last executing test programs: 2m48.551237326s ago: executing program 4 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x1401, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x5, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m47.89987291s ago: executing program 4 (id=974): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0\x00', 0x1e}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xa}]}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) mmap(&(0x7f0000866000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0xfc3f3000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xddb97db32716e477, 0x2, 0xf, 0x0, 0x68, @remote, @mcast2={0xff, 0x5}, 0x8, 0x20, 0xe3dd, 0x4}}) 2m47.640006884s ago: executing program 4 (id=978): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x9, 0xae}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xfffffffb}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08020000", @ANYRES16=r3, @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="a801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b"], 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd8, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040000}, 0x40100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2m47.428128134s ago: executing program 4 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42141, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8000) close(0x3) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$tipc(0x1e, 0x2, 0x0) 2m46.683548241s ago: executing program 4 (id=984): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_getnetconf={0x1c, 0x52, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000019}, 0xc0c0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000a532cad9d2233439e110000000000000000008df2500000000c2c2d2767e31b9613986960eac8f510d7878b99a4eeb5e61491b2be5009ab7ef20c1295a7ffd8fb3f968ecce6a0cd2bbbaae6116e759971b1570e55255", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012800b00010062726964676500001c0002800c00210000010000000000000c0022000104080000000000"], 0x4c}}, 0x80) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r7}, 0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) 2m45.802565087s ago: executing program 4 (id=994): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) splice(r3, 0x0, r3, 0x0, 0x2, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd2d, 0xb83, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) socket$igmp(0x2, 0x3, 0x2) unshare(0xa020480) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x8, [{0x3, 0x86, 0xa5}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x41, 0x30, 0x5f, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x3}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)={0x34, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) 2m35.472859215s ago: executing program 3 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x4c, r3, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r6, r6, 0x2f, 0x2010, 0x4, @value=r5}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "0e3f81a20e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x18, 0x54, 0x7, @vifc_lcl_ifindex=r4, @private=0xa010100}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x24048080) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bind$packet(r12, &(0x7f00000003c0)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @random="38bb015489e4"}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="4762f7100178515b324d5585215020cfd824a4c7a461c32d9b8a7dcbfb3d2ea8b25f6d2a8566ffc4777824a96cd24539514009888f6c41ff3436b748c0a8a8771e6094c5bb38444ec50d37a51608d77bcfe8a419a611fb9b15525652864ac8277b29fdd1e50c541ffeb420def6495f11ada8c55261418d15b2867022c38dd6dd880ff3edacb38bc966944b49264e7397304e18d98771b8020051f0c243bd29b7929e4636a8e6318c26d1a4c26f8e1826a0d7bc334fbc9500edf6ee5e907c1884da79a639d45da2ca0dd031ead0bc1e03973712fce112577c8402e79ff33a3791b08a433dcb71", @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) 2m34.874579847s ago: executing program 3 (id=1102): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x40040c0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, 0x0, 0x8014) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004015}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r4, 0x4, 0x0, 0x4, 0x4, 0xa, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x2, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 2m34.668636732s ago: executing program 3 (id=1105): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008451}, 0x20008840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000440)={r0, &(0x7f00000002c0)='\'\x1c\'$!\\\x00', 0x200000, &(0x7f0000000300)={@align=0x495, {0x800, 0x1, 0x3, 0x30fc}}, 0x7, &(0x7f0000000340), &(0x7f0000000400)}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b13dc00716259a884380f72d28f0340c3714429134232ca204780286e7b4b0986e7449e1a16bdb9c322192f2f5", 0x2d) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x20008004) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x82, &(0x7f0000000180)={0x0, 0x8000}, 0x8) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f0000000100)=""/43, 0x1}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x192a, &(0x7f0000000240)=0x2) 2m34.571230303s ago: executing program 3 (id=1107): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000c002b8008000200", @ANYRES32, @ANYBLOB="1400030076657468305f746f5f62617461647600"], 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008006d64"], 0x48}}, 0x20000034) 2m33.984507897s ago: executing program 3 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2m33.723115074s ago: executing program 3 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000020000000000000000b"], 0x0, 0x5a}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf2503000080050005000400f700"], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xd}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000100)={r9, 0x45, "6474fdc07641c67cce80d896b8e8675fc2ddd5898136c00fca96ba76edea12b8462c534cea4bfa3a106bb4f781dada9f88486c759477c5d9ed528f019b79ab99a20242ef9f"}, &(0x7f0000000180)=0x4d) 2m30.700434883s ago: executing program 32 (id=994): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) splice(r3, 0x0, r3, 0x0, 0x2, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd2d, 0xb83, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) socket$igmp(0x2, 0x3, 0x2) unshare(0xa020480) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x8, [{0x3, 0x86, 0xa5}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x41, 0x30, 0x5f, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x3}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)={0x34, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) 2m18.608716225s ago: executing program 33 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000020000000000000000b"], 0x0, 0x5a}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf2503000080050005000400f700"], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xd}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000100)={r9, 0x45, "6474fdc07641c67cce80d896b8e8675fc2ddd5898136c00fca96ba76edea12b8462c534cea4bfa3a106bb4f781dada9f88486c759477c5d9ed528f019b79ab99a20242ef9f"}, &(0x7f0000000180)=0x4d) 5.160404919s ago: executing program 6 (id=2192): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x4) unshare(0x20040600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, 0xffffffffffffffff, 0x2c, 0x0, 0x4}, 0x20) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a00fffe0900010073797a3100000000400004803c000180090001007866726d000000002c000280080001400000001608000440000000040800024000000004080001400000000305000300000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r7, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0xb, 0x2, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.913124888s ago: executing program 6 (id=2198): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x10b8}, 0x200008d0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) 4.563415507s ago: executing program 6 (id=2202): r0 = socket(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000", 0x3}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000880), 0x4924924924927bd, 0x40084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@alu={0x7, 0x0, 0x5, 0x2, 0x3, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r3}, 0x38) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0xa}, 0xfffffffffffffffd) 4.248394814s ago: executing program 6 (id=2206): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0022, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000200)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) unshare(0x20040600) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003d00)=ANY=[@ANYBLOB="300000001800dd8d"], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmmsg(r5, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, &(0x7f0000003cc0)) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7, 0xff07}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) gettid() getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000140)={0x3, [0x3, 0x9, 0xff]}, &(0x7f00000001c0)=0xa) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008848", @ANYBLOB="02f455fe219764770db0f58065e8fb96fbdd95dabd3f3882d597f054da556691cbdcc9e44a2a51bb53beca7366d32bd17125843839f62b63bc050bc99ab9a75cd156dc0e9b99ea62e96e6f1e8d254e3b4e7a6f6bc240311a9c428fd7b3a4ddd15bc309e25df57ccf7a627a2496f417290f23620ee527bbca36ca99da738c794fe98c922ee9"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.304848251s ago: executing program 6 (id=2219): r0 = socket(0xa, 0x5, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x3}, [@srh={0x29, 0x0, 0x4, 0x0, 0x9, 0x20, 0x11f3}], "d3897b1f4edff52d"}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060500000000000900020073797a3200000000140007800800124000001a06050015007f0000000500050002000000050001000600000012000300686173683a5f65742c706f7274000000"], 0x60}}, 0x40000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000a00)) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000012c0)=0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x80, 0x0, 0x0, 0xa}, {0x0, 0x10008, 0xe, 0x0, 0x0, 0xffffffffffffffff, 0x4}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@remote, 0x7, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r7 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902", @ANYRESHEX=r4], 0x10}}, 0x4040084) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg(r8, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f00000006c0)=@ethtool_link_settings={0x4d, 0xdb2, 0x3, 0x7, 0x86, 0x7, 0x5, 0x80, 0x7f, 0x7f, [0x5949, 0x4, 0x6, 0x0, 0x4, 0x4, 0x70, 0x5]}}) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e2", @typed={0x8, 0x96, 0x0, 0x0, @fd=r9}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x50, 0x4855}, 0x24000052) 2.602220516s ago: executing program 5 (id=2228): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[], 0x38}}, 0x2000a080) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 2.315188658s ago: executing program 1 (id=2229): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000004c0)="c8", 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000440)) r4 = socket(0x200000000000011, 0x2, 0x8001) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r5, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x9}}}}, 0x36) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0900000006050000000000000000000100002778d44b417b49d69e020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r8, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000005000)}, 0x4}], 0x2, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xfc0, "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"}, &(0x7f0000001740)=0xfc8) 2.23175141s ago: executing program 5 (id=2230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x5e, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0xc084) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x401, 0x480800, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4, 0xc574450d1af3b5a6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x48b}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0xa0}}, 0x48011) 1.932381665s ago: executing program 5 (id=2234): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000009060500000000000000000002000000050001000756b31d75ce020073797a000780"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r9, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x180, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8d5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x202}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x98}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x42}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x880}, 0x84) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r10, 0x58, &(0x7f0000000180)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800009, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x7800, 0x8, 0x10008, 0x1}}) 1.922789765s ago: executing program 2 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115300000000008510000002000000840300000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x5, 0x5}, @empty, @private=0xa010101, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000180)=ANY=[], 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000000)={{0x6, 0x1}, 0x100, './file0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000012c0)={0x2, &(0x7f0000000fc0)=[{}, {}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x5, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x88}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0xe9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8e}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 1.671183997s ago: executing program 2 (id=2236): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x24, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x40440c4) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESOCT=0x0, @ANYBLOB="00000000c0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r6, &(0x7f0000000740)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000040)={r9, 0x1, 0x204}, 0x8) (async) sendfile(r6, r5, 0x0, 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000009c750000000000e4f9ff00f23328e959001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 1.58403881s ago: executing program 1 (id=2237): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (rerun: 64) 1.450489831s ago: executing program 2 (id=2239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x30, 0x1}, {0x30}, {0x30}, {0x6, 0x1}, {0x0, 0x1}, {0x1b}, {0x2, 0x1}, {0xc}, {0x48}, {0x36, 0x1}, {0x16, 0x1}, {0xc}, {0x4}, {0x7c}, {0x5}, {0x9, 0x1}, {0x6}, {0x60}, {0x60}, {0x12, 0x1}, {0x60}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000500)={0x0, 0x200}, 0x8) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r8, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r10, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={r10, @in6={{0xa, 0x4c23, 0x4, @empty, 0x7}}, 0xffffc39b, 0x0, 0x7, 0x80000006, 0xc8, 0xe35, 0x80}, &(0x7f0000000000)=0x9c) ioctl$TUNSETOFFLOAD(r4, 0x5421, 0x110e22fff7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.32058979s ago: executing program 0 (id=2240): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7}, 0x4) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000001c0)=0x2, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ad000000870000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) 1.253032478s ago: executing program 1 (id=2241): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'tunl0\x00', 0x4}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/81, &(0x7f0000000140)=0x51) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x101, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x23, r0, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x1, 0xfffffe01, 0x9a1}, 0x10, r2, r0, 0x6, 0x0, &(0x7f0000000380)=[{0x0, 0x1, 0xf, 0xb}, {0x1, 0x4, 0x5, 0x6}, {0x3, 0x5, 0x10, 0x3}, {0x1, 0x5, 0x7, 0x4}, {0x4, 0x5, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x8}], 0x10, 0x4}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x123, 0x123, 0x8, [@struct={0x6, 0x5, 0x0, 0x4, 0x0, 0x5, [{0x5, 0x4, 0x4}, {0xa, 0x2, 0xd9f5}, {0x0, 0x2}, {0x9, 0x0, 0xd}, {0xd, 0x5, 0x6}]}, @datasec={0x5, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x81, 0xd25}, {0x4, 0x3, 0x8000}, {0x3, 0x4, 0x7}, {0x4, 0x4, 0xe}], "b9d705"}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6}, {0x5, 0x4}, {0x10, 0x4}, {0x9, 0xc62}, {0x4, 0x3}, {0xe}]}, @enum64={0x3, 0x6, 0x0, 0x13, 0x0, 0xa, [{0x1, 0x6, 0xffff}, {0x8, 0x46f, 0xb}, {0x8, 0x6, 0x4}, {0x3, 0x4, 0x5}, {0xf, 0x7fffffff, 0xffffff01}, {0x5, 0xd464}]}, @fwd={0xd}]}, {0x0, [0x61, 0x2e, 0x61, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/52, 0x144, 0x34, 0x0, 0x100, 0x10000, @value=r0}, 0x28) close(r3) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000700)={0x21, 0x1}) recvmmsg(r5, &(0x7f0000004380)=[{{&(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/81, 0x51}, {&(0x7f0000001840)=""/68, 0x44}, {&(0x7f00000018c0)=""/9, 0x9}, {&(0x7f0000001900)=""/174, 0xae}, {&(0x7f00000019c0)=""/239, 0xef}, {&(0x7f0000001ac0)=""/56, 0x38}], 0x7}, 0x9}, {{&(0x7f0000001b80), 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/39, 0x27}], 0x1, &(0x7f0000001c80)=""/4096, 0x1000}, 0xfffffff1}, {{&(0x7f0000002c80)=@isdn, 0x80, &(0x7f0000004000)=[{&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/180, 0xb4}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/142, 0x8e}, {&(0x7f0000003ec0)=""/32, 0x20}, {&(0x7f0000003f00)=""/244, 0xf4}], 0x6}, 0x3}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/199, 0xc7}, {&(0x7f0000004280)=""/55, 0x37}], 0x3, &(0x7f0000004300)=""/88, 0x58}}], 0x4, 0x40000000, &(0x7f0000004480)={0x77359400}) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000004900)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004500)={0x3a0, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "084e95f7b5cd8d5d94eca5723d2d947f02d73d0582c18aee0e2a69ff"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb99}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe00000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5e52, @mcast2, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1e1b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20080000}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3c86}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000004b40)=@o_path={&(0x7f0000004b00)='./file0\x00', 0x0, 0x4008, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004c40)={0x6, 0x19, &(0x7f0000004940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x1, 0x3, 0x8, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004a40)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000004a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000004ac0)={0x3, 0xe, 0xff, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000004b80)=[r5, r7, r1, r5, r5, r1, r5], &(0x7f0000004bc0)=[{0x4, 0x5, 0x7, 0x7}, {0x5, 0x3, 0x8, 0x2}, {0x3, 0x1, 0xc, 0x2}, {0x0, 0x5, 0xa, 0x7}, {0x3, 0x1, 0x4, 0xb}, {0x3, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x5, 0xb}, {0x3, 0x1, 0xe, 0xa}], 0x10, 0xffffffff}, 0x94) getsockname$packet(r6, &(0x7f0000004d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004d40)=0x14) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004d80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x0, '\x00', r8, r5, 0x2, 0x1, 0x3}, 0x50) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000004e40)=0x0, &(0x7f0000004e80)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000005000)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0xfc, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44840}, 0x4845) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000005040)={r12}) getsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f00000050c0)={@loopback, 0x0}, &(0x7f0000005100)=0x14) sendmsg$nl_route(r13, &(0x7f00000051c0)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)=@mpls_delroute={0x28, 0x19, 0x200, 0x70bd26, 0x25dfdbfb, {0x1c, 0x10, 0x14, 0x8, 0x0, 0x4, 0x8e653a52a329feb1}, [@RTA_MULTIPATH={0xc, 0x9, {0xfe00, 0x30, 0x1, r14}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) setsockopt(r6, 0x1, 0x3, &(0x7f0000005200)="747f2b077720b9d89bfa07d7259811e08e3cb88e20e62b", 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FIBMAP(r15, 0x1, &(0x7f0000005240)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, 0xfffffffffffffffc, 0x0) 1.100011085s ago: executing program 1 (id=2242): socket(0x11, 0x2, 0x0) (async) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x801, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) 1.05380066s ago: executing program 5 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x48, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="355cb00ebd0bab3ae799b6ff049a6e06"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\x00\x00\x00\x00l\x00'}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x1411, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x2404c001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980050001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x0, 0x0, 0x2}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x64, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 1.050648572s ago: executing program 0 (id=2244): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_rxfh={0x47, 0x8, 0x3, 0x9, 0x4, "224305", 0x5}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x7b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff8}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x1, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 923.611738ms ago: executing program 1 (id=2245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a00060000000200000004000480"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@generic="c698c801"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmmsg(r3, &(0x7f0000000080), 