last executing test programs: 3m2.128508862s ago: executing program 4 (id=1215): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b86b", 0x2) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r4, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x840, 0x63}}}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4743c6f906"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9afb0b6f0b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1c41a71357"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "47f791134d"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "822e5fdcae"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a71e42f2e3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc800}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) (async) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b86b", 0x2) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r4, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x840, 0x63}}}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4743c6f906"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9afb0b6f0b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1c41a71357"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "47f791134d"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "822e5fdcae"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a71e42f2e3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc800}, 0x20004000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) 3m1.964278042s ago: executing program 4 (id=1218): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000100c3ffffff00000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.766312254s ago: executing program 4 (id=1221): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, 0x0, &(0x7f0000001200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0x0, 0xffe3}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0x1d, 0x2, 0x6) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x30, r14, 0x7, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x44, r14, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf4}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x6, 0x1, 0xc9ed]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) close(r11) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x20000000) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e00000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0x890) bind$alg(r13, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 3m1.451275527s ago: executing program 1 (id=1226): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x398, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 3m1.265994002s ago: executing program 2 (id=1228): unshare(0x600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="058f8374252f81f1df166a4699fa4d3647a3216123a3afb3ce", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000010000000180000000000000000000000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) 3m1.186835966s ago: executing program 1 (id=1229): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301320108"}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xd8588330ed382762}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x44}, {0x6, 0x11, 0xe853}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x808a}, [@IFLA_OPERSTATE={0x5, 0x10, 0xfd}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m0.802929756s ago: executing program 0 (id=1234): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002e40)="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", 0xff}], 0x1}}], 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4854) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth1\x00', {}, 0x8c8}) 2m59.621474098s ago: executing program 2 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) 2m59.546675795s ago: executing program 1 (id=1236): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac14000000000000000000de741d630000000000ffffffff000000000000f6ff0000000000000000000300"/166], 0xfc}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e643000"], 0x2c}}, 0x40006) 2m59.541010187s ago: executing program 4 (id=1237): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r3, 0x301, 0x70bd2b, 0x25dfdbfc, {{0x5}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x78, 0xc5, "d08dfa33d905f0a130be17f722443684c5cd8ee9306a4cb71cd43441a1968a1073cff1fc976e67203a96c790ac0430cb15c66f12d1fa35104cea0e6ccc5cddc6e3bf951c343670ec1e0cd348f2acfea1bd95aca9a9cde0134163135fd3743fcd300b57540c3bac894e158dd17b76fe57e5ab0180"}]}, 0xac}}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r12, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r14, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r14, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r14, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r14, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m59.523712634s ago: executing program 2 (id=1238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x2}], 0x10}, 0x20000001) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 2m59.458809314s ago: executing program 0 (id=1239): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001980)="2cfea3ae8d832093d368af0fdb311890290cee26457ba57760491239dd575aeb8b687921ae0bb62db49f4e9256d3d855a052226015d5c66588323cc1f371cf09eea10130fb26a38aed338b120f", 0x4d}, {&(0x7f0000001a00)}], 0x2, 0x0, 0x0, 0x2c}, 0x0) 2m59.310033895s ago: executing program 0 (id=1242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) socket(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0xe6, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESHEX=r2, @ANYBLOB="0444b9d5d3cfa4d3ff1a1031c2614ee4508697618df67fcdd0c9ccd176df2a7566e2fb2b1a4a332da2f289b1913f02b83cec2d00e4acd1db5cfc0f5f21f8f31ce20fce6b3e74d198fbd9b8f2add4ff6d1cc44747372434781826f35fb4bcdc725aac37be6b13f517483bd23724f878635a7d84bb6e1f5fd53a3dcf8350102ec7b643aa931a2666010480db4ae6342681f97c2d52bb45d2cec3e7d2b500acac15b2d6b7b07b46e406b6967b2eed4a930c4e0217bc22a87efcb99523c45b1d338fa7a4b3bdf506911d32c74aac97a007730b7f3d9a9ef4248fa85e38e7bffb96d091c8b6d9adf31f64125df64d3428a53753b055eb", @ANYRESDEC=r0, @ANYBLOB="00000002e000030000001000000000000ffe000008a3eeb4809ee89c0ee3220bddf154bdf6bdaf2851de082418fe49856b29b0badbdb1fe8b446762e95fffc28cb61d24000deb79cba0e0177c42103c12e49029ee1e47673b729e5f0c0f595e4d70fc024001784d36127bb8b06d5dc05e96142dfe3e1f862b1385ba4f1441a8c5c4a8bd84b595051a474042833ce9d10aba68975e05417c9d52d2f764604feefda6880d4253a1570c97921720e3656fdba766721938e215a72cf21fbc4d0324785836444ec720d42552c7436d8b594fc47e9a4ee61373297d159a232f645268cbde920c88bf2ec9da59d82201941cebfec538968084ab4f6d132e52ea62f47e4d4be6a532ca5f5bead2334b07877064d72e46d1c511bb4e6314f0fd50b8d36f3a4b900db7247c43e14e7804c73f340b09b74c0490c13a1560dd534dd5f1ce9bb960cde9acc24bec2c765b7a8ea94414fa09266b02da22511ebf07b2cf72ff9252794c127882079af1b17e1c3e958d4a4f7d00207580fe9137e5e2b53df7243b9ce0dadc026a46bfe0dcb313c6300adf2c4086f011e0e1a1f"], 0x38}}, 0x2000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x24004080) 2m59.259281641s ago: executing program 2 (id=1244): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 2m59.243782408s ago: executing program 1 (id=1245): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) 2m59.146715853s ago: executing program 0 (id=1247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0xa00000000000000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m59.095881345s ago: executing program 1 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) 2m59.071188969s ago: executing program 0 (id=1249): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/1, 0x42}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r4, 0xb4ea}, 0x8) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'wlan0\x00', 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000005c0)={r3, 0x5, 0x100000000000000, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x4, 0xb7a, 0x1000, 0x101, 0xffffffffffffffff, 0xe60a, '\x00', 0x0, r5, 0x1, 0x3, 0x2, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, &(0x7f0000000500)=""/184}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="38002d8007000000d5740f2e0aabd8eb6a725387415f000a0000000101010101011560872c9dd3b0026904cee769158b00000a00000002020202020200000a0000000202020202"], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000000c0)="c7d45face80b9627f980723df006cdf4c8038cb02f029cee5d7754f94abe8c87f33b", &(0x7f00000002c0)=""/96, &(0x7f0000000840)="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", &(0x7f0000000400)="63a645d7d15fc6aefc3a8c7695b911d4898f3ec279f0b3a74c77bc891781ce1333bffd5ff50385826e15edfb1fa0ee1dc76663ed60e73d5e6a11c9e9dab6c37d97c8d8d8f012bd21a88912184c6a196a670f40cb62d3552fd319e40b087d337f6a524000f3fda3a8ae459def30f6bc8f7ecdaccaaf93dede18b265fd846cb1e814850a9942c62561d0fa86a7ed80b437417a2efc2102ec", 0x400, r6}, 0x38) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) 2m58.955253569s ago: executing program 2 (id=1250): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40806}, 0x24000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0xffffffffffffffb3, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r3, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, 0x0, 0x8000) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8a050}, 0xc, &(0x7f0000000140)={&(0x7f00000192c0)={0x90, r7, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x90}}, 0x4040000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x1010) 2m58.654616385s ago: executing program 1 (id=1251): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff000000007110bf00000000009500000000000000bba6d9a8f16753f3c2a7de690a2cf858f4b07270dacc8a4e66da0597ce34c2adeb873fa3e96418f9c43b08cbecdc0edb594b9b304a6acaabdb992e5ae97c01c7326ce06b1caa6b130f46564b7af69fd1159bdcee484cbc466abbf98b73dfb0a60128c4efe045dec3fa268ccd15ede92cf143c44579e66ba57abb473306b418b9cdc3990507cc60b3a3a450"], &(0x7f0000000480)='GPL\x00'}, 0x90) 2m58.265300896s ago: executing program 32 (id=1251): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff000000007110bf00000000009500000000000000bba6d9a8f16753f3c2a7de690a2cf858f4b07270dacc8a4e66da0597ce34c2adeb873fa3e96418f9c43b08cbecdc0edb594b9b304a6acaabdb992e5ae97c01c7326ce06b1caa6b130f46564b7af69fd1159bdcee484cbc466abbf98b73dfb0a60128c4efe045dec3fa268ccd15ede92cf143c44579e66ba57abb473306b418b9cdc3990507cc60b3a3a450"], &(0x7f0000000480)='GPL\x00'}, 0x90) 2m58.227988278s ago: executing program 0 (id=1253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x1d, 0x3, 0xfffffffe) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x400000000010, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r9 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r9, 0x61e2, 0x0) (async) recvmmsg(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) (async) write(r6, &(0x7f0000003400)="d3", 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "2205d4b524d6826e", "b23c95f0ede5d7b86a23556f54f00cf2", "74b41f29", "e9ffffffffffff07"}, 0x28) (async) sendto$inet6(r11, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xa}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002980)=@deltfilter={0x870, 0x2d, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff1}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x844, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x8, 0x4, 0x2929, 0x8, 0x831, 0x812, 0x7, 0x197, 0xfffffffd, 0x291, 0x7c6, 0x1000, 0xab75, 0x10001, 0x0, 0x1, 0x401, 0x3, 0x3, 0x2, 0x7, 0xfffffffa, 0x7, 0x7, 0x2, 0x7ff, 0x690, 0x7, 0x3, 0x2, 0x4, 0x9, 0x9, 0x4, 0x1, 0x7ff, 0x1, 0x8, 0x6803, 0x9, 0x1419, 0x40, 0x6, 0x0, 0x4e4, 0x6, 0x2, 0x1, 0xffffffff, 0x1, 0xffffffff, 0x40000000, 0x8, 0xf09, 0x6, 0x1, 0x7, 0x1000, 0x94a, 0x27b3dd29, 0x4, 0x6, 0xffffff81, 0xf782, 0x0, 0x1, 0x8, 0xe859, 0x8, 0x1, 0x3, 0x1, 0x8, 0x8, 0x34b363e8, 0xffff, 0x4, 0x5, 0x9, 0xfffffffe, 0x3, 0x5d, 0x6d, 0x8, 0x400, 0x9, 0x2, 0xbd28, 0x1800, 0x0, 0x0, 0x1, 0xf, 0x0, 0x80000001, 0x7, 0x3, 0x2, 0x8, 0x4, 0x401, 0x4, 0x5, 0x6, 0x3, 0x3, 0x98b, 0xd, 0x7, 0x80000001, 0x5, 0x5, 0x4, 0x2, 0x5, 0x7, 0x23ac, 0x4d9, 0x3, 0x8, 0x6, 0x3, 0xffffffff, 0x10, 0x4, 0x1, 0x9, 0x9, 0x8, 0xfffffffa, 0x1, 0x6, 0x3, 0x3, 0x3, 0xa4da, 0xd, 0xd, 0x5, 0x8, 0x9, 0x800, 0x4, 0x4, 0x7, 0x3, 0x3, 0x7f, 0x76, 0x5, 0x2, 0x5, 0x4, 0x4, 0x8, 0x2fc, 0x9, 0xffff, 0x4b0, 0x7, 0x6, 0x4, 0x3ff, 0x7f, 0x7, 0x1, 0x6, 0x7, 0xfffffffc, 0x100, 0x6, 0x8, 0xe706, 0x6, 0x0, 0x0, 0xd, 0x4, 0x8, 0x1ff, 0x1, 0x9, 0xfffffffa, 0x8, 0x6, 0x2, 0x4, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x10000, 0x3, 0xc, 0x9, 0xfffffff0, 0x3, 0x6, 0x0, 0x0, 0xfffffffd, 0x7, 0xfffffffe, 0x6, 0x85c7, 0x28000, 0x5ce826d0, 0x8, 0x5f, 0xb, 0x5, 0x6, 0xff, 0x1, 0x9, 0x3, 0xff, 0x32, 0x8, 0x0, 0x9, 0xc37aa320, 0x2, 0x4, 0x61, 0x1, 0x10001, 0x3, 0x219c, 0xfffffff7, 0x3, 0xffffff85, 0x81, 0x5, 0xffffffff, 0x4, 0x4, 0xe4cb, 0x7, 0x8001, 0xa0, 0x1, 0x10, 0x7e, 0x5, 0x1, 0x7fffffff, 0x4, 0x4, 0xd0aa, 0x441, 0x5c6, 0x8ab, 0x71f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x561, 0x6, 0x3, 0x3, 0x500, 0x40, 0x9b2, 0x200, 0x0, 0x40, 0x2da, 0x9b, 0x10, 0x7, 0x7, 0x1, 0xfffffd9a, 0x3, 0x41, 0x400, 0x3788, 0x34e100, 0xb, 0x0, 0x3, 0xfff, 0x0, 0x8, 0xbd1, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x2, 0x4, 0xffffff6a, 0x10036cf0, 0x1, 0xffff5715, 0x4, 0x4, 0xcbb, 0x2, 0x8001, 0x200800, 0x101, 0x6, 0x1, 0x9, 0x324, 0x5, 0xfffffffc, 0x43, 0x0, 0x80000001, 0xd833, 0x6, 0x3d7, 0x9, 0x7, 0x2000000, 0x9, 0x8001, 0x8, 0x100000, 0x0, 0x6, 0xfffffcfa, 0xc, 0x9, 0xab, 0x1, 0x58aa, 0x7f, 0xffffffff, 0x2da, 0x8, 0x8, 0xc28, 0x1, 0x8000, 0x3, 0x5, 0x5, 0x5, 0x0, 0x100, 0x0, 0xa10, 0x5, 0x101, 0x1, 0x5, 0x81, 0x5, 0xfffffffa, 0xffffffc6, 0xb, 0xffffffff, 0x200000, 0xd2, 0xffff, 0x101, 0x6, 0x3, 0x3, 0x1, 0x17, 0x1ff, 0x3, 0x3a4, 0x7, 0x5, 0x9a, 0x7, 0x6, 0x4, 0x2, 0x33a6, 0xffffffff, 0x7, 0x8, 0xe, 0xfffffff8, 0x10000, 0x1, 0x8, 0x4, 0x3, 0x9, 0x7, 0x7, 0x7c, 0x8, 0x8, 0x3, 0x3, 0x5, 0x9, 0x25, 0xffffffff, 0x7, 0x5, 0x1, 0x5, 0x4, 0x8, 0x6, 0x9, 0x959, 0x0, 0x3, 0xe2, 0x400, 0x4, 0x8001, 0xdd91, 0x9b, 0x38bdec28, 0x3, 0x8000, 0xffff, 0xbcf9, 0xfffffe00, 0x0, 0x5, 0x13d, 0x0, 0x8, 0xff, 0x573, 0x2, 0x535, 0x3, 0x1, 0x200, 0x8, 0x5f, 0x6, 0x5, 0xfffffff7, 0x1, 0x4, 0x80000000, 0x7, 0x57, 0x2, 0x2, 0xc, 0x2845, 0x1, 0x7, 0x7d28ef8b, 0x7, 0x9, 0xb5, 0x80000001, 0x401, 0x7, 0x7, 0x3, 0x9c, 0x9, 0xfff, 0x4, 0xfffffff7, 0x2, 0x80, 0x9d3, 0x5, 0x3a6, 0xfffffff7, 0xff, 0xfffff001, 0x10, 0x2, 0x10, 0x154c5aa, 0x2, 0x81, 0x6, 0x6, 0x4, 0xc, 0xc0, 0xfffffffb, 0x81, 0x0, 0x7f, 0xa, 0x9, 0x6f, 0xfff, 0xfffff2a6, 0x2065, 0x2000000, 0x0, 0xff, 0x6, 0xa, 0xf809, 0x5, 0xfffffffb, 0x9, 0x1, 0xc, 0x0, 0x1, 0x7, 0x80, 0x2, 0x9]}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}]}, 0x870}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) (async) socket$inet_sctp(0x2, 0x5, 0x84) 2m58.205477653s ago: executing program 33 (id=1253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x1d, 0x3, 0xfffffffe) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x400000000010, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r9 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r9, 0x61e2, 0x0) (async) recvmmsg(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) (async) write(r6, &(0x7f0000003400)="d3", 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "2205d4b524d6826e", "b23c95f0ede5d7b86a23556f54f00cf2", "74b41f29", "e9ffffffffffff07"}, 0x28) (async) sendto$inet6(r11, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xa}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002980)=@deltfilter={0x870, 0x2d, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff1}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x844, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x8, 0x4, 0x2929, 0x8, 0x831, 0x812, 0x7, 0x197, 0xfffffffd, 0x291, 0x7c6, 0x1000, 0xab75, 0x10001, 0x0, 0x1, 0x401, 0x3, 0x3, 0x2, 0x7, 0xfffffffa, 0x7, 0x7, 0x2, 0x7ff, 0x690, 0x7, 0x3, 0x2, 0x4, 0x9, 0x9, 0x4, 0x1, 0x7ff, 0x1, 0x8, 0x6803, 0x9, 0x1419, 0x40, 0x6, 0x0, 0x4e4, 0x6, 0x2, 0x1, 0xffffffff, 0x1, 0xffffffff, 0x40000000, 0x8, 0xf09, 0x6, 0x1, 0x7, 0x1000, 0x94a, 0x27b3dd29, 0x4, 0x6, 0xffffff81, 0xf782, 0x0, 0x1, 0x8, 0xe859, 0x8, 0x1, 0x3, 0x1, 0x8, 0x8, 0x34b363e8, 0xffff, 0x4, 0x5, 0x9, 0xfffffffe, 0x3, 0x5d, 0x6d, 0x8, 0x400, 0x9, 0x2, 0xbd28, 0x1800, 0x0, 0x0, 0x1, 0xf, 0x0, 0x80000001, 0x7, 0x3, 0x2, 0x8, 0x4, 0x401, 0x4, 0x5, 0x6, 0x3, 0x3, 0x98b, 0xd, 0x7, 0x80000001, 0x5, 0x5, 0x4, 0x2, 0x5, 0x7, 0x23ac, 0x4d9, 0x3, 0x8, 0x6, 0x3, 0xffffffff, 0x10, 0x4, 0x1, 0x9, 0x9, 0x8, 0xfffffffa, 0x1, 0x6, 0x3, 0x3, 0x3, 0xa4da, 0xd, 0xd, 0x5, 0x8, 0x9, 0x800, 0x4, 0x4, 0x7, 0x3, 0x3, 0x7f, 0x76, 0x5, 0x2, 0x5, 0x4, 0x4, 0x8, 0x2fc, 0x9, 0xffff, 0x4b0, 0x7, 0x6, 0x4, 0x3ff, 0x7f, 0x7, 0x1, 0x6, 0x7, 0xfffffffc, 0x100, 0x6, 0x8, 0xe706, 0x6, 0x0, 0x0, 0xd, 0x4, 0x8, 0x1ff, 0x1, 0x9, 0xfffffffa, 0x8, 0x6, 0x2, 0x4, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x10000, 0x3, 0xc, 0x9, 0xfffffff0, 0x3, 0x6, 0x0, 0x0, 0xfffffffd, 0x7, 0xfffffffe, 0x6, 0x85c7, 0x28000, 0x5ce826d0, 0x8, 0x5f, 0xb, 0x5, 0x6, 0xff, 0x1, 0x9, 0x3, 0xff, 0x32, 0x8, 0x0, 0x9, 0xc37aa320, 0x2, 0x4, 0x61, 0x1, 0x10001, 0x3, 0x219c, 0xfffffff7, 0x3, 0xffffff85, 0x81, 0x5, 0xffffffff, 0x4, 0x4, 0xe4cb, 0x7, 0x8001, 0xa0, 0x1, 0x10, 0x7e, 0x5, 0x1, 0x7fffffff, 0x4, 0x4, 0xd0aa, 0x441, 0x5c6, 0x8ab, 0x71f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x561, 0x6, 0x3, 0x3, 0x500, 0x40, 0x9b2, 0x200, 0x0, 0x40, 0x2da, 0x9b, 0x10, 0x7, 0x7, 0x1, 0xfffffd9a, 0x3, 0x41, 0x400, 0x3788, 0x34e100, 0xb, 0x0, 0x3, 0xfff, 0x0, 0x8, 0xbd1, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x2, 0x4, 0xffffff6a, 0x10036cf0, 0x1, 0xffff5715, 0x4, 0x4, 0xcbb, 0x2, 0x8001, 0x200800, 0x101, 0x6, 0x1, 0x9, 0x324, 0x5, 0xfffffffc, 0x43, 0x0, 0x80000001, 0xd833, 0x6, 0x3d7, 0x9, 0x7, 0x2000000, 0x9, 0x8001, 0x8, 0x100000, 0x0, 0x6, 0xfffffcfa, 0xc, 0x9, 0xab, 0x1, 0x58aa, 0x7f, 0xffffffff, 0x2da, 0x8, 0x8, 0xc28, 0x1, 0x8000, 0x3, 0x5, 0x5, 0x5, 0x0, 0x100, 0x0, 0xa10, 0x5, 0x101, 0x1, 0x5, 0x81, 0x5, 0xfffffffa, 0xffffffc6, 0xb, 0xffffffff, 0x200000, 0xd2, 0xffff, 0x101, 0x6, 0x3, 0x3, 0x1, 0x17, 0x1ff, 0x3, 0x3a4, 0x7, 0x5, 0x9a, 0x7, 0x6, 0x4, 0x2, 0x33a6, 0xffffffff, 0x7, 0x8, 0xe, 0xfffffff8, 0x10000, 0x1, 0x8, 0x4, 0x3, 0x9, 0x7, 0x7, 0x7c, 0x8, 0x8, 0x3, 0x3, 0x5, 0x9, 0x25, 0xffffffff, 0x7, 0x5, 0x1, 0x5, 0x4, 0x8, 0x6, 0x9, 0x959, 0x0, 0x3, 0xe2, 0x400, 0x4, 0x8001, 0xdd91, 0x9b, 0x38bdec28, 0x3, 0x8000, 0xffff, 0xbcf9, 0xfffffe00, 0x0, 0x5, 0x13d, 0x0, 0x8, 0xff, 0x573, 0x2, 0x535, 0x3, 0x1, 0x200, 0x8, 0x5f, 0x6, 0x5, 0xfffffff7, 0x1, 0x4, 0x80000000, 0x7, 0x57, 0x2, 0x2, 0xc, 0x2845, 0x1, 0x7, 0x7d28ef8b, 0x7, 0x9, 0xb5, 0x80000001, 0x401, 0x7, 0x7, 0x3, 0x9c, 0x9, 0xfff, 0x4, 0xfffffff7, 0x2, 0x80, 0x9d3, 0x5, 0x3a6, 0xfffffff7, 0xff, 0xfffff001, 0x10, 0x2, 0x10, 0x154c5aa, 0x2, 0x81, 0x6, 0x6, 0x4, 0xc, 0xc0, 0xfffffffb, 0x81, 0x0, 0x7f, 0xa, 0x9, 0x6f, 0xfff, 0xfffff2a6, 0x2065, 0x2000000, 0x0, 0xff, 0x6, 0xa, 0xf809, 0x5, 0xfffffffb, 0x9, 0x1, 0xc, 0x0, 0x1, 0x7, 0x80, 0x2, 0x9]}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}]}, 0x870}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) (async) socket$inet_sctp(0x2, 0x5, 0x84) 2m58.199301992s ago: executing program 4 (id=1255): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac14000000000000000000de741d630000000000ffffffff000000000000f6ff0000000000000000000300"/166], 0xfc}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e643000"], 0x2c}}, 0x40006) 2m56.288053813s ago: executing program 2 (id=1260): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 2m55.780206668s ago: executing program 34 (id=1260): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 2m55.774574216s ago: executing program 4 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x4) 2m55.774131409s ago: executing program 35 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x4) 5.827333783s ago: executing program 3 (id=3251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) 5.737991643s ago: executing program 6 (id=3252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, r3, 0x607, 0x270bd07, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8480) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'ip6gre0\x00', @random="bc23f22ad417"}) close(r0) 5.52827774s ago: executing program 3 (id=3255): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 5.408651218s ago: executing program 7 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000480)=0x13d, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5, {{0x0, 