last executing test programs: 4.973489366s ago: executing program 2 (id=17025): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="011a28bd7000fc1b000000000000bc3481d64424169925099a4b9ebbfbb4c4a4d6f17a66111de9340ee57f3bc1dc2b18d2c3d0764e739231cabf0fda41b4c972df0f1d8ae33c6ccb09b96bf3abc44ac136b22bd02fafcd5a6dceb6de5fa98d36173580bb8181b230aa0a149ff2fe68f551f60900726487891a19b88986028bfe4c5f097fcb27e1b74eaef8fe86ca539f8aa9330f9bcfc0dda4"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x4, 0x4, 0xa, 0x5}, {0x1, 0x2, 0x0, 0x3}], 0x10, 0x9d1}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r4, 0x25, 0xb, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)="f645c991b0fbb25be0928fe6936ac9c6421a98bc5461428989c9b71f8bd75ca4ed2b6a6af08d87ad57888b", 0x2b}, {0x0}], 0x3}}], 0x1, 0x20008000) 4.079172635s ago: executing program 2 (id=17032): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x11000000) 3.992184706s ago: executing program 2 (id=17033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r10, {0x700, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) 3.62437646s ago: executing program 3 (id=17037): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x8000000}, {0x10000002, 0xfffffffc, 0x5, 0xb}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x700}, 0x48) 3.177356692s ago: executing program 2 (id=17040): sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000000800"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x7fe2, 0xffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0, 0xffffffff00000000}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="a8aaaaaaaaaa00000000000086dd604dd31800280600fe8000000000000000000000000000aafe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078100104021312e16ed1291e0fd14e989389c4d308d402"], 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r5, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r8 = socket$inet(0x2, 0x800, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.095972157s ago: executing program 1 (id=17041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x1730, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1704, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @val={0x4}}}]}]}, {0x13d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb51}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0x83, 0x6, 0x1, 0x0, "47cbaf529d01a63b65b2bcd06fe1a313cb60251a0e2c243f187c71735758f50b08763650b75258f50ddc8dee9045906c0ee442618dc121f5c85c888aad893489fe6e76fb1e2f0d672e1ecb8f64e59d0789dd38e24fbc689725a5e1f65495ece6942b57d053e521a51c513fbcffd5d915151c4f2eb6ca37416b0d29cf2b982a"}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_DATA={0x1204, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "140dbf5395e6