0x0, 0x0) 875.949961ms ago: executing program 2 (id=2246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x28) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800580600fc010000000000000000000000000002fe8000ab4b3d9416000000000000000000000000aa08004001b8c93a2317b1dc350a77d4df7cc0217022c9d8438faa15efd04db91b04", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0cf9894870669d7821c47113126171cffc515318c1c852cc0ce8dbc955050e0000000100000000fffffffa13129829e5b8831b669841f72541c6efc9102203c6000000"], 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) write(r5, &(0x7f0000000380)="150777dcde2641b711e907369646b45de97ca9c11e68c1791f5345a5fd6ca2d600411cad5aa25589f586d2c91aeb37d74e6b67cc35a281be183877", 0x3b) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000180)=""/16, &(0x7f0000000200)=0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e23, 0x4, @remote}, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xffffffffffffffff, {[0x3, 0x48000000, 0x6, 0xe147, 0x5, 0xed, 0x8000, 0x2]}}, 0x5c) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xbc, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x90, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x4, 0x8, 0x6, 0xe6}, {0xa, 0xf, 0x2, 0x800}, {0x266, 0x1, 0x5, 0xffffffff}, {0xa, 0x1, 0x6, 0xb}, {0xff97, 0x3, 0xa8, 0x2}, {0x9, 0x1, 0x5e, 0x5}]}}, @TCA_BPF_FD={0x8, 0x6, r8}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000440)=0x20, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x3, 0xc6, 0x0, 0x57, 0x7, 0x0, 0x3, 0xfd, 0x3, 0x81, 0x1, 0x5, 0xe4, 0x7}, 0xe) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4008854}, 0x22044020) r10 = socket(0x2, 0x80805, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c000380280000800400018020000b"], 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x300, 0x1, 0x0, 0x2, 0x8, 0x10}, 0x20) 839.237847ms ago: executing program 0 (id=2247): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x2, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x400) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1d, &(0x7f0000000540)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x0, 0x7, 0xa, 0x6, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x9, 0x0, &(0x7f0000000680), 0x40f00, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x1, 0x7fffffff, 0x100}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000780)=[{0x4, 0x4, 0xc, 0x1}, {0x1, 0x3, 0x9, 0x6}], 0x10, 0x621cfe5b}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000880)=r2, 0x4) close(0x3) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40400d4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, 0x0, 0x200040c4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000498000/0x1000)=nil, 0x1000, 0x0, 0x13, r10, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) pwritev(r12, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000000100)) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r13}, 0xc) 695.80432ms ago: executing program 1 (id=2248): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x9, 0x3, 0x401}]}]}, {0x0, [0x30, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1}, &(0x7f0000000180)=0x8) 563.620451ms ago: executing program 2 (id=2249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x3, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0xe, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffff7f9c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x3, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0xe, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffff7f9c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) 416.092293ms ago: executing program 0 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x48880) 255.427074ms ago: executing program 5 (id=2251): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x40, 0x700, 0x10, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x78, 0x29, 0xfc, 0x0, 0x0, @local, @loopback}}}}) mmap(&(0x7f00000a6000/0x1000)=nil, 0x1000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010000000000000000002d000000020000000500"], 0x20}}, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 238.403227ms ago: executing program 0 (id=2252): unshare(0x8040480) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)}, 0x40010) r7 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000880)=0xe8) r10 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000a40)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r19, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) r20 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r8, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r21 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x18400, 0x0) r22 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r22, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r23 = socket$inet6_mptcp(0xa, 0x1, 0x106) r24 = getgid() r25 = accept4$inet(0xffffffffffffffff, &(0x7f0000002600)={0x2, 0x0, @dev}, &(0x7f0000002640)=0x10, 0x40800) r26 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002680)=0xffffffffffffffff, 0x4) r27 = gettid() sendmmsg$unix(r2, &(0x7f0000003b80)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)="7fed12a876a38cc9c346e5972f657114a7fe1cc6bbbc4df951b514ec56de9c6e8fedeb1540f93d2d60f32450e942690354cc8b9fa59f9fd6f43a28c65df5c8368dd68a71423f90b2bf6f745ff7fa2f932b73c7c3b3ca24b41e627ac2d1fbf2800b8d50d3fa18c86caf5e6b63cc1abb1011c2f20f1256f68aac7ba3a2c04c69f001d8eaad5fe046147796c1817d960ade620e37ae1a3f843f516021ca5ec9dc0e8efaf9d2110596f517899c6350b60024acde8db665bae0e73cda77c49929662d18d79b4092e15571d8d74453277f5e", 0xcf}, {&(0x7f0000002a40)="d65447a8c4a47b5de9432a948b809d6e0be2e72b5942db0d5c9436956d4e90729b9c0f3255ec8370d1ee2fb7151f007c658a0fbd9630e690870b25ad01429df380a0b9692e099982c07400feadfdbc7ca29eea8fac01c5cc7a0db96210c68492812080b4b492edaed0e7fae3f704ef96e297e34ec13d19146e4ea36fde3f8237d8d8e582c2323d019803b6ec7820f1dfa744c24e94e6f2f5ab93331a7167c1fa95af4d0264f1479726b64d257644f8ea80a39aeabaf986016dabbb46d0e701", 0xbf}, {&(0x7f0000000380)="4fc18a94ee42268c151c588ca2b7524ea2170ca8b3b9447c7ea94ff7e18dd7618fd48bbc41b1e372d6626ced888a48620973aa3cc8047dd4edfa439d0d03c23389ed8d22df5476e6a632433c16b0a5e5b2c73f578ad05a764f66030129acb9911ef9bd277ecbf231e19133b2c916750c0c948242190c8e8341ed05ded963307f3e1e39e8bafdd126912bc27a9013233fa1a0d257cecef7cb2a652681237877c7d39f90be6f0383419f4e52fdffed", 0xae}, {&(0x7f0000000440)="20871e4628074ebe993cb744d1fab98f491c99b7f59ee1e0cb3f5d2d94df4f7b724c86792298c7692701201e0da663010f48e59b06e20172d0890154ac10d5a88a2fc5e46be80ff8b728ca118389254339c0af34aec7caa1837c5ebd8bb2e3eee074490462a21e8744b083ff6a7b0518c7cc2a0a2e7c167771295a853260d17957413b1aac15b08d91737eb07b9a5bb8fffd57b76ca6", 0x96}], 0x4, 0x0, 0x0, 0x40001}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="24370790b7ac9ab9402b7591fc227eca97b5eed5b11a2e43e7e1b6df9156cddbc7ec7bbf1d90d027ada71a1eb574a4c360939011bffe50f8a5f02d123a66686be866454db5b8122160b5e5c3ef2f5b5ef32de16ccbcb98b9d70d9ce2709a89b1baec0c0b8e18163606d4b83c33aa5c0a76257903293e00c38ee20ddc50ad3599b8aa7be508399699c61625be9dc0ac91f3ad110db216139b6482960d94d6cd908a5d1c1d73b452e2f3efbb1860f41b6c740577d9c4a3fd6b3a7fc3ff959664", 0xbf}, {&(0x7f0000000680)="12b24a9c65580b0065a263a7af3d54acadbe20b6c1af31e9d8ea551ae1aed4de4888d2416262d504d56b68301f344673f9845824176284f23dec8517a600e39e64f047df2deb11d63db45d9c9b00d731e0ba4afc2819628f22571fd4840d9f23713086958d04a554cf3f69dab9d74e722844c39a64bd22f045282278a82db0eeb66f6635e5f72be82c44c2df4c1a3227bdd01d0f2f618863b70f70a9c17957b1545f37befd794b0ac065f9e6a796463d2f", 0xb1}], 0x2, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r3, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r17}}}], 0x60, 0x11}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000c40)="8c6b80d89cbbf9f62adf13e32d669bcea63fd5bc580ec62c3b1186abbad256ca1c9149fc9a475b449bd8c1137c0097aaf8096d3115697d9c1e4e1723668c93c85c28d08a67be0863608441bad1509ab8ee10742710dc2c7ee0f1946e9ee4", 0x5e}, {&(0x7f0000000cc0)="83104bd6550b298be06ce090585d91294dab87da347adef81179dc39e6520e0f3f9df84a2c7def2d137ec32da8e0163fb10e5ec45f69ca3bc68882d336b0321140b0e460cb902922f529f19342e2e2c0a7c2a5c35a520040097e5d00bbd7b4564f1add14973ac574bb16abcad66f5d197c7bf0eb8e5f71ee01d47432614565ed89446fb4f9bdd24671a536cb40fe023d", 0x90}, {&(0x7f0000000d80)="b5fc326db44f665c0d9f932ef1f21584d84c15ef126bda5c3646b9464bcd2302a5506bb3fa2833b9f8c647df8d3713b651dcaa73fbd6e0739371c855ff3a6d990c01e9b72a9314ab66c9ca0bf2b5c95be4d2a76eac831d090d629eeeab3020e59f81e48275254a53173aab7a683691c35ff70e2bab544843b2ac2dd163c642a220378d3a92107604544cc330d2d23d700c968f92a0ab65a1e35a98a7172811b100ef091bc1ba0c38e737b473c5f2f027ee821287", 0xb4}, {&(0x7f0000000e40)="df8a6314faaf3110db8a42e6a0ff14d83e9338e04e20d28290a83530dff7adaf35b0caee43a778ee99530dc5b9dc2df7b7ae2a2c80f9e4deb1923a43cda64b84926662b6bf05c04653070a347c0ea5d5be1727d819c094363063551deaebdbbb09fdce309b28a2ab60d8619598223ca652e469227ac6c13402832bb37ea11b33d46850acae187565654731bd0a56d34ce7644345def26dfe12fc135b5be54305d1c556d86c", 0xa5}, {&(0x7f0000000f00)="0c5fb573e62b75c8128745c12b5a2b09bda099770e61890977bab20852ba3ef2ead12624493d32ff031608764a62adc3dcea7c7b29135424f204ebf6bb3a400452d98932aee0b7cecb2e7623f4cfe8b2797009526aa00274de8982f0a2843a1a01031a00f278f84044c3a30fa47dbf7de631956b71816bf56997f0c9099bcb5a5dc4231328f17089e81b03d9fe82447138c6d0fcf3cd5bf0245f8e406c320843a310fc047f942fcd57c91795c700b5a4a71f9733577138976800f90a98c08239f98ab5565ef46a39bcc5d48287ea427fbff8", 0xd2}, {&(0x7f0000001000)="5438e7712954c73cf741", 0xa}, {&(0x7f0000001040)="e39ca17f76906536aeb699385de5195f0503037cfc091728624683e08822b30f2f800faa4ba013715984ca5e5a83ab5874a5855205d2ff58418b0cf87d2dae0d0c4c71379442013e01929689cef444c67c9920201da59274df5e7584cf46cfded433a5bd27008bbccff7e971039be92581f7de31fec0db2ecc65ce25f0ce52fa558cc890ea568c1835fd58d815fd79f911", 0x91}], 0x7, 0x0, 0x0, 0x20000004}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001200)="9cdbd83c66f353b5b3d456126d43b3aaf12794f67228d0ecbdadd994d85b140206", 0x21}, {&(0x7f0000001240)="312523836850390e58bbdd1144f910912fea0538326b4a762aa0e0472a6b4312e22fbb954d0ca39fe986b4182900d9", 0x2f}, {&(0x7f00000012c0)="bdcd03374cf0969b55d4c120d6f2445ad4b043ec0308f6c7ec6ebb597fb1ec24948112a952ba213f007c061717b985092d196ceb66559ee1a2f5ac6c0abb5c0cee0dc7c2f858b7687bbc51ce2d80b1dac08aee8d6a69ab52ebb0aa0cee333c768387f0f46c0509d6b9bd50e383e243e2392f18e9c2f9c6e1953c3de74310fb9e98682354fa104820eff8c0fa2ead6eeb7263ed519961103f2187b796cbffcea01d5b82de45c452fb663bd8202e9c4d1999e8e353a6ea7435ac165bdce02a16f02501966ba22141e466a87ad9d9", 0xcd}, {&(0x7f00000013c0)="7b3a8cc022b71d5a4bb686407a24334b2615fb61917dd2fcca828f0476f7c2c45676b99e60b30e1b6aeae3f6c6a0d60543e386be958cbbec5fb29a6d7111a3a3c9b19a5f27715025dcc206c9637a03405e534472ba5bd10e5cb46e70fe26d08357ebf34a40bbbb1b4a993d885111443b5f8b0dd624231a736329e0", 0x7b}, {&(0x7f0000001440)="b36f33f86100aa6a810b30b7b493804d1194766109641dd09f590885e807f10893417a8604ecfe842d6c1c3c9ed90537f1726249da648ad66a20655f9a986bef696f441eba2826fa698aabfcf03e28ddbb7b38e39b82939ba011d1b810858b10c64b393e7ba083d8393159dcc0a767fe7a214d3fa60b5432a7442d95885f78c95097e70433942b7e500e4935ce6aa72c08bb0743cb7616aed05358a48f9c3df41d4491d25cbd9d836ec3723ded4e671415819455f9b10faa69693d07c5bb322c942abbf6b8ddd103cf6f", 0xca}, {&(0x7f0000001540)="2f64e33a7390875e74f300cd6428e22229f9949f26c3c7a47e801317af1fa1ae7e022d11d5bb8a563ec16b5c9c627504809b3440ffd1ad97b1750da9cf8b8c29b9ccbf97713c362faef04105d7dff1d78b86c5a7e645ba4e0d6d14978cc7c3de68b8de2c27c38c3056a71fc42de82254b5928a401e8ccf3441b928b70c1512cca553c7fb577d0be1b381de63e446fdcb1dbed9b77c05267106ec3fed8bc17bc4ffb9c7864ad22a32e8a58daef3eeaabf4489aae0b451652969041a133c806a7dcc6f7368e8ff0b592ea4749f3f060a30fd1816187a1ff59465", 0xd9}], 0x6, &(0x7f0000001780)=[@rights={{0x2c, 0x1, 0x1, [r0, r4, r4, r1, 0xffffffffffffffff, r4, r20]}}, @rights={{0x1c, 0x1, 0x1, [r21, r22, r23]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r17}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r10}}}], 0xc0, 0x40010}}, {{&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000018c0)="635629bda2f38a73652c086bd77724aaacd880542e0ab13631a726b99cd9e88a4e5c92958a07b4c9c8794fd56c6972c4bd39126b17a6cc83fd812fa0fafe8406419334013af8743cc30c0b1d5472eec4dd147b61", 0x54}, {&(0x7f0000001940)="861ac7e2792ec11be8ca8e717d606816cda81e3b0a9d27fe2dd2a6bb815eaeedee08445d01da6bb2684ccaba3d63280bf545449e2cf53e617eb7111f407a3e22e5c9a58dcf6d85b747294e17f1a0faeda4efa0c86c202d2d601fbb2d7294206f9517cb496ff7a129af4bc746cff0346b2810", 0x72}, {&(0x7f00000019c0)="5f7dc0e5f467e73c748d10ee0ef90e4c44bfcd8993e0b626397151e2263a27ee9c47717bafa262ce9558d7f867ded3d919d8e5dc310bed7a1006a38633da7817", 0x40}, {&(0x7f0000001a00)="51df4cc7ae6fd83ddd390a591d73bf565f976f29", 0x14}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r11, r6, 0xee01}}}], 0x20, 0x4}}, {{&(0x7f0000001ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001b40)="6696eaac03d45bd0a041", 0xa}, {&(0x7f0000001b80)="07729c5e55eed20d7db4d4b24763cb11d51ca6a8a680b505e2550a68aa9853f381bd4335f2b3c8198fd11afd049d7f3652643a9abb19b0d6ccf40d0b72d5a94d188672277dd13bc0aa0d511f6f72461dcd1262310ec92fb918fe86fbe8b7bb2bf9bb5e89148fdfa1ed540849de33c00f5d452b3159fe764c85af2cd4a4a21724660b123e6d66f74a9d902d5bebffa550ccc7fa73174103af3fed4642858f1e8f54d943a2ab21ba0841277e0623cca4032d771c99d7916f52635026e70cf0f0f4a80c3b9c8caab27bf245a615ae8d808f60e29ef246b5579a", 0xd8}, {&(0x7f0000001c80)="ba0eef6fa20ea854b9a1bb59f05a5b45c302b9edb96078a3622bd3589c23ee125b71e8a0b25bbd11b4136f6a01fb96736fd1e9f5a875e05a27acb281679785689d7ac0b2a1", 0x45}, {&(0x7f0000001d00)="6b65e093201c88228e652bc8f3ed7f41497786e8c953884657c110a99d8ac553ff77cf951153626694263ab7227cd9a25bf10b42b92013241ec78eae50bbf4108f04b485b118c6ec74042d14bc06656ec7d5de4a1c04165ffd8e23d2ed049ca7a9e96a1eb6c7c3d1119d4a30e792ecc25a68bc7de9eb977dd24b8cc71271faf55b92d36e7644605cdb5a51d98e87", 0x8e}, {&(0x7f0000001dc0)="ed726789f87692a717ecade462aa37028e3e78abc6f06015f605ff3c3867d9c4306c61d8b56496893be8b56f2ca75419a1e91825308fe83d22edc349bbe78d30eaada8d40060fecbf6dc32054e168df541789a060cfc2cf0957b41be261b13704c829891fa15b63ee6efe509a309fd8509bf1fb02e0e73e69f53e5bc1b38ead71ea79dc5ebef63d51efd7ca562fc47bd795607e4503c9401ef0794ee89952ce9e9249c21d38c02a8631412bf941837f849c318c06df4c56b8292a0836d619db710b9ba6706222e960d5720957a499a607a9ef8d9ee1f13639b0d5924523f3662c39941eaaad4ce44e74797486e0513402ba4", 0xf2}, {&(0x7f0000001ec0)="3db6ed4491aa9524d42b0325c28c8774ca5b4592157dd249e6801782cc1354dd00bf71dad8fc0b298ddc9001048bfe5bf3c505b80d2a66484aa6472a27b7fe69e2c08188e1398137261a6b5ba599581377d16ecd407c1822fe893851a5b5eafb7f6622989ae0607c6baf6487b1cafe5732e338e18570e9ca61b7a01bfefd8bd6a02a64cb677f45ec42fc443b615a55c173c981d60ef5f3646ff18b927798f72131b2668f0cb7dc1e065f7391d2f32ad2629806ea90baefab9b4a3f58542698b846fbd49159bd87a0ef40e4aaca2bb045d692402c34331ec2fccd0297a3dad6f029b194c1d54b0d15bb9312e763674b623577d47444aa", 0xf6}], 0x6, &(0x7f0000002040)=[@rights={{0x18, 0x1, 0x1, [r20, r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r6, r10}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12, r24}}}], 0x58, 0x20001}}, {{&(0x7f00000020c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002140)="b36d3da2005d91efb848", 0xa}, {&(0x7f0000002180)="c2a851a325e80d7cd7b2f06d29664d80d6abed405b9d2d54868ae4a9b0eb6f9957b1dbf19fdc393b4c995720fda842c21106f3abfba1eb2bd9ff27ff532d822c4ee00abf0c96c1f1e620ad6e84e2c3766360919d7549a3c97b5abfb8bd319412f04e56acd3ebaa3469c6c554ffcf923e7bad0a5d790c68ee47b887f63767dc0933347a168e28d2ce7a7e214fb9cc0a915ffe2c5909aac9642eca920186de101c764fc727eb74e972117ac77df74db7933d4cccd21828f4eea6d8387ea1995aeed11740df33fb5f3c0a65279071edaae73164c2664bd0b380d007e04cd4fa9db8", 0xe0}, {&(0x7f0000002280)="a730a76fcb5190a714b6e6413d7918ea8e3d7442be0e0cae1fff01560a51a8d0e7446f412efeb884b4bd00e769460af3f8eb500fc57b4195b0eeb24786020dd207acb742c7ac9a02b6187e2becb17ab0642af181ee254718be42954323228d72a20f8252b62a30320b3834b2f2161941c25f2795be7cbcc0d8d3504943bc50", 0x7f}, {&(0x7f0000002300)="b0abfd1f3cce883a93408a0554be48386663432c8af777ba8fdc4a1b99b369d00ade5b191a1b1ffd21f897f8dfcfc456e77cf86632c51d234b26c719ffee6c3db475f41473a12542b212443a384b942a8317c44802a37912b92302a1520860e5ff8b5c3a090db05316de05d3bcbc7f8d65530bd157779085f08c14fb5375236c973f101e0c213cca50ec7f1d704ce3d7e951e3709ff1e774298d14c0b1d098e434412cd7794aac6c94ae1c0bf97908ad408efc80c0e589170de9dd2699169807eef9206811284abcfd033b327d3b55b5ea815ea4650a55e2d824faf0c0a0a2dad5aa", 0xe2}, {&(0x7f0000002400)="d63f3c50dbc2652d41dfe0b282af471ae87ae57714759b67bc67aa6ca46d716d29ea3e20d120efa991fe2b0f04318804e67f73a92d973be1465d2471a1afdc83abf420fd51ed510e44af0abc36b85a40196e4c7f4d4677039fdb5b17d9621914a04affe7c18a28aa9d63b6e07df04fd42c5e56d6c4039390e41f7fd4b8808a0e57a249a5f7", 0x85}, {&(0x7f00000024c0)="af816c4deed214c1ff4417301f12394dd34ba76033ce89f3a7305d9081eb1328ac7ece35fb6ddbb00da71ada6d63cee4973857c15c635d371de8342cbcca618d84e9c0d822e80410f8eb46c78380334cd8ad030d7c9962a8505676c2f41b41e9ff6169ba6fca27485dfd4459b5e953b1246bfc24b5d3ee4c79c03b23159e12db4fde171d94b8bd49a4d541935b2c6a3614854e22e08167cbcea57bcde05b808e60a7b8ba3120af061d189d", 0xab}], 0x6, &(0x7f00000026c0)=[@rights={{0x1c, 0x1, 0x1, [r25, r0, r26]}}, @rights={{0x18, 0x1, 0x1, [r23, r20]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r24}}}, @cred={{0x1c, 0x1, 0x2, {r3, r9, r24}}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r17}}}, @cred={{0x1c, 0x1, 0x2, {r15, r9, r13}}}], 0xb8, 0x4000811}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002780)="a1bca39107b40cba7ad10731c9b7750dcb1c21706ca85e48c349c42b946c6919286bca638f199367a1139ccf101f2f9cab9faffd8e2792f468b677a60f831240207c131f3cc1030348069f2d7cb3563f1b91e46d410c8671aea1990fb23d0e7f4588644ccbb03479e40dda2c261e30b2378039f89774ef10b2bda3f9d498f5df09cdeb59b7d7", 0x86}, {&(0x7f0000002840)="f156d77c213606a50f3c73c64525a241980a9566c8efe9191b35dba1f416", 0x1e}, {&(0x7f0000002880)="f09f02bb94a7b7f2d7edbdb1b1655d90c7671aa6939962d5cc330d35414f7b2af33cd9ee70e3b3fe9241cf4276820991a4cca9a77fecf1f4f89021057b03e28ed69533cb8b158b75d5138bdd0abac790971bc0ecc0ac61ee91a63edbb21545f1a27612999191bcb542f1b4e7357485497782fea912f59b2bc4d92b9ec80d4ee06162b23b3f98dbd9a880d266ca60f25c129a6ea6ff4188f110fea4eeee89eaaaa3010a2ff78d04d1d1457daf22ec909458422def16b6f9e190e85e1762a64b9a153459ddbce84b7e0779aea94e61964174cdc487e88803109dbfdcaf58fb9238cfd51fc3", 0xe4}, {&(0x7f0000002980)="1e4d76a560df0b7affeebce7443a280fb7396f971fe025f251638619be63daeaae05681fcb05f72113344acc216230c130b4935c425617660ebf69be4903b103503fb5", 0x43}], 0x4, &(0x7f0000003100)=[@cred={{0x1c, 0x1, 0x2, {r27, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r3, r9, r24}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r20, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r18, 0xffffffffffffffff, r26, r20, 0xffffffffffffffff, r25, 0xffffffffffffffff, r25, r20]}}, @rights={{0x30, 0x1, 0x1, [r25, r4, 0xffffffffffffffff, 0xffffffffffffffff, r23, r25, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}], 0x128, 0x4004}}, {{&(0x7f0000003240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f00000032c0)="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", 0xff}, {&(0x7f0000000100)="be484a281e43ac24a9b970c91fe4601cfbe09f0cc9be20e20481883761c4c3094c5cd9008683b907263a772a176ee24975402be43efe77354af89b6bfcdafaa2ffc0b929a45e19f1e6571c56fa2670ad", 0x50}, {&(0x7f0000003400)="03ef6847dfd22c5445a7056194e4057eba6e113d97812363626cd47cd60d9fe6b3e99c5136f52b1a9758eb4859acc093df638ee4234e8fdd992c12d4fb08a6bee3b5a4367c18de2028d12461a02d70619bf7d6f0167b289aee71424cd0ff3ac7a6cf136e941559378dbc18cf8120a58f57", 0x71}, {&(0x7f0000003480)="0dd0629547e22a", 0x7}, {&(0x7f00000034c0)="1d6d0103c5d6402873f336272f79ecb6267ba9f70e0dc3b9ae8f1be029795d6db9678343db439c6dafe96a6c9c9893969087a9d8f52a7063705d1cf1b4c4f5754388cfd7bb69e4ce48e36b46769c56b0f69219", 0x53}], 0x5, 0x0, 0x0, 0x4000}}, {{&(0x7f00000035c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003640)="2eae1e946507a3f49f7600d709e1c4713c95729f5e185fcf2a876399cb2da04e70cd98e405101d07558170eda940c3239c2d8b622e5f306025c20d6bcd5aa2d98919265e610e1f3a168c385f61c65e85ec67ed209a984be39e9db9d515", 0x5d}, {&(0x7f00000036c0)="c09cffbd741602ab16a88374a2ff9740", 0x10}, {&(0x7f0000003700)="53643ae4a7e8d9e3cbfc241775ca6c2fcce70e1d993565a29b9a3054153150929e37cbc0b9ab02d65de47f46c9c547d8b6ee87819f4457b4b6c41fb026a8af6a3cd26a0987412fd2b3f3a4d8631fc9424b5fb642796f126ef161833d70b11d04bfd7c2124cd57ce803c0c196568072f4d8113b39c9a6f7672313d68f3719ff1bd9f069f0d732ade021279b19aa18f318a4613236d371fd31378ee7a26b5114d0681d356841532b670e1765c307fb6409bc1b1beafa3f972b0950c10af2e915f6327e48e3b18ae23320711929a5f9d9b934cb8646f643db53fb7e6509df15e6a86e9f20d01a2b8f692d0eeb", 0xeb}, {&(0x7f0000003800)="ce1aa706a357932dc7bbfd8239893079329fef25bbf5d5d76aed2a7a04937b45b9675a64a1d266ca4c3b4f9f78fa2514b0201869384412c44ffcfa87e38901d6c430f62c1cee0e49899c036fb87a4e6f842a8d5b25039a7e658085da25c0de960a4a6213c38085afdb1e43f54075d79ee770125ece4b57d3a7a02a0930055e1540750451dfd0e2af6ac4ca2e", 0x8c}, {&(0x7f00000038c0)="73ee73f89ee87b613d992e8e538cc2465e94a813e8fe2caa86c1c8c04aa1f887647f765c80a4cfa3835b689dd4277b38fbd8bea95d47a5ccb1b14859c3dc5b384b8333e1788500b8432202717fed18bbe87c2ee03604e756ee2e90bd616d48906bcad25d5aa4f113dd74d9fead37c3388e347a0d7543146f912c66720fd35c12d8fe6d79c06573811a9160862b2288f9fd1216a4ff43c34b574758976b3e2730a9d11c96b99502f728d8b809aa4251843e3b0f812789735b9efdaf5ec1e5687568c3e5ca8e78ff8cab025eb1e269c93aeb6f429fa35ed01a4202da23847166fb8b815daf9df86a695e", 0xe9}, {&(0x7f00000039c0)="670db53f44cdb457207c6880bc75423b5b5e4636afa8dfadd011", 0x1a}, {&(0x7f0000003a00)="85c8a849749ac7314ba4617f1f88c0b9f24ff2ae04b26af6c9d07b7df2856ed95875bc6522041850a7cad512c21d3eb6f14dc92112972c56ff98956b70947b4899b5081a5932dbaa405b451cb24fa6afaa4515470f2431ba04561f4927db1904ce4fb8587b186083846e3390917863110eac67e64fa2144c5e9c9742dd84689bf93b7ed8d2db5876e2bb8995aa60b319469ab1483514720ff44495ece3f54e2e8a67c9b194e321096305e71cff8b45d27bd4376fb321666ae6a9aea2f7a39eea082bbe499728f544836aec6ee50c2c5467ffe0eb6b99426d8a5e685a9934a784302d552718", 