0x0, 0x5, 0x0, 0x8}}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0xa, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r6) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="9ef8ad7396df6c01000a479f120044209ed2ad1debdae1b6b82d008c04ac2069197c634b772da9b070d62c725d4c7748f88ad95d760f59bdb71dff91bae8fe0b1b47520d4e776170372adee6719844e099ba5298b22be7f0f78d08ee11bbb16bc39871e2c8c28475aca2890b4a9ad66d4d65c8bb6a7854fe53b6624a1b2967cdfac81a5a1f6650dfa2cbf28a31dfb4b3287bf71b839300b82354b1a3efa39f72462918a07a0297352b3f3daada292fc2070024acfa33e36f216aff8502df"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r9, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0x9) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r10, 0x0, 0x18, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000080000000000000071121f000000000095f8000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) accept$ax25(r9, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x25}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x1, 0x0, &(0x7f0000000440)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r12, 0x4000, r8}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20060084}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x2}) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) 5.315057679s ago: executing program 6 (id=3258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff07, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048000}, 0x4020015) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) unshare(0x20040600) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) (async) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) 5.243214138s ago: executing program 7 (id=3259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3c, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'devices'}]}, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.438689312s ago: executing program 3 (id=3264): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (fail_nth: 9) 4.334958471s ago: executing program 7 (id=3266): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async, rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r2) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x114, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b42b6a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37796896}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49e4e4aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19ed83b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa176e16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fd474a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b1e8444}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5150664f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4580ccfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a555d40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67b97a82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf9e7c1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62bfd99f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4004091) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000054) 4.094098245s ago: executing program 3 (id=3268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 3.833347107s ago: executing program 6 (id=3269): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x7, 0x8, 0x1, 0x1}, {0xe4be, 0x9, 0x4, 0xb3}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) readv(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x0, 0x0, 0x10001}, 0x10) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x1a4, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x8}}}}, [@NL80211_ATTR_NAN_FUNC={0x184, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xf}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4e, 0xb, "e41019d27e124c2c6ec0cd6fab90f70736b91ea52f4c0481020ae7e8cf7d651f74b68806df04c57367b488d33ff108480d8218392139d9406831f72b7366990688f2d4cbfd2e5d170813"}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008801) 3.580911363s ago: executing program 3 (id=3272): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3.578964966s ago: executing program 5 (id=3274): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900676c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000400000000000000000000001000000000000000000000000000000000000000000000000000000000000df000012000000000000000000000000000000000000010000000000000044"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1069cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x72, 0x0, &(0x7f00000000c0)="25eab5cc0f03e7609510531c77c40fa8fc64dcd8d4afd957d606679631776ce65cd459c0313b5595382e958ea1880e2c318b8265e1704009d9b43340924cd0bf3df0932c012feb7e5a2d17a35e89393fde1ffcc38a78281a2d8a8db7d960eda348538e00c466e1a771b21e04cd88690ea081", 0x0, 0xcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 3.568243532s ago: executing program 6 (id=3275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.498576582s ago: executing program 3 (id=3276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@null, 0x9, 'hsr0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8001}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x7f}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x80000041, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r11}, 0x5) 3.375141577s ago: executing program 6 (id=3278): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (fail_nth: 10) 3.361427106s ago: executing program 7 (id=3280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2c01}, 0x1c) 3.143702912s ago: executing program 7 (id=3282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x7fffffff, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffff99) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x4000000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8080, 0x6, 0x0, 0x1, 0x40000000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x100, 0x81, 0x8, 0xd40}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r8], 0x4c}}, 0x0) 2.671430039s ago: executing program 7 (id=3283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.59054451s ago: executing program 6 (id=3284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x400000008000f28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x48, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}) 2.589909744s ago: executing program 5 (id=3285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002b40)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid=r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f1100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002b00)={r2}, 0xc) socket$kcm(0xa, 0x3, 0x87) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x10001, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xf9, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600db9273a1183dbd4d68660000000072f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xc7, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d57a950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x50) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10) socketpair(0x2b, 0xa, 0xf95b, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f00000007c0)=""/11, 0xb}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f00000014c0)=""/187, 0xbb}], 0x8, &(0x7f00000029c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x4b0}, &(0x7f00000008c0)=0x2, &(0x7f0000001600)=0x8001, 0x8, 0x4, 0x5, 0x7, 0x56, 0x10}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/184, 0xb8}, &(0x7f0000001700), 0x6e}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x4}, {&(0x7f0000001740)=""/97, 0x61}, &(0x7f0000002980)=[{&(0x7f00000017c0)=""/59, 0x3b}, {&(0x7f0000001800)=""/228, 0xe4}, {&(0x7f0000001900)=""/102, 0x66}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x4, 0x2, 0x9}}], 0xd0, 0x80}, 0x8000) 2.247500572s ago: executing program 5 (id=3288): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000842}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008851) r10 = gettid() getpeername$qrtr(r7, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc40}, 0x0) 2.042539703s ago: executing program 8 (id=3290): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x3, 0x4, 0x4, [0x4000007, 0x80000000, 0xffffffffffffffff, 0x16d3a3c1]}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) close(r3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "afdc7e744689bde972e787713aa544f7e0ada5f12a5fdb9ce72af5f437c337cf", "9f1fd238d4f93ec196138c7ba899f680047dd51a11968eb99bbd2f09518d37cf", "717262d4259e8083fb65bd924d3401d821a876edda2afa8f4fe97f75f10cb82d", "ddd19bd97e37c3ef18fb5c2a0387d4b8cf4d3fae5a3496507e4c3610061db6da", "decad335310388266c1cdc3328a7421185a032f5a655bf0cb802cb4751749abb", "2c13e9844a6b34323955b260", 0xe8, 0x1, 0x50, 0x4, 0x4}}) 1.73306348s ago: executing program 5 (id=3291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.653879292s ago: executing program 5 (id=3292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) close(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) (async) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) (async) close(r1) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) 1.426659067s ago: executing program 5 (id=3293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x6, 0x4) 1.424826552s ago: executing program 8 (id=3294): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0x1, &(0x7f0000000100)="00686c367aaeb3eabf0c0e6edeed753986320321a0ecfd808083f9ea1d30aaac7c5ee184363506f0a06798ee64712875839c1ce29cdb0ac4aa9b096776c2a5ea766123d1d7e426e59862e80c37a52bd44a760732f56e1bb492326d4fa04337fac5b5a34c5466635c36ea00245d6ed0a8946d9c60b42f5f67764d8ab14d3ed649f804c28763d1003d0791ef5c00d8f731a48d2fd76529bcfa17310e13379e22", 0x0, 0x1}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x4100, r2}, 0x14) 1.274390383s ago: executing program 8 (id=3295): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) getsockname$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 601.000562ms ago: executing program 8 (id=3296): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 5.547132ms ago: executing program 8 (id=3297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x80fe}, 0x1c) 0s ago: executing program 8 (id=3298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 3) kernel console output (not intermixed with test programs): omoyo_socket_sendmsg_permission+0x1e1/0x300 [ 325.101589][T13130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.101624][T13130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.101645][T13130] ? __pfx_packet_sendmsg+0x10/0x10 [ 325.101666][T13130] __sock_sendmsg+0x21c/0x270 [ 325.101700][T13130] __sys_sendto+0x3bd/0x520 [ 325.101723][T13130] ? __pfx___sys_sendto+0x10/0x10 [ 325.101741][T13130] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 325.101789][T13130] ? __fget_files+0x3a0/0x420 [ 325.101822][T13130] ? ksys_write+0x22a/0x250 [ 325.101857][T13130] ? __pfx_ksys_write+0x10/0x10 [ 325.101892][T13130] __x64_sys_sendto+0xde/0x100 [ 325.101917][T13130] do_syscall_64+0xfa/0xfa0 [ 325.101947][T13130] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.101986][T13130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.102008][T13130] ? clear_bhb_loop+0x60/0xb0 [ 325.102034][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.102055][T13130] RIP: 0033:0x7f2430b8f749 [ 325.102075][T13130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.102094][T13130] RSP: 002b:00007f2431a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 325.102118][T13130] RAX: ffffffffffffffda RBX: 00007f2430de5fa0 RCX: 00007f2430b8f749 [ 325.102133][T13130] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 325.102147][T13130] RBP: 00007f2431a0c090 R08: 0000200000000140 R09: 0000000000000014 [ 325.102161][T13130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.102174][T13130] R13: 00007f2430de6038 R14: 00007f2430de5fa0 R15: 00007fffe65b5a38 [ 325.102208][T13130] [ 325.444436][T13138] netlink: 'syz.7.2361': attribute type 1 has an invalid length. [ 325.463056][T13138] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2361'. [ 326.057346][T13166] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2369'. [ 326.413501][T13176] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 326.541372][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2373'. [ 327.220961][T13215] FAULT_INJECTION: forcing a failure. [ 327.220961][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 327.268642][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.7.2385 Not tainted syzkaller #0 PREEMPT(full) [ 327.268671][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.268684][T13215] Call Trace: [ 327.268693][T13215] [ 327.268703][T13215] dump_stack_lvl+0x189/0x250 [ 327.268739][T13215] ? __pfx____ratelimit+0x10/0x10 [ 327.268779][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.268808][T13215] ? __pfx__printk+0x10/0x10 [ 327.268847][T13215] should_fail_ex+0x414/0x560 [ 327.268886][T13215] should_failslab+0xa8/0x100 [ 327.268910][T13215] __kmalloc_cache_noprof+0x6f/0x6f0 [ 327.268941][T13215] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 327.268971][T13215] ? sctp_v6_cmp_addr+0x15/0xd0 [ 327.268999][T13215] ? sctp_add_bind_addr+0x8c/0x370 [ 327.269034][T13215] sctp_add_bind_addr+0x8c/0x370 [ 327.269074][T13215] sctp_copy_local_addr_list+0x30b/0x4e0 [ 327.269108][T13215] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 327.269138][T13215] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 327.269172][T13215] ? sctp_v6_is_any+0x64/0x80 [ 327.269205][T13215] ? sctp_copy_one_addr+0x93/0x360 [ 327.269238][T13215] sctp_bind_addr_copy+0xb3/0x3c0 [ 327.269269][T13215] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 327.269307][T13215] sctp_connect_new_asoc+0x2e0/0x690 [ 327.269334][T13215] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 327.269380][T13215] ? __local_bh_enable_ip+0x12d/0x1c0 [ 327.269412][T13215] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 327.269436][T13215] ? security_sctp_bind_connect+0x7e/0x2e0 [ 327.269465][T13215] sctp_sendmsg+0x155c/0x2810 [ 327.269502][T13215] ? __pfx_sctp_sendmsg+0x10/0x10 [ 327.269528][T13215] ? aa_sk_perm+0x81e/0x950 [ 327.269565][T13215] ? __pfx_aa_sk_perm+0x10/0x10 [ 327.269621][T13215] ? sock_rps_record_flow+0x19/0x410 [ 327.269646][T13215] ? inet_sendmsg+0x2f4/0x370 [ 327.269672][T13215] __sock_sendmsg+0x19c/0x270 [ 327.269706][T13215] __sys_sendto+0x3bd/0x520 [ 327.269730][T13215] ? __pfx___sys_sendto+0x10/0x10 [ 327.269748][T13215] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 327.269805][T13215] ? __fget_files+0x3a0/0x420 [ 327.269839][T13215] ? ksys_write+0x22a/0x250 [ 327.269873][T13215] ? __pfx_ksys_write+0x10/0x10 [ 327.269907][T13215] __x64_sys_sendto+0xde/0x100 [ 327.269933][T13215] do_syscall_64+0xfa/0xfa0 [ 327.269964][T13215] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.269995][T13215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.270016][T13215] ? clear_bhb_loop+0x60/0xb0 [ 327.270042][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.270062][T13215] RIP: 0033:0x7f0cef98f749 [ 327.270082][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.270101][T13215] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 327.270124][T13215] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 327.270139][T13215] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 327.270153][T13215] RBP: 00007f0cf07a7090 R08: 000020000005ffe4 R09: 000000000000001c [ 327.270167][T13215] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 327.270180][T13215] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 327.270215][T13215] [ 327.637543][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 327.647820][T13230] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2388'. [ 327.847789][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2392'. [ 328.012809][T13239] netlink: 'syz.3.2392': attribute type 83 has an invalid length. [ 328.072761][T13249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2392'. [ 328.193630][T13255] sctp: [Deprecated]: syz.8.2399 (pid 13255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.193630][T13255] Use struct sctp_sack_info instead [ 328.221926][T13255] 8021q: VLANs not supported on ip6tnl0 [ 328.430679][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2404'. [ 328.856117][T13291] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 328.973869][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2415'. [ 329.326771][T13314] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 329.516291][T13324] Cannot find del_set index 4 as target [ 329.726687][T13335] sctp: [Deprecated]: syz.3.2426 (pid 13335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.726687][T13335] Use struct sctp_sack_info instead [ 329.765912][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 330.028745][T13350] bridge17: entered promiscuous mode [ 330.045106][T13350] bridge17: entered allmulticast mode [ 330.064855][T13359] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 330.248061][T13367] xt_hashlimit: size too large, truncated to 1048576 [ 330.452250][T13381] FAULT_INJECTION: forcing a failure. [ 330.452250][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 330.465574][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.8.2442 Not tainted syzkaller #0 PREEMPT(full) [ 330.465605][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.465619][T13381] Call Trace: [ 330.465629][T13381] [ 330.465638][T13381] dump_stack_lvl+0x189/0x250 [ 330.465675][T13381] ? __pfx____ratelimit+0x10/0x10 [ 330.465707][T13381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.465738][T13381] ? __pfx__printk+0x10/0x10 [ 330.465780][T13381] should_fail_ex+0x414/0x560 [ 330.465820][T13381] should_failslab+0xa8/0x100 [ 330.465856][T13381] __kmalloc_cache_noprof+0x6f/0x6f0 [ 330.465886][T13381] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 330.465918][T13381] ? sctp_v6_cmp_addr+0x15/0xd0 [ 330.465947][T13381] ? sctp_add_bind_addr+0x8c/0x370 [ 330.465986][T13381] sctp_add_bind_addr+0x8c/0x370 [ 330.466023][T13381] sctp_copy_local_addr_list+0x30b/0x4e0 [ 330.466059][T13381] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 330.466090][T13381] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 330.466124][T13381] ? sctp_v6_is_any+0x64/0x80 [ 330.466158][T13381] ? sctp_copy_one_addr+0x93/0x360 [ 330.466193][T13381] sctp_bind_addr_copy+0xb3/0x3c0 [ 330.466226][T13381] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 330.466270][T13381] sctp_connect_new_asoc+0x2e0/0x690 [ 330.466301][T13381] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 330.466321][T13381] ? __local_bh_enable_ip+0x12d/0x1c0 [ 330.466353][T13381] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 330.466376][T13381] ? security_sctp_bind_connect+0x7e/0x2e0 [ 330.466412][T13381] sctp_sendmsg+0x155c/0x2810 [ 330.466448][T13381] ? __pfx_sctp_sendmsg+0x10/0x10 [ 330.466474][T13381] ? aa_sk_perm+0x81e/0x950 [ 330.466509][T13381] ? __pfx_aa_sk_perm+0x10/0x10 [ 330.466547][T13381] ? sock_rps_record_flow+0x19/0x410 [ 330.466569][T13381] ? inet_sendmsg+0x2f4/0x370 [ 330.466593][T13381] __sock_sendmsg+0x19c/0x270 [ 330.466625][T13381] __sys_sendto+0x3bd/0x520 [ 330.466648][T13381] ? __pfx___sys_sendto+0x10/0x10 [ 330.466666][T13381] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 330.466713][T13381] ? __fget_files+0x3a0/0x420 [ 330.466746][T13381] ? ksys_write+0x22a/0x250 [ 330.466780][T13381] ? __pfx_ksys_write+0x10/0x10 [ 330.466813][T13381] __x64_sys_sendto+0xde/0x100 [ 330.466837][T13381] do_syscall_64+0xfa/0xfa0 [ 330.466866][T13381] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.466895][T13381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.466916][T13381] ? clear_bhb_loop+0x60/0xb0 [ 330.466943][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.466964][T13381] RIP: 0033:0x7f9a57b8f749 [ 330.466983][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.467001][T13381] RSP: 002b:00007f9a5895b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.467023][T13381] RAX: ffffffffffffffda RBX: 00007f9a57de5fa0 RCX: 00007f9a57b8f749 [ 330.467039][T13381] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 330.467052][T13381] RBP: 00007f9a5895b090 R08: 000020000005ffe4 R09: 000000000000001c [ 330.467067][T13381] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 330.467079][T13381] R13: 00007f9a57de6038 R14: 00007f9a57de5fa0 R15: 00007ffc54958698 [ 330.467112][T13381] [ 330.986672][T13388] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 331.110990][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2449'. [ 331.138590][T13399] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 331.323562][T13403] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 331.347097][T13410] xt_hashlimit: size too large, truncated to 1048576 [ 331.353597][T13403] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2453'. [ 331.530479][T13419] FAULT_INJECTION: forcing a failure. [ 331.530479][T13419] name failslab, interval 1, probability 0, space 0, times 0 [ 331.573075][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.7.2457 Not tainted syzkaller #0 PREEMPT(full) [ 331.573108][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.573123][T13419] Call Trace: [ 331.573132][T13419] [ 331.573141][T13419] dump_stack_lvl+0x189/0x250 [ 331.573177][T13419] ? __pfx____ratelimit+0x10/0x10 [ 331.573209][T13419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.573240][T13419] ? __pfx__printk+0x10/0x10 [ 331.573282][T13419] should_fail_ex+0x414/0x560 [ 331.573323][T13419] should_failslab+0xa8/0x100 [ 331.573349][T13419] __kmalloc_cache_noprof+0x6f/0x6f0 [ 331.573381][T13419] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 331.573422][T13419] ? sctp_v6_cmp_addr+0x15/0xd0 [ 331.573451][T13419] ? sctp_add_bind_addr+0x8c/0x370 [ 331.573480][T13419] ? sctp_add_bind_addr+0xb0/0x370 [ 331.573516][T13419] sctp_add_bind_addr+0x8c/0x370 [ 331.573553][T13419] sctp_copy_local_addr_list+0x30b/0x4e0 [ 331.573589][T13419] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 331.573622][T13419] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 331.573657][T13419] ? sctp_v6_is_any+0x64/0x80 [ 331.573692][T13419] ? sctp_copy_one_addr+0x93/0x360 [ 331.573727][T13419] sctp_bind_addr_copy+0xb3/0x3c0 [ 331.573761][T13419] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 331.573797][T13419] sctp_connect_new_asoc+0x2e0/0x690 [ 331.573825][T13419] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 331.573848][T13419] ? __local_bh_enable_ip+0x12d/0x1c0 [ 331.573880][T13419] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 331.573904][T13419] ? security_sctp_bind_connect+0x7e/0x2e0 [ 331.573936][T13419] sctp_sendmsg+0x155c/0x2810 [ 331.573973][T13419] ? __pfx_sctp_sendmsg+0x10/0x10 [ 331.574000][T13419] ? aa_sk_perm+0x81e/0x950 [ 331.574037][T13419] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.574072][T13419] ? sock_rps_record_flow+0x19/0x410 [ 331.574099][T13419] ? inet_sendmsg+0x2f4/0x370 [ 331.574126][T13419] __sock_sendmsg+0x19c/0x270 [ 331.574162][T13419] __sys_sendto+0x3bd/0x520 [ 331.574189][T13419] ? __pfx___sys_sendto+0x10/0x10 [ 331.574208][T13419] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 331.574258][T13419] ? __fget_files+0x3a0/0x420 [ 331.574292][T13419] ? ksys_write+0x22a/0x250 [ 331.574328][T13419] ? __pfx_ksys_write+0x10/0x10 [ 331.574365][T13419] __x64_sys_sendto+0xde/0x100 [ 331.574393][T13419] do_syscall_64+0xfa/0xfa0 [ 331.574435][T13419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.574457][T13419] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.574480][T13419] ? clear_bhb_loop+0x60/0xb0 [ 331.574507][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.574529][T13419] RIP: 0033:0x7f0cef98f749 [ 331.574550][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.574570][T13419] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.574594][T13419] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 331.574610][T13419] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 331.574625][T13419] RBP: 00007f0cf07a7090 R08: 000020000005ffe4 R09: 000000000000001c [ 331.574639][T13419] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 331.574653][T13419] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 331.574691][T13419] [ 332.330546][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'. [ 332.340879][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'. [ 332.364713][T13434] !: renamed from dummy0 (while UP) [ 332.405517][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2468'. [ 332.415697][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2468'. [ 332.502379][T13445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2469'. [ 332.582653][T13453] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2472'. [ 332.925979][T13472] netlink: 'syz.3.2479': attribute type 12 has an invalid length. [ 332.936183][T13472] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 332.958572][T13472] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2479'. [ 332.976359][T13472] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2479'. [ 333.194104][T13483] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 333.526860][T11852] IPVS: starting estimator thread 0... [ 333.534316][T13504] netlink: 'syz.6.2492': attribute type 83 has an invalid length. [ 333.631685][T13508] IPVS: using max 26 ests per chain, 62400 per kthread [ 333.941723][T13531] FAULT_INJECTION: forcing a failure. [ 333.941723][T13531] name failslab, interval 1, probability 0, space 0, times 0 [ 333.960779][T13531] CPU: 1 UID: 0 PID: 13531 Comm: syz.7.2500 Not tainted syzkaller #0 PREEMPT(full) [ 333.960809][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.960823][T13531] Call Trace: [ 333.960832][T13531] [ 333.960841][T13531] dump_stack_lvl+0x189/0x250 [ 333.960887][T13531] ? __pfx____ratelimit+0x10/0x10 [ 333.960918][T13531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.960947][T13531] ? __pfx__printk+0x10/0x10 [ 333.960972][T13531] ? __pfx___might_resched+0x10/0x10 [ 333.960996][T13531] ? fs_reclaim_acquire+0x7d/0x100 [ 333.961022][T13531] should_fail_ex+0x414/0x560 [ 333.961061][T13531] should_failslab+0xa8/0x100 [ 333.961085][T13531] __kmalloc_cache_noprof+0x6f/0x6f0 [ 333.961117][T13531] ? rtnl_newlink+0xfb/0x1c80 [ 333.961138][T13531] ? kasan_save_track+0x4f/0x80 [ 333.961175][T13531] rtnl_newlink+0xfb/0x1c80 [ 333.961193][T13531] ? netlink_deliver_tap+0x19c/0x1b0 [ 333.961213][T13531] ? netlink_unicast+0x7fa/0x9e0 [ 333.961242][T13531] ? netlink_sendmsg+0x805/0xb30 [ 333.961262][T13531] ? __sock_sendmsg+0x21c/0x270 [ 333.961288][T13531] ? ____sys_sendmsg+0x52d/0x830 [ 333.961310][T13531] ? ___sys_sendmsg+0x21f/0x2a0 [ 333.961330][T13531] ? __sys_sendmmsg+0x227/0x430 [ 333.961351][T13531] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 333.961373][T13531] ? do_syscall_64+0xfa/0xfa0 [ 333.961408][T13531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.961435][T13531] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.961483][T13531] ? kasan_quarantine_put+0xdd/0x220 [ 333.961514][T13531] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.961569][T13531] ? nlmon_xmit+0xb0/0x100 [ 333.961593][T13531] ? kmem_cache_free+0x19b/0x690 [ 333.961635][T13531] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.961659][T13531] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.961692][T13531] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.961714][T13531] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.961742][T13531] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.961769][T13531] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.961793][T13531] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.961820][T13531] ? __dev_queue_xmit+0x1d79/0x3b50 [ 333.961845][T13531] ? kasan_save_track+0x3e/0x80 [ 333.961879][T13531] ? __kasan_slab_alloc+0x6c/0x80 [ 333.961915][T13531] ? __lock_acquire+0xab9/0xd20 [ 333.961965][T13531] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.961985][T13531] rtnetlink_rcv_msg+0x7cf/0xb70 [ 333.962023][T13531] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 333.962055][T13531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.962086][T13531] ? ref_tracker_free+0x63a/0x7d0 [ 333.962108][T13531] ? __asan_memcpy+0x40/0x70 [ 333.962136][T13531] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.962170][T13531] netlink_rcv_skb+0x208/0x470 [ 333.962193][T13531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.962229][T13531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.962264][T13531] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.962295][T13531] netlink_unicast+0x82f/0x9e0 [ 333.962337][T13531] ? __pfx_netlink_unicast+0x10/0x10 [ 333.962372][T13531] ? netlink_sendmsg+0x642/0xb30 [ 333.962392][T13531] ? skb_put+0x11b/0x210 [ 333.962417][T13531] netlink_sendmsg+0x805/0xb30 [ 333.962448][T13531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.962472][T13531] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.962506][T13531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.962526][T13531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.962548][T13531] __sock_sendmsg+0x21c/0x270 [ 333.962581][T13531] ____sys_sendmsg+0x52d/0x830 [ 333.962611][T13531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.962646][T13531] ? import_iovec+0x74/0xa0 [ 333.962678][T13531] ___sys_sendmsg+0x21f/0x2a0 [ 333.962706][T13531] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.962777][T13531] ? __might_fault+0xb0/0x130 [ 333.962812][T13531] __sys_sendmmsg+0x227/0x430 [ 333.962844][T13531] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.962888][T13531] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.962943][T13531] ? ksys_write+0x22a/0x250 [ 333.962976][T13531] ? __pfx_ksys_write+0x10/0x10 [ 333.963010][T13531] __x64_sys_sendmmsg+0xa0/0xc0 [ 333.963038][T13531] do_syscall_64+0xfa/0xfa0 [ 333.963068][T13531] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.963098][T13531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.963120][T13531] ? clear_bhb_loop+0x60/0xb0 [ 333.963147][T13531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.963169][T13531] RIP: 0033:0x7f0cef98f749 [ 333.963186][T13531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.963204][T13531] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.963226][T13531] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 333.963241][T13531] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 333.963255][T13531] RBP: 00007f0cf07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.963269][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.963281][T13531] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 333.963316][T13531] [ 335.116420][T13561] netlink: 'syz.5.2512': attribute type 1 has an invalid length. [ 335.135699][T13561] netlink: 'syz.5.2512': attribute type 1 has an invalid length. [ 335.158979][T13562] netlink: 'syz.6.2513': attribute type 21 has an invalid length. [ 335.506440][T13585] Unknown options in mask b7f2 [ 335.542460][T13580] bond3 (unregistering): Released all slaves [ 335.649493][T13588] bond3 (unregistering): Released all slaves [ 336.471867][T13616] tipc: Enabling of bearer rejected, failed to enable media [ 336.526591][T13625] __nla_validate_parse: 15 callbacks suppressed [ 336.526613][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 336.546964][T13614] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 336.562665][T13626] FAULT_INJECTION: forcing a failure. [ 336.562665][T13626] name failslab, interval 1, probability 0, space 0, times 0 [ 336.588582][T13626] CPU: 0 UID: 0 PID: 13626 Comm: syz.7.2530 Not tainted syzkaller #0 PREEMPT(full) [ 336.588613][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.588625][T13626] Call Trace: [ 336.588633][T13626] [ 336.588642][T13626] dump_stack_lvl+0x189/0x250 [ 336.588675][T13626] ? __pfx____ratelimit+0x10/0x10 [ 336.588705][T13626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.588732][T13626] ? __pfx__printk+0x10/0x10 [ 336.588769][T13626] should_fail_ex+0x414/0x560 [ 336.588806][T13626] should_failslab+0xa8/0x100 [ 336.588830][T13626] __kmalloc_cache_noprof+0x6f/0x6f0 [ 336.588858][T13626] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 336.588887][T13626] ? sctp_add_bind_addr+0x8c/0x370 [ 336.588921][T13626] sctp_add_bind_addr+0x8c/0x370 [ 336.588964][T13626] sctp_copy_local_addr_list+0x30b/0x4e0 [ 336.588997][T13626] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 336.589026][T13626] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 336.589061][T13626] ? sctp_v6_is_any+0x64/0x80 [ 336.589092][T13626] ? sctp_copy_one_addr+0x93/0x360 [ 336.589125][T13626] sctp_bind_addr_copy+0xb3/0x3c0 [ 336.589154][T13626] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 336.589183][T13626] sctp_connect_new_asoc+0x2e0/0x690 [ 336.589209][T13626] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 336.589228][T13626] ? __local_bh_enable_ip+0x12d/0x1c0 [ 336.589258][T13626] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 336.589280][T13626] ? security_sctp_bind_connect+0x7e/0x2e0 [ 336.589309][T13626] sctp_sendmsg+0x155c/0x2810 [ 336.589343][T13626] ? __pfx_sctp_sendmsg+0x10/0x10 [ 336.589368][T13626] ? aa_sk_perm+0x81e/0x950 [ 336.589403][T13626] ? __pfx_aa_sk_perm+0x10/0x10 [ 336.589434][T13626] ? sock_rps_record_flow+0x19/0x410 [ 336.589457][T13626] ? inet_sendmsg+0x2f4/0x370 [ 336.589481][T13626] __sock_sendmsg+0x19c/0x270 [ 336.589514][T13626] __sys_sendto+0x3bd/0x520 [ 336.589537][T13626] ? __pfx___sys_sendto+0x10/0x10 [ 336.589554][T13626] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 336.589600][T13626] ? __fget_files+0x3a0/0x420 [ 336.589633][T13626] ? ksys_write+0x22a/0x250 [ 336.589664][T13626] ? __pfx_ksys_write+0x10/0x10 [ 336.589698][T13626] __x64_sys_sendto+0xde/0x100 [ 336.589723][T13626] do_syscall_64+0xfa/0xfa0 [ 336.589768][T13626] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.589797][T13626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.589817][T13626] ? clear_bhb_loop+0x60/0xb0 [ 336.589842][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.589861][T13626] RIP: 0033:0x7f0cef98f749 [ 336.589880][T13626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.589899][T13626] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 336.589921][T13626] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 336.589946][T13626] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 336.589960][T13626] RBP: 00007f0cf07a7090 R08: 000020000005ffe4 R09: 000000000000001c [ 336.589973][T13626] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 336.589986][T13626] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 336.590021][T13626] [ 336.593096][T13616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.075691][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2533'. [ 337.105549][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2533'. [ 337.129725][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2533'. [ 337.138797][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2533'. [ 337.212992][T13648] x_tables: unsorted underflow at hook 1 [ 337.406955][T13658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.492238][T13666] netlink: 'syz.7.2542': attribute type 13 has an invalid length. [ 337.607202][T13675] netlink: 'syz.3.2543': attribute type 11 has an invalid length. [ 337.615657][T13675] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2543'. [ 337.777784][T13679] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 338.321414][T13702] FAULT_INJECTION: forcing a failure. [ 338.321414][T13702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.336516][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz.7.2554 Not tainted syzkaller #0 PREEMPT(full) [ 338.336550][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.336564][T13702] Call Trace: [ 338.336573][T13702] [ 338.336582][T13702] dump_stack_lvl+0x189/0x250 [ 338.336618][T13702] ? __pfx____ratelimit+0x10/0x10 [ 338.336651][T13702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.336681][T13702] ? __pfx__printk+0x10/0x10 [ 338.336704][T13702] ? __might_fault+0xb0/0x130 [ 338.336747][T13702] should_fail_ex+0x414/0x560 [ 338.336795][T13702] _copy_from_iter+0x1de/0x1790 [ 338.336828][T13702] ? _copy_from_iter+0x24f/0x1790 [ 338.336859][T13702] ? __pfx__copy_from_iter+0x10/0x10 [ 338.336881][T13702] ? sock_alloc_send_pskb+0x86b/0x980 [ 338.336919][T13702] ? __pfx__copy_from_iter+0x10/0x10 [ 338.336947][T13702] ? page_copy_sane+0x16a/0x280 [ 338.336974][T13702] copy_page_from_iter+0xdd/0x170 [ 338.337005][T13702] skb_copy_datagram_from_iter+0x306/0x720 [ 338.337046][T13702] packet_sendmsg+0x3797/0x5080 [ 338.337076][T13702] ? __aa_labelset_update_subtree+0xce0/0x11b0 [ 338.337126][T13702] ? __pfx___might_resched+0x10/0x10 [ 338.337149][T13702] ? __lock_acquire+0xab9/0xd20 [ 338.337185][T13702] ? __pfx_packet_sendmsg+0x10/0x10 [ 338.337203][T13702] ? aa_sk_perm+0x81e/0x950 [ 338.337240][T13702] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 338.337281][T13702] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.337315][T13702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.337337][T13702] ? __pfx_packet_sendmsg+0x10/0x10 [ 338.337358][T13702] __sock_sendmsg+0x21c/0x270 [ 338.337390][T13702] __sys_sendto+0x3bd/0x520 [ 338.337413][T13702] ? __pfx___sys_sendto+0x10/0x10 [ 338.337431][T13702] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 338.337478][T13702] ? __fget_files+0x3a0/0x420 [ 338.337511][T13702] ? ksys_write+0x22a/0x250 [ 338.337545][T13702] ? __pfx_ksys_write+0x10/0x10 [ 338.337579][T13702] __x64_sys_sendto+0xde/0x100 [ 338.337605][T13702] do_syscall_64+0xfa/0xfa0 [ 338.337636][T13702] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.337667][T13702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.337689][T13702] ? clear_bhb_loop+0x60/0xb0 [ 338.337715][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.337736][T13702] RIP: 0033:0x7f0cef98f749 [ 338.337756][T13702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.337784][T13702] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 338.337807][T13702] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 338.337823][T13702] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 338.337837][T13702] RBP: 00007f0cf07a7090 R08: 0000200000000140 R09: 0000000000000014 [ 338.337852][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.337864][T13702] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 338.337898][T13702] [ 338.705605][T13710] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 338.872690][T13715] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 338.993294][T13725] SET target dimension over the limit! [ 338.994073][T11847] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 339.207486][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2561'. [ 339.311918][T13724] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001 [ 339.315459][T13727] fido_id[13727]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 339.640952][T13750] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 339.649856][T13753] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 339.826519][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.884958][T13768] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2574'. [ 340.172719][T13781] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2582'. [ 340.183623][T13778] ip6erspan1: entered promiscuous mode [ 340.189744][T13778] ip6erspan1: entered allmulticast mode [ 340.476873][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 340.622551][T13797] lo: Caught tx_queue_len zero misconfig [ 340.643659][T13801] FAULT_INJECTION: forcing a failure. [ 340.643659][T13801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.657757][T13801] CPU: 0 UID: 0 PID: 13801 Comm: syz.5.2588 Not tainted syzkaller #0 PREEMPT(full) [ 340.657788][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.657802][T13801] Call Trace: [ 340.657811][T13801] [ 340.657820][T13801] dump_stack_lvl+0x189/0x250 [ 340.657856][T13801] ? __pfx____ratelimit+0x10/0x10 [ 340.657888][T13801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.657917][T13801] ? __pfx__printk+0x10/0x10 [ 340.657940][T13801] ? __might_fault+0xb0/0x130 [ 340.657984][T13801] should_fail_ex+0x414/0x560 [ 340.658023][T13801] _copy_from_user+0x2d/0xb0 [ 340.658054][T13801] ___sys_sendmsg+0x158/0x2a0 [ 340.658082][T13801] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.658148][T13801] ? __fget_files+0x2a/0x420 [ 340.658167][T13801] ? __fget_files+0x3a0/0x420 [ 340.658199][T13801] __x64_sys_sendmsg+0x19b/0x260 [ 340.658228][T13801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.658263][T13801] ? __pfx_ksys_write+0x10/0x10 [ 340.658299][T13801] ? do_syscall_64+0xbe/0xfa0 [ 340.658336][T13801] do_syscall_64+0xfa/0xfa0 [ 340.658366][T13801] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.658397][T13801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.658424][T13801] ? clear_bhb_loop+0x60/0xb0 [ 340.658451][T13801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.658472][T13801] RIP: 0033:0x7f17c638f749 [ 340.658490][T13801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.658519][T13801] RSP: 002b:00007f17c45f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.658544][T13801] RAX: ffffffffffffffda RBX: 00007f17c65e5fa0 RCX: 00007f17c638f749 [ 340.658559][T13801] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 340.658573][T13801] RBP: 00007f17c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.658586][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.658600][T13801] R13: 00007f17c65e6038 R14: 00007f17c65e5fa0 R15: 00007ffe4fd15568 [ 340.658636][T13801] [ 340.868744][T13803] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 340.889972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.899225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.209525][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.218035][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.249346][T13815] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 341.666307][T13836] sctp: [Deprecated]: syz.3.2600 (pid 13836) Use of int in maxseg socket option. [ 341.666307][T13836] Use struct sctp_assoc_value instead [ 341.685724][T13836] __nla_validate_parse: 3 callbacks suppressed [ 341.685746][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 341.704059][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2602'. [ 341.855939][T13849] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2605'. [ 342.042192][T13860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.235506][T13868] netlink: 'syz.6.2610': attribute type 1 has an invalid length. [ 342.249404][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.272275][T13870] netlink: 'syz.6.2610': attribute type 1 has an invalid length. [ 342.363600][T13872] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 342.445565][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2611'. [ 342.693209][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2616'. [ 342.736091][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2616'. [ 343.293527][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.305265][T13917] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2624'. [ 343.549805][T13881] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.962321][T13946] netlink: 'syz.6.2632': attribute type 83 has an invalid length. [ 344.083808][T13941] syzkaller0: entered promiscuous mode [ 344.089865][T13941] syzkaller0: entered allmulticast mode [ 344.192632][T13950] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 344.253794][T13952] netlink: 'syz.6.2634': attribute type 10 has an invalid length. [ 344.269673][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.320743][T13956] netlink: 'syz.6.2634': attribute type 10 has an invalid length. [ 344.332673][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.633798][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2636'. [ 344.828345][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.369448][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.129530][T13952] veth1_macvtap: left promiscuous mode [ 346.136232][T13952] team0: Device veth1_macvtap failed to register rx_handler [ 346.204237][T13956] team0: Device veth1_macvtap failed to register rx_handler [ 346.362911][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2637'. [ 346.385199][T13964] netlink: 'syz.5.2636': attribute type 1 has an invalid length. [ 346.411770][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.516057][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2639'. [ 346.546407][T13965] syzkaller0: entered promiscuous mode [ 346.563019][T13965] syzkaller0: entered allmulticast mode [ 346.732157][T13938] ip6_vti0 speed is unknown, defaulting to 1000 [ 347.203407][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2643'. [ 347.295757][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.453462][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.469962][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2645'. [ 348.490592][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.539565][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.731466][T14035] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 349.811549][T14010] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.815282][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2657'. [ 350.014430][T14045] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 350.043230][T14047] FAULT_INJECTION: forcing a failure. [ 350.043230][T14047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.094526][T14047] CPU: 1 UID: 0 PID: 14047 Comm: syz.7.2660 Not tainted syzkaller #0 PREEMPT(full) [ 350.094558][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.094573][T14047] Call Trace: [ 350.094581][T14047] [ 350.094591][T14047] dump_stack_lvl+0x189/0x250 [ 350.094626][T14047] ? __pfx____ratelimit+0x10/0x10 [ 350.094657][T14047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.094687][T14047] ? __pfx__printk+0x10/0x10 [ 350.094710][T14047] ? __might_fault+0xb0/0x130 [ 350.094753][T14047] should_fail_ex+0x414/0x560 [ 350.094793][T14047] _copy_from_iter+0x1de/0x1790 [ 350.094827][T14047] ? _copy_from_iter+0x24f/0x1790 [ 350.094857][T14047] ? __pfx__copy_from_iter+0x10/0x10 [ 350.094880][T14047] ? sock_alloc_send_pskb+0x86b/0x980 [ 350.094915][T14047] ? __pfx__copy_from_iter+0x10/0x10 [ 350.094943][T14047] ? page_copy_sane+0x16a/0x280 [ 350.094969][T14047] copy_page_from_iter+0xdd/0x170 [ 350.095000][T14047] skb_copy_datagram_from_iter+0x306/0x720 [ 350.095042][T14047] packet_sendmsg+0x3797/0x5080 [ 350.095075][T14047] ? __aa_labelset_update_subtree+0xce0/0x11b0 [ 350.095126][T14047] ? __pfx___might_resched+0x10/0x10 [ 350.095150][T14047] ? __lock_acquire+0xab9/0xd20 [ 350.095187][T14047] ? __pfx_packet_sendmsg+0x10/0x10 [ 350.095206][T14047] ? aa_sk_perm+0x81e/0x950 [ 350.095244][T14047] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 350.095285][T14047] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.095319][T14047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.095341][T14047] ? __pfx_packet_sendmsg+0x10/0x10 [ 350.095363][T14047] __sock_sendmsg+0x21c/0x270 [ 350.095397][T14047] __sys_sendto+0x3bd/0x520 [ 350.095421][T14047] ? __pfx___sys_sendto+0x10/0x10 [ 350.095439][T14047] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 350.095504][T14047] ? __fget_files+0x3a0/0x420 [ 350.095538][T14047] ? ksys_write+0x22a/0x250 [ 350.095583][T14047] ? __pfx_ksys_write+0x10/0x10 [ 350.095618][T14047] __x64_sys_sendto+0xde/0x100 [ 350.095645][T14047] do_syscall_64+0xfa/0xfa0 [ 350.095675][T14047] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.095706][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.095728][T14047] ? clear_bhb_loop+0x60/0xb0 [ 350.095754][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.095776][T14047] RIP: 0033:0x7f0cef98f749 [ 350.095795][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.095814][T14047] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 350.095838][T14047] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 350.095854][T14047] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 350.095868][T14047] RBP: 00007f0cf07a7090 R08: 0000200000000140 R09: 0000000000000014 [ 350.095882][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.095894][T14047] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 350.095928][T14047] [ 350.395734][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.545815][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2662'. [ 350.573292][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.737997][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 350.990526][T14065] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2665'. [ 351.220642][T14074] --map-set only usable from mangle table [ 351.610078][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.999387][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 352.145885][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.155702][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.165609][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.174055][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.183008][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.270069][T14096] netlink: 'syz.6.2673': attribute type 1 has an invalid length. [ 352.277968][T14096] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2673'. [ 352.512109][T14102] netlink: 'syz.6.2676': attribute type 1 has an invalid length. [ 352.529538][T14102] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2676'. [ 352.633876][T14105] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2677'. [ 352.660847][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.803847][T14111] bridge0: port 4(batadv1) entered blocking state [ 352.818104][T14111] bridge0: port 4(batadv1) entered disabled state [ 352.836238][T14111] batadv1: entered allmulticast mode [ 352.852032][T14111] batadv1: entered promiscuous mode [ 352.920461][T14092] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.220898][T14131] netlink: 'syz.6.2683': attribute type 13 has an invalid length. [ 353.228875][T14131] netlink: 'syz.6.2683': attribute type 17 has an invalid length. [ 353.259717][ T3473] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 353.268986][ T3473] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 353.306493][T14131] gre0: left promiscuous mode [ 353.319363][T14131] gre0: left allmulticast mode [ 353.450056][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.508460][T14131] 8021q: adding VLAN 0 to HW filter on device ` [ 353.543158][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.577749][T14131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.612903][T14140] netlink: 'syz.7.2688': attribute type 1 has an invalid length. [ 353.689714][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.721070][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2689'. [ 353.771628][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.161236][T14092] chnl_net:caif_netlink_parms(): no params data found [ 354.249566][ T52] Bluetooth: hci2: command tx timeout [ 354.319292][T14172] FAULT_INJECTION: forcing a failure. [ 354.319292][T14172] name failslab, interval 1, probability 0, space 0, times 0 [ 354.368349][T14172] CPU: 0 UID: 0 PID: 14172 Comm: syz.5.2700 Not tainted syzkaller #0 PREEMPT(full) [ 354.368380][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.368394][T14172] Call Trace: [ 354.368403][T14172] [ 354.368413][T14172] dump_stack_lvl+0x189/0x250 [ 354.368448][T14172] ? __pfx____ratelimit+0x10/0x10 [ 354.368479][T14172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.368508][T14172] ? __pfx__printk+0x10/0x10 [ 354.368547][T14172] should_fail_ex+0x414/0x560 [ 354.368588][T14172] should_failslab+0xa8/0x100 [ 354.368613][T14172] __kmalloc_cache_noprof+0x6f/0x6f0 [ 354.368644][T14172] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 354.368675][T14172] ? sctp_v6_cmp_addr+0x15/0xd0 [ 354.368705][T14172] ? sctp_add_bind_addr+0x8c/0x370 [ 354.368733][T14172] ? sctp_add_bind_addr+0xb0/0x370 [ 354.368768][T14172] sctp_add_bind_addr+0x8c/0x370 [ 354.368805][T14172] sctp_copy_local_addr_list+0x30b/0x4e0 [ 354.368841][T14172] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 354.368872][T14172] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 354.368905][T14172] ? sctp_v6_is_any+0x64/0x80 [ 354.368939][T14172] ? sctp_copy_one_addr+0x93/0x360 [ 354.368974][T14172] sctp_bind_addr_copy+0xb3/0x3c0 [ 354.369007][T14172] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 354.369044][T14172] sctp_connect_new_asoc+0x2e0/0x690 [ 354.369070][T14172] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 354.369091][T14172] ? __local_bh_enable_ip+0x12d/0x1c0 [ 354.369121][T14172] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 354.369145][T14172] ? security_sctp_bind_connect+0x7e/0x2e0 [ 354.369174][T14172] sctp_sendmsg+0x155c/0x2810 [ 354.369211][T14172] ? __pfx_sctp_sendmsg+0x10/0x10 [ 354.369238][T14172] ? aa_sk_perm+0x81e/0x950 [ 354.369274][T14172] ? __pfx_aa_sk_perm+0x10/0x10 [ 354.369321][T14172] ? sock_rps_record_flow+0x19/0x410 [ 354.369347][T14172] ? inet_sendmsg+0x2f4/0x370 [ 354.369373][T14172] __sock_sendmsg+0x19c/0x270 [ 354.369408][T14172] __sys_sendto+0x3bd/0x520 [ 354.369433][T14172] ? __pfx___sys_sendto+0x10/0x10 [ 354.369451][T14172] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 354.369500][T14172] ? __fget_files+0x3a0/0x420 [ 354.369535][T14172] ? ksys_write+0x22a/0x250 [ 354.369569][T14172] ? __pfx_ksys_write+0x10/0x10 [ 354.369605][T14172] __x64_sys_sendto+0xde/0x100 [ 354.369631][T14172] do_syscall_64+0xfa/0xfa0 [ 354.369661][T14172] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.369693][T14172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.369715][T14172] ? clear_bhb_loop+0x60/0xb0 [ 354.369742][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.369762][T14172] RIP: 0033:0x7f17c638f749 [ 354.369782][T14172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.369801][T14172] RSP: 002b:00007f17c45f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 354.369825][T14172] RAX: ffffffffffffffda RBX: 00007f17c65e5fa0 RCX: 00007f17c638f749 [ 354.369841][T14172] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 354.369855][T14172] RBP: 00007f17c45f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 354.369870][T14172] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 354.369883][T14172] R13: 00007f17c65e6038 R14: 00007f17c65e5fa0 R15: 00007ffe4fd15568 [ 354.369920][T14172] [ 354.699680][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.734040][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.889519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.898328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.907341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.960110][T14192] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2705'. [ 355.022858][T14092] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.030597][T14092] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.038161][T14092] bridge_slave_0: entered allmulticast mode [ 355.047476][T14092] bridge_slave_0: entered promiscuous mode [ 355.058239][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.065715][T14092] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.074180][T14092] bridge_slave_1: entered allmulticast mode [ 355.085852][T14092] bridge_slave_1: entered promiscuous mode [ 355.216207][T14199] netlink: 'syz.8.2708': attribute type 10 has an invalid length. [ 355.226533][T14092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.272441][T14199] !: entered promiscuous mode [ 355.277681][T14199] !: entered allmulticast mode [ 355.361087][T14199] team0: Port device 0! added [ 355.388263][T14092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.503008][T14092] team0: Port device team_slave_0 added [ 355.512584][T14212] tipc: Enabling of bearer rejected, failed to enable media [ 355.526590][T14092] team0: Port device team_slave_1 added [ 355.613121][T14092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.637371][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.666238][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2716'. [ 355.681162][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2716'. [ 355.692802][T14092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.763587][T14092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.779465][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.854548][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 355.900612][T14092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.027940][T14092] hsr_slave_0: entered promiscuous mode [ 356.036040][T14092] hsr_slave_1: entered promiscuous mode [ 356.042780][T14092] debugfs: 'hsr0' already exists in 'hsr' [ 356.049574][T14092] Cannot create hsr debugfs directory [ 356.331918][ T5150] Bluetooth: hci2: command tx timeout [ 356.444288][T14248] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2727'. [ 356.457012][T14248] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2727'. [ 356.632717][T14092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.645537][T14092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.727191][T14260] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2730'. [ 356.739376][T14250] sch_fq: defrate 0 ignored. [ 356.922761][T14092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.943909][T14092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.962175][T14267] tipc: Enabling of bearer rejected, failed to enable media [ 357.098869][T14092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.122105][T14092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.300887][T14279] netlink: 'syz.6.2733': attribute type 7 has an invalid length. [ 357.391151][T14092] bond0: (slave netdevsim0): Releasing backup interface [ 357.455725][T14092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.487471][T14092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.716448][T14306] FAULT_INJECTION: forcing a failure. [ 357.716448][T14306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.739521][T14302] __nla_validate_parse: 1 callbacks suppressed [ 357.739543][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2739'. [ 357.765687][T14306] CPU: 1 UID: 0 PID: 14306 Comm: syz.7.2742 Not tainted syzkaller #0 PREEMPT(full) [ 357.765723][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.765737][T14306] Call Trace: [ 357.765746][T14306] [ 357.765754][T14306] dump_stack_lvl+0x189/0x250 [ 357.765790][T14306] ? __pfx____ratelimit+0x10/0x10 [ 357.765820][T14306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.765850][T14306] ? __pfx__printk+0x10/0x10 [ 357.765873][T14306] ? __might_fault+0xb0/0x130 [ 357.765916][T14306] should_fail_ex+0x414/0x560 [ 357.765955][T14306] _copy_from_iter+0x1de/0x1790 [ 357.765980][T14306] ? txopt_get+0x7a/0x3f0 [ 357.766020][T14306] ? txopt_get+0x7a/0x3f0 [ 357.766040][T14306] ? txopt_get+0x7a/0x3f0 [ 357.766063][T14306] ? __pfx__copy_from_iter+0x10/0x10 [ 357.766084][T14306] ? txopt_get+0x335/0x3f0 [ 357.766108][T14306] ? aa_label_sk_perm+0x4cd/0x630 [ 357.766138][T14306] ? __pfx_txopt_get+0x10/0x10 [ 357.766172][T14306] rawv6_sendmsg+0xb5f/0x1830 [ 357.766213][T14306] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 357.766264][T14306] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.766297][T14306] ? sock_rps_record_flow+0x19/0x410 [ 357.766322][T14306] ? inet_sendmsg+0x2f4/0x370 [ 357.766340][T14306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.766366][T14306] __sock_sendmsg+0x19c/0x270 [ 357.766400][T14306] ____sys_sendmsg+0x505/0x830 [ 357.766430][T14306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.766465][T14306] ? import_iovec+0x74/0xa0 [ 357.766496][T14306] ___sys_sendmsg+0x21f/0x2a0 [ 357.766523][T14306] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.766612][T14306] ? __fget_files+0x2a/0x420 [ 357.766633][T14306] ? __fget_files+0x3a0/0x420 [ 357.766665][T14306] __x64_sys_sendmsg+0x19b/0x260 [ 357.766693][T14306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.766728][T14306] ? __pfx_ksys_write+0x10/0x10 [ 357.766763][T14306] ? do_syscall_64+0xbe/0xfa0 [ 357.766800][T14306] do_syscall_64+0xfa/0xfa0 [ 357.766830][T14306] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.766861][T14306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.766882][T14306] ? clear_bhb_loop+0x60/0xb0 [ 357.766908][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.766929][T14306] RIP: 0033:0x7f0cef98f749 [ 357.766948][T14306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.766969][T14306] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.766992][T14306] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 357.767015][T14306] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 357.767029][T14306] RBP: 00007f0cf07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.767042][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.767056][T14306] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 357.767091][T14306] [ 