825.492560][ T31] 2 locks held by getty/5603: [ 1825.497362][ T31] #0: ffff88814def50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1825.508932][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1825.521916][ T31] 1 lock held by udevd/5844: [ 1825.526632][ T31] #0: ffff888024d3b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1825.536770][ T31] 1 lock held by udevd/5856: [ 1825.541884][ T31] #0: ffff888143bc0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1825.551810][ T31] 1 lock held by udevd/8100: [ 1825.557022][ T31] #0: ffff888024ed3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1825.567007][ T31] 3 locks held by kworker/0:23/3629: [ 1825.573146][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1825.585367][ T31] #1: ffffc9000c40fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1825.598434][ T31] #2: ffff88805352d240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 1825.601902][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1825.611211][ T31] 3 locks held by kworker/u8:2/8686: [ 1825.615830][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1825.622681][ T31] #0: ffff88801a089948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1825.642122][ T31] #1: ffffc9000bfffbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1825.655043][ T31] #2: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1825.667698][ T31] 2 locks held by syz.7.12735/14702: [ 1825.673697][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1825.683297][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 1825.694069][ T31] 2 locks held by syz.9.13405/16700: [ 1825.699363][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1825.708226][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1825.720160][ T31] 2 locks held by syz.1.14721/20849: [ 1825.725633][ T31] #0: ffffffff8f5d80d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1825.735827][ T31] #1: ffffffff8dd401c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1825.746881][ T31] [ 1825.749263][ T31] ============================================= [ 1825.749263][ T31] [ 1825.759310][ T31] NMI backtrace for cpu 1 [ 1825.759330][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1825.759354][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1825.759368][ T31] Call Trace: [ 1825.759377][ T31] [ 1825.759388][ T31] dump_stack_lvl+0x189/0x250 [ 1825.759434][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1825.759457][ T31] ? __pfx__printk+0x10/0x10 [ 1825.759492][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1825.759527][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1825.759561][ T31] ? __pfx__printk+0x10/0x10 [ 1825.759604][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1825.759630][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1825.759664][ T31] watchdog+0xf93/0xfe0 [ 1825.759688][ T31] ? watchdog+0x1de/0xfe0 [ 1825.759715][ T31] kthread+0x711/0x8a0 [ 1825.759748][ T31] ? __pfx_watchdog+0x10/0x10 [ 1825.759768][ T31] ? __pfx_kthread+0x10/0x10 [ 1825.759800][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1825.759832][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1825.759864][ T31] ? __pfx_kthread+0x10/0x10 [ 1825.759895][ T31] ret_from_fork+0x436/0x7d0 [ 1825.759922][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.759953][ T31] ? __switch_to_asm+0x39/0x70 [ 1825.759981][ T31] ? __switch_to_asm+0x33/0x70 [ 1825.760009][ T31] ? __pfx_kthread+0x10/0x10 [ 1825.760040][ T31] ret_from_fork_asm+0x1a/0x30 [ 1825.760088][ T31] [ 1825.902023][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1825.907715][ C0] NMI backtrace for cpu 0 [ 1825.907736][ C0] CPU: 0 UID: 0 PID: 27625 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1825.907759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1825.907772][ C0] Workqueue: bond1 bond_mii_monitor [ 1825.907799][ C0] RIP: 0010:validate_chain+0x1e1/0x2140 [ 1825.907824][ C0] Code: cc 48 ff cb f7 c1 00 60 00 00 74 c8 e9 8d 00 00 00 48 c7 c7 50 b6 c0 8d 4c 89 fe e8 89 bc 20 03 48 8b 14 24 eb c9 48 8b 48 18 <4c> 39 f9 0f 84 b2 00 00 00 48 8b 40 08 48 85 c0 0f 84 c2 fe ff ff [ 1825.907842][ C0] RSP: 0018:ffffc9000b047838 EFLAGS: 00000046 [ 1825.907857][ C0] RAX: ffffffff937d23f0 RBX: 000000000003c508 RCX: e3b67d0081c76237 [ 1825.907872][ C0] RDX: 0000000000000000 RSI: ffff88802cbbe618 RDI: ffff88802cbbdac0 [ 1825.907885][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8189f6ff [ 1825.907898][ C0] R10: dffffc0000000000 R11: fffffbfff1eb70c7 R12: 0000000000000000 [ 1825.907912][ C0] R13: ffff88802cbbe5f0 R14: ffff88802cbbe618 R15: e3b67d0081c76237 [ 1825.907927][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 1825.907943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1825.907957][ C0] CR2: 000000110c3d591a CR3: 000000000db36000 CR4: 00000000003526f0 [ 1825.907974][ C0] Call Trace: [ 1825.907981][ C0] [ 1825.907991][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1825.908021][ C0] ? look_up_lock_class+0x74/0x170 [ 1825.908041][ C0] ? register_lock_class+0x51/0x320 [ 1825.908061][ C0] __lock_acquire+0xab9/0xd20 [ 1825.908083][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1825.908102][ C0] lock_acquire+0x120/0x360 [ 1825.908119][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1825.908142][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1825.908170][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1825.908191][ C0] process_scheduled_works+0xa0c/0x17b0 [ 1825.908209][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1825.908243][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1825.908272][ C0] worker_thread+0x8a0/0xda0 [ 1825.908306][ C0] kthread+0x711/0x8a0 [ 1825.908351][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1825.908371][ C0] ? __pfx_kthread+0x10/0x10 [ 1825.908396][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1825.908424][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1825.908452][ C0] ? __pfx_kthread+0x10/0x10 [ 1825.908476][ C0] ret_from_fork+0x436/0x7d0 [ 1825.908498][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.908521][ C0] ? __switch_to_asm+0x39/0x70 [ 1825.908546][ C0] ? __switch_to_asm+0x33/0x70 [ 1825.908570][ C0] ? __pfx_kthread+0x10/0x10 [ 1825.908595][ C0] ret_from_fork_asm+0x1a/0x30 [ 1825.908629][ C0] [ 1826.159853][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1826.176436][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1826.183326][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1826.192466][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1826.202532][ T31] Call Trace: [ 1826.205817][ T31] [ 1826.208766][ T31] dump_stack_lvl+0x99/0x250 [ 1826.213380][ T31] ? __asan_memcpy+0x40/0x70 [ 1826.217979][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1826.223189][ T31] ? __pfx__printk+0x10/0x10 [ 1826.227810][ T31] vpanic+0x281/0x750 [ 1826.231840][ T31] ? __pfx_vpanic+0x10/0x10 [ 1826.236366][ T31] ? preempt_schedule+0xae/0xc0 [ 1826.241251][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1826.246748][ T31] panic+0xb9/0xc0 [ 1826.250507][ T31] ? __pfx_panic+0x10/0x10 [ 1826.254939][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1826.260331][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1826.266514][ T31] watchdog+0xfd2/0xfe0 [ 1826.270702][ T31] ? watchdog+0x1de/0xfe0 [ 1826.275049][ T31] kthread+0x711/0x8a0 [ 1826.279136][ T31] ? __pfx_watchdog+0x10/0x10 [ 1826.283824][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.288462][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1826.293678][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1826.298897][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.303500][ T31] ret_from_fork+0x436/0x7d0 [ 1826.308103][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1826.313323][ T31] ? __switch_to_asm+0x39/0x70 [ 1826.318128][ T31] ? __switch_to_asm+0x33/0x70 [ 1826.322907][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.327525][ T31] ret_from_fork_asm+0x1a/0x30 [ 1826.332335][ T31] [ 1826.335635][ T31] Kernel Offset: disabled [ 1826.339983][ T31] Rebooting in 86400 seconds..