0xe5}], 0x7, 0x0, 0x0, 0xc000}}], 0xa, 0x4000) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) epoll_wait(r0, 0x0, 0x0, 0x404) 135.657773ms ago: executing program 6 (id=2253): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003b40)=ANY=[@ANYBLOB="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"/1810, @ANYRESHEX=r1, @ANYBLOB="19a2e0b65272c5dc9dd034117bfc53f96575b2211579651143e1c80855072fe3f9b0f8514ce47f767e8d48074eacc8c1030f5c41154ea5973f714aa2e81b33131d1b1ca661b48f454241e1a84ef1ff67ebee9cce873aedfe5c92102df1b0840e951ee2dc684f911c06fe808b4faab0044f2a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x9) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ac0)={0xf, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x56, 0x6, 0x9, 0x101]}, {0x4, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x5, 0x6, 0x10, @usage=0x9, 0x4, 0xe2c1, [0x1, 0x808001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff5]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @usage=0xcb, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002380)={{r3}, r9, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @name="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"}) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x3ff, 0xc511}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000012c0)={r1, 0x171, "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"}, &(0x7f00000003c0)=0x179) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000400)={r11, 0x8}, 0x8) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r12, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000980), &(0x7f0000000a00), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000), 0x10, r13}, 0x94) 85.130768ms ago: executing program 2 (id=2254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001800000000000000800000085000000300000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xaf84, 0x1000, 0x1, 0x100, 0x240}, &(0x7f0000000300)=0x98) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000540)={{r1, &(0x7f0000000080)='&#:\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x7ff, 0x2]}, {0x2d, 0x6, 0x7, 0x8}}, 0x9, &(0x7f00000003c0), &(0x7f0000000400)=0x2}, {[0x8, 0x1, 0x2000000, 0x7]}, 0x9, 0xf9, &(0x7f0000000440)=""/249}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xf, 0x17, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x7, 0x7, 0x6, 0x80, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3a47}, @ldst={0x3, 0x3, 0x2, 0x1, 0x2, 0xffffffffffffffe0, 0x15}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x73f8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000740)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', r5, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000900)=[r6], &(0x7f0000000940)=[{0x0, 0x1, 0xe, 0x6}, {0x5, 0x2, 0xd, 0x7}], 0x10, 0x6}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x96, 0x0, 0xff, 0xffffffffffffffff}, &(0x7f0000000380)=0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='westwood', 0x8) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 83.670016ms ago: executing program 0 (id=2255): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESOCT=r2], 0x48}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40010) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010001ffffbfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b000100677265746170000014000280080007005470aebcdbb7e81e7876017d9572ac141428050009000700000008001f000900000008000a00", @ANYRES32=r6, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x10000, 0xe4, {{0x29, 0x4, 0x2, 0x1a, 0xa4, 0x65, 0x0, 0x1, 0xa75490ee753e1505, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x16, 0x3, [{0x1, 0x10, "5a74cf29596544d626653300f389"}]}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x6, [{@remote, 0x12}, {@broadcast, 0x61}, {@private=0xa010102, 0x5}, {@empty, 0x4}, {@local, 0xae5}, {@loopback, 0x101}]}, @timestamp={0x44, 0x28, 0x8a, 0x0, 0x9, [0xffffffff, 0x0, 0x9, 0x3, 0x1, 0x5, 0x0, 0x2, 0x3171]}, @generic={0x88, 0xa, "6856e169c34a5528"}, @generic={0x7, 0x12, "ad7c416de09c965b6be0d97e7dca4c52"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0xc, 0x9, 0x348e, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7, 0x20, 0x6e5e, 0x2}}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x8, 0x8, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x81, 0xff}}) getsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', r15, 0x0, 0x1, 0x1, 0x1, {{0x20, 0x4, 0x0, 0x3a, 0x80, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x4a, 0x3, 0xc, [{@private=0xa010100, 0x647}, {@empty, 0xffffff99}, {@multicast1, 0x4}, {@broadcast, 0x7}, {@loopback, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xcb2}, {@multicast1, 0x401}, {@local, 0x4}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x46, [@remote, @multicast1, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001a40)={0x48c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x905d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9a}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x40004}, 0x800) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000280), 0x3) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000004e000100000000000000124e9a1302"], 0x14}}, 0x0) 0s ago: executing program 5 (id=2256): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r2 = socket(0x23, 0x80805, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240008c0) socket$rxrpc(0x21, 0x2, 0x2) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x80, 0x4000000, @mcast1, 0x40000000}}}, 0x32) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000500)={0x2, 0x100000000, 0x5, 0x2bca, 0x4, 0x0, [{0x1, 0x4, 0x5, '\x00', 0x1d0c}, {0x0, 0x4, 0x7, '\x00', 0x2a88}, {0x4, 0x2, 0x6, '\x00', 0x2180}, {0x7, 0x2, 0x200, '\x00', 0x2600}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000530400042cbd7000fdc7df2525880114b29808420ad5661cfd2ad035d68d1da2a92ea1b5fdd23ccf02bb7f5b852803060d831f03950b256cd522ffe950626ae842370e439df15c6f313da363d81937df6d694a17"], 0x58}, 0x1, 0x0, 0x0, 0x40080c4}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25050000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000015}, 0x80) kernel console output (not intermixed with test programs): 021q: adding VLAN 0 to HW filter on device bond8 [ 233.428560][T10115] lo speed is unknown, defaulting to 1000 [ 233.444505][T10130] siw: device registration error -23 [ 233.486015][T10125] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1078'. [ 233.587848][T10141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1084'. [ 233.626805][T10143] openvswitch: netlink: Multiple metadata blocks provided [ 233.798433][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 233.838481][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 233.876718][T10146] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 233.992063][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 234.205081][T10168] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1091'. [ 234.219101][T10168] FAULT_INJECTION: forcing a failure. [ 234.219101][T10168] name failslab, interval 1, probability 0, space 0, times 1 [ 234.238386][T10168] CPU: 0 UID: 0 PID: 10168 Comm: syz.2.1091 Not tainted syzkaller #0 PREEMPT(full) [ 234.238413][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.238424][T10168] Call Trace: [ 234.238432][T10168] [ 234.238440][T10168] dump_stack_lvl+0xe8/0x150 [ 234.238472][T10168] should_fail_ex+0x40c/0x560 [ 234.238498][T10168] should_failslab+0xa8/0x100 [ 234.238528][T10168] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 234.238555][T10168] ? geneve_changelink+0x150/0x4a0 [ 234.238593][T10168] ? geneve_changelink+0x150/0x4a0 [ 234.238628][T10168] kmemdup_noprof+0x2b/0x70 [ 234.238656][T10168] geneve_changelink+0x150/0x4a0 [ 234.238685][T10168] ? rtnl_nets_add+0x16c/0x300 [ 234.238705][T10168] ? refcount_inc+0x46/0x70 [ 234.238737][T10168] rtnl_newlink+0x15fe/0x1c30 [ 234.238771][T10168] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.238789][T10168] ? do_syscall_64+0x174/0x580 [ 234.238817][T10168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.238877][T10168] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.238901][T10168] ? lockdep_hardirqs_on+0x7a/0x110 [ 234.238935][T10168] ? nlmon_xmit+0xb0/0x100 [ 234.238961][T10168] ? kmem_cache_free+0x182/0x650 [ 234.238998][T10168] ? __lock_acquire+0x683/0x2cf0 [ 234.239030][T10168] ? __dev_queue_xmit+0x29b/0x3820 [ 234.239059][T10168] ? __local_bh_enable_ip+0xd0/0x130 [ 234.239083][T10168] ? lockdep_hardirqs_on+0x7a/0x110 [ 234.239116][T10168] ? __dev_queue_xmit+0x29b/0x3820 [ 234.239139][T10168] ? __local_bh_enable_ip+0xd0/0x130 [ 234.239159][T10168] ? __dev_queue_xmit+0x29b/0x3820 [ 234.239191][T10168] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 234.239228][T10168] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.239248][T10168] rtnetlink_rcv_msg+0x802/0xc00 [ 234.239273][T10168] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 234.239292][T10168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.239309][T10168] ? ref_tracker_free+0x689/0x830 [ 234.239336][T10168] ? __pfx_ref_tracker_free+0x10/0x10 [ 234.239372][T10168] netlink_rcv_skb+0x226/0x4a0 [ 234.239398][T10168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.239421][T10168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.239459][T10168] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.239482][T10168] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.239513][T10168] netlink_unicast+0x7bb/0x940 [ 234.239546][T10168] netlink_sendmsg+0x813/0xb40 [ 234.239589][T10168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.239620][T10168] ? aa_sock_msg_perm+0xf1/0x1b0 [ 234.239657][T10168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.239681][T10168] sock_sendmsg_nosec+0x13a/0x180 [ 234.239714][T10168] ____sys_sendmsg+0x54e/0x850 [ 234.239743][T10168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.239776][T10168] ? import_iovec+0x73/0xa0 [ 234.239807][T10168] ___sys_sendmsg+0x2a5/0x360 [ 234.239829][T10168] ? __lock_acquire+0x683/0x2cf0 [ 234.239861][T10168] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.239922][T10168] ? __fget_files+0x2a/0x420 [ 234.239948][T10168] ? __fget_files+0x3a2/0x420 [ 234.239983][T10168] __x64_sys_sendmsg+0x1b1/0x290 [ 234.240008][T10168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.240048][T10168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.240071][T10168] do_syscall_64+0x174/0x580 [ 234.240099][T10168] ? trace_irq_disable+0x3b/0x140 [ 234.240122][T10168] ? clear_bhb_loop+0x70/0xc0 [ 234.240147][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.240167][T10168] RIP: 0033:0x7fd0c839e0d9 [ 234.240186][T10168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.240202][T10168] RSP: 002b:00007fd0c9210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.240223][T10168] RAX: ffffffffffffffda RBX: 00007fd0c8625fa0 RCX: 00007fd0c839e0d9 [ 234.240237][T10168] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.240249][T10168] RBP: 00007fd0c9210090 R08: 0000000000000000 R09: 0000000000000000 [ 234.240261][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.240272][T10168] R13: 00007fd0c8626038 R14: 00007fd0c8625fa0 R15: 00007ffff98148e8 [ 234.240306][T10168] [ 234.818884][ T30] audit: type=1804 audit(1786477759.316:7): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1094" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1169 res=1 errno=0 [ 234.880229][T10181] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 234.889808][T10182] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 234.909177][ T30] audit: type=1800 audit(1786477759.316:8): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1094" name="cgroup.controllers" dev="tmpfs" ino=1169 res=0 errno=0 [ 234.931410][T10181] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1096'. [ 234.942447][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 235.078120][T10188] netlink: 'syz.0.1097': attribute type 2 has an invalid length. [ 235.088617][T10182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.239118][T10197] ip6gre1: entered promiscuous mode [ 235.259082][T10197] ip6gre1: entered allmulticast mode [ 235.328596][T10197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.435399][T10206] netlink: 'syz.3.1102': attribute type 8 has an invalid length. [ 235.621909][T10215] FAULT_INJECTION: forcing a failure. [ 235.621909][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 235.654231][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.0.1106 Not tainted syzkaller #0 PREEMPT(full) [ 235.654259][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.654272][T10215] Call Trace: [ 235.654279][T10215] [ 235.654289][T10215] dump_stack_lvl+0xe8/0x150 [ 235.654323][T10215] should_fail_ex+0x40c/0x560 [ 235.654352][T10215] should_failslab+0xa8/0x100 [ 235.654384][T10215] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 235.654414][T10215] ? geneve_changelink+0x150/0x4a0 [ 235.654446][T10215] ? geneve_changelink+0x150/0x4a0 [ 235.654484][T10215] kmemdup_noprof+0x2b/0x70 [ 235.654516][T10215] geneve_changelink+0x150/0x4a0 [ 235.654627][T10215] ? rtnl_nets_add+0x16c/0x300 [ 235.654650][T10215] ? refcount_inc+0x46/0x70 [ 235.654683][T10215] rtnl_newlink+0x15fe/0x1c30 [ 235.654726][T10215] ? __pfx_rtnl_newlink+0x10/0x10 [ 235.654744][T10215] ? do_syscall_64+0x174/0x580 [ 235.654774][T10215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.654844][T10215] ? kasan_quarantine_put+0xbb/0x1f0 [ 235.654869][T10215] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.654903][T10215] ? nlmon_xmit+0xb0/0x100 [ 235.654929][T10215] ? kmem_cache_free+0x182/0x650 [ 235.655053][T10215] ? __lock_acquire+0x683/0x2cf0 [ 235.655086][T10215] ? __dev_queue_xmit+0x29b/0x3820 [ 235.655116][T10215] ? __local_bh_enable_ip+0xd0/0x130 [ 235.655140][T10215] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.655169][T10215] ? __dev_queue_xmit+0x29b/0x3820 [ 235.655192][T10215] ? __local_bh_enable_ip+0xd0/0x130 [ 235.655213][T10215] ? __dev_queue_xmit+0x29b/0x3820 [ 235.655246][T10215] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 235.655285][T10215] ? __pfx_rtnl_newlink+0x10/0x10 [ 235.655304][T10215] rtnetlink_rcv_msg+0x802/0xc00 [ 235.655329][T10215] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 235.655349][T10215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.655368][T10215] ? ref_tracker_free+0x689/0x830 [ 235.655395][T10215] ? __pfx_ref_tracker_free+0x10/0x10 [ 235.655430][T10215] netlink_rcv_skb+0x226/0x4a0 [ 235.655456][T10215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.655478][T10215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.655517][T10215] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.655541][T10215] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.655571][T10215] netlink_unicast+0x7bb/0x940 [ 235.655605][T10215] netlink_sendmsg+0x813/0xb40 [ 235.655642][T10215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.655671][T10215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 235.655708][T10215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.655731][T10215] sock_sendmsg_nosec+0x13a/0x180 [ 235.655763][T10215] ____sys_sendmsg+0x54e/0x850 [ 235.655793][T10215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.655826][T10215] ? import_iovec+0x73/0xa0 [ 235.655858][T10215] ___sys_sendmsg+0x2a5/0x360 [ 235.655880][T10215] ? __lock_acquire+0x683/0x2cf0 [ 235.655911][T10215] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.655975][T10215] ? __fget_files+0x2a/0x420 [ 235.655999][T10215] ? __fget_files+0x3a2/0x420 [ 235.656044][T10215] __x64_sys_sendmsg+0x1b1/0x290 [ 235.656071][T10215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.656114][T10215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.656136][T10215] do_syscall_64+0x174/0x580 [ 235.656165][T10215] ? trace_irq_disable+0x3b/0x140 [ 235.656190][T10215] ? clear_bhb_loop+0x70/0xc0 [ 235.656215][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.656236][T10215] RIP: 0033:0x7f2a37d9e0d9 [ 235.656255][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.656271][T10215] RSP: 002b:00007f2a38c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.656291][T10215] RAX: ffffffffffffffda RBX: 00007f2a38025fa0 RCX: 00007f2a37d9e0d9 [ 235.656305][T10215] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 235.656317][T10215] RBP: 00007f2a38c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 235.656329][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.656340][T10215] R13: 00007f2a38026038 R14: 00007f2a38025fa0 R15: 00007ffe8a9907c8 [ 235.656374][T10215] [ 236.191607][T10221] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 236.237211][T10221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.336579][T10221] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 236.451704][T10226] --map-set only usable from mangle table [ 236.537091][T10233] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 236.653493][T10233] 8021q: adding VLAN 0 to HW filter on device bond9 [ 237.156941][T10265] FAULT_INJECTION: forcing a failure. [ 237.156941][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 237.170904][T10265] CPU: 0 UID: 0 PID: 10265 Comm: syz.2.1118 Not tainted syzkaller #0 PREEMPT(full) [ 237.170931][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.170960][T10265] Call Trace: [ 237.170968][T10265] [ 237.170977][T10265] dump_stack_lvl+0xe8/0x150 [ 237.171011][T10265] should_fail_ex+0x40c/0x560 [ 237.171040][T10265] should_failslab+0xa8/0x100 [ 237.171071][T10265] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 237.171096][T10265] ? skb_clone+0x212/0x3a0 [ 237.171119][T10265] ? skb_clone+0x212/0x3a0 [ 237.171149][T10265] skb_clone+0x212/0x3a0 [ 237.171177][T10265] __netlink_deliver_tap+0x413/0x860 [ 237.171222][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.171249][T10265] netlink_deliver_tap+0x19c/0x1b0 [ 237.171274][T10265] netlink_sendskb+0x68/0x140 [ 237.171298][T10265] netlink_rcv_skb+0x2a4/0x4a0 [ 237.171327][T10265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.171350][T10265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.171389][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.171412][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.171443][T10265] netlink_unicast+0x7bb/0x940 [ 237.171476][T10265] netlink_sendmsg+0x813/0xb40 [ 237.171512][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.171541][T10265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.171578][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.171602][T10265] sock_sendmsg_nosec+0x13a/0x180 [ 237.171633][T10265] ____sys_sendmsg+0x54e/0x850 [ 237.171663][T10265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.171696][T10265] ? import_iovec+0x73/0xa0 [ 237.171728][T10265] ___sys_sendmsg+0x2a5/0x360 [ 237.171750][T10265] ? __lock_acquire+0x683/0x2cf0 [ 237.171781][T10265] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.171839][T10265] ? __fget_files+0x2a/0x420 [ 237.171864][T10265] ? __fget_files+0x3a2/0x420 [ 237.171899][T10265] __x64_sys_sendmsg+0x1b1/0x290 [ 237.171925][T10265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.171969][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.171993][T10265] do_syscall_64+0x174/0x580 [ 237.172023][T10265] ? trace_irq_disable+0x3b/0x140 [ 237.172048][T10265] ? clear_bhb_loop+0x70/0xc0 [ 237.172074][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.172094][T10265] RIP: 0033:0x7fd0c839e0d9 [ 237.172113][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.172130][T10265] RSP: 002b:00007fd0c9210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.172151][T10265] RAX: ffffffffffffffda RBX: 00007fd0c8625fa0 RCX: 00007fd0c839e0d9 [ 237.172165][T10265] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.172178][T10265] RBP: 00007fd0c9210090 R08: 0000000000000000 R09: 0000000000000000 [ 237.172190][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.172202][T10265] R13: 00007fd0c8626038 R14: 00007fd0c8625fa0 R15: 00007ffff98148e8 [ 237.172244][T10265] [ 237.967036][T10293] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 237.997743][T10293] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.339296][T10306] ip_tables: iptables: counters copy to user failed while replacing table [ 238.515080][T10311] xfrm1: entered allmulticast mode [ 238.749057][T10324] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 238.825695][T10327] ipvlan1: entered allmulticast mode [ 238.831337][T10327] veth0_vlan: entered allmulticast mode [ 238.843095][T10324] tipc: Enabling of bearer rejected, failed to enable media [ 239.027570][T10337] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 239.071473][T10337] 8021q: adding VLAN 0 to HW filter on device bond11 [ 239.097264][T10337] __nla_validate_parse: 15 callbacks suppressed [ 239.097283][T10337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1137'. [ 239.242414][T10342] bridge2: entered promiscuous mode [ 239.555306][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 239.584176][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.601959][T10362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.640088][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.674499][T10362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.755451][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.768183][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.778117][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.791733][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.802754][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.811314][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 