357.911888][T14092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.922718][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2739'. [ 358.075252][T14092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.076727][T11877] net_ratelimit: 5 callbacks suppressed [ 358.076755][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.141506][T14092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.179911][T14092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.228782][T14317] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 358.413525][ T5150] Bluetooth: hci2: command tx timeout [ 358.459553][T14092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.492377][T14092] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.506525][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.512897][T14330] FAULT_INJECTION: forcing a failure. [ 358.512897][T14330] name failslab, interval 1, probability 0, space 0, times 0 [ 358.513898][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.548190][T14330] CPU: 0 UID: 0 PID: 14330 Comm: syz.5.2750 Not tainted syzkaller #0 PREEMPT(full) [ 358.548222][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.548236][T14330] Call Trace: [ 358.548245][T14330] [ 358.548255][T14330] dump_stack_lvl+0x189/0x250 [ 358.548290][T14330] ? __pfx____ratelimit+0x10/0x10 [ 358.548321][T14330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.548351][T14330] ? __pfx__printk+0x10/0x10 [ 358.548376][T14330] ? __pfx___might_resched+0x10/0x10 [ 358.548400][T14330] ? fs_reclaim_acquire+0x7d/0x100 [ 358.548426][T14330] should_fail_ex+0x414/0x560 [ 358.548465][T14330] should_failslab+0xa8/0x100 [ 358.548489][T14330] __kmalloc_cache_noprof+0x6f/0x6f0 [ 358.548520][T14330] ? ip_set_pernet+0x23/0x240 [ 358.548547][T14330] ? ip_set_create+0x348/0x1940 [ 358.548585][T14330] ip_set_create+0x348/0x1940 [ 358.548628][T14330] ? __mutex_lock+0x335/0x1350 [ 358.548651][T14330] ? __pfx_ip_set_create+0x10/0x10 [ 358.548745][T14330] nfnetlink_rcv_msg+0xb4d/0x1130 [ 358.548777][T14330] ? __lock_acquire+0xab9/0xd20 [ 358.548797][T14330] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 358.548850][T14330] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 358.548913][T14330] ? is_bpf_text_address+0x26/0x2b0 [ 358.548946][T14330] ? is_bpf_text_address+0x26/0x2b0 [ 358.548982][T14330] netlink_rcv_skb+0x208/0x470 [ 358.549005][T14330] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 358.549038][T14330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.549074][T14330] ? bpf_lsm_capable+0x9/0x20 [ 358.549100][T14330] ? security_capable+0x7e/0x2e0 [ 358.549137][T14330] nfnetlink_rcv+0x282/0x2590 [ 358.549173][T14330] ? is_bpf_text_address+0x26/0x2b0 [ 358.549204][T14330] ? __kernel_text_address+0xd/0x40 [ 358.549236][T14330] ? unwind_get_return_address+0x4d/0x90 [ 358.549261][T14330] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.549291][T14330] ? arch_stack_walk+0xfc/0x150 [ 358.549333][T14330] ? stack_trace_save+0x9c/0xe0 [ 358.549360][T14330] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.549392][T14330] ? stack_depot_save_flags+0x40/0x860 [ 358.549433][T14330] ? __lock_acquire+0xab9/0xd20 [ 358.549483][T14330] ? __lock_acquire+0xab9/0xd20 [ 358.549515][T14330] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.549544][T14330] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.549576][T14330] netlink_unicast+0x82f/0x9e0 [ 358.549618][T14330] ? __pfx_netlink_unicast+0x10/0x10 [ 358.549653][T14330] ? netlink_sendmsg+0x642/0xb30 [ 358.549681][T14330] ? skb_put+0x11b/0x210 [ 358.549708][T14330] netlink_sendmsg+0x805/0xb30 [ 358.549742][T14330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.549769][T14330] ? aa_sock_msg_perm+0xf1/0x1d0 [ 358.549803][T14330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.549824][T14330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.549849][T14330] __sock_sendmsg+0x21c/0x270 [ 358.549883][T14330] ____sys_sendmsg+0x505/0x830 [ 358.549915][T14330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.549951][T14330] ? import_iovec+0x74/0xa0 [ 358.549982][T14330] ___sys_sendmsg+0x21f/0x2a0 [ 358.550009][T14330] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.550076][T14330] ? __fget_files+0x2a/0x420 [ 358.550096][T14330] ? __fget_files+0x3a0/0x420 [ 358.550130][T14330] __x64_sys_sendmsg+0x19b/0x260 [ 358.550158][T14330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.550195][T14330] ? __pfx_ksys_write+0x10/0x10 [ 358.550230][T14330] ? do_syscall_64+0xbe/0xfa0 [ 358.550266][T14330] do_syscall_64+0xfa/0xfa0 [ 358.550296][T14330] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.550327][T14330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.550349][T14330] ? clear_bhb_loop+0x60/0xb0 [ 358.550375][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.550396][T14330] RIP: 0033:0x7f17c638f749 [ 358.550416][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.550435][T14330] RSP: 002b:00007f17c45f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.550458][T14330] RAX: ffffffffffffffda RBX: 00007f17c65e5fa0 RCX: 00007f17c638f749 [ 358.550474][T14330] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 358.550487][T14330] RBP: 00007f17c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.550501][T14330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.550513][T14330] R13: 00007f17c65e6038 R14: 00007f17c65e5fa0 R15: 00007ffe4fd15568 [ 358.550550][T14330] [ 359.049463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.071865][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.079131][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.136365][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.320484][T14344] netlink: 'syz.7.2755': attribute type 1 has an invalid length. [ 359.456854][T14092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.521075][T14092] veth0_vlan: entered promiscuous mode [ 359.553120][T14351] FAULT_INJECTION: forcing a failure. [ 359.553120][T14351] name failslab, interval 1, probability 0, space 0, times 0 [ 359.563083][T14092] veth1_vlan: entered promiscuous mode [ 359.609563][T14351] CPU: 1 UID: 0 PID: 14351 Comm: syz.8.2757 Not tainted syzkaller #0 PREEMPT(full) [ 359.609594][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.609607][T14351] Call Trace: [ 359.609616][T14351] [ 359.609625][T14351] dump_stack_lvl+0x189/0x250 [ 359.609661][T14351] ? __pfx____ratelimit+0x10/0x10 [ 359.609693][T14351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.609722][T14351] ? __pfx__printk+0x10/0x10 [ 359.609760][T14351] should_fail_ex+0x414/0x560 [ 359.609799][T14351] should_failslab+0xa8/0x100 [ 359.609836][T14351] __kmalloc_cache_noprof+0x6f/0x6f0 [ 359.609868][T14351] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 359.609900][T14351] ? sctp_v6_cmp_addr+0x15/0xd0 [ 359.609929][T14351] ? sctp_add_bind_addr+0x8c/0x370 [ 359.609957][T14351] ? sctp_add_bind_addr+0xb0/0x370 [ 359.609994][T14351] sctp_add_bind_addr+0x8c/0x370 [ 359.610027][T14351] sctp_copy_local_addr_list+0x30b/0x4e0 [ 359.610061][T14351] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 359.610093][T14351] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 359.610125][T14351] ? sctp_v6_is_any+0x64/0x80 [ 359.610159][T14351] ? sctp_copy_one_addr+0x93/0x360 [ 359.610193][T14351] sctp_bind_addr_copy+0xb3/0x3c0 [ 359.610225][T14351] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 359.610257][T14351] sctp_connect_new_asoc+0x2e0/0x690 [ 359.610285][T14351] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 359.610306][T14351] ? __local_bh_enable_ip+0x12d/0x1c0 [ 359.610338][T14351] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 359.610362][T14351] ? security_sctp_bind_connect+0x7e/0x2e0 [ 359.610393][T14351] sctp_sendmsg+0x155c/0x2810 [ 359.610428][T14351] ? __pfx_sctp_sendmsg+0x10/0x10 [ 359.610455][T14351] ? aa_sk_perm+0x81e/0x950 [ 359.610491][T14351] ? __pfx_aa_sk_perm+0x10/0x10 [ 359.610526][T14351] ? sock_rps_record_flow+0x19/0x410 [ 359.610551][T14351] ? inet_sendmsg+0x2f4/0x370 [ 359.610577][T14351] __sock_sendmsg+0x19c/0x270 [ 359.610612][T14351] __sys_sendto+0x3bd/0x520 [ 359.610637][T14351] ? __pfx___sys_sendto+0x10/0x10 [ 359.610655][T14351] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 359.610700][T14351] ? __fget_files+0x3a0/0x420 [ 359.610730][T14351] ? ksys_write+0x22a/0x250 [ 359.610759][T14351] ? __pfx_ksys_write+0x10/0x10 [ 359.610789][T14351] __x64_sys_sendto+0xde/0x100 [ 359.610822][T14351] do_syscall_64+0xfa/0xfa0 [ 359.610856][T14351] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.610887][T14351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.610908][T14351] ? clear_bhb_loop+0x60/0xb0 [ 359.610933][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.610954][T14351] RIP: 0033:0x7f9a57b8f749 [ 359.610974][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.610998][T14351] RSP: 002b:00007f9a5895b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 359.611021][T14351] RAX: ffffffffffffffda RBX: 00007f9a57de5fa0 RCX: 00007f9a57b8f749 [ 359.611036][T14351] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 359.611050][T14351] RBP: 00007f9a5895b090 R08: 000020000005ffe4 R09: 000000000000001c [ 359.611064][T14351] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 359.611076][T14351] R13: 00007f9a57de6038 R14: 00007f9a57de5fa0 R15: 00007ffc54958698 [ 359.611113][T14351] [ 359.623981][T14356] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2759'. [ 359.816613][T14092] veth0_macvtap: entered promiscuous mode [ 359.863776][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.883394][T14092] veth1_macvtap: entered promiscuous mode [ 359.997375][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2761'. [ 360.019858][T14356] bond1: (slave gre0): Device is not bonding slave [ 360.026523][T14356] bond1: option active_slave: invalid value (gre0) [ 360.035069][T14356] bond1 (unregistering): Released all slaves [ 360.088174][T14092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.131179][T14092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.146225][ T8309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.161794][ T3473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.179642][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.234956][ T3473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.253180][T14367] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 360.275054][ T3473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.361434][T14370] tipc: Enabling of bearer rejected, failed to enable media [ 360.490903][ T5150] Bluetooth: hci2: command tx timeout [ 360.570899][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.595796][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.705085][ T8315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.759160][ T8315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.898981][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2768'. [ 360.928168][T14393] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 361.073099][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2771'. [ 361.232834][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.283997][T14407] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 361.357422][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2775'. [ 361.407183][T14409] xt_connbytes: Forcing CT accounting to be enabled [ 361.568489][T14420] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 361.689493][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2782'. [ 361.807562][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2786'. [ 361.820278][T14431] tipc: Enabling of bearer rejected, failed to enable media [ 362.258134][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.388924][T14463] team0: Device gtp0 is up. Set it down before adding it as a team port [ 362.447365][T14465] tipc: Enabling not permitted [ 362.453923][T14465] tipc: Enabling of bearer rejected, failed to enable media [ 362.500108][T14470] tipc: Enabling not permitted [ 362.505751][T14470] tipc: Enabling of bearer rejected, failed to enable media [ 362.871683][T14487] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 362.989730][T14496] tipc: Enabled bearer , priority 0 [ 363.121311][T14496] tipc: Disabling bearer [ 363.203228][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2808'. [ 363.289006][T14508] bond1: option resend_igmp: invalid value (32767) [ 363.299860][T11881] net_ratelimit: 1 callbacks suppressed [ 363.299882][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.321893][T14508] bond1: option resend_igmp: allowed values 0 - 255 [ 363.451064][T14508] bond1 (unregistering): Released all slaves [ 363.513222][T14515] can: request_module (can-proto-3) failed. [ 363.721789][T14526] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 363.863558][T14534] bridge5: entered promiscuous mode [ 363.868848][T14534] bridge5: entered allmulticast mode [ 363.924277][T14537] netlink: 'syz.8.2818': attribute type 10 has an invalid length. [ 364.017159][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.025813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.307420][T14556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.870958][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.105700][T14572] syzkaller0: entered promiscuous mode [ 365.136943][T14572] syzkaller0: entered allmulticast mode [ 365.219630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.700522][T14595] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2838'. [ 365.803045][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2838'. [ 365.893888][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.902914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.929758][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.303440][T14610] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2842'. [ 366.973453][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.460615][T14595] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 367.470044][T14595] 0ªî{X¹¦: entered allmulticast mode [ 367.642457][T14613] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2843'. [ 367.960411][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.987878][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.005846][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2848'. [ 368.027854][T14635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.029619][T14640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.057500][T14638] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2851'. [ 368.059829][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2850'. [ 368.365633][T14655] netlink: 'syz.8.2856': attribute type 7 has an invalid length. [ 368.554141][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2857'. [ 368.580632][T14665] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2857'. [ 368.638235][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2860'. [ 368.647791][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2860'. [ 368.660578][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2860'. [ 368.669874][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2860'. [ 368.857095][T14677] FAULT_INJECTION: forcing a failure. [ 368.857095][T14677] name failslab, interval 1, probability 0, space 0, times 0 [ 368.904043][T14677] CPU: 1 UID: 0 PID: 14677 Comm: syz.3.2864 Not tainted syzkaller #0 PREEMPT(full) [ 368.904074][T14677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.904087][T14677] Call Trace: [ 368.904096][T14677] [ 368.904105][T14677] dump_stack_lvl+0x189/0x250 [ 368.904141][T14677] ? __pfx____ratelimit+0x10/0x10 [ 368.904171][T14677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.904200][T14677] ? __pfx__printk+0x10/0x10 [ 368.904239][T14677] should_fail_ex+0x414/0x560 [ 368.904277][T14677] should_failslab+0xa8/0x100 [ 368.904302][T14677] __kmalloc_cache_noprof+0x6f/0x6f0 [ 368.904332][T14677] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 368.904364][T14677] ? sctp_add_bind_addr+0x8c/0x370 [ 368.904401][T14677] sctp_add_bind_addr+0x8c/0x370 [ 368.904437][T14677] sctp_copy_local_addr_list+0x30b/0x4e0 [ 368.904472][T14677] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 368.904503][T14677] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 368.904536][T14677] ? sctp_v6_is_any+0x64/0x80 [ 368.904570][T14677] ? sctp_copy_one_addr+0x93/0x360 [ 368.904605][T14677] sctp_bind_addr_copy+0xb3/0x3c0 [ 368.904637][T14677] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 368.904668][T14677] sctp_connect_new_asoc+0x2e0/0x690 [ 368.904695][T14677] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 368.904716][T14677] ? __local_bh_enable_ip+0x12d/0x1c0 [ 368.904748][T14677] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 368.904772][T14677] ? security_sctp_bind_connect+0x7e/0x2e0 [ 368.904802][T14677] sctp_sendmsg+0x155c/0x2810 [ 368.904839][T14677] ? __pfx_sctp_sendmsg+0x10/0x10 [ 368.904865][T14677] ? aa_sk_perm+0x81e/0x950 [ 368.904901][T14677] ? __pfx_aa_sk_perm+0x10/0x10 [ 368.904935][T14677] ? sock_rps_record_flow+0x19/0x410 [ 368.904959][T14677] ? inet_sendmsg+0x2f4/0x370 [ 368.904992][T14677] __sock_sendmsg+0x19c/0x270 [ 368.905027][T14677] __sys_sendto+0x3bd/0x520 [ 368.905055][T14677] ? __pfx___sys_sendto+0x10/0x10 [ 368.905074][T14677] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 368.905122][T14677] ? __fget_files+0x3a0/0x420 [ 368.905157][T14677] ? ksys_write+0x22a/0x250 [ 368.905190][T14677] ? __pfx_ksys_write+0x10/0x10 [ 368.905223][T14677] __x64_sys_sendto+0xde/0x100 [ 368.905250][T14677] do_syscall_64+0xfa/0xfa0 [ 368.905280][T14677] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.905311][T14677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.905332][T14677] ? clear_bhb_loop+0x60/0xb0 [ 368.905358][T14677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.905379][T14677] RIP: 0033:0x7f18e898f749 [ 368.905398][T14677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.905417][T14677] RSP: 002b:00007f18e97e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 368.905440][T14677] RAX: ffffffffffffffda RBX: 00007f18e8be5fa0 RCX: 00007f18e898f749 [ 368.905456][T14677] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 368.905469][T14677] RBP: 00007f18e97e4090 R08: 000020000005ffe4 R09: 000000000000001c [ 368.905483][T14677] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 368.905496][T14677] R13: 00007f18e8be6038 R14: 00007f18e8be5fa0 R15: 00007ffe7b127348 [ 368.905559][T14677] [ 369.235413][T11847] net_ratelimit: 3 callbacks suppressed [ 369.235435][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.249329][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.086372][T14722] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2878'. [ 370.096075][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.261461][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.623672][T14750] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 370.824517][T14760] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2887'. [ 371.060327][T14769] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2892'. [ 371.136452][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2895'. [ 371.284644][T14783] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 371.291515][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.333010][T14785] siw: device registration error -23 [ 371.368446][T14788] nbd: couldn't find a device at index 0 [ 372.330957][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.691909][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059129400: rx timeout, send abort [ 372.702159][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059129400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.227732][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.369582][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.849875][T14853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.249377][ C1] net_ratelimit: 1 callbacks suppressed [ 374.249398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.263803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.272394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.293917][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.388042][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebb7400: rx timeout, send abort [ 374.409541][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.733385][T14892] Bluetooth: MGMT ver 1.23 [ 374.896405][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebb7400: abort rx timeout. Force session deactivation [ 375.344791][T14919] __nla_validate_parse: 6 callbacks suppressed [ 375.344814][T14919] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2946'. [ 375.450161][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.735716][T14942] netlink: 'syz.7.2953': attribute type 10 has an invalid length. [ 375.756194][T14942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 375.769488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.778116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.786796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.152444][T14961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.873744][T14996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.927250][T14997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.011692][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2974'. [ 377.040240][T15004] --map-set only usable from mangle table [ 377.168337][T15011] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 377.271510][T15018] tipc: Enabling of bearer rejected, failed to enable media [ 377.593194][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2986'. [ 377.736263][T15040] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 378.254538][T15067] tipc: Enabling of bearer rejected, failed to enable media [ 378.380287][T15076] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 378.383974][T15079] netlink: 'syz.3.3000': attribute type 32 has an invalid length. [ 379.163244][T15120] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3011'. [ 379.309464][T11847] net_ratelimit: 11 callbacks suppressed [ 379.309485][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.323052][T15127] openvswitch: netlink: Missing valid actions attribute. [ 379.336434][T15127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.530726][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3016'. [ 379.594422][T15134] tipc: Enabling of bearer rejected, failed to enable media [ 379.614475][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.792717][T15146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.801733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.096312][T15160] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 380.301901][T15175] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3027'. [ 380.343392][T15175] syzkaller1: entered promiscuous mode [ 380.348935][T15175] syzkaller1: entered allmulticast mode [ 380.566831][T15187] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 380.658200][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.816168][T15196] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3036'. [ 380.819011][T15194] netlink: 'syz.7.3035': attribute type 1 has an invalid length. [ 380.845311][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3035'. [ 381.126028][T15200] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 381.270292][T15200] netlink: 'syz.5.3037': attribute type 18 has an invalid length. [ 381.377355][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3039'. [ 381.705645][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.950699][T15232] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 382.084998][T15240] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 382.097164][T15240] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3052'. [ 382.141369][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.149311][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.165885][T15243] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3052'. [ 382.183819][T15244] netlink: 'syz.5.3053': attribute type 4 has an invalid length. [ 382.192054][T15244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3053'. [ 382.205120][T15244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3053'. [ 382.209489][T15243] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.221410][T15243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.229447][T15243] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.236758][T15243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.274209][T15243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3052'. [ 382.284198][T15243] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.291620][T15243] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.340086][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.872741][T15261] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3058'. [ 382.908482][T15261] netlink: 'syz.7.3058': attribute type 2 has an invalid length. [ 382.932979][T15262] netlink: 'syz.5.3059': attribute type 11 has an invalid length. [ 382.979286][T15262] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3059'. [ 383.233109][T15264] geneve3: entered promiscuous mode [ 383.238401][T15264] geneve3: entered allmulticast mode [ 383.303630][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.329566][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.352623][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.389239][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.441313][T15273] tipc: Enabling of bearer rejected, failed to enable media [ 383.497711][T15271] ip6tnl0: Caught tx_queue_len zero misconfig [ 383.745273][T15293] netlink: 'syz.7.3069': attribute type 2 has an invalid length. [ 384.849223][T11881] net_ratelimit: 4 callbacks suppressed [ 384.849243][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.008732][T15333] tipc: Enabling of bearer rejected, failed to enable media [ 385.266739][T15345] team_slave_0: entered promiscuous mode [ 385.272893][T15345] team_slave_1: entered promiscuous mode [ 385.328213][T15345] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 385.373088][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.377475][T15345] team0: Device macvtap1 is already an upper device of the team interface [ 385.423786][T15345] team_slave_0: left promiscuous mode [ 385.429414][T15345] team_slave_1: left promiscuous mode [ 385.746950][T15371] FAULT_INJECTION: forcing a failure. [ 385.746950][T15371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.762761][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.8.3091 Not tainted syzkaller #0 PREEMPT(full) [ 385.762791][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.762804][T15371] Call Trace: [ 385.762812][T15371] [ 385.762821][T15371] dump_stack_lvl+0x189/0x250 [ 385.762857][T15371] ? __pfx____ratelimit+0x10/0x10 [ 385.762888][T15371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.762917][T15371] ? __pfx__printk+0x10/0x10 [ 385.762939][T15371] ? __might_fault+0xb0/0x130 [ 385.762982][T15371] should_fail_ex+0x414/0x560 [ 385.763022][T15371] _copy_from_user+0x2d/0xb0 [ 385.763052][T15371] ___sys_recvmsg+0x12e/0x510 [ 385.763086][T15371] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.763148][T15371] ? __fget_files+0x3a0/0x420 [ 385.763183][T15371] do_recvmmsg+0x307/0x770 [ 385.763219][T15371] ? __pfx_do_recvmmsg+0x10/0x10 [ 385.763258][T15371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.763318][T15371] __x64_sys_recvmmsg+0x190/0x240 [ 385.763346][T15371] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 385.763376][T15371] ? do_syscall_64+0xbe/0xfa0 [ 385.763411][T15371] do_syscall_64+0xfa/0xfa0 [ 385.763440][T15371] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.763472][T15371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.763493][T15371] ? clear_bhb_loop+0x60/0xb0 [ 385.763521][T15371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.763542][T15371] RIP: 0033:0x7f9a57b8f749 [ 385.763579][T15371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.763598][T15371] RSP: 002b:00007f9a55df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.763620][T15371] RAX: ffffffffffffffda RBX: 00007f9a57de6090 RCX: 00007f9a57b8f749 [ 385.763637][T15371] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 385.763650][T15371] RBP: 00007f9a55df6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.763663][T15371] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 385.763676][T15371] R13: 00007f9a57de6128 R14: 00007f9a57de6090 R15: 00007ffc54958698 [ 385.763714][T15371] [ 385.978237][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.305519][T15372] tipc: Enabling of bearer rejected, failed to enable media [ 386.675895][T15388] xt_hashlimit: size too large, truncated to 1048576 [ 386.770826][T15394] __nla_validate_parse: 6 callbacks suppressed [ 386.770850][T15394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3100'. [ 386.981811][T15402] tipc: Started in network mode [ 387.011593][T15402] tipc: Node identity 080211, cluster identity 4711 [ 387.022432][T15402] tipc: Enabled bearer , priority 0 [ 387.049885][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.062004][T15408] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 387.105520][T15408] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 387.165477][T15407] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 387.308558][T15407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.362580][T15423] netlink: 'syz.7.3107': attribute type 15 has an invalid length. [ 387.425913][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3107'. [ 387.463895][T15416] bond1: (slave veth3): Enslaving as an active interface with a down link [ 387.520956][T15419] veth5: entered promiscuous mode [ 387.534235][T15419] bond1: (slave veth5): Enslaving as an active interface with a down link [ 387.552256][T15402] tipc: Resetting bearer [ 387.601315][T15407] vlan2: entered allmulticast mode [ 387.619367][T15407] bond1: entered allmulticast mode [ 387.661526][T15407] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 387.926560][T15433] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 388.090116][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.341914][T15430] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 388.385422][T15430] bond3 (unregistering): Released all slaves [ 388.463641][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.481389][T11877] tipc: Node number set to 134353152 [ 388.805959][T15451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.824354][T15452] netlink: 'syz.7.3115': attribute type 1 has an invalid length. [ 388.963485][T15452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.086761][T15457] bond5: (slave geneve3): making interface the new active one [ 389.129759][T11877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.154631][T15452] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3115'. [ 389.173590][T15457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.184140][T15457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.198749][T15457] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 389.283666][T15465] tipc: Enabling of bearer rejected, failed to enable media [ 390.080208][ T8315] net_ratelimit: 3 callbacks suppressed [ 390.080229][ T8315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.087280][T15484] IPv6: addrconf: prefix option has invalid lifetime [ 390.110766][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3125'. [ 390.169770][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.330432][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.420045][T15501] syzkaller1: entered promiscuous mode [ 390.425701][T15501] syzkaller1: entered allmulticast mode [ 390.571599][ T8315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.587802][ T8315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.664412][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3134'. [ 390.738795][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebc6000: rx timeout, send abort [ 390.769808][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.807123][T15528] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3134'. [ 390.874636][T15522] tipc: Enabling of bearer rejected, already enabled [ 390.977511][T15533] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3138'. [ 391.096633][T15539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 391.213066][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.243144][ T3473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.251780][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebc6000: abort rx timeout. Force session deactivation [ 391.263626][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 391.305843][T15544] xt_hashlimit: size too large, truncated to 1048576 [ 391.315989][T15547] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 391.452458][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.532348][T15561] IPv6: sit1: Disabled Multicast RS [ 391.541084][T15561] sit1: entered allmulticast mode [ 392.351335][T15569] tipc: Enabling of bearer rejected, failed to enable media [ 392.619808][T15578] netlink: 'syz.6.3152': attribute type 142 has an invalid length. [ 392.808436][T15585] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 392.940003][T15592] FAULT_INJECTION: forcing a failure. [ 392.940003][T15592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.967857][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.8.3158 Not tainted syzkaller #0 PREEMPT(full) [ 392.967887][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.967902][T15592] Call Trace: [ 392.967910][T15592] [ 392.967920][T15592] dump_stack_lvl+0x189/0x250 [ 392.967956][T15592] ? __pfx____ratelimit+0x10/0x10 [ 392.967987][T15592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.968017][T15592] ? __pfx__printk+0x10/0x10 [ 392.968040][T15592] ? __might_fault+0xb0/0x130 [ 392.968084][T15592] should_fail_ex+0x414/0x560 [ 392.968123][T15592] _copy_from_user+0x2d/0xb0 [ 392.968153][T15592] kstrtouint_from_user+0xc4/0x170 [ 392.968179][T15592] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 392.968222][T15592] proc_fail_nth_write+0x88/0x200 [ 392.968250][T15592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 392.968286][T15592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 392.968315][T15592] vfs_write+0x27e/0xb30 [ 392.968357][T15592] ? __pfx_vfs_write+0x10/0x10 [ 392.968389][T15592] ? __fget_files+0x2a/0x420 [ 392.968415][T15592] ? __fget_files+0x3a0/0x420 [ 392.968434][T15592] ? __fget_files+0x2a/0x420 [ 392.968465][T15592] ksys_write+0x145/0x250 [ 392.968506][T15592] ? __pfx_ksys_write+0x10/0x10 [ 392.968541][T15592] ? do_syscall_64+0xbe/0xfa0 [ 392.968577][T15592] do_syscall_64+0xfa/0xfa0 [ 392.968607][T15592] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.968639][T15592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.968660][T15592] ? clear_bhb_loop+0x60/0xb0 [ 392.968686][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.968707][T15592] RIP: 0033:0x7f9a57b8e1ff [ 392.968727][T15592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 392.968746][T15592] RSP: 002b:00007f9a5895b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 392.968770][T15592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9a57b8e1ff [ 392.968785][T15592] RDX: 0000000000000001 RSI: 00007f9a5895b0a0 RDI: 0000000000000004 [ 392.968799][T15592] RBP: 00007f9a5895b090 R08: 0000000000000000 R09: 0000000000000014 [ 392.968812][T15592] R10: 0000000020008801 R11: 0000000000000293 R12: 0000000000000001 [ 392.968825][T15592] R13: 00007f9a57de6038 R14: 00007f9a57de5fa0 R15: 00007ffc54958698 [ 392.968862][T15592] [ 393.250903][T15586] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.262483][T15586] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.278263][T15586] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 393.378624][T15604] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 393.474647][T15586] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.495937][T15586] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.507186][T15586] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 393.532982][T15611] gtp0: entered promiscuous mode [ 393.672219][T15586] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.695564][T15586] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.717813][T15586] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 393.811930][T15586] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.826273][T15586] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.838896][T15586] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 393.850485][T15627] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 394.006602][ T60] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.016001][ T60] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.024538][ T60] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.047233][ T60] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.055928][ T60] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.064782][ T60] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.102341][ T8315] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.112022][ T8315] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.121150][ T8315] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.146781][ T8315] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.156988][ T8315] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 394.167375][ T8315] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.563516][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3178'. [ 394.594559][T15655] xfrm1: entered promiscuous mode [ 394.614280][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3178'. [ 394.635163][T15655] xfrm1: entered allmulticast mode [ 394.673388][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3178'. [ 394.707302][T15664] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 394.719218][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3178'. [ 394.735449][T15667] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 394.941636][T15672] xt_hashlimit: size too large, truncated to 1048576 [ 395.088195][T15681] netlink: 'syz.5.3188': attribute type 1 has an invalid length. [ 395.107062][T15686] FAULT_INJECTION: forcing a failure. [ 395.107062][T15686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.147207][T15681] bond2: entered promiscuous mode [ 395.152711][T15686] CPU: 0 UID: 0 PID: 15686 Comm: syz.7.3189 Not tainted syzkaller #0 PREEMPT(full) [ 395.152739][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.152753][T15686] Call Trace: [ 395.152761][T15686] [ 395.152771][T15686] dump_stack_lvl+0x189/0x250 [ 395.152807][T15686] ? __pfx____ratelimit+0x10/0x10 [ 395.152837][T15686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.152866][T15686] ? __pfx__printk+0x10/0x10 [ 395.152889][T15686] ? __might_fault+0xb0/0x130 [ 395.152934][T15686] should_fail_ex+0x414/0x560 [ 395.152972][T15686] _copy_from_user+0x2d/0xb0 [ 395.153004][T15686] ___sys_sendmsg+0x158/0x2a0 [ 395.153032][T15686] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.153096][T15686] ? __fget_files+0x2a/0x420 [ 395.153116][T15686] ? __fget_files+0x3a0/0x420 [ 395.153148][T15686] __x64_sys_sendmsg+0x19b/0x260 [ 395.153177][T15686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.153212][T15686] ? __pfx_ksys_write+0x10/0x10 [ 395.153249][T15686] ? do_syscall_64+0xbe/0xfa0 [ 395.153285][T15686] do_syscall_64+0xfa/0xfa0 [ 395.153316][T15686] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.153349][T15686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.153373][T15686] ? clear_bhb_loop+0x60/0xb0 [ 395.153400][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.153421][T15686] RIP: 0033:0x7f0cef98f749 [ 395.153442][T15686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.153462][T15686] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.153486][T15686] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 395.153502][T15686] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003 [ 395.153516][T15686] RBP: 00007f0cf07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 395.153530][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.153542][T15686] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 395.153590][T15686] [ 395.157448][T15681] bond2: entered allmulticast mode [ 395.192730][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3188'. [ 395.207442][T15681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.369978][T11881] net_ratelimit: 12 callbacks suppressed [ 395.369998][T11881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.420942][T15683] macvlan3: entered promiscuous mode [ 395.437690][T15692] netlink: 'syz.6.3191': attribute type 1 has an invalid length. [ 395.517170][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3192'. [ 