239.854827][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.868156][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.881421][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.890117][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.910874][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.060222][T10373] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1148'. [ 240.166105][T10377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1148'. [ 240.218733][T10377] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1148'. [ 240.388080][T10385] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 240.411573][T10387] Cannot find set identified by id 0 to match [ 240.438819][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1152'. [ 240.506093][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 240.548403][T10394] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1154'. [ 240.564259][T10385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.643900][T10385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1151'. [ 240.728166][T10365] lo speed is unknown, defaulting to 1000 [ 241.246071][T10420] ipvlan2: entered allmulticast mode [ 241.251665][T10420] syz_tun: entered allmulticast mode [ 241.375837][T10420] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 241.391589][T10420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 241.403040][T10420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 241.559756][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.571799][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.579755][T10365] bridge_slave_0: entered allmulticast mode [ 241.592175][T10365] bridge_slave_0: entered promiscuous mode [ 241.619301][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.636415][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.650396][T10365] bridge_slave_1: entered allmulticast mode [ 241.674914][T10365] bridge_slave_1: entered promiscuous mode [ 241.763949][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.809537][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.958147][T10445] tipc: Invalid UDP bearer configuration [ 241.958202][T10445] tipc: Enabling of bearer rejected, failed to enable media [ 241.974233][ T5607] Bluetooth: hci5: command tx timeout [ 241.985302][T10365] team0: Port device team_slave_0 added [ 241.998115][T10365] team0: Port device team_slave_1 added [ 242.081463][T10445] bond10: Removing last arp target with arp_interval on [ 242.119171][T10449] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 242.122020][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.153707][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.224048][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.269878][T10449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.291294][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.304082][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.357611][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.521603][T10365] hsr_slave_0: entered promiscuous mode [ 242.535651][T10365] hsr_slave_1: entered promiscuous mode [ 242.728974][T10469] FAULT_INJECTION: forcing a failure. [ 242.728974][T10469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.768502][T10469] CPU: 1 UID: 0 PID: 10469 Comm: syz.2.1172 Not tainted syzkaller #0 PREEMPT(full) [ 242.768529][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.768541][T10469] Call Trace: [ 242.768549][T10469] [ 242.768558][T10469] dump_stack_lvl+0xe8/0x150 [ 242.768592][T10469] should_fail_ex+0x40c/0x560 [ 242.768619][T10469] _copy_from_user+0x2d/0xb0 [ 242.768649][T10469] ___sys_sendmsg+0x1c6/0x360 [ 242.768672][T10469] ? __lock_acquire+0x683/0x2cf0 [ 242.768704][T10469] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.768764][T10469] ? __fget_files+0x2a/0x420 [ 242.768793][T10469] ? __fget_files+0x3a2/0x420 [ 242.768829][T10469] __x64_sys_sendmsg+0x1b1/0x290 [ 242.768856][T10469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.768898][T10469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.768922][T10469] do_syscall_64+0x174/0x580 [ 242.768952][T10469] ? trace_irq_disable+0x3b/0x140 [ 242.768977][T10469] ? clear_bhb_loop+0x70/0xc0 [ 242.769005][T10469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.769026][T10469] RIP: 0033:0x7fd0c839e0d9 [ 242.769046][T10469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.769064][T10469] RSP: 002b:00007fd0c9210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.769085][T10469] RAX: ffffffffffffffda RBX: 00007fd0c8625fa0 RCX: 00007fd0c839e0d9 [ 242.769101][T10469] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 242.769114][T10469] RBP: 00007fd0c9210090 R08: 0000000000000000 R09: 0000000000000000 [ 242.769126][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.769138][T10469] R13: 00007fd0c8626038 R14: 00007fd0c8625fa0 R15: 00007ffff98148e8 [ 242.769172][T10469] [ 243.102338][T10475] veth0_to_bond: default FDB implementation only supports local addresses [ 243.114626][T10479] veth0_to_bond: default FDB implementation only supports local addresses [ 243.374416][T10365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.391637][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.401066][T10365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.424986][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.449558][T10365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.477659][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.501065][T10365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.525151][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.553230][T10497] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 243.652160][T10497] 8021q: adding VLAN 0 to HW filter on device bond12 [ 243.823952][T10512] sctp: [Deprecated]: syz.2.1186 (pid 10512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.823952][T10512] Use struct sctp_sack_info instead [ 243.873809][T10515] FAULT_INJECTION: forcing a failure. [ 243.873809][T10515] name failslab, interval 1, probability 0, space 0, times 0 [ 243.915428][T10515] CPU: 0 UID: 0 PID: 10515 Comm: syz.0.1185 Not tainted syzkaller #0 PREEMPT(full) [ 243.915455][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.915467][T10515] Call Trace: [ 243.915475][T10515] [ 243.915482][T10515] dump_stack_lvl+0xe8/0x150 [ 243.915515][T10515] should_fail_ex+0x40c/0x560 [ 243.915540][T10515] should_failslab+0xa8/0x100 [ 243.915570][T10515] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 243.915593][T10515] ? local_lock_release+0x9c/0x160 [ 243.915624][T10515] ? __alloc_skb+0x1d7/0x7a0 [ 243.915650][T10515] ? __alloc_skb+0x1d7/0x7a0 [ 243.915674][T10515] __alloc_skb+0x1d7/0x7a0 [ 243.915699][T10515] netlink_sendmsg+0x5d4/0xb40 [ 243.915735][T10515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.915765][T10515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 243.915801][T10515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.915824][T10515] sock_sendmsg_nosec+0x13a/0x180 [ 243.915854][T10515] ____sys_sendmsg+0x54e/0x850 [ 243.915884][T10515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.915917][T10515] ? import_iovec+0x73/0xa0 [ 243.915950][T10515] ___sys_sendmsg+0x2a5/0x360 [ 243.915971][T10515] ? __lock_acquire+0x683/0x2cf0 [ 243.916002][T10515] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.916063][T10515] ? __fget_files+0x2a/0x420 [ 243.916088][T10515] ? __fget_files+0x3a2/0x420 [ 243.916125][T10515] __x64_sys_sendmsg+0x1b1/0x290 [ 243.916152][T10515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.916195][T10515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.916218][T10515] do_syscall_64+0x174/0x580 [ 243.916247][T10515] ? trace_irq_disable+0x3b/0x140 [ 243.916272][T10515] ? clear_bhb_loop+0x70/0xc0 [ 243.916299][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.916319][T10515] RIP: 0033:0x7f2a37d9e0d9 [ 243.916339][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.916357][T10515] RSP: 002b:00007f2a38c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.916379][T10515] RAX: ffffffffffffffda RBX: 00007f2a38025fa0 RCX: 00007f2a37d9e0d9 [ 243.916394][T10515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 243.916407][T10515] RBP: 00007f2a38c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 243.916420][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.916432][T10515] R13: 00007f2a38026038 R14: 00007f2a38025fa0 R15: 00007ffe8a9907c8 [ 243.916465][T10515] [ 243.946317][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.081055][ T5607] Bluetooth: hci5: command tx timeout [ 244.244454][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.306298][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.313596][ T9018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.331909][T10523] __nla_validate_parse: 10 callbacks suppressed [ 244.331928][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 244.363286][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.370509][ T9017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.936523][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1194'. [ 244.950182][T10555] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1195'. [ 245.090045][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 245.136715][T10563] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1197'. [ 245.159304][ T5607] block nbd2: Receive control failed (result -1) [ 245.247705][T10563] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1197'. [ 245.486205][T10580] Cannot find set identified by id 0 to match [ 245.539328][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.885470][T10592] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 245.895914][T10593] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 245.957303][T10592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.999036][T10593] 8021q: adding VLAN 0 to HW filter on device bond11 [ 246.039353][T10592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1204'. [ 246.066618][T10593] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1203'. [ 246.214838][ T5607] Bluetooth: hci5: command tx timeout [ 246.315349][T10365] veth0_vlan: entered promiscuous mode [ 246.363912][T10365] veth1_vlan: entered promiscuous mode [ 246.517103][T10365] veth0_macvtap: entered promiscuous mode [ 246.553770][T10365] veth1_macvtap: entered promiscuous mode [ 246.619519][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.650930][T10615] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 246.670017][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.687942][T10617] Cannot find set identified by id 0 to match [ 246.763369][ T9018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.792214][ T9018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.833144][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.877395][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.901470][T10623] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 246.971309][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1214'. [ 247.011811][T10623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.030584][T10625] bond7: entered promiscuous mode [ 247.036709][T10625] bond7: entered allmulticast mode [ 247.187786][ T9017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.199714][T10635] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 247.230179][ T9017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.280751][T10635] 8021q: adding VLAN 0 to HW filter on device bond13 [ 247.339893][ T9017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.339927][T10635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1216'. [ 247.359721][ T9017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.644199][T10652] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 247.691137][T10652] tipc: Enabling of bearer rejected, already enabled [ 247.786522][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 247.966429][T10667] syzkaller0: entered promiscuous mode [ 247.972231][T10667] syzkaller0: entered allmulticast mode [ 248.151547][T10671] FAULT_INJECTION: forcing a failure. [ 248.151547][T10671] name failslab, interval 1, probability 0, space 0, times 0 [ 248.169656][T10671] CPU: 0 UID: 0 PID: 10671 Comm: syz.2.1227 Not tainted syzkaller #0 PREEMPT(full) [ 248.169693][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.169705][T10671] Call Trace: [ 248.169714][T10671] [ 248.169722][T10671] dump_stack_lvl+0xe8/0x150 [ 248.169757][T10671] should_fail_ex+0x40c/0x560 [ 248.169785][T10671] should_failslab+0xa8/0x100 [ 248.169818][T10671] __kmalloc_noprof+0xfe/0x720 [ 248.169844][T10671] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 248.169877][T10671] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 248.169917][T10671] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 248.169958][T10671] genl_family_rcv_msg_doit+0xda/0x340 [ 248.169997][T10671] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.170041][T10671] ? apparmor_capable+0x126/0x170 [ 248.170067][T10671] ? bpf_lsm_capable+0x9/0x20 [ 248.170092][T10671] ? security_capable+0x7e/0x2c0 [ 248.170130][T10671] genl_rcv_msg+0x614/0x7a0 [ 248.170167][T10671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.170197][T10671] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 248.170224][T10671] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 248.170256][T10671] ? __pfx_nl802154_post_doit+0x10/0x10 [ 248.170300][T10671] netlink_rcv_skb+0x226/0x4a0 [ 248.170326][T10671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.170358][T10671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.170400][T10671] ? down_read+0x2be/0x330 [ 248.170427][T10671] genl_rcv+0x28/0x40 [ 248.170455][T10671] netlink_unicast+0x7bb/0x940 [ 248.170489][T10671] netlink_sendmsg+0x813/0xb40 [ 248.170525][T10671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.170556][T10671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.170593][T10671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.170617][T10671] sock_sendmsg_nosec+0x13a/0x180 [ 248.170649][T10671] ____sys_sendmsg+0x54e/0x850 [ 248.170686][T10671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.170721][T10671] ? import_iovec+0x73/0xa0 [ 248.170753][T10671] ___sys_sendmsg+0x2a5/0x360 [ 248.170776][T10671] ? __lock_acquire+0x683/0x2cf0 [ 248.170808][T10671] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.170873][T10671] ? __fget_files+0x2a/0x420 [ 248.170899][T10671] ? __fget_files+0x3a2/0x420 [ 248.170938][T10671] __x64_sys_sendmsg+0x1b1/0x290 [ 248.170966][T10671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.171010][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.171034][T10671] do_syscall_64+0x174/0x580 [ 248.171065][T10671] ? trace_irq_disable+0x3b/0x140 [ 248.171090][T10671] ? clear_bhb_loop+0x70/0xc0 [ 248.171117][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.171138][T10671] RIP: 0033:0x7fd0c839e0d9 [ 248.171157][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.171175][T10671] RSP: 002b:00007fd0c9210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.171198][T10671] RAX: ffffffffffffffda RBX: 00007fd0c8625fa0 RCX: 00007fd0c839e0d9 [ 248.171214][T10671] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 248.171227][T10671] RBP: 00007fd0c9210090 R08: 0000000000000000 R09: 0000000000000000 [ 248.171240][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.171252][T10671] R13: 00007fd0c8626038 R14: 00007fd0c8625fa0 R15: 00007ffff98148e8 [ 248.171287][T10671] [ 248.504953][T10674] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 248.548950][ T5607] Bluetooth: hci5: command tx timeout [ 248.586420][T10674] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.807373][T10688] xt_hashlimit: overflow, try lower: 6/0 [ 249.266354][T10711] FAULT_INJECTION: forcing a failure. [ 249.266354][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 249.280428][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.0.1240 Not tainted syzkaller #0 PREEMPT(full) [ 249.280453][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.280464][T10711] Call Trace: [ 249.280472][T10711] [ 249.280480][T10711] dump_stack_lvl+0xe8/0x150 [ 249.280511][T10711] should_fail_ex+0x40c/0x560 [ 249.280537][T10711] should_failslab+0xa8/0x100 [ 249.280566][T10711] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 249.280588][T10711] ? local_lock_release+0x9c/0x160 [ 249.280619][T10711] ? __alloc_skb+0x1d7/0x7a0 [ 249.280635][T10711] ? __alloc_skb+0x1d7/0x7a0 [ 249.280656][T10711] __alloc_skb+0x1d7/0x7a0 [ 249.280679][T10711] netlink_ack+0x136/0xb30 [ 249.280698][T10711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.280726][T10711] ? __pfx_nl802154_post_doit+0x10/0x10 [ 249.280768][T10711] netlink_rcv_skb+0x2a4/0x4a0 [ 249.280790][T10711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.280819][T10711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.280855][T10711] ? down_read+0x2be/0x330 [ 249.280878][T10711] genl_rcv+0x28/0x40 [ 249.280903][T10711] netlink_unicast+0x7bb/0x940 [ 249.280934][T10711] netlink_sendmsg+0x813/0xb40 [ 249.280966][T10711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.280993][T10711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.281026][T10711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.281048][T10711] sock_sendmsg_nosec+0x13a/0x180 [ 249.281085][T10711] ____sys_sendmsg+0x54e/0x850 [ 249.281111][T10711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.281141][T10711] ? import_iovec+0x73/0xa0 [ 249.281170][T10711] ___sys_sendmsg+0x2a5/0x360 [ 249.281189][T10711] ? __lock_acquire+0x683/0x2cf0 [ 249.281218][T10711] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.281286][T10711] ? __fget_files+0x2a/0x420 [ 249.281307][T10711] ? __fget_files+0x3a2/0x420 [ 249.281342][T10711] __x64_sys_sendmsg+0x1b1/0x290 [ 249.281365][T10711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.281402][T10711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.281422][T10711] do_syscall_64+0x174/0x580 [ 249.281447][T10711] ? trace_irq_disable+0x3b/0x140 [ 249.281468][T10711] ? clear_bhb_loop+0x70/0xc0 [ 249.281490][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.281524][T10711] RIP: 0033:0x7f2a37d9e0d9 [ 249.281542][T10711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.281559][T10711] RSP: 002b:00007f2a38c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.281579][T10711] RAX: ffffffffffffffda RBX: 00007f2a38025fa0 RCX: 00007f2a37d9e0d9 [ 249.281603][T10711] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 249.281614][T10711] RBP: 00007f2a38c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 249.281625][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.281652][T10711] R13: 00007f2a38026038 R14: 00007f2a38025fa0 R15: 00007ffe8a9907c8 [ 249.281683][T10711] [ 249.841564][T10724] __nla_validate_parse: 2 callbacks suppressed [ 249.841584][T10724] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1243'. [ 249.985168][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'. [ 250.027417][T10731] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1243'. [ 250.196846][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1246'. [ 250.497147][T10744] netlink: 'syz.1.1250': attribute type 32 has an invalid length. [ 250.525965][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 250.689928][T10747] nbd: socks must be embedded in a SOCK_ITEM attr [ 250.710227][T10744] bond9: option coupled_control: invalid value (251) [ 250.710921][T10747] block nbd3: shutting down sockets [ 250.740657][T10744] bond9 (unregistering): Released all slaves [ 250.852148][T10754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1254'. [ 251.077546][T10763] Bluetooth: MGMT ver 1.23 [ 251.357166][T10777] netlink: 'syz.2.1258': attribute type 2 has an invalid length. [ 251.447189][T10777] : entered promiscuous mode [ 251.692554][T10787] Cannot find set identified by id 0 to match [ 251.932547][T10790] tipc: Started in network mode [ 251.942336][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1264'. [ 251.949676][T10790] tipc: Node identity 9e572800b098, cluster identity 4711 [ 251.964833][T10792] netlink: 'syz.2.1264': attribute type 7 has an invalid length. [ 251.967552][T10790] tipc: Enabled bearer , priority 0 [ 251.991883][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.995145][T10798] syzkaller0: entered promiscuous mode [ 252.005060][T10792] netlink: 'syz.2.1264': attribute type 8 has an invalid length. [ 252.015306][T10798] syzkaller0: entered allmulticast mode [ 252.026203][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.034878][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 252.050562][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.058161][T10790] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 252.079845][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.087820][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.138089][T10792] veth1: entered promiscuous mode [ 252.184379][T10792] veth0: entered promiscuous mode [ 252.189687][T10792] veth0: left promiscuous mode [ 252.222182][T10792] veth1: left promiscuous mode [ 252.283330][T10801] tipc: Resetting bearer [ 252.289365][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 252.323675][T10789] tipc: Resetting bearer [ 252.376649][T10789] tipc: Disabling bearer [ 252.412562][T10805] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1266'. [ 252.495336][T10808] team0: Port device v removed [ 253.119986][T10795] lo speed is unknown, defaulting to 1000 [ 253.165660][T10834] Cannot find set identified by id 0 to match [ 253.983348][T10850] team0: Port device team_slave_0 removed [ 254.008878][T10852] syzkaller1: entered promiscuous mode [ 254.021955][T10852] syzkaller1: entered allmulticast mode [ 254.136098][ T5607] Bluetooth: hci6: command tx timeout [ 254.277805][T10861] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 254.313649][T10855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.391022][T10861] 8021q: adding VLAN 0 to HW filter on device bond12 [ 254.657357][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.674223][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.681645][T10795] bridge_slave_0: entered allmulticast mode [ 254.689573][T10795] bridge_slave_0: entered promiscuous mode [ 254.701311][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.718574][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.726712][T10795] bridge_slave_1: entered allmulticast mode [ 254.735130][T10795] bridge_slave_1: entered promiscuous mode [ 254.814326][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.837933][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.947543][T10795] team0: Port device team_slave_0 added [ 254.965880][T10795] team0: Port device team_slave_1 added [ 255.074402][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.081768][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.108992][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.122252][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.130074][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.157210][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.178715][T10879] __nla_validate_parse: 5 callbacks suppressed [ 255.178733][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 255.247895][T10795] hsr_slave_0: entered promiscuous mode [ 255.255273][T10795] hsr_slave_1: entered promiscuous mode [ 255.261672][T10795] debugfs: 'hsr0' already exists in 'hsr' [ 255.268253][T10795] Cannot create hsr debugfs directory [ 255.829449][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919113][T10897] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 256.069584][T10897] 8021q: adding VLAN 0 to HW filter on device bond9 [ 256.129387][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'. [ 256.170653][T10795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.181813][T10897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1289'. [ 256.213117][ T5607] Bluetooth: hci6: command tx timeout [ 256.227204][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.252293][T10795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.289230][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.314893][T10795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.355109][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.381139][T10795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.431165][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.483595][T10907] netlink: 'syz.1.1292': attribute type 142 has an invalid length. [ 256.510927][T10916] ip_tables: iptables: counters copy to user failed while replacing table [ 256.681835][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.728094][T10795] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.743952][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1294'. [ 256.761371][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.768615][ T9021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.869479][T10918] hsr_slave_1 (unregistering): left promiscuous mode [ 256.917121][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.924415][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.986117][T10920] syzkaller0: entered promiscuous mode [ 256.991664][T10920] syzkaller0: entered allmulticast mode [ 257.010235][T10920] tipc: Enabled bearer , priority 0 [ 257.070172][T10920] tipc: Resetting bearer [ 257.148065][T10919] tipc: Resetting bearer [ 257.222447][T10919] tipc: Disabling bearer [ 257.539909][T10947] netlink: 'syz.5.1299': attribute type 1 has an invalid length. [ 257.621061][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 257.685136][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1299'. [ 257.939100][T10961] netlink: 'syz.5.1301': attribute type 1 has an invalid length. [ 257.996404][T10961] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1301'. [ 258.211669][T10976] Cannot find set identified by id 0 to match [ 258.303939][ T5607] Bluetooth: hci6: command tx timeout [ 258.551597][T10985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.620352][T10989] bridge_slave_0: left allmulticast mode [ 258.626925][T10989] bridge_slave_0: left promiscuous mode [ 258.639201][T10989] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.654015][T10989] bridge_slave_1: left allmulticast mode [ 258.660961][T10989] bridge_slave_1: left promiscuous mode [ 258.669389][T10989] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.691727][T10989] bond0: (slave bond_slave_0): Releasing backup interface [ 258.714403][T10989] bond0: (slave bond_slave_1): Releasing backup interface [ 258.756366][T10989] team0: Port device team_slave_1 removed [ 258.764839][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.787679][T10989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.813291][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.831022][T10989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.853772][T10989] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.984104][T10995] team0: Port device xfrm0 added [ 259.022492][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.525151][T11018] Cannot find set identified by id 0 to match [ 259.899047][ T9017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.933597][ T9017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.950977][T10795] veth0_vlan: entered promiscuous mode [ 259.989198][T11033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.012558][T11037] FAULT_INJECTION: forcing a failure. [ 260.012558][T11037] name failslab, interval 1, probability 0, space 0, times 0 [ 260.037457][T10795] veth1_vlan: entered promiscuous mode [ 260.039127][T11035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.066094][T11037] CPU: 1 UID: 0 PID: 11037 Comm: syz.0.1320 Not tainted syzkaller #0 PREEMPT(full) [ 260.066122][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.066134][T11037] Call Trace: [ 260.066142][T11037] [ 260.066150][T11037] dump_stack_lvl+0xe8/0x150 [ 260.066182][T11037] should_fail_ex+0x40c/0x560 [ 260.066206][T11037] should_failslab+0xa8/0x100 [ 260.066234][T11037] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 260.066256][T11037] ? skb_clone+0x212/0x3a0 [ 260.066276][T11037] ? skb_clone+0x212/0x3a0 [ 260.066304][T11037] skb_clone+0x212/0x3a0 [ 260.066329][T11037] __netlink_deliver_tap+0x413/0x860 [ 260.066364][T11037] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.066388][T11037] netlink_deliver_tap+0x19c/0x1b0 [ 260.066412][T11037] netlink_unicast+0x77f/0x940 [ 260.066442][T11037] netlink_sendmsg+0x813/0xb40 [ 260.066474][T11037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.066505][T11037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 260.066539][T11037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.066561][T11037] sock_sendmsg_nosec+0x13a/0x180 [ 260.066589][T11037] ____sys_sendmsg+0x54e/0x850 [ 260.066618][T11037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.066651][T11037] ? import_iovec+0x73/0xa0 [ 260.066683][T11037] ___sys_sendmsg+0x2a5/0x360 [ 260.066706][T11037] ? __lock_acquire+0x683/0x2cf0 [ 260.066739][T11037] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.066805][T11037] ? __fget_files+0x2a/0x420 [ 260.066831][T11037] ? __fget_files+0x3a2/0x420 [ 260.066869][T11037] __x64_sys_sendmsg+0x1b1/0x290 [ 260.066894][T11037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.066935][T11037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.066958][T11037] do_syscall_64+0x174/0x580 [ 260.066987][T11037] ? trace_irq_disable+0x3b/0x140 [ 260.067012][T11037] ? clear_bhb_loop+0x70/0xc0 [ 260.067038][T11037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.067059][T11037] RIP: 0033:0x7f2a37d9e0d9 [ 260.067079][T11037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.067096][T11037] RSP: 002b:00007f2a38c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.067118][T11037] RAX: ffffffffffffffda RBX: 00007f2a38025fa0 RCX: 00007f2a37d9e0d9 [ 260.067132][T11037] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.067144][T11037] RBP: 00007f2a38c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 260.067157][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.067169][T11037] R13: 00007f2a38026038 R14: 00007f2a38025fa0 R15: 00007ffe8a9907c8 [ 260.067203][T11037] [ 260.348174][T10795] veth0_macvtap: entered promiscuous mode [ 260.373180][ T5607] Bluetooth: hci6: command tx timeout [ 260.416121][T10795] veth1_macvtap: entered promiscuous mode [ 260.426459][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1323'. [ 260.452424][T10795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.465250][T10795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.577497][ T9020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.637891][ T9020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.756145][ T9020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.764512][ T9021] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.786462][ T9020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.796696][ T9021] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.927287][ T9020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.966955][ T9020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.004460][T11051] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1324'. [ 261.249242][T11057] Cannot find set identified by id 0 to match [ 261.431833][T11066] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 261.457261][ T30] audit: type=1804 audit(1786477785.946:9): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1260" name="/newroot/0/memory.events" dev="tmpfs" ino=18 res=1 errno=0 [ 261.555467][ T30] audit: type=1800 audit(1786477785.956:10): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1260" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 261.602200][T11066] 8021q: adding VLAN 0 to HW filter on device bond14 [ 261.725715][T11069] veth7: entered allmulticast mode [ 261.761081][T11069] bond14: (slave veth7): Enslaving as an active interface with an up link [ 261.803921][T11073] bond14 (unregistering): (slave veth7): Releasing backup interface [ 261.858850][T11073] bond14 (unregistering): Released all slaves [ 262.218644][T11092] xt_l2tp: v2 sid > 0xffff: 33554432 [ 262.308904][T11095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'. [ 262.335048][T11096] netlink: 67 bytes leftover after parsing attributes in process `syz.6.1333'. [ 262.549337][T11093] bond_slave_1: entered allmulticast mode [ 262.750324][T11104] tap0: tun_chr_ioctl cmd 1074025677 [ 262.761035][T11104] tap0: linktype set to 774 [ 262.926289][T11110] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1338'. [ 263.092471][T11117] Cannot find set identified by id 0 to match [ 263.849419][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 264.227942][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1353'. [ 264.362433][T11179] x_tables: duplicate underflow at hook 1 [ 264.637328][T11189] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 265.029118][T11204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1356'. [ 265.106116][T11189] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.135466][T11194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.161774][T11208] netlink: 'syz.5.1357': attribute type 1 has an invalid length. [ 265.172110][T11208] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1357'. [ 265.419035][T11211] netlink: 'syz.0.1359': attribute type 4 has an invalid length. [ 265.449617][T11211] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1359'. [ 265.707292][T11220] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 265.751288][T11220] netlink: 9528 bytes leftover after parsing attributes in process `syz.1.1362'. [ 266.011973][T11230] syzkaller0: entered promiscuous mode [ 266.048853][T11230] syzkaller0: entered allmulticast mode [ 266.070913][T11238] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1366'. [ 266.099826][T11236] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1367'. [ 266.474416][T11252] openvswitch: netlink: IP tunnel dst address not specified [ 267.000712][T11256] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 267.081007][T11262] x_tables: duplicate underflow at hook 2 [ 267.110168][T11256] 8021q: adding VLAN 0 to HW filter on device bond13 [ 267.169386][T11262] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 267.178676][T11262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1372'. [ 267.290223][T11263] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1371'. [ 267.348601][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 267.688000][T11286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1379'. [ 268.314657][T11303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.354662][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1384'. [ 268.517471][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 268.953203][T11307] syzkaller0: entered promiscuous mode [ 268.974075][T11307] syzkaller0: entered allmulticast mode [ 271.264804][T11332] 8021q: VLANs not supported on ip_vti0 [ 271.473566][T11348] FAULT_INJECTION: forcing a failure. [ 271.473566][T11348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.509544][T11350] tipc: Enabling of bearer rejected, already enabled [ 271.545176][T11350] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 271.554192][T11348] CPU: 0 UID: 0 PID: 11348 Comm: syz.1.1393 Not tainted syzkaller #0 PREEMPT(full) [ 271.554219][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.554233][T11348] Call Trace: [ 271.554240][T11348] [ 271.554249][T11348] dump_stack_lvl+0xe8/0x150 [ 271.554281][T11348] should_fail_ex+0x40c/0x560 [ 271.554308][T11348] _copy_from_iter+0x1d3/0x1660 [ 271.554331][T11348] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 271.554358][T11348] ? rcu_is_watching+0x15/0xb0 [ 271.554390][T11348] ? trace_kmem_cache_alloc+0x29/0xe0 [ 271.554416][T11348] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 271.554441][T11348] ? __pfx__copy_from_iter+0x10/0x10 [ 271.554464][T11348] ? __alloc_skb+0x276/0x7a0 [ 271.554483][T11348] ? __alloc_skb+0x276/0x7a0 [ 271.554508][T11348] ? netlink_sendmsg+0x650/0xb40 [ 271.554533][T11348] ? skb_put+0x112/0x210 [ 271.554556][T11348] netlink_sendmsg+0x6c0/0xb40 [ 271.554595][T11348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.554625][T11348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 271.554660][T11348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.554684][T11348] sock_sendmsg_nosec+0x13a/0x180 [ 271.554715][T11348] ____sys_sendmsg+0x54e/0x850 [ 271.554745][T11348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.554777][T11348] ? import_iovec+0x73/0xa0 [ 271.554809][T11348] ___sys_sendmsg+0x2a5/0x360 [ 271.554832][T11348] ? __lock_acquire+0x683/0x2cf0 [ 271.554863][T11348] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.554922][T11348] ? __fget_files+0x2a/0x420 [ 271.554947][T11348] ? __fget_files+0x3a2/0x420 [ 271.554982][T11348] __x64_sys_sendmsg+0x1b1/0x290 [ 271.555012][T11348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.555053][T11348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.555076][T11348] do_syscall_64+0x174/0x580 [ 271.555104][T11348] ? trace_irq_disable+0x3b/0x140 [ 271.555128][T11348] ? clear_bhb_loop+0x70/0xc0 [ 271.555163][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.555184][T11348] RIP: 0033:0x7f4de259e0d9 [ 271.555202][T11348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.555220][T11348] RSP: 002b:00007f4de34aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.555242][T11348] RAX: ffffffffffffffda RBX: 00007f4de2825fa0 RCX: 00007f4de259e0d9 [ 271.555257][T11348] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 271.555271][T11348] RBP: 00007f4de34aa090 R08: 0000000000000000 R09: 0000000000000000 [ 271.555284][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.555297][T11348] R13: 00007f4de2826038 R14: 00007f4de2825fa0 R15: 00007fff8cff2208 [ 271.555331][T11348] [ 271.561605][T11350] __nla_validate_parse: 5 callbacks suppressed [ 271.561622][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1395'. [ 271.960734][T11357] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.089719][T11364] syzkaller0: mtu less than device minimum [ 272.340492][T11383] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1403'. [ 272.389584][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1403'. [ 272.426776][T11383] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1403'. [ 272.544584][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1405'. [ 272.737822][T11397] syzkaller0: entered promiscuous mode [ 272.757436][T11397] syzkaller0: entered allmulticast mode [ 273.355296][T11422] netlink: 'syz.6.1411': attribute type 6 has an invalid length. [ 273.479912][T11431] syz_tun: entered allmulticast mode [ 273.485955][T11430] netlink: 'syz.1.1413': attribute type 1 has an invalid length. [ 273.679866][T11439] veth13: entered allmulticast mode [ 273.709146][T11439] bond11: (slave veth13): Enslaving as an active interface with a down link [ 273.757787][T11444] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 273.772203][ T5268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.026409][T11462] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1416'. [ 274.040657][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1417'. [ 274.160220][T11469] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1416'. [ 274.188862][T11424] syz_tun: left allmulticast mode [ 274.458686][T11473] openvswitch: netlink: IP tunnel dst address not specified [ 274.471344][T11473] xt_bpf: check failed: parse error [ 274.578620][T11475] Cannot find set identified by id 0 to match [ 274.711108][T11477] siw: device registration error -23 [ 276.486387][T11433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.722187][T11484] Cannot find set identified by id 0 to match [ 276.740701][T11482] netlink: 'syz.5.1421': attribute type 12 has an invalid length. [ 276.759900][T11491] ip_tables: iptables: counters copy to user failed while replacing table [ 276.925016][T11486] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 277.282242][T11511] netlink: 'syz.6.1431': attribute type 1 has an invalid length. [ 277.392174][T11519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1431'. [ 277.396204][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 277.585529][T11526] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1434'. [ 277.620011][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1431'. [ 277.662258][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1434'. [ 277.719906][T11529] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1434'. [ 278.358342][T11538] ip_tables: iptables: counters copy to user failed while replacing table [ 278.927849][T11572] FAULT_INJECTION: forcing a failure. [ 278.927849][T11572] name failslab, interval 1, probability 0, space 0, times 0 [ 278.949826][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1444'. [ 278.952424][T11572] CPU: 0 UID: 0 PID: 11572 Comm: syz.5.1446 Not tainted syzkaller #0 PREEMPT(full) [ 278.952497][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.952529][T11572] Call Trace: [ 278.952551][T11572] [ 278.952572][T11572] dump_stack_lvl+0xe8/0x150 [ 278.952664][T11572] should_fail_ex+0x40c/0x560 [ 278.952727][T11572] ? alloc_netdev_mqs+0xadd/0x12b0 [ 278.952832][T11572] should_failslab+0xa8/0x100 [ 278.952918][T11572] __kvmalloc_node_noprof+0x176/0x860 [ 278.953048][T11572] ? alloc_netdev_mqs+0xadd/0x12b0 [ 278.953134][T11572] alloc_netdev_mqs+0xadd/0x12b0 [ 278.953219][T11572] rtnl_create_link+0x321/0xd70 [ 278.953305][T11572] rtnl_newlink_create+0x258/0x7b0 [ 278.953400][T11572] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 278.953474][T11572] ? __pfx___mutex_lock+0x10/0x10 [ 278.953582][T11572] ? ns_capable+0x89/0xe0 [ 278.953657][T11572] rtnl_newlink+0x166d/0x1c30 [ 278.953753][T11572] ? __pfx_rtnl_newlink+0x10/0x10 [ 278.953798][T11572] ? do_syscall_64+0x174/0x580 [ 278.953866][T11572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.954027][T11572] ? kasan_quarantine_put+0xbb/0x1f0 [ 278.954091][T11572] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.954200][T11572] ? nlmon_xmit+0xb0/0x100 [ 278.954290][T11572] ? kmem_cache_free+0x182/0x650 [ 278.954395][T11572] ? __lock_acquire+0x683/0x2cf0 [ 278.954484][T11572] ? __dev_queue_xmit+0x29b/0x3820 [ 278.954557][T11572] ? __local_bh_enable_ip+0xd0/0x130 [ 278.954619][T11572] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.954705][T11572] ? __dev_queue_xmit+0x29b/0x3820 [ 278.954766][T11572] ? __local_bh_enable_ip+0xd0/0x130 [ 278.954820][T11572] ? __dev_queue_xmit+0x29b/0x3820 [ 278.954899][T11572] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 278.954995][T11572] ? __pfx_rtnl_newlink+0x10/0x10 [ 278.955046][T11572] rtnetlink_rcv_msg+0x802/0xc00 [ 278.955109][T11572] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 278.955162][T11572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.955207][T11572] ? ref_tracker_free+0x689/0x830 [ 278.955279][T11572] ? __pfx_ref_tracker_free+0x10/0x10 [ 278.955376][T11572] netlink_rcv_skb+0x226/0x4a0 [ 278.955447][T11572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.955502][T11572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.955631][T11572] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.955699][T11572] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.955776][T11572] netlink_unicast+0x7bb/0x940 [ 278.955871][T11572] netlink_sendmsg+0x813/0xb40 [ 278.955965][T11572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.956040][T11572] ? aa_sock_msg_perm+0xf1/0x1b0 [ 278.956126][T11572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.956189][T11572] sock_sendmsg_nosec+0x13a/0x180 [ 278.956265][T11572] ____sys_sendmsg+0x54e/0x850 [ 