395.575718][T15700] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 395.638999][T15703] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 395.712852][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3193'. [ 395.869439][ T3509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.896968][T15714] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 395.915944][T15714] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 396.092586][T15726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3201'. [ 396.212093][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3203'. [ 396.300505][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 396.410637][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.494945][T15747] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 396.655766][T15758] FAULT_INJECTION: forcing a failure. [ 396.655766][T15758] name failslab, interval 1, probability 0, space 0, times 0 [ 396.693462][T15758] CPU: 0 UID: 0 PID: 15758 Comm: syz.7.3211 Not tainted syzkaller #0 PREEMPT(full) [ 396.693492][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.693506][T15758] Call Trace: [ 396.693515][T15758] [ 396.693525][T15758] dump_stack_lvl+0x189/0x250 [ 396.693561][T15758] ? __pfx____ratelimit+0x10/0x10 [ 396.693591][T15758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.693621][T15758] ? __pfx__printk+0x10/0x10 [ 396.693650][T15758] ? __pfx___might_resched+0x10/0x10 [ 396.693673][T15758] ? fs_reclaim_acquire+0x7d/0x100 [ 396.693704][T15758] should_fail_ex+0x414/0x560 [ 396.693743][T15758] should_failslab+0xa8/0x100 [ 396.693767][T15758] __kmalloc_noprof+0xcb/0x7f0 [ 396.693797][T15758] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 396.693828][T15758] ? rcu_is_watching+0x15/0xb0 [ 396.693858][T15758] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 396.693898][T15758] genl_family_rcv_msg_doit+0xb8/0x300 [ 396.693934][T15758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.693974][T15758] ? apparmor_capable+0x137/0x1b0 [ 396.694001][T15758] ? bpf_lsm_capable+0x9/0x20 [ 396.694027][T15758] ? security_capable+0x7e/0x2e0 [ 396.694064][T15758] genl_rcv_msg+0x60e/0x790 [ 396.694100][T15758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.694127][T15758] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 396.694161][T15758] ? __asan_memcpy+0x40/0x70 [ 396.694191][T15758] ? __pfx_ref_tracker_free+0x10/0x10 [ 396.694221][T15758] netlink_rcv_skb+0x208/0x470 [ 396.694240][T15758] ? __lock_acquire+0xab9/0xd20 [ 396.694262][T15758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.694292][T15758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.694336][T15758] ? down_read+0x1ad/0x2e0 [ 396.694361][T15758] genl_rcv+0x28/0x40 [ 396.694386][T15758] netlink_unicast+0x82f/0x9e0 [ 396.694438][T15758] ? __pfx_netlink_unicast+0x10/0x10 [ 396.694474][T15758] ? netlink_sendmsg+0x642/0xb30 [ 396.694495][T15758] ? skb_put+0x11b/0x210 [ 396.694521][T15758] netlink_sendmsg+0x805/0xb30 [ 396.694555][T15758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.694582][T15758] ? aa_sock_msg_perm+0xf1/0x1d0 [ 396.694617][T15758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.694638][T15758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.694662][T15758] __sock_sendmsg+0x21c/0x270 [ 396.694698][T15758] ____sys_sendmsg+0x505/0x830 [ 396.694730][T15758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.694765][T15758] ? import_iovec+0x74/0xa0 [ 396.694799][T15758] ___sys_sendmsg+0x21f/0x2a0 [ 396.694825][T15758] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.694893][T15758] ? __fget_files+0x2a/0x420 [ 396.694913][T15758] ? __fget_files+0x3a0/0x420 [ 396.694946][T15758] __x64_sys_sendmsg+0x19b/0x260 [ 396.694974][T15758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.695010][T15758] ? __pfx_ksys_write+0x10/0x10 [ 396.695047][T15758] ? do_syscall_64+0xbe/0xfa0 [ 396.695084][T15758] do_syscall_64+0xfa/0xfa0 [ 396.695114][T15758] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.695145][T15758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.695167][T15758] ? clear_bhb_loop+0x60/0xb0 [ 396.695191][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.695213][T15758] RIP: 0033:0x7f0cef98f749 [ 396.695232][T15758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.695251][T15758] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.695274][T15758] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 396.695290][T15758] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 396.695303][T15758] RBP: 00007f0cf07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 396.695317][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.695329][T15758] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 396.695367][T15758] [ 397.085073][T15760] veth1_to_bond: entered allmulticast mode [ 397.271752][T15761] bond0: (slave bond_slave_1): Releasing backup interface [ 397.324100][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.396522][T15761] veth1_to_bond (unregistering): left allmulticast mode [ 397.508894][T15778] C: renamed from lo (while UP) [ 397.713828][T15791] xt_hashlimit: size too large, truncated to 1048576 [ 397.728488][T15794] FAULT_INJECTION: forcing a failure. [ 397.728488][T15794] name failslab, interval 1, probability 0, space 0, times 0 [ 397.753572][T15794] CPU: 1 UID: 0 PID: 15794 Comm: syz.7.3226 Not tainted syzkaller #0 PREEMPT(full) [ 397.753604][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.753618][T15794] Call Trace: [ 397.753627][T15794] [ 397.753636][T15794] dump_stack_lvl+0x189/0x250 [ 397.753673][T15794] ? __pfx____ratelimit+0x10/0x10 [ 397.753704][T15794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.753733][T15794] ? __pfx__printk+0x10/0x10 [ 397.753761][T15794] ? __pfx___might_resched+0x10/0x10 [ 397.753791][T15794] should_fail_ex+0x414/0x560 [ 397.753830][T15794] should_failslab+0xa8/0x100 [ 397.753855][T15794] kmem_cache_alloc_node_noprof+0x77/0x710 [ 397.753886][T15794] ? __alloc_skb+0x112/0x2d0 [ 397.753914][T15794] __alloc_skb+0x112/0x2d0 [ 397.753940][T15794] netlink_ack+0x146/0xa50 [ 397.753959][T15794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.753992][T15794] ? __asan_memcpy+0x40/0x70 [ 397.754019][T15794] ? __pfx_ref_tracker_free+0x10/0x10 [ 397.754060][T15794] netlink_rcv_skb+0x28c/0x470 [ 397.754080][T15794] ? __lock_acquire+0xab9/0xd20 [ 397.754102][T15794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.754132][T15794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.754175][T15794] ? down_read+0x1ad/0x2e0 [ 397.754201][T15794] genl_rcv+0x28/0x40 [ 397.754227][T15794] netlink_unicast+0x82f/0x9e0 [ 397.754269][T15794] ? __pfx_netlink_unicast+0x10/0x10 [ 397.754305][T15794] ? netlink_sendmsg+0x642/0xb30 [ 397.754325][T15794] ? skb_put+0x11b/0x210 [ 397.754351][T15794] netlink_sendmsg+0x805/0xb30 [ 397.754384][T15794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.754412][T15794] ? aa_sock_msg_perm+0xf1/0x1d0 [ 397.754446][T15794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.754467][T15794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.754491][T15794] __sock_sendmsg+0x21c/0x270 [ 397.754525][T15794] ____sys_sendmsg+0x505/0x830 [ 397.754557][T15794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.754592][T15794] ? import_iovec+0x74/0xa0 [ 397.754624][T15794] ___sys_sendmsg+0x21f/0x2a0 [ 397.754652][T15794] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.754718][T15794] ? __fget_files+0x2a/0x420 [ 397.754737][T15794] ? __fget_files+0x3a0/0x420 [ 397.754770][T15794] __x64_sys_sendmsg+0x19b/0x260 [ 397.754798][T15794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.754834][T15794] ? __pfx_ksys_write+0x10/0x10 [ 397.754870][T15794] ? do_syscall_64+0xbe/0xfa0 [ 397.754906][T15794] do_syscall_64+0xfa/0xfa0 [ 397.754936][T15794] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.754967][T15794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.754988][T15794] ? clear_bhb_loop+0x60/0xb0 [ 397.755014][T15794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.755035][T15794] RIP: 0033:0x7f0cef98f749 [ 397.755062][T15794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.755081][T15794] RSP: 002b:00007f0cf07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.755104][T15794] RAX: ffffffffffffffda RBX: 00007f0cefbe5fa0 RCX: 00007f0cef98f749 [ 397.755120][T15794] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 397.755134][T15794] RBP: 00007f0cf07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 397.755147][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.755160][T15794] R13: 00007f0cefbe6038 R14: 00007f0cefbe5fa0 R15: 00007ffd91c883e8 [ 397.755196][T15794] [ 398.288866][T15818] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 398.340529][T15814] Cannot find add_set index 2 as target [ 399.273216][T15857] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 399.340901][T15865] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 399.519694][T15869] block nbd8: NBD_DISCONNECT [ 399.950278][T15889] __nla_validate_parse: 12 callbacks suppressed [ 399.950302][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3254'. [ 400.025837][T15893] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3254'. [ 400.120421][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3256'. [ 400.130060][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3256'. [ 400.155119][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3258'. [ 400.224033][T15901] syzkaller1: entered promiscuous mode [ 400.239317][T15901] syzkaller1: entered allmulticast mode [ 400.294883][T15911] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 400.363171][T15913] FAULT_INJECTION: forcing a failure. [ 400.363171][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 400.379397][T15913] CPU: 0 UID: 0 PID: 15913 Comm: syz.8.3261 Not tainted syzkaller #0 PREEMPT(full) [ 400.379429][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.379443][T15913] Call Trace: [ 400.379452][T15913] [ 400.379461][T15913] dump_stack_lvl+0x189/0x250 [ 400.379496][T15913] ? __pfx____ratelimit+0x10/0x10 [ 400.379545][T15913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.379575][T15913] ? __pfx__printk+0x10/0x10 [ 400.379603][T15913] ? __lock_acquire+0xab9/0xd20 [ 400.379634][T15913] should_fail_ex+0x414/0x560 [ 400.379674][T15913] should_failslab+0xa8/0x100 [ 400.379698][T15913] kmem_cache_alloc_noprof+0x74/0x6e0 [ 400.379730][T15913] ? skb_clone+0x212/0x3a0 [ 400.379761][T15913] skb_clone+0x212/0x3a0 [ 400.379791][T15913] __netlink_deliver_tap+0x404/0x850 [ 400.379829][T15913] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.379853][T15913] netlink_deliver_tap+0x19c/0x1b0 [ 400.379877][T15913] netlink_unicast+0x7fa/0x9e0 [ 400.379920][T15913] ? __pfx_netlink_unicast+0x10/0x10 [ 400.379955][T15913] ? netlink_sendmsg+0x642/0xb30 [ 400.379975][T15913] ? skb_put+0x11b/0x210 [ 400.380002][T15913] netlink_sendmsg+0x805/0xb30 [ 400.380044][T15913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.380072][T15913] ? aa_sock_msg_perm+0xf1/0x1d0 [ 400.380108][T15913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.380129][T15913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.380153][T15913] __sock_sendmsg+0x21c/0x270 [ 400.380187][T15913] ____sys_sendmsg+0x505/0x830 [ 400.380219][T15913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.380255][T15913] ? import_iovec+0x74/0xa0 [ 400.380287][T15913] ___sys_sendmsg+0x21f/0x2a0 [ 400.380315][T15913] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.380394][T15913] ? __fget_files+0x2a/0x420 [ 400.380414][T15913] ? __fget_files+0x3a0/0x420 [ 400.380452][T15913] __x64_sys_sendmsg+0x19b/0x260 [ 400.380480][T15913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.380517][T15913] ? __pfx_ksys_write+0x10/0x10 [ 400.380552][T15913] ? do_syscall_64+0xbe/0xfa0 [ 400.380589][T15913] do_syscall_64+0xfa/0xfa0 [ 400.380619][T15913] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.380650][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.380671][T15913] ? clear_bhb_loop+0x60/0xb0 [ 400.380698][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.380718][T15913] RIP: 0033:0x7f9a57b8f749 [ 400.380738][T15913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.380756][T15913] RSP: 002b:00007f9a5895b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.380780][T15913] RAX: ffffffffffffffda RBX: 00007f9a57de5fa0 RCX: 00007f9a57b8f749 [ 400.380796][T15913] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003 [ 400.380810][T15913] RBP: 00007f9a5895b090 R08: 0000000000000000 R09: 0000000000000000 [ 400.380823][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.380836][T15913] R13: 00007f9a57de6038 R14: 00007f9a57de5fa0 R15: 00007ffc54958698 [ 400.380873][T15913] [ 401.114336][T15920] FAULT_INJECTION: forcing a failure. [ 401.114336][T15920] name failslab, interval 1, probability 0, space 0, times 0 [ 401.151927][T15921] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3265'. [ 401.152678][T15920] CPU: 0 UID: 0 PID: 15920 Comm: syz.3.3264 Not tainted syzkaller #0 PREEMPT(full) [ 401.152710][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.152726][T15920] Call Trace: [ 401.152736][T15920] [ 401.152746][T15920] dump_stack_lvl+0x189/0x250 [ 401.152787][T15920] ? __pfx____ratelimit+0x10/0x10 [ 401.152824][T15920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.152856][T15920] ? __pfx__printk+0x10/0x10 [ 401.152879][T15920] ? netlink_sendmsg+0x805/0xb30 [ 401.152908][T15920] ? __x64_sys_sendmsg+0x19b/0x260 [ 401.152933][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.152969][T15920] should_fail_ex+0x414/0x560 [ 401.153025][T15920] should_failslab+0xa8/0x100 [ 401.153055][T15920] kmem_cache_alloc_noprof+0x74/0x6e0 [ 401.153088][T15920] ? skb_clone+0x212/0x3a0 [ 401.153125][T15920] skb_clone+0x212/0x3a0 [ 401.153158][T15920] __netlink_deliver_tap+0x404/0x850 [ 401.153200][T15920] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.153228][T15920] netlink_deliver_tap+0x19c/0x1b0 [ 401.153255][T15920] netlink_sendskb+0x68/0x140 [ 401.153294][T15920] netlink_unicast+0x397/0x9e0 [ 401.153328][T15920] ? __asan_memcpy+0x40/0x70 [ 401.153372][T15920] ? __pfx_netlink_unicast+0x10/0x10 [ 401.153421][T15920] netlink_rcv_skb+0x28c/0x470 [ 401.153443][T15920] ? __lock_acquire+0xab9/0xd20 [ 401.153469][T15920] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.153503][T15920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.153555][T15920] ? down_read+0x1ad/0x2e0 [ 401.153583][T15920] genl_rcv+0x28/0x40 [ 401.153612][T15920] netlink_unicast+0x82f/0x9e0 [ 401.153659][T15920] ? __pfx_netlink_unicast+0x10/0x10 [ 401.153704][T15920] ? netlink_sendmsg+0x642/0xb30 [ 401.153726][T15920] ? skb_put+0x11b/0x210 [ 401.153755][T15920] netlink_sendmsg+0x805/0xb30 [ 401.153792][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.153822][T15920] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.153863][T15920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.153886][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.153912][T15920] __sock_sendmsg+0x21c/0x270 [ 401.153950][T15920] ____sys_sendmsg+0x505/0x830 [ 401.153985][T15920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.154031][T15920] ? import_iovec+0x74/0xa0 [ 401.154078][T15920] ___sys_sendmsg+0x21f/0x2a0 [ 401.154111][T15920] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.154185][T15920] ? __fget_files+0x2a/0x420 [ 401.154209][T15920] ? __fget_files+0x3a0/0x420 [ 401.154246][T15920] __x64_sys_sendmsg+0x19b/0x260 [ 401.154277][T15920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.154319][T15920] ? __pfx_ksys_write+0x10/0x10 [ 401.154359][T15920] ? do_syscall_64+0xbe/0xfa0 [ 401.154401][T15920] do_syscall_64+0xfa/0xfa0 [ 401.154435][T15920] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.154471][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.154494][T15920] ? clear_bhb_loop+0x60/0xb0 [ 401.154525][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.154548][T15920] RIP: 0033:0x7f18e898f749 [ 401.154571][T15920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.154592][T15920] RSP: 002b:00007f18e97e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.154619][T15920] RAX: ffffffffffffffda RBX: 00007f18e8be5fa0 RCX: 00007f18e898f749 [ 401.154637][T15920] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 401.154654][T15920] RBP: 00007f18e97e4090 R08: 0000000000000000 R09: 0000000000000000 [ 401.154668][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.154684][T15920] R13: 00007f18e8be6038 R14: 00007f18e8be5fa0 R15: 00007ffe7b127348 [ 401.154724][T15920] [ 401.230734][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3266'. [ 401.546509][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.589592][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3266'. [ 401.616924][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.651179][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3266'. [ 401.669298][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.720764][T15938] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 401.726786][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3266'. [ 401.742554][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.775956][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.810231][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.828171][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.869687][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.891065][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.921888][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.962913][T15924] block nbd3: Unsupported socket: should be TCP or UNIX. [ 402.127741][T15956] FAULT_INJECTION: forcing a failure. [ 402.127741][T15956] name failslab, interval 1, probability 0, space 0, times 0 [ 402.166083][T15956] CPU: 1 UID: 0 PID: 15956 Comm: syz.6.3278 Not tainted syzkaller #0 PREEMPT(full) [ 402.166114][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.166128][T15956] Call Trace: [ 402.166136][T15956] [ 402.166145][T15956] dump_stack_lvl+0x189/0x250 [ 402.166181][T15956] ? __pfx____ratelimit+0x10/0x10 [ 402.166213][T15956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.166243][T15956] ? __pfx__printk+0x10/0x10 [ 402.166273][T15956] ? __pfx___might_resched+0x10/0x10 [ 402.166296][T15956] ? fs_reclaim_acquire+0x7d/0x100 [ 402.166322][T15956] should_fail_ex+0x414/0x560 [ 402.166360][T15956] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 402.166379][T15956] should_failslab+0xa8/0x100 [ 402.166402][T15956] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 402.166419][T15956] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 402.166450][T15956] ? alloc_inode+0x6a/0x1b0 [ 402.166482][T15956] ? __pfx_simple_start_creating+0x10/0x10 [ 402.166508][T15956] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 402.166527][T15956] alloc_inode+0x6a/0x1b0 [ 402.166561][T15956] new_inode+0x22/0x170 [ 402.166587][T15956] __debugfs_create_file+0x14d/0x4f0 [ 402.166627][T15956] debugfs_create_file_full+0x3f/0x60 [ 402.166664][T15956] ref_tracker_dir_debugfs+0x14e/0x270 [ 402.166686][T15956] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 402.166739][T15956] ? trace_kmalloc+0x1f/0xd0 [ 402.166765][T15956] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 402.166802][T15956] ? __raw_spin_lock_init+0x45/0x100 [ 402.166835][T15956] alloc_netdev_mqs+0x272/0x11b0 [ 402.166885][T15956] ? __pfx_l2tp_eth_dev_setup+0x10/0x10 [ 402.166925][T15956] l2tp_eth_create+0x1bd/0xbd0 [ 402.166956][T15956] ? l2tp_tunnel_get+0x8d/0x400 [ 402.166990][T15956] ? l2tp_tunnel_get+0x365/0x400 [ 402.167023][T15956] ? l2tp_tunnel_get+0x8d/0x400 [ 402.167057][T15956] ? __pfx_l2tp_eth_create+0x10/0x10 [ 402.167100][T15956] l2tp_nl_cmd_session_create+0x733/0xc20 [ 402.167144][T15956] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 402.167187][T15956] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 402.167228][T15956] genl_family_rcv_msg_doit+0x215/0x300 [ 402.167268][T15956] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 402.167314][T15956] ? bpf_lsm_capable+0x9/0x20 [ 402.167339][T15956] ? security_capable+0x7e/0x2e0 [ 402.167378][T15956] genl_rcv_msg+0x60e/0x790 [ 402.167416][T15956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.167445][T15956] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 402.167480][T15956] ? __asan_memcpy+0x40/0x70 [ 402.167509][T15956] ? __pfx_ref_tracker_free+0x10/0x10 [ 402.167541][T15956] netlink_rcv_skb+0x208/0x470 [ 402.167562][T15956] ? __lock_acquire+0xab9/0xd20 [ 402.167585][T15956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.167616][T15956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.167662][T15956] ? down_read+0x1ad/0x2e0 [ 402.167689][T15956] genl_rcv+0x28/0x40 [ 402.167715][T15956] netlink_unicast+0x82f/0x9e0 [ 402.167761][T15956] ? __pfx_netlink_unicast+0x10/0x10 [ 402.167798][T15956] ? netlink_sendmsg+0x642/0xb30 [ 402.167820][T15956] ? skb_put+0x11b/0x210 [ 402.167847][T15956] netlink_sendmsg+0x805/0xb30 [ 402.167887][T15956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.167915][T15956] ? aa_sock_msg_perm+0xf1/0x1d0 [ 402.167950][T15956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.167972][T15956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.167994][T15956] __sock_sendmsg+0x21c/0x270 [ 402.168029][T15956] ____sys_sendmsg+0x505/0x830 [ 402.168061][T15956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.168099][T15956] ? import_iovec+0x74/0xa0 [ 402.168131][T15956] ___sys_sendmsg+0x21f/0x2a0 [ 402.168160][T15956] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.168226][T15956] ? __fget_files+0x2a/0x420 [ 402.168246][T15956] ? __fget_files+0x3a0/0x420 [ 402.168281][T15956] __x64_sys_sendmsg+0x19b/0x260 [ 402.168310][T15956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.168348][T15956] ? __pfx_ksys_write+0x10/0x10 [ 402.168385][T15956] ? do_syscall_64+0xbe/0xfa0 [ 402.168422][T15956] do_syscall_64+0xfa/0xfa0 [ 402.168452][T15956] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.168485][T15956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.168507][T15956] ? clear_bhb_loop+0x60/0xb0 [ 402.168535][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.168557][T15956] RIP: 0033:0x7f632b78f749 [ 402.168578][T15956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.168599][T15956] RSP: 002b:00007f63299f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.168623][T15956] RAX: ffffffffffffffda RBX: 00007f632b9e5fa0 RCX: 00007f632b78f749 [ 402.168640][T15956] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 402.168654][T15956] RBP: 00007f63299f6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.168669][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.168682][T15956] R13: 00007f632b9e6038 R14: 00007f632b9e5fa0 R15: 00007ffed02bccc8 [ 402.168722][T15956] [ 402.168733][T15956] debugfs: out of free dentries, can not create file 'netdev@ffff88805537e618' [ 403.284451][T15954] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.791719][T15998] hsr_slave_0 (unregistering): left promiscuous mode [ 405.453340][T16024] FAULT_INJECTION: forcing a failure. [ 405.453340][T16024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.454701][T16024] [ 405.454713][T16024] ====================================================== [ 405.454723][T16024] WARNING: possible circular locking dependency detected [ 405.454739][T16024] syzkaller #0 Not tainted [ 405.454750][T16024] ------------------------------------------------------ [ 405.454759][T16024] syz.8.3298/16024 is trying to acquire lock: [ 405.454771][T16024] ffffffff8df31660 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 405.454833][T16024] [ 405.454833][T16024] but task is already holding lock: [ 405.454840][T16024] ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 405.454886][T16024] [ 405.454886][T16024] which lock already depends on the new lock. [ 405.454886][T16024] [ 405.454895][T16024] [ 405.454895][T16024] the existing dependency chain (in reverse order) is: [ 405.454903][T16024] [ 405.454903][T16024] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 405.454932][T16024] lock_acquire+0x120/0x360 [ 405.454952][T16024] _raw_spin_lock_nested+0x32/0x50 [ 405.454982][T16024] raw_spin_rq_lock_nested+0x2a/0x140 [ 405.455002][T16024] task_rq_lock+0xbc/0x470 [ 405.455021][T16024] cgroup_move_task+0x92/0x2a0 [ 405.455046][T16024] css_set_move_task+0x658/0x9e0 [ 405.455072][T16024] cgroup_post_fork+0x1ef/0x790 [ 405.455099][T16024] copy_process+0x3862/0x3c00 [ 405.455121][T16024] kernel_clone+0x21e/0x840 [ 405.455144][T16024] user_mode_thread+0xdd/0x140 [ 405.455168][T16024] rest_init+0x23/0x300 [ 405.455189][T16024] start_kernel+0x3ae/0x410 [ 405.455213][T16024] x86_64_start_reservations+0x24/0x30 [ 405.455245][T16024] x86_64_start_kernel+0x143/0x1c0 [ 405.455275][T16024] common_startup_64+0x13e/0x147 [ 405.455382][T16024] [ 405.455382][T16024] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 405.455411][T16024] lock_acquire+0x120/0x360 [ 405.455429][T16024] _raw_spin_lock_irqsave+0xa7/0xf0 [ 405.455455][T16024] try_to_wake_up+0x67/0x12b0 [ 405.455482][T16024] __wake_up_common_lock+0x137/0x1f0 [ 405.455510][T16024] tty_port_default_wakeup+0xfb/0x170 [ 405.455531][T16024] serial8250_tx_chars+0x72e/0x970 [ 405.455561][T16024] serial8250_handle_irq+0x633/0xbb0 [ 405.455591][T16024] serial8250_default_handle_irq+0xbf/0x200 [ 405.455612][T16024] serial8250_interrupt+0x8d/0x180 [ 405.455637][T16024] __handle_irq_event_percpu+0x295/0xab0 [ 405.455666][T16024] handle_irq_event+0x8b/0x1e0 [ 405.455692][T16024] handle_edge_irq+0x23b/0xa10 [ 405.455717][T16024] __common_interrupt+0x141/0x1f0 [ 405.455748][T16024] common_interrupt+0xb6/0xe0 [ 405.455770][T16024] asm_common_interrupt+0x26/0x40 [ 405.455790][T16024] pv_native_safe_halt+0x13/0x20 [ 405.455818][T16024] default_idle+0x13/0x20 [ 405.455837][T16024] default_idle_call+0x73/0xb0 [ 405.455857][T16024] do_idle+0x1e7/0x510 [ 405.455878][T16024] cpu_startup_entry+0x44/0x60 [ 405.455899][T16024] rest_init+0x2de/0x300 [ 405.455920][T16024] start_kernel+0x3ae/0x410 [ 405.455942][T16024] x86_64_start_reservations+0x24/0x30 [ 405.455974][T16024] x86_64_start_kernel+0x143/0x1c0 [ 405.456005][T16024] common_startup_64+0x13e/0x147 [ 405.456038][T16024] [ 405.456038][T16024] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 405.456066][T16024] lock_acquire+0x120/0x360 [ 405.456083][T16024] _raw_spin_lock_irqsave+0xa7/0xf0 [ 405.456126][T16024] __wake_up_common_lock+0x2f/0x1f0 [ 405.456154][T16024] tty_port_default_wakeup+0xfb/0x170 [ 405.456172][T16024] serial8250_tx_chars+0x72e/0x970 [ 405.456201][T16024] serial8250_handle_irq+0x633/0xbb0 [ 405.456231][T16024] serial8250_default_handle_irq+0xbf/0x200 [ 405.456251][T16024] serial8250_interrupt+0x8d/0x180 [ 405.456276][T16024] __handle_irq_event_percpu+0x295/0xab0 [ 405.456309][T16024] handle_irq_event+0x8b/0x1e0 [ 405.456335][T16024] handle_edge_irq+0x23b/0xa10 [ 405.456359][T16024] __common_interrupt+0x141/0x1f0 [ 405.456389][T16024] common_interrupt+0xb6/0xe0 [ 405.456411][T16024] asm_common_interrupt+0x26/0x40 [ 405.456430][T16024] pv_native_safe_halt+0x13/0x20 [ 405.456458][T16024] default_idle+0x13/0x20 [ 405.456476][T16024] default_idle_call+0x73/0xb0 [ 405.456494][T16024] do_idle+0x1e7/0x510 [ 405.456513][T16024] cpu_startup_entry+0x44/0x60 [ 405.456533][T16024] rest_init+0x2de/0x300 [ 405.456553][T16024] start_kernel+0x3ae/0x410 [ 405.456575][T16024] x86_64_start_reservations+0x24/0x30 [ 405.456606][T16024] x86_64_start_kernel+0x143/0x1c0 [ 405.456637][T16024] common_startup_64+0x13e/0x147 [ 405.456664][T16024] [ 405.456664][T16024] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 405.456692][T16024] lock_acquire+0x120/0x360 [ 405.456710][T16024] _raw_spin_lock_irqsave+0xa7/0xf0 [ 405.456736][T16024] serial8250_console_write+0x17e/0x1ba0 [ 405.456768][T16024] console_flush_all+0x6f3/0xb10 [ 405.456795][T16024] console_unlock+0xbb/0x190 [ 405.456817][T16024] vprintk_emit+0x4c5/0x590 [ 405.456840][T16024] _printk+0xcf/0x120 [ 405.456858][T16024] register_console+0xa8b/0xf90 [ 405.456885][T16024] univ8250_console_init+0x3a/0x70 [ 405.456904][T16024] console_init+0x10e/0x430 [ 405.456934][T16024] start_kernel+0x254/0x410 [ 405.456956][T16024] x86_64_start_reservations+0x24/0x30 [ 405.456988][T16024] x86_64_start_kernel+0x143/0x1c0 [ 405.457018][T16024] common_startup_64+0x13e/0x147 [ 405.457044][T16024] [ 405.457044][T16024] -> #0 (console_owner){-.-.}-{0:0}: [ 405.457070][T16024] validate_chain+0xb9b/0x2140 [ 405.457094][T16024] __lock_acquire+0xab9/0xd20 [ 405.457112][T16024] lock_acquire+0x120/0x360 [ 405.457129][T16024] console_flush_all+0x69c/0xb10 [ 405.457156][T16024] console_unlock+0xbb/0x190 [ 405.457178][T16024] vprintk_emit+0x4c5/0x590 [ 405.457201][T16024] _printk+0xcf/0x120 [ 405.457219][T16024] should_fail_ex+0x3f5/0x560 [ 405.457248][T16024] strncpy_from_user+0x36/0x290 [ 405.457276][T16024] strncpy_from_user_nofault+0x72/0x150 [ 405.457306][T16024] bpf_probe_read_compat_str+0xe2/0x180 [ 405.457331][T16024] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 405.457349][T16024] bpf_trace_run2+0x284/0x4b0 [ 405.457378][T16024] __bpf_trace_tlb_flush+0xf5/0x150 [ 405.457405][T16024] trace_tlb_flush+0x115/0x140 [ 405.457432][T16024] switch_mm_irqs_off+0x54a/0x7b0 [ 405.457460][T16024] __schedule+0x110e/0x4cc0 [ 405.457486][T16024] preempt_schedule_common+0x83/0xd0 [ 405.457514][T16024] preempt_schedule+0xae/0xc0 [ 405.457540][T16024] preempt_schedule_thunk+0x16/0x30 [ 405.457562][T16024] __slab_alloc+0xcb/0x100 [ 405.457582][T16024] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 405.457610][T16024] __alloc_skb+0x112/0x2d0 [ 405.457628][T16024] netlink_sendmsg+0x5c6/0xb30 [ 405.457648][T16024] __sock_sendmsg+0x21c/0x270 [ 405.457674][T16024] ____sys_sendmsg+0x505/0x830 [ 405.457694][T16024] ___sys_sendmsg+0x21f/0x2a0 [ 405.457715][T16024] __x64_sys_sendmsg+0x19b/0x260 [ 405.457736][T16024] do_syscall_64+0xfa/0xfa0 [ 405.457765][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.457785][T16024] [ 405.457785][T16024] other info that might help us debug this: [ 405.457785][T16024] [ 405.457792][T16024] Chain exists of: [ 405.457792][T16024] console_owner --> &p->pi_lock --> &rq->__lock [ 405.457792][T16024] [ 405.457826][T16024] Possible unsafe locking scenario: [ 405.457826][T16024] [ 405.457833][T16024] CPU0 CPU1 [ 405.457840][T16024] ---- ---- [ 405.457848][T16024] lock(&rq->__lock); [ 405.457862][T16024] lock(&p->pi_lock); [ 405.457878][T16024] lock(&rq->__lock); [ 405.457894][T16024] lock(console_owner); [ 405.457909][T16024] [ 405.457909][T16024] *** DEADLOCK *** [ 405.457909][T16024] [ 405.457915][T16024] 4 locks held by syz.8.3298/16024: [ 405.457928][T16024] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 405.457979][T16024] #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 405.458038][T16024] #2: ffffffff8df316c0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 405.458084][T16024] #3: ffffffff8de18f90 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 405.458139][T16024] [ 405.458139][T16024] stack backtrace: [ 405.458152][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.8.3298 Not tainted syzkaller #0 PREEMPT(full) [ 405.458176][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.458191][T16024] Call Trace: [ 405.458198][T16024] [ 405.458209][T16024] dump_stack_lvl+0x189/0x250 [ 405.458241][T16024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.458270][T16024] ? __pfx__printk+0x10/0x10 [ 405.458292][T16024] ? print_lock_name+0xde/0x100 [ 405.458327][T16024] print_circular_bug+0x2ee/0x310 [ 405.458356][T16024] check_noncircular+0x134/0x160 [ 405.458386][T16024] validate_chain+0xb9b/0x2140 [ 405.458424][T16024] __lock_acquire+0xab9/0xd20 [ 405.458448][T16024] ? console_flush_all+0x13a/0xb10 [ 405.458475][T16024] lock_acquire+0x120/0x360 [ 405.458495][T16024] ? console_flush_all+0x13a/0xb10 [ 405.458528][T16024] ? do_raw_spin_unlock+0x122/0x240 [ 405.458559][T16024] ? console_flush_all+0x13a/0xb10 [ 405.458587][T16024] console_flush_all+0x69c/0xb10 [ 405.458615][T16024] ? console_flush_all+0x13a/0xb10 [ 405.458645][T16024] ? console_flush_all+0x13a/0xb10 [ 405.458677][T16024] ? __pfx_console_flush_all+0x10/0x10 [ 405.458712][T16024] ? is_printk_cpu_sync_owner+0x32/0x40 [ 405.458746][T16024] console_unlock+0xbb/0x190 [ 405.458771][T16024] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 405.458801][T16024] ? __pfx_console_unlock+0x10/0x10 [ 405.458832][T16024] vprintk_emit+0x4c5/0x590 [ 405.458856][T16024] ? __lock_acquire+0xab9/0xd20 [ 405.458878][T16024] ? __pfx_vprintk_emit+0x10/0x10 [ 405.458902][T16024] ? __lock_acquire+0xab9/0xd20 [ 405.458929][T16024] _printk+0xcf/0x120 [ 405.458949][T16024] ? __pfx____ratelimit+0x10/0x10 [ 405.458980][T16024] ? __pfx__printk+0x10/0x10 [ 405.459011][T16024] should_fail_ex+0x3f5/0x560 [ 405.459042][T16024] strncpy_from_user+0x36/0x290 [ 405.459074][T16024] strncpy_from_user_nofault+0x72/0x150 [ 405.459100][T16024] bpf_probe_read_compat_str+0xe2/0x180 [ 405.459130][T16024] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 405.459149][T16024] bpf_trace_run2+0x284/0x4b0 [ 405.459181][T16024] ? bpf_trace_run2+0x186/0x4b0 [ 405.459215][T16024] ? __pfx_bpf_trace_run2+0x10/0x10 [ 405.459251][T16024] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 405.459283][T16024] __bpf_trace_tlb_flush+0xf5/0x150 [ 405.459322][T16024] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 405.459362][T16024] ? psi_group_change+0xab8/0x1050 [ 405.459389][T16024] trace_tlb_flush+0x115/0x140 [ 405.459420][T16024] switch_mm_irqs_off+0x54a/0x7b0 [ 405.459454][T16024] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 405.459484][T16024] ? psi_task_switch+0x4e3/0x880 [ 405.459513][T16024] __schedule+0x110e/0x4cc0 [ 405.459547][T16024] ? __lock_acquire+0xab9/0xd20 [ 405.459573][T16024] ? __lock_acquire+0xab9/0xd20 [ 405.459594][T16024] ? __pfx___schedule+0x10/0x10 [ 405.459631][T16024] ? preempt_schedule+0xae/0xc0 [ 405.459661][T16024] preempt_schedule_common+0x83/0xd0 [ 405.459691][T16024] preempt_schedule+0xae/0xc0 [ 405.459720][T16024] ? __pfx_preempt_schedule+0x10/0x10 [ 405.459752][T16024] ? __pfx___might_resched+0x10/0x10 [ 405.459774][T16024] ? fs_reclaim_acquire+0x7d/0x100 [ 405.459793][T16024] ? __alloc_skb+0x112/0x2d0 [ 405.459812][T16024] preempt_schedule_thunk+0x16/0x30 [ 405.459839][T16024] __slab_alloc+0xcb/0x100 [ 405.459863][T16024] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 405.459893][T16024] ? __alloc_skb+0x112/0x2d0 [ 405.459912][T16024] ? netlink_autobind+0xdb/0x300 [ 405.459937][T16024] __alloc_skb+0x112/0x2d0 [ 405.459960][T16024] netlink_sendmsg+0x5c6/0xb30 [ 405.459986][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.460010][T16024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 405.460060][T16024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.460082][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.460104][T16024] __sock_sendmsg+0x21c/0x270 [ 405.460135][T16024] ____sys_sendmsg+0x505/0x830 [ 405.460162][T16024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.460190][T16024] ? import_iovec+0x74/0xa0 [ 405.460219][T16024] ___sys_sendmsg+0x21f/0x2a0 [ 405.460244][T16024] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.460286][T16024] ? __fget_files+0x2a/0x420 [ 405.460311][T16024] ? __fget_files+0x3a0/0x420 [ 405.460337][T16024] __x64_sys_sendmsg+0x19b/0x260 [ 405.460363][T16024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.460392][T16024] ? __pfx_ksys_write+0x10/0x10 [ 405.460424][T16024] ? do_syscall_64+0xbe/0xfa0 [ 405.460457][T16024] do_syscall_64+0xfa/0xfa0 [ 405.460488][T16024] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.460517][T16024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.460539][T16024] ? clear_bhb_loop+0x60/0xb0 [ 405.460563][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.460585][T16024] RIP: 0033:0x7f9a57b8f749 [ 405.460602][T16024] Code: Unable to access opcode bytes at 0x7f9a57b8f71f. [ 405.460614][T16024] RSP: 002b:00007f9a5895b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.460637][T16024] RAX: ffffffffffffffda RBX: 00007f9a57de5fa0 RCX: 00007f9a57b8f749 [ 405.460653][T16024] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 405.460668][T16024] RBP: 00007f9a5895b090 R08: 0000000000000000 R09: 0000000000000000 [ 405.460682][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.460696][T16024] R13: 00007f9a57de6038 R14: 00007f9a57de5fa0 R15: 00007ffc54958698 [ 405.460721][T16024] [ 406.800131][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.8.3298 Not tainted syzkaller #0 PREEMPT(full) [ 406.800152][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.800163][T16024] Call Trace: [ 406.800171][T16024] [ 406.800179][T16024] dump_stack_lvl+0x189/0x250 [ 406.800205][T16024] ? __pfx____ratelimit+0x10/0x10 [ 406.800232][T16024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.800252][T16024] ? __pfx__printk+0x10/0x10 [ 406.800272][T16024] should_fail_ex+0x414/0x560 [ 406.800297][T16024] strncpy_from_user+0x36/0x290 [ 406.800320][T16024] strncpy_from_user_nofault+0x72/0x150 [ 406.800340][T16024] bpf_probe_read_compat_str+0xe2/0x180 [ 406.800362][T16024] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 406.800376][T16024] bpf_trace_run2+0x284/0x4b0 [ 406.800400][T16024] ? bpf_trace_run2+0x186/0x4b0 [ 406.800423][T16024] ? __pfx_bpf_trace_run2+0x10/0x10 [ 406.800448][T16024] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 406.800472][T16024] __bpf_trace_tlb_flush+0xf5/0x150 [ 406.800494][T16024] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 406.800519][T16024] ? psi_group_change+0xab8/0x1050 [ 406.800539][T16024] trace_tlb_flush+0x115/0x140 [ 406.800561][T16024] switch_mm_irqs_off+0x54a/0x7b0 [ 406.800585][T16024] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 406.800606][T16024] ? psi_task_switch+0x4e3/0x880 [ 406.800627][T16024] __schedule+0x110e/0x4cc0 [ 406.800651][T16024] ? __lock_acquire+0xab9/0xd20 [ 406.800669][T16024] ? __lock_acquire+0xab9/0xd20 [ 406.800683][T16024] ? __pfx___schedule+0x10/0x10 [ 406.800709][T16024] ? preempt_schedule+0xae/0xc0 [ 406.800730][T16024] preempt_schedule_common+0x83/0xd0 [ 406.800751][T16024] preempt_schedule+0xae/0xc0 [ 406.800771][T16024] ? __pfx_preempt_schedule+0x10/0x10 [ 406.800793][T16024] ? __pfx___might_resched+0x10/0x10 [ 406.800809][T16024] ? fs_reclaim_acquire+0x7d/0x100 [ 406.800822][T16024] ? __alloc_skb+0x112/0x2d0 [ 406.800835][T16024] preempt_schedule_thunk+0x16/0x30 [ 406.800854][T16024] __slab_alloc+0xcb/0x100 [ 406.800871][T16024] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 406.800892][T16024] ? __alloc_skb+0x112/0x2d0 [ 406.800905][T16024] ? netlink_autobind+0xdb/0x300 [ 406.800923][T16024] __alloc_skb+0x112/0x2d0 [ 406.800938][T16024] netlink_sendmsg+0x5c6/0xb30 [ 406.800957][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.800974][T16024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.800997][T16024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.801012][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.801027][T16024] __sock_sendmsg+0x21c/0x270 [ 406.801049][T16024] ____sys_sendmsg+0x505/0x830 [ 406.801067][T16024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.801087][T16024] ? import_iovec+0x74/0xa0 [ 406.801106][T16024] ___sys_sendmsg+0x21f/0x2a0 [ 406.801123][T16024] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.801153][T16024] ? __fget_files+0x2a/0x420 [ 406.801166][T16024] ? __fget_files+0x3a0/0x420 [ 406.801184][T16024] __x64_sys_sendmsg+0x19b/0x260 [ 406.801201][T16024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.801227][T16024] ? __pfx_ksys_write+0x10/0x10 [ 406.801250][T16024] ? do_syscall_64+0xbe/0xfa0 [ 406.801273][T16024] do_syscall_64+0xfa/0xfa0 [ 406.801295][T16024] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.801317][T16024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.801332][T16024] ? clear_bhb_loop+0x60/0xb0 [ 406.801349][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.801364][T16024] RIP: 0033:0x7f9a57b8f749 [ 406.801377][T16024] Code: Unable to access opcode bytes at 0x7f9a57b8f71f. [ 406.801385][T16024] RSP: 002b:00007f9a5895b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.801403][T16024] RAX: ffffffffffffffda RBX: 00007f9a57de5fa0 RCX: 00007f9a57b8f749 [ 406.801414][T16024] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 406.801424][T16024] RBP: 00007f9a5895b090 R08: 0000000000000000 R09: 0000000000000000 [ 406.801434][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.801443][T16024] R13: 00007f9a57de6038 R14: 00007f9a57de5fa0 R15: 00007ffc54958698 [ 406.801461][T16024] [ 408.886326][T15974] Set syz1 is full, maxelem 65536 reached [ 409.722938][T16024] Set syz1 is full, maxelem 65536 reached