278.956339][T11572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.956431][T11572] ? import_iovec+0x73/0xa0 [ 278.956507][T11572] ___sys_sendmsg+0x2a5/0x360 [ 278.956569][T11572] ? __lock_acquire+0x683/0x2cf0 [ 278.956653][T11572] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.956811][T11572] ? __fget_files+0x2a/0x420 [ 278.956869][T11572] ? __fget_files+0x3a2/0x420 [ 278.956985][T11572] __x64_sys_sendmsg+0x1b1/0x290 [ 278.957071][T11572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.957186][T11572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.957242][T11572] do_syscall_64+0x174/0x580 [ 278.957316][T11572] ? trace_irq_disable+0x3b/0x140 [ 278.957388][T11572] ? clear_bhb_loop+0x70/0xc0 [ 278.957451][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.957505][T11572] RIP: 0033:0x7f5858b9e0d9 [ 278.957557][T11572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.957601][T11572] RSP: 002b:00007f5859a1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.957663][T11572] RAX: ffffffffffffffda RBX: 00007f5858e25fa0 RCX: 00007f5858b9e0d9 [ 278.957697][T11572] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 278.957729][T11572] RBP: 00007f5859a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 278.957768][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.957792][T11572] R13: 00007f5858e26038 R14: 00007f5858e25fa0 R15: 00007ffcd0951298 [ 278.957872][T11572] [ 279.732344][T11590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1450'. [ 279.879146][T11598] netlink: 'syz.6.1452': attribute type 1 has an invalid length. [ 279.936226][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1452'. [ 279.957276][T11598] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1452'. [ 280.008893][T11600] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 281.537043][T11638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.601730][T11641] dvmrp8: entered allmulticast mode [ 281.613334][T11645] xt_hashlimit: size too large, truncated to 1048576 [ 282.616602][T11681] syzkaller0: entered promiscuous mode [ 282.653790][T11681] syzkaller0: entered allmulticast mode [ 282.724870][T11681] tipc: Enabled bearer , priority 0 [ 282.934680][T11694] __nla_validate_parse: 3 callbacks suppressed [ 282.934701][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 282.986950][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 283.031726][T11694] team1: entered promiscuous mode [ 283.037877][T11694] team1: entered allmulticast mode [ 283.044078][T11694] 8021q: adding VLAN 0 to HW filter on device team1 [ 283.057973][T11696] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1483'. [ 283.070046][T11691] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1482'. [ 283.158462][T11704] team2: entered promiscuous mode [ 283.170135][T11704] team2: entered allmulticast mode [ 283.186946][T11704] 8021q: adding VLAN 0 to HW filter on device team2 [ 283.282105][T11666] tipc: Resetting bearer [ 283.395222][T11666] tipc: Disabling bearer [ 283.438405][T11710] Bluetooth: MGMT ver 1.23 [ 283.607095][T11715] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1489'. [ 283.648509][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1489'. [ 283.659045][T11718] FAULT_INJECTION: forcing a failure. [ 283.659045][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.686529][T11718] CPU: 0 UID: 0 PID: 11718 Comm: syz.0.1491 Not tainted syzkaller #0 PREEMPT(full) [ 283.686558][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.686570][T11718] Call Trace: [ 283.686578][T11718] [ 283.686587][T11718] dump_stack_lvl+0xe8/0x150 [ 283.686622][T11718] should_fail_ex+0x40c/0x560 [ 283.686649][T11718] _copy_from_iter+0x1d3/0x1660 [ 283.686678][T11718] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 283.686705][T11718] ? rcu_is_watching+0x15/0xb0 [ 283.686736][T11718] ? trace_kmem_cache_alloc+0x29/0xe0 [ 283.686763][T11718] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 283.686788][T11718] ? __pfx__copy_from_iter+0x10/0x10 [ 283.686811][T11718] ? __alloc_skb+0x276/0x7a0 [ 283.686830][T11718] ? __alloc_skb+0x276/0x7a0 [ 283.686855][T11718] ? netlink_sendmsg+0x650/0xb40 [ 283.686878][T11718] ? skb_put+0x112/0x210 [ 283.686902][T11718] netlink_sendmsg+0x6c0/0xb40 [ 283.686937][T11718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.686966][T11718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 283.687003][T11718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.687027][T11718] sock_sendmsg_nosec+0x13a/0x180 [ 283.687059][T11718] ____sys_sendmsg+0x54e/0x850 [ 283.687088][T11718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.687121][T11718] ? import_iovec+0x73/0xa0 [ 283.687152][T11718] ___sys_sendmsg+0x2a5/0x360 [ 283.687174][T11718] ? __lock_acquire+0x683/0x2cf0 [ 283.687205][T11718] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.687266][T11718] ? __fget_files+0x2a/0x420 [ 283.687291][T11718] ? __fget_files+0x3a2/0x420 [ 283.687328][T11718] __x64_sys_sendmsg+0x1b1/0x290 [ 283.687363][T11718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.687407][T11718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.687430][T11718] do_syscall_64+0x174/0x580 [ 283.687461][T11718] ? trace_irq_disable+0x3b/0x140 [ 283.687487][T11718] ? clear_bhb_loop+0x70/0xc0 [ 283.687513][T11718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.687535][T11718] RIP: 0033:0x7f2a37d9e0d9 [ 283.687554][T11718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.687572][T11718] RSP: 002b:00007f2a38c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.687595][T11718] RAX: ffffffffffffffda RBX: 00007f2a38025fa0 RCX: 00007f2a37d9e0d9 [ 283.687610][T11718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 283.687623][T11718] RBP: 00007f2a38c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 283.687636][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.687648][T11718] R13: 00007f2a38026038 R14: 00007f2a38025fa0 R15: 00007ffe8a9907c8 [ 283.687682][T11718] [ 283.998445][T11715] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1489'. [ 284.016480][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.169311][T11739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1496'. [ 284.285391][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'. [ 284.316861][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'. [ 284.434580][T11753] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.461704][T11756] netlink: 'syz.6.1498': attribute type 1 has an invalid length. [ 305.579328][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1506'. [ 305.590352][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 305.689412][T11775] 8021q: adding VLAN 0 to HW filter on device bond14 [ 306.380021][T11805] x_tables: duplicate entry at hook 1 [ 306.521634][T11797] lo speed is unknown, defaulting to 1000 [ 306.607386][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1511'. [ 306.627579][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 306.637923][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 306.711055][T11807] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 306.796710][T11815] 0: reclassify loop, rule prio 0, protocol 03 [ 307.056908][T11822] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 307.452565][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1518'. [ 307.537292][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1518'. [ 308.277244][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1525'. [ 308.462243][T11866] syzkaller0: left promiscuous mode [ 308.485263][T11866] syzkaller0: left allmulticast mode [ 308.667720][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1528'. [ 308.792403][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 308.802194][T11878] lo speed is unknown, defaulting to 1000 [ 308.815254][T11888] tc_dump_action: action bad kind [ 309.152325][T11904] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 309.657705][T11904] 8021q: adding VLAN 0 to HW filter on device bond15 [ 310.519907][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.527862][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.567913][T11952] bridge0: entered allmulticast mode [ 310.610304][T11950] __nla_validate_parse: 4 callbacks suppressed [ 310.610323][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 310.670796][T11960] bridge_slave_1: left allmulticast mode [ 310.681807][T11960] bridge_slave_1: left promiscuous mode [ 310.705915][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.777024][T11960] bridge_slave_0: left allmulticast mode [ 310.808974][T11960] bridge_slave_0: left promiscuous mode [ 310.843185][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.322046][T11967] syzkaller0: entered promiscuous mode [ 311.356199][T11967] syzkaller0: entered allmulticast mode [ 311.386445][T11988] FAULT_INJECTION: forcing a failure. [ 311.386445][T11988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.450075][T11988] CPU: 0 UID: 0 PID: 11988 Comm: syz.6.1548 Not tainted syzkaller #0 PREEMPT(full) [ 311.450104][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.450117][T11988] Call Trace: [ 311.450126][T11988] [ 311.450135][T11988] dump_stack_lvl+0xe8/0x150 [ 311.450170][T11988] should_fail_ex+0x40c/0x560 [ 311.450199][T11988] _copy_to_user+0x31/0xb0 [ 311.450231][T11988] simple_read_from_buffer+0xe1/0x170 [ 311.450274][T11988] proc_fail_nth_read+0x1bb/0x230 [ 311.450308][T11988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.450340][T11988] ? rw_verify_area+0x24a/0x4c0 [ 311.450377][T11988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.450404][T11988] vfs_read+0x213/0xa80 [ 311.450441][T11988] ? __pfx___mutex_lock+0x10/0x10 [ 311.450475][T11988] ? __pfx_vfs_read+0x10/0x10 [ 311.450507][T11988] ? __fget_files+0x2a/0x420 [ 311.450539][T11988] ? __fget_files+0x3a2/0x420 [ 311.450564][T11988] ? __fget_files+0x2a/0x420 [ 311.450601][T11988] ksys_read+0x150/0x270 [ 311.450635][T11988] ? __pfx_ksys_read+0x10/0x10 [ 311.450686][T11988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.450709][T11988] do_syscall_64+0x174/0x580 [ 311.450738][T11988] ? trace_irq_disable+0x3b/0x140 [ 311.450762][T11988] ? clear_bhb_loop+0x70/0xc0 [ 311.450788][T11988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.450809][T11988] RIP: 0033:0x7f09ee55e90e [ 311.450827][T11988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.450846][T11988] RSP: 002b:00007f09ef38bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.450867][T11988] RAX: ffffffffffffffda RBX: 00007f09ef38c6c0 RCX: 00007f09ee55e90e [ 311.450882][T11988] RDX: 000000000000000f RSI: 00007f09ef38c0a0 RDI: 0000000000000003 [ 311.450894][T11988] RBP: 00007f09ef38c090 R08: 0000000000000000 R09: 0000000000000000 [ 311.450907][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.450919][T11988] R13: 00007f09ee826038 R14: 00007f09ee825fa0 R15: 00007ffcb54f8518 [ 311.450952][T11988] [ 311.919883][T11998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1552'. [ 312.099720][ T12] IPVS: starting estimator thread 0... [ 312.212952][T12010] IPVS: using max 29 ests per chain, 69600 per kthread [ 314.458917][T12023] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 314.467062][T12023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1559'. [ 314.747194][T12039] netlink: 'syz.1.1560': attribute type 1 has an invalid length. [ 314.983818][T12039] 8021q: adding VLAN 0 to HW filter on device bond12 [ 315.159015][T12039] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1560'. [ 315.551433][T12076] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 315.598862][T12076] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 315.682628][T12088] Cannot find set identified by id 0 to match [ 315.700482][T12082] netlink: 'syz.6.1570': attribute type 2 has an invalid length. [ 315.735895][T12082] netlink: 'syz.6.1570': attribute type 2 has an invalid length. [ 315.774651][T12082] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.1570'. [ 315.881871][T12092] ip_tables: iptables: counters copy to user failed while replacing table [ 316.107226][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'. [ 316.500525][T12122] netlink: 'syz.1.1580': attribute type 10 has an invalid length. [ 316.517720][T12122] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.529836][T12122] team0: entered promiscuous mode [ 316.553853][T12122] team_slave_0: entered promiscuous mode [ 316.568935][T12122] team_slave_1: entered promiscuous mode [ 316.588186][T12128] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 316.605439][T12122] bond0: (slave team0): Enslaving as an active interface with an up link [ 316.826215][T12128] 8021q: adding VLAN 0 to HW filter on device bond14 [ 316.932573][T12126] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1579'. [ 319.025700][T12101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.263784][T12177] ip_tables: iptables: counters copy to user failed while replacing table [ 319.297011][T12180] sit0: entered promiscuous mode [ 319.333458][T12180] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 319.360641][T12183] sctp: [Deprecated]: syz.1.1586 (pid 12183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.360641][T12183] Use struct sctp_sack_info instead [ 319.387564][T12180] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1586'. [ 319.413615][T12187] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1588'. [ 319.511118][T12188] xfrm1: entered allmulticast mode [ 319.834193][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 319.972515][T12214] macsec1: entered allmulticast mode [ 319.995215][T12214] dummy0: entered allmulticast mode [ 320.007085][T12214] dummy0: entered promiscuous mode [ 320.041130][T12214] dummy0: left allmulticast mode [ 320.106618][ T5339] dummy0: left promiscuous mode [ 320.117098][T12225] netlink: 'syz.5.1595': attribute type 1 has an invalid length. [ 320.219916][T12225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.250354][T12218] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1595'. [ 320.601586][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 321.233908][T12267] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1603'. [ 321.438719][T12278] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 321.516986][T12285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.695137][T12297] nbd: must specify at least one socket [ 321.711357][T12297] block nbd2: NBD_DISCONNECT [ 321.753765][T12297] block nbd2: Send disconnect failed -104 [ 321.781468][T12297] block nbd2: shutting down sockets [ 321.951504][T12310] netlink: 'syz.0.1611': attribute type 2 has an invalid length. [ 322.001445][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1611'. [ 322.740471][T12334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'. [ 322.805612][T12330] netlink: 'syz.5.1615': attribute type 10 has an invalid length. [ 322.898475][T12330] team0: Device dummy0 is of different type [ 323.119115][T12336] lo speed is unknown, defaulting to 1000 [ 323.135022][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 323.167371][T12354] netlink: get zone limit has 4 unknown bytes [ 323.465834][T12363] tipc: MTU too low for tipc bearer [ 323.757720][T12371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1626'. [ 323.817423][T12381] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1628'. [ 324.047144][T12390] "syz.6.1633" (12390) uses obsolete ecb(arc4) skcipher [ 324.059605][T12385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1630'. [ 324.095347][T12391] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 324.152217][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1634'. [ 324.413811][T12404] tc_dump_action: action bad kind [ 324.741006][T12418] openvswitch: netlink: VLAN attribute unexpected. [ 324.754424][T12422] FAULT_INJECTION: forcing a failure. [ 324.754424][T12422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.791290][T12422] CPU: 1 UID: 0 PID: 12422 Comm: syz.5.1641 Not tainted syzkaller #0 PREEMPT(full) [ 324.791320][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.791332][T12422] Call Trace: [ 324.791340][T12422] [ 324.791349][T12422] dump_stack_lvl+0xe8/0x150 [ 324.791383][T12422] should_fail_ex+0x40c/0x560 [ 324.791411][T12422] _copy_from_user+0x2d/0xb0 [ 324.791441][T12422] kstrtouint_from_user+0xd6/0x180 [ 324.791467][T12422] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 324.791507][T12422] proc_fail_nth_write+0x8e/0x210 [ 324.791537][T12422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.791575][T12422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.791603][T12422] vfs_write+0x296/0xba0 [ 324.791642][T12422] ? __pfx_vfs_write+0x10/0x10 [ 324.791675][T12422] ? __fget_files+0x2a/0x420 [ 324.791707][T12422] ? __fget_files+0x3a2/0x420 [ 324.791732][T12422] ? __fget_files+0x2a/0x420 [ 324.791768][T12422] ksys_write+0x150/0x270 [ 324.791802][T12422] ? __pfx_ksys_write+0x10/0x10 [ 324.791841][T12422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.791865][T12422] do_syscall_64+0x174/0x580 [ 324.791906][T12422] ? trace_irq_disable+0x3b/0x140 [ 324.791932][T12422] ? clear_bhb_loop+0x70/0xc0 [ 324.791960][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.791981][T12422] RIP: 0033:0x7f5858b5e90e [ 324.792002][T12422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.792020][T12422] RSP: 002b:00007f5859a19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.792047][T12422] RAX: ffffffffffffffda RBX: 00007f5859a1a6c0 RCX: 00007f5858b5e90e [ 324.792062][T12422] RDX: 0000000000000001 RSI: 00007f5859a1a0a0 RDI: 0000000000000003 [ 324.792075][T12422] RBP: 00007f5859a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 324.792088][T12422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.792101][T12422] R13: 00007f5858e26038 R14: 00007f5858e25fa0 R15: 00007ffcd0951298 [ 324.792135][T12422] [ 325.257341][T12423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1639'. [ 325.408945][T12438] x_tables: duplicate underflow at hook 1 [ 325.955634][T12455] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1647'. [ 326.248039][T12473] xt_hashlimit: max too large, truncated to 1048576 [ 326.546233][T12481] __nla_validate_parse: 3 callbacks suppressed [ 326.546253][T12481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1654'. [ 329.321990][T12498] Cannot find set identified by id 0 to match [ 329.339940][T12497] netlink: 'syz.1.1658': attribute type 10 has an invalid length. [ 329.564299][T12503] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1660'. [ 329.610954][T12503] x_tables: duplicate underflow at hook 3 [ 329.814005][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 330.229449][T12534] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1669'. [ 330.365490][T12538] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 330.405296][T12538] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 330.603958][T12542] Cannot find set identified by id 0 to match [ 331.098909][T12558] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.1678'. [ 331.318754][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1680'. [ 331.505498][T12573] lo: entered allmulticast mode [ 331.526615][T12573] lo: left allmulticast mode [ 331.622340][T12577] Cannot find set identified by id 0 to match [ 331.847565][T12587] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1690'. [ 332.141034][T12590] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 332.247539][T12604] bond0: (slave bond_slave_0): Releasing backup interface [ 332.301989][T12604] bond0: (slave bond_slave_1): Releasing backup interface [ 332.312358][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 332.343555][T12625] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1695'. [ 332.378024][T12625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1695'. [ 332.415094][T12604] team0: Port device team_slave_0 removed [ 332.434520][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1695'. [ 332.475549][T12604] team0: Port device team_slave_1 removed [ 332.496446][T12625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1695'. [ 332.510583][T12604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.533886][T12604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.544244][T12625] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1695'. [ 332.562015][T12604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.571893][T12604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.584311][T12604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.641584][T12603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.849987][T12595] bond16 (unregistering): Released all slaves [ 332.990480][T12590] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 333.065281][T12626] veth0_macvtap: mtu less than device minimum [ 333.117598][T12620] batadv_slave_1: entered promiscuous mode [ 333.136168][T12635] batadv_slave_1: left promiscuous mode [ 333.347417][T12658] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1699'. [ 333.409247][T12658] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1699'. [ 333.473091][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 333.514424][T12662] syzkaller0: entered promiscuous mode [ 333.530859][T12662] syzkaller0: entered allmulticast mode [ 334.569309][T12722] netlink: 'syz.6.1715': attribute type 1 has an invalid length. [ 334.620040][T12722] openvswitch: netlink: VLAN attribute unexpected. [ 334.691743][T12722] ipvlan2: entered allmulticast mode [ 334.740932][T12722] syz_tun: entered allmulticast mode [ 334.957427][T12735] netlink: 'syz.5.1719': attribute type 2 has an invalid length. [ 335.097441][T12744] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 335.142500][T12744] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 335.552171][T12762] netlink: 'syz.0.1724': attribute type 9 has an invalid length. [ 336.168452][T12781] smbdirect: ib_dev[syz2] removed [ 336.538803][T12794] macsec1: entered allmulticast mode [ 336.566148][T12794] syz_tun: entered allmulticast mode [ 336.583674][T12798] ip_tables: iptables: counters copy to user failed while replacing table [ 336.627846][T12794] syz_tun: left allmulticast mode [ 337.179935][T12824] __nla_validate_parse: 20 callbacks suppressed [ 337.179953][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 337.198752][T12825] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1743'. [ 337.266381][T12829] netlink: 'syz.5.1744': attribute type 1 has an invalid length. [ 337.319168][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1742'. [ 337.324283][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1744'. [ 337.474197][T12829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.544790][T12846] ip_tables: iptables: counters copy to user failed while replacing table [ 337.559886][T12827] 8021q: adding VLAN 0 to HW filter on device bond17 [ 337.570685][T12827] bond16: (slave bond17): Enslaving as an active interface with an up link [ 337.589514][T12831] smc: net device lo applied user defined pnetid SYZ2 [ 337.600413][T12824] 8021q: adding VLAN 0 to HW filter on device bond16 [ 337.609423][T12834] smc: net device lo erased user defined pnetid SYZ2 [ 337.725671][T12829] bond2: (slave gretap2): making interface the new active one [ 337.760562][T12829] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 337.918431][T12858] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1751'. [ 337.963992][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1751'. [ 337.991481][T12858] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1751'. [ 338.254793][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1758'. [ 338.315000][T12879] syzkaller1: entered promiscuous mode [ 338.328740][T12879] syzkaller1: entered allmulticast mode [ 338.424259][T12888] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.438592][T12888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.445935][T12888] IPv6: NLM_F_CREATE should be set when creating new route [ 338.728765][T12896] ip_tables: iptables: counters copy to user failed while replacing table [ 338.759607][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1764'. [ 339.268880][T12915] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1766'. [ 339.664419][T12933] netlink: 'syz.1.1773': attribute type 2 has an invalid length. [ 339.776894][T12939] ip_tables: iptables: counters copy to user failed while replacing table [ 339.948562][T12943] ip6tnl1: entered promiscuous mode [ 340.435669][T12970] netlink: 'syz.5.1785': attribute type 4 has an invalid length. [ 340.893260][T12987] ip_tables: iptables: counters copy to user failed while replacing table [ 341.574879][T13014] bond15: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 341.596745][T13014] bond15 (unregistering): Released all slaves [ 341.637096][T13019] tunl0: entered promiscuous mode [ 341.652994][T13019] tunl0: entered allmulticast mode [ 341.831686][T13028] Cannot find set identified by id 0 to match [ 341.978499][T13032] tipc: Failed to remove unknown binding: 66,1,1/252952991:499430735/499430737 [ 342.180142][T13041] sctp: [Deprecated]: syz.0.1803 (pid 13041) Use of int in max_burst socket option deprecated. [ 342.180142][T13041] Use struct sctp_assoc_value instead [ 342.247189][T13045] tipc: Enabling of bearer rejected, already enabled [ 342.703790][T13057] ip_tables: iptables: counters copy to user failed while replacing table [ 342.924718][T13059] netlink: 'syz.2.1813': attribute type 17 has an invalid length. [ 344.099580][T13095] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 344.201496][T13097] __nla_validate_parse: 15 callbacks suppressed [ 344.201520][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1821'. [ 344.232478][ T6135] IPVS: starting estimator thread 0... [ 344.338419][T13098] IPVS: using max 42 ests per chain, 100800 per kthread [ 344.374038][T13072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.398244][T13072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.537597][T13072] geneve1: left promiscuous mode [ 344.545241][T13072] geneve1: left allmulticast mode [ 344.579380][T13072] bridge1: left promiscuous mode [ 344.593794][T13072] ip6gre1: left promiscuous mode [ 344.599342][T13072] ip6gre1: left allmulticast mode [ 344.607892][T13072] ipip0: left promiscuous mode [ 344.698268][T13072] veth7: left allmulticast mode [ 344.715554][T13072] xfrm1: left allmulticast mode [ 344.774128][ T1033] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.809167][ T1033] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.850539][ T1033] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.900502][ T1033] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.987665][T13113] ip_tables: iptables: counters copy to user failed while replacing table [ 345.200569][T13116] bridge0: entered promiscuous mode [ 345.219605][T13116] bridge0: entered allmulticast mode [ 345.268148][T13116] team0: Port device bridge0 added [ 345.721448][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'. [ 346.719900][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'. [ 346.962007][T13187] tipc: Enabling of bearer rejected, failed to enable media [ 347.221859][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 347.232278][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 347.243297][T13200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1850'. [ 347.257274][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1850'. [ 347.375172][T13204] openvswitch: netlink: Duplicate or invalid key (type 0). [ 347.387333][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 347.478701][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 347.662386][T13218] bond18: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 347.675905][T13218] bond18 (unregistering): Released all slaves [ 348.014448][T13233] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.028395][T13233] syzkaller1: Linktype set failed because interface is up [ 348.035808][ T24] syzkaller1: tun_net_xmit 90 [ 348.058796][T13238] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 348.068891][T13238] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1857'. [ 348.079119][T13238] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 348.218647][T13244] bond0: (slave batadv0): Releasing backup interface [ 348.245640][T13244] bridge_slave_0: left allmulticast mode [ 348.251578][T13244] bridge_slave_0: left promiscuous mode [ 348.268182][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.315111][T13244] bridge_slave_1: left allmulticast mode [ 348.332055][T13244] bridge_slave_1: left promiscuous mode [ 348.363464][T13251] netlink: 'syz.0.1860': attribute type 11 has an invalid length. [ 348.398020][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.444133][T13244] bond0: (slave bond_slave_0): Releasing backup interface [ 348.486148][T13244] bond0: (slave bond_slave_1): Releasing backup interface [ 348.549865][T13244] team0: Port device team_slave_1 removed [ 348.586940][T13244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.614906][T13244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.656523][T13244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.737034][T13249] team0: Port device xfrm0 added [ 348.771603][T13267] openvswitch: netlink: Missing valid actions attribute. [ 348.795308][T13267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.216263][T13287] sctp: [Deprecated]: syz.6.1872 (pid 13287) Use of int in max_burst socket option. [ 349.216263][T13287] Use struct sctp_assoc_value instead [ 349.734382][T13312] __nla_validate_parse: 6 callbacks suppressed [ 349.734421][T13312] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1877'. [ 349.773604][T13314] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1877'. [ 349.847614][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 349.861862][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1878'. [ 350.020372][T13320] tipc: Enabling of bearer rejected, already enabled [ 350.068520][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 350.099140][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 350.110199][T13320] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 350.140946][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1879'. [ 350.729482][T13341] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 350.857683][ T30] audit: type=1800 audit(1786477875.356:11): pid=13344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1887" name="r" dev="tmpfs" ino=2116 res=0 errno=0 [ 350.896667][T13348] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1888'. [ 350.917163][ T30] audit: type=1800 audit(1786477875.356:12): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1889" name=680B20 dev="tmpfs" ino=2043 res=0 errno=0 [ 350.973166][T13350] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1890'. [ 351.022090][T13350] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1890'. [ 351.142688][T13353] bond3: entered promiscuous mode [ 351.149346][T13353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.385520][T13378] syzkaller0: entered promiscuous mode [ 351.403883][T13378] syzkaller0: entered allmulticast mode [ 351.444273][T13376] tipc: Enabled bearer , priority 0 [ 351.466293][T13378] tipc: Enabling of bearer rejected, already enabled [ 351.485982][T13376] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 351.525989][T13376] team0: No ports can be present during mode change [ 351.566560][T13374] tipc: Resetting bearer [ 351.647521][T13374] tipc: Disabling bearer [ 351.930711][T13397] pim6reg: entered allmulticast mode [ 352.466228][T13428] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 352.883528][T13449] netlink: 'syz.5.1916': attribute type 1 has an invalid length. [ 352.934979][T13449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.111851][T13449] bond4: (slave geneve2): making interface the new active one [ 353.126683][T13449] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 353.136176][T13454] tc_dump_action: action bad kind [ 353.577703][T13477] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 353.820129][T13489] tipc: Can't bind to reserved service type 0 [ 354.424627][T13516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.471256][T13516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.751037][T13526] __nla_validate_parse: 11 callbacks suppressed [ 354.751059][T13526] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1930'. [ 354.977630][T13534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.984991][T13534] IPv6: NLM_F_CREATE should be set when creating new route [ 354.992315][T13534] IPv6: NLM_F_CREATE should be set when creating new route [ 355.144455][T13542] netlink: 'syz.5.1935': attribute type 9 has an invalid length. [ 355.175749][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1935'. [ 355.521878][T13550] syzkaller0: entered promiscuous mode [ 355.537551][T13550] syzkaller0: entered allmulticast mode [ 356.097521][T13570] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1942'. [ 356.126121][T13570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1942'. [ 356.211307][T13570] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1942'. [ 356.310660][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1940'. [ 356.487392][T13579] bond1: entered promiscuous mode [ 356.493508][T13579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.500941][T13585] netlink: 'syz.6.1940': attribute type 7 has an invalid length. [ 356.512260][T13585] netlink: 'syz.6.1940': attribute type 8 has an invalid length. [ 356.668361][T13604] netlink: 'syz.6.1948': attribute type 17 has an invalid length. [ 356.704456][T13607] Cannot find set identified by id 0 to match [ 357.051676][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 357.116285][T13627] netlink: 'syz.0.1954': attribute type 3 has an invalid length. [ 357.179068][T13624] 8021q: adding VLAN 0 to HW filter on device bond18 [ 357.205023][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 357.263618][T13627] bond18 (unregistering): Released all slaves [ 357.530189][T13642] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1957'. [ 357.549953][T13646] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1958'. [ 357.968282][T13664] Cannot find set identified by id 0 to match [ 357.998610][T13664] FAULT_INJECTION: forcing a failure. [ 357.998610][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 358.036492][T13664] CPU: 0 UID: 0 PID: 13664 Comm: syz.6.1963 Not tainted syzkaller #0 PREEMPT(full) [ 358.036521][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.036534][T13664] Call Trace: [ 358.036542][T13664] [ 358.036551][T13664] dump_stack_lvl+0xe8/0x150 [ 358.036585][T13664] should_fail_ex+0x40c/0x560 [ 358.036613][T13664] should_failslab+0xa8/0x100 [ 358.036644][T13664] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 358.036684][T13664] ? sock_alloc_inode+0x2c/0x1a0 [ 358.036721][T13664] ? sock_alloc_inode+0x2c/0x1a0 [ 358.036753][T13664] ? __pfx_sock_alloc_inode+0x10/0x10 [ 358.036780][T13664] sock_alloc_inode+0x2c/0x1a0 [ 358.036807][T13664] ? __pfx_sock_alloc_inode+0x10/0x10 [ 358.036832][T13664] alloc_inode+0x6a/0x1b0 [ 358.036859][T13664] __sock_create+0x12d/0x9d0 [ 358.036898][T13664] mptcp_subflow_create_socket+0xfd/0x810 [ 358.036927][T13664] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 358.036954][T13664] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 358.036981][T13664] ? look_up_lock_class+0x57/0x110 [ 358.037016][T13664] __mptcp_nmpc_sk+0x155/0x770 [ 358.037042][T13664] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 358.037069][T13664] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 358.037105][T13664] mptcp_connect+0x6f/0x7a0 [ 358.037140][T13664] __inet_stream_connect+0x258/0xe00 [ 358.037173][T13664] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.037192][T13664] ? lock_sock_nested+0x6a/0x100 [ 358.037223][T13664] ? __pfx___inet_stream_connect+0x10/0x10 [ 358.037251][T13664] ? inet_stream_connect+0x51/0xa0 [ 358.037277][T13664] ? __local_bh_enable_ip+0xd0/0x130 [ 358.037305][T13664] inet_stream_connect+0x66/0xa0 [ 358.037333][T13664] __sys_connect+0x323/0x460 [ 358.037387][T13664] ? __pfx___sys_connect+0x10/0x10 [ 358.037433][T13664] ? __pfx_ksys_write+0x10/0x10 [ 358.037470][T13664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.037494][T13664] __x64_sys_connect+0x7a/0x90 [ 358.037527][T13664] do_syscall_64+0x174/0x580 [ 358.037559][T13664] ? trace_irq_disable+0x3b/0x140 [ 358.037584][T13664] ? clear_bhb_loop+0x70/0xc0 [ 358.037610][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.037631][T13664] RIP: 0033:0x7f09ee59e0d9 [ 358.037651][T13664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.037669][T13664] RSP: 002b:00007f09ef38c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 358.037691][T13664] RAX: ffffffffffffffda RBX: 00007f09ee825fa0 RCX: 00007f09ee59e0d9 [ 358.037716][T13664] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000004 [ 358.037729][T13664] RBP: 00007f09ef38c090 R08: 0000000000000000 R09: 0000000000000000 [ 358.037742][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.037758][T13664] R13: 00007f09ee826038 R14: 00007f09ee825fa0 R15: 00007ffcb54f8518 [ 358.037794][T13664] [ 358.042460][T13664] socket: no more sockets [ 358.620566][T13688] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 358.827464][T13688] 8021q: adding VLAN 0 to HW filter on device bond18 [ 358.989440][T13685] bond18: (slave gretap1): Enslaving as a backup interface with an up link [ 359.054968][ T9022] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 359.243317][ T36] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 359.327223][T13716] bond3: left promiscuous mode [ 359.471619][T13733] bond16: entered promiscuous mode [ 359.478566][T13733] 8021q: adding VLAN 0 to HW filter on device bond16 [ 359.571131][T13733] 8021q: adding VLAN 0 to HW filter on device bond16 [ 359.589929][T13733] bond16: (slave ipip0): The slave device specified does not support setting the MAC address [ 359.602170][T13733] bond16: (slave ipip0): Error -95 calling set_mac_address [ 359.927262][T13756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.130074][T13764] netlink: 'syz.6.1985': attribute type 10 has an invalid length. [ 360.153652][T13764] __nla_validate_parse: 7 callbacks suppressed [ 360.153670][T13764] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1985'. [ 360.595440][T13769] erspan0: entered promiscuous mode [ 360.618105][T13769] sit0: left promiscuous mode [ 360.644900][T13769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.670746][T13769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.785850][T13769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.801902][T13769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.813911][T13769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.848114][T13769] veth1_vlan: left promiscuous mode [ 360.860874][T13769] veth0_vlan: left promiscuous mode [ 360.877580][T13769] veth0_vlan: entered promiscuous mode [ 360.889975][T13769] veth1_vlan: entered promiscuous mode [ 360.903562][T13769] veth1_macvtap: left promiscuous mode [ 360.911592][T13769] veth0_macvtap: left promiscuous mode [ 360.923563][T13769] veth0_macvtap: entered promiscuous mode [ 360.930866][T13769] veth1_macvtap: entered promiscuous mode [ 360.944543][T13769] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 360.969498][T13764] dummy0: entered promiscuous mode [ 361.171558][T13798] netlink: 'syz.6.1990': attribute type 1 has an invalid length. [ 361.193774][ T9022] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.217350][ T9022] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.281285][T13798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.294067][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.303619][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.591289][T13811] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1995'. [ 362.638816][T13865] openvswitch: netlink: Message has 8 unknown bytes. [ 362.959032][T13885] Cannot find set identified by id 0 to match [ 363.276313][T13901] netlink: 'syz.5.2010': attribute type 1 has an invalid length. [ 363.812469][T13923] bond11: (slave veth0_to_bond): Releasing active interface [ 363.986420][T13935] netlink: 'syz.1.2015': attribute type 1 has an invalid length. [ 364.027525][T13935] bond13: entered promiscuous mode [ 364.033440][T13935] 8021q: adding VLAN 0 to HW filter on device bond13 [ 365.413099][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 365.726356][T13872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.944853][T13960] netlink: 'syz.6.2018': attribute type 1 has an invalid length. [ 366.089273][T13960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.270082][T13970] bond3: (slave gretap1): making interface the new active one [ 366.287235][T13970] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 366.297090][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2022'. [ 366.341220][T13982] netlink: 'syz.2.2024': attribute type 2 has an invalid length. [ 366.365323][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 366.375479][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'. [ 366.389294][T13981] netlink: 'syz.1.2023': attribute type 10 has an invalid length. [ 366.397816][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 366.498605][T13981] syzkaller0: entered promiscuous mode [ 366.523772][T13981] syzkaller0: entered allmulticast mode [ 366.549044][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2023'. [ 366.575638][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 366.586615][T13981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2023'. [ 366.704011][T13994] netlink: 'syz.2.2029': attribute type 15 has an invalid length. [ 366.721753][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 366.844224][ T48] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 366.864194][T14002] netlink: 'syz.5.2027': attribute type 39 has an invalid length. [ 366.893473][ T48] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 366.902349][ T48] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 367.373314][T14019] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2033'. [ 367.403806][T14019] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2033'. [ 367.448770][T14020] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 369.054984][T14019] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 369.093633][ T6135] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.133050][ T9022] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.157526][ T9022] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.198925][ T9022] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.180743][T14080] tipc: Enabling of bearer rejected, failed to enable media [ 370.633907][T14115] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 370.687669][T14115] netlink: 'syz.5.2061': attribute type 3 has an invalid length. [ 370.732464][T14115] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 370.761527][T14115] 0ªî{X¹¦: entered allmulticast mode [ 370.769249][T14115] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 371.041634][T14138] ip_tables: iptables: counters copy to user failed while replacing table [ 371.110598][T14132] 8021q: adding VLAN 0 to HW filter on device bond17 [ 371.135424][T14132] bridge0: port 1(bond17) entered blocking state [ 371.155821][T14132] bridge0: port 1(bond17) entered disabled state [ 371.179687][T14132] bond17: entered allmulticast mode [ 371.207633][T14132] bond17: entered promiscuous mode [ 371.609318][T14163] ip_tables: iptables: counters copy to user failed while replacing table [ 371.625274][T14163] __nla_validate_parse: 14 callbacks suppressed [ 371.625309][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 371.661389][T14161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.675339][T14163] x_tables: ip_tables: osf match: only valid for protocol 6 [ 371.861718][T14171] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2076'. [ 372.091155][T14190] x_tables: unsorted entry at hook 2 [ 372.457992][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2084'. [ 372.507897][T14212] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 372.554427][T14207] syzkaller0: entered promiscuous mode [ 372.577037][T14207] syzkaller0: entered allmulticast mode [ 372.664902][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2085'. [ 372.835890][T14222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.869137][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.921813][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.135539][T14222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.201006][T14222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.293762][T14222] veth1_vlan: left promiscuous mode [ 373.317906][T14222] veth0_vlan: left promiscuous mode [ 373.341320][T14222] veth0_vlan: entered promiscuous mode [ 373.351893][T14222] veth1_vlan: entered promiscuous mode [ 373.376421][T14222] veth1_macvtap: left promiscuous mode [ 373.388359][T14222] veth0_macvtap: left promiscuous mode [ 373.395699][T14222] veth0_macvtap: entered promiscuous mode [ 373.404025][T14222] veth1_macvtap: entered promiscuous mode [ 373.427397][T14222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.436809][T14222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.447120][T14222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.469848][T14222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.487831][T14222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.501497][T14222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.513272][T14222] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 373.521683][T14222] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 373.822031][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 373.840859][T14249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2092'. [ 373.903282][ T6135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.954969][ T9021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.974564][ T9021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.002987][ T9022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.018101][ T9022] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 374.307692][T14262] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 374.421873][ T30] audit: type=1804 audit(1786477898.916:13): pid=14244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2090" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=816 res=1 errno=0 [ 374.488884][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 374.518467][ T30] audit: type=1800 audit(1786477898.916:14): pid=14244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2090" name="cgroup.controllers" dev="tmpfs" ino=816 res=0 errno=0 [ 374.586722][T14270] netlink: zone id is out of range [ 374.620823][T14270] netlink: zone id is out of range [ 374.634860][T14270] netlink: zone id is out of range [ 374.646583][T14270] netlink: zone id is out of range [ 374.659894][T14270] netlink: zone id is out of range [ 374.673487][T14270] netlink: zone id is out of range [ 374.694637][T14270] netlink: zone id is out of range [ 374.720247][T14270] netlink: zone id is out of range [ 375.070220][T14292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2104'. [ 375.122495][T14294] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 375.470560][T14312] netlink: 'syz.5.2109': attribute type 1 has an invalid length. [ 375.569940][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 375.667617][T14312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.710554][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 375.895562][T14292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.766451][T14369] __nla_validate_parse: 69 callbacks suppressed [ 376.766470][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2120'. [ 377.801258][T14399] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2131'. [ 377.803439][T14375] xt_hashlimit: size too large, truncated to 1048576 [ 377.840122][T14375] xt_hashlimit: max too large, truncated to 1048576 [ 378.035673][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2133'. [ 378.077542][T14406] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 378.087092][T14406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.103668][T14404] tipc: Started in network mode [ 378.119560][T14404] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 378.152981][T14404] tipc: Enabling of bearer rejected, failed to enable media [ 378.259558][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2134'. [ 378.539982][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2138'. [ 378.584983][T14426] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2139'. [ 378.787363][T14433] netlink: 'syz.0.2140': attribute type 4 has an invalid length. [ 378.787363][T14432] netlink: 'syz.0.2140': attribute type 4 has an invalid length. [ 378.816790][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 378.942130][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2143'. [ 378.994296][T14439] netlink: 'syz.5.2143': attribute type 6 has an invalid length. [ 379.128487][T14439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.216652][T14439] bond7 (unregistering): Released all slaves [ 379.339529][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 379.597079][T14459] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2147'. [ 379.705448][T14459] net_ratelimit: 1710 callbacks suppressed [ 379.705478][T14459] openvswitch: netlink: Actions may not be safe on all matching packets [ 380.085806][T14484] netlink: 'syz.6.2155': attribute type 10 has an invalid length. [ 380.112357][T14484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.536846][T14503] ip_tables: iptables: counters copy to user failed while replacing table [ 381.220119][T14514] bond0: (slave bond_slave_0): Releasing backup interface [ 381.325299][T14514] bond0: (slave bond_slave_1): Releasing backup interface [ 381.396396][T14514] team0: Port device team_slave_0 removed [ 381.473020][T14514] team0: Port device team_slave_1 removed [ 381.519124][T14514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.209285][T14549] netlink: 'syz.5.2170': attribute type 1 has an invalid length. [ 382.474413][T14555] tipc: Enabling of bearer rejected, already enabled [ 382.555982][T14527] netlink: 'syz.1.2166': attribute type 10 has an invalid length. [ 382.985254][T14574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.978108][T14604] __nla_validate_parse: 5 callbacks suppressed [ 383.978129][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 384.096082][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 384.268952][T14579] syzkaller1: entered promiscuous mode [ 384.275105][T14579] syzkaller1: entered allmulticast mode [ 384.499729][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2186'. [ 384.562924][ T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.579063][T14609] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 384.622979][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.654296][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.783591][ T6135] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.077413][T14632] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2192'. [ 385.510961][T14646] 8021q: adding VLAN 0 to HW filter on device bond18 [ 385.559623][T14655] xt_CT: No such helper "pptp" [ 386.039273][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2206'. [ 386.082294][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2206'. [ 386.295088][T14691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2210'. [ 386.477573][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 386.505470][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'. [ 386.788514][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'. [ 386.828791][T14712] bond0: entered promiscuous mode [ 386.841178][T14712] bond0: left promiscuous mode [ 387.137868][T14733] bond19: (slave veth1_virt_wifi): Device is not bonding slave [ 387.150110][T14733] bond19: option active_slave: invalid value (veth1_virt_wifi) [ 387.165008][T14733] bond19 (unregistering): Released all slaves [ 387.183235][T14736] netlink: 'syz.6.2219': attribute type 1 has an invalid length. [ 387.209012][T14738] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 387.301365][T14738] 8021q: adding VLAN 0 to HW filter on device bond19 [ 387.464943][T14748] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 387.476635][T14747] vlan13: entered promiscuous mode [ 387.494626][T14747] hsr0: entered promiscuous mode [ 387.505750][T14747] vlan13: entered allmulticast mode [ 387.512518][T14747] hsr0: entered allmulticast mode [ 387.519743][T14747] hsr_slave_0: entered allmulticast mode [ 387.525651][T14747] hsr_slave_1: entered allmulticast mode [ 387.624093][T14757] netlink: 'syz.5.2228': attribute type 1 has an invalid length. [ 387.634856][T14748] 8021q: adding VLAN 0 to HW filter on device bond19 [ 387.662101][T14759] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 387.724236][T14750] bond19: (slave veth13): Enslaving as an active interface with a down link [ 387.741625][T14747] hsr_slave_0: left promiscuous mode [ 387.759933][T14747] hsr_slave_1: left promiscuous mode [ 387.835477][T14757] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 388.360162][T14789] syzkaller0: left promiscuous mode [ 388.377238][T14789] syzkaller0: left allmulticast mode [ 389.263339][T14823] __nla_validate_parse: 7 callbacks suppressed [ 389.263359][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2243'. [ 389.303774][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 389.324663][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 389.358054][T14823] netlink: 'syz.5.2243': attribute type 1 has an invalid length. [ 389.391110][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2246'. [ 389.459798][T14829] netlink: 'syz.2.2246': attribute type 6 has an invalid length. [ 389.779368][T14845] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2249'. [ 390.199192][T14862] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 390.214691][ T31] INFO: task syz.3.1113:10235 blocked for more than 143 seconds. [ 390.237932][ T31] Not tainted syzkaller #0 [ 390.252831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.270223][ T31] task:syz.3.1113 state:D stack:25512 pid:10235 tgid:10234 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 390.284990][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2255'. [ 390.306270][ T31] Call Trace: [ 390.316183][ T31] [ 390.327497][ T31] __schedule+0x17d9/0x56c0 [ 390.336790][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 390.343251][ T31] ? __lock_acquire+0x683/0x2cf0 [ 390.350847][ T31] ? __lock_acquire+0x683/0x2cf0 [ 390.361034][ T31] ? __pfx___schedule+0x10/0x10 [ 390.368533][ T31] ? schedule+0x90/0x2b0 [ 390.374334][ T31] schedule+0x164/0x2b0 [ 390.378645][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.384383][ T31] __mutex_lock+0x7bf/0x1550 [ 390.389142][ T31] ? __mutex_lock+0x5d4/0x1550 [ 390.394321][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 390.400197][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.405426][ T31] ? net_generic+0x1e/0x240 [ 390.410070][ T31] ? net_generic+0x1e/0x240 [ 390.422534][ T31] ? net_generic+0x1e/0x240 [ 390.429609][ T31] ? net_generic+0x1e/0x240 [ 390.436213][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 390.442361][T14862] 8021q: adding VLAN 0 to HW filter on device bond20 [ 390.451388][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 390.460193][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.479127][ T31] ? bpf_lsm_capable+0x9/0x20 [ 390.485491][ T31] ? security_capable+0x7e/0x2c0 [ 390.490717][ T31] genl_rcv_msg+0x614/0x7a0 [ 390.495962][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.501507][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 390.508462][ T31] netlink_rcv_skb+0x226/0x4a0 [ 390.513846][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.519184][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.525645][ T31] ? down_read+0x2be/0x330 [ 390.530380][ T31] genl_rcv+0x28/0x40 [ 390.535456][ T31] netlink_unicast+0x7bb/0x940 [ 390.540568][ T31] netlink_sendmsg+0x813/0xb40 [ 390.559072][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.569967][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.584672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.596921][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 390.611170][ T31] ____sys_sendmsg+0x54e/0x850 [ 390.623408][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.635253][ T31] ? import_iovec+0x73/0xa0 [ 390.645242][ T31] ___sys_sendmsg+0x2a5/0x360 [ 390.654937][ T31] ? __lock_acquire+0x683/0x2cf0 [ 390.673642][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.689044][ T31] ? futex_wake+0x51b/0x5f0 [ 390.700332][ T31] ? __fget_files+0x2a/0x420 [ 390.710818][ T31] ? __fget_files+0x3a2/0x420 [ 390.721083][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 390.732940][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.746714][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.753462][ T31] do_syscall_64+0x174/0x580 [ 390.758289][ T31] ? trace_irq_disable+0x3b/0x140 [ 390.764251][ T31] ? clear_bhb_loop+0x70/0xc0 [ 390.769366][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.777618][ T31] RIP: 0033:0x7fb3daf9e0d9 [ 390.782226][ T31] RSP: 002b:00007fb3dbe1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.798679][ T31] RAX: ffffffffffffffda RBX: 00007fb3db225fa0 RCX: 00007fb3daf9e0d9 [ 390.814778][ T31] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000005 [ 390.832858][ T31] RBP: 00007fb3db035024 R08: 0000000000000000 R09: 0000000000000000 [ 390.851113][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.871350][ T31] R13: 00007fb3db226038 R14: 00007fb3db225fa0 R15: 00007ffd1fae35c8 [ 390.880021][ T31] [ 390.892885][ T31] [ 390.892885][ T31] Showing all locks held in the system: [ 390.907702][ T31] 1 lock held by khungtaskd/31: [ 390.917689][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.932688][ T31] 2 locks held by getty/5364: [ 390.948749][ T31] #0: ffff88803702f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.964903][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 390.975851][ T31] 2 locks held by syz.4.994/9843: [ 390.981078][ T31] #0: ffffffff90098828 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.000962][ T31] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 391.025947][ T31] 2 locks held by syz.3.1113/10235: [ 391.038186][ T31] #0: ffffffff90098828 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.056377][ T31] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 391.077130][ T31] 1 lock held by syz-executor/10795: [ 391.083096][ T31] #0: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 391.097225][ T31] 2 locks held by syz.0.2255/14861: [ 391.102552][ T31] #0: ffff888055d2bbc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 391.115503][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 391.131390][ T31] 3 locks held by syz.5.2256/14865: [ 391.137009][ T31] #0: ffffffff90098828 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.145922][ T31] #1: ffff88807ea376e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 391.157397][ T31] #2: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 391.168980][ T31] [ 391.171423][ T31] ============================================= [ 391.171423][ T31] [ 391.189943][ T31] NMI backtrace for cpu 0 [ 391.189973][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.189995][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.190007][ T31] Call Trace: [ 391.190016][ T31] [ 391.190025][ T31] dump_stack_lvl+0xe8/0x150 [ 391.190059][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 391.190086][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.190119][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 391.190149][ T31] sys_info+0x135/0x170 [ 391.190171][ T31] watchdog+0xfd7/0x1030 [ 391.190203][ T31] ? watchdog+0x1c7/0x1030 [ 391.190234][ T31] kthread+0x388/0x470 [ 391.190262][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.190284][ T31] ? __pfx_kthread+0x10/0x10 [ 391.190313][ T31] ret_from_fork+0x514/0xb70 [ 391.190344][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.190372][ T31] ? __switch_to+0xc89/0x1420 [ 391.190399][ T31] ? __pfx_kthread+0x10/0x10 [ 391.190428][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.190474][ T31] [ 391.190482][ T31] Sending NMI from CPU 0 to CPUs 1: [ 391.311006][ C1] NMI backtrace for cpu 1 [ 391.311030][ C1] CPU: 1 UID: 0 PID: 9018 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 391.311051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.311063][ C1] Workqueue: bond3 bond_mii_monitor [ 391.311090][ C1] RIP: 0010:__lock_acquire+0x18fa/0x2cf0 [ 391.311116][ C1] Code: 14 25 ff 0f 00 00 39 05 c0 76 d1 12 73 06 89 05 b8 76 d1 12 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 d0 7d a2 [ 391.311131][ C1] RSP: 0018:ffffc9000557f2c0 EFLAGS: 00000006 [ 391.311145][ C1] RAX: ffffffff9705e128 RBX: 00000000000003fd RCX: 000000000000038f [ 391.311157][ C1] RDX: ffffffff97045768 RSI: ffff88802659e918 RDI: 00000000000003fd [ 391.311169][ C1] RBP: 70574657a9c06b26 R08: ffffc9000557f288 R09: 0000000000000020 [ 391.311182][ C1] R10: 0000000000000000 R11: ffffffff81a324e0 R12: 000000000000038e [ 391.311193][ C1] R13: ffffffff941a94a0 R14: ffff88802659dd00 R15: ffffffff97047c28 [ 391.311206][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 391.311221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.311232][ C1] CR2: 0000200000010038 CR3: 000000007f646000 CR4: 00000000003526f0 [ 391.311248][ C1] Call Trace: [ 391.311256][ C1] [ 391.311267][ C1] ? rcu_is_watching+0x15/0xb0 [ 391.311308][ C1] ? psi_task_switch+0x57/0x7d0 [ 391.311332][ C1] lock_acquire+0x106/0x350 [ 391.311352][ C1] ? psi_task_switch+0x57/0x7d0 [ 391.311382][ C1] psi_write_begin+0xab/0x160 [ 391.311404][ C1] ? psi_task_switch+0x57/0x7d0 [ 391.311427][ C1] psi_task_switch+0x57/0x7d0 [ 391.311451][ C1] ? psi_account_irqtime+0x130/0x6d0 [ 391.311477][ C1] __schedule+0x2a3e/0x56c0 [ 391.311514][ C1] ? __pfx___schedule+0x10/0x10 [ 391.311544][ C1] preempt_schedule_irq+0x4d/0xa0 [ 391.311568][ C1] irqentry_exit+0x14f/0x8f0 [ 391.311592][ C1] ? trace_irq_disable+0x3b/0x140 [ 391.311614][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.311633][ C1] RIP: 0010:bond_mii_monitor+0x13f/0x3260 [ 391.311655][ C1] Code: 00 00 00 00 00 00 4c 89 e8 48 c1 e8 03 48 89 44 24 58 42 80 3c 20 00 74 08 4c 89 ef e8 fa b4 a2 fb bb b8 01 00 00 49 03 5d 00 <48> 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 db b4 a2 fb [ 391.311669][ C1] RSP: 0018:ffffc9000557f860 EFLAGS: 00000286 [ 391.311683][ C1] RAX: 1ffff1100d1789d8 RBX: ffff888068bc41b8 RCX: ffff88802659dd00 [ 391.311696][ C1] RDX: 0000000000000000 RSI: 0000000000000064 RDI: 0000000000000000 [ 391.311706][ C1] RBP: ffffc9000557faf0 R08: ffffffff90575b37 R09: 1ffffffff20aeb66 [ 391.311719][ C1] R10: dffffc0000000000 R11: ffffffff8691e580 R12: dffffc0000000000 [ 391.311732][ C1] R13: ffff888068bc4ec0 R14: ffff888068bc5228 R15: ffff888068bc5228 [ 391.311747][ C1] ? __pfx_bond_mii_monitor+0x10/0x10 [ 391.311775][ C1] ? __lock_acquire+0x683/0x2cf0 [ 391.311799][ C1] ? register_lock_class+0x31/0x2e0 [ 391.311822][ C1] ? __lock_acquire+0x683/0x2cf0 [ 391.311845][ C1] ? __pfx_bond_mii_monitor+0x10/0x10 [ 391.311865][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.311887][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 391.311907][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 391.311925][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 391.311945][ C1] ? rcu_is_watching+0x15/0xb0 [ 391.311971][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 391.311988][ C1] process_scheduled_works+0xa8e/0x14e0 [ 391.312018][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.312038][ C1] ? assign_work+0x3cf/0x5d0 [ 391.312057][ C1] worker_thread+0xa47/0xfb0 [ 391.312087][ C1] kthread+0x388/0x470 [ 391.312110][ C1] ? __pfx_worker_thread+0x10/0x10 [ 391.312127][ C1] ? __pfx_kthread+0x10/0x10 [ 391.312148][ C1] ret_from_fork+0x514/0xb70 [ 391.312173][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 391.312194][ C1] ? __switch_to+0xc89/0x1420 [ 391.312215][ C1] ? __pfx_kthread+0x10/0x10 [ 391.312238][ C1] ret_from_fork_asm+0x1a/0x30 [ 391.312270][ C1] [ 391.708801][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 391.715721][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.724855][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.734944][ T31] Call Trace: [ 391.738253][ T31] [ 391.741308][ T31] vpanic+0x56c/0xa60 [ 391.745336][ T31] ? __pfx___schedule+0x10/0x10 [ 391.750229][ T31] ? __pfx_vpanic+0x10/0x10 [ 391.754790][ T31] panic+0xc5/0xd0 [ 391.758556][ T31] ? __pfx_panic+0x10/0x10 [ 391.763010][ T31] ? preempt_schedule_common+0x82/0xd0 [ 391.768513][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 391.773928][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 391.780292][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 391.786493][ T31] watchdog+0x1030/0x1030 [ 391.790876][ T31] ? watchdog+0x1c7/0x1030 [ 391.795347][ T31] kthread+0x388/0x470 [ 391.799465][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.804176][ T31] ? __pfx_kthread+0x10/0x10 [ 391.808824][ T31] ret_from_fork+0x514/0xb70 [ 391.813562][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.820308][ T31] ? __switch_to+0xc89/0x1420 [ 391.826156][ T31] ? __pfx_kthread+0x10/0x10 [ 391.832398][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.840609][ T31] [ 391.845571][ T31] Kernel Offset: disabled [ 391.851330][ T31] Rebooting in 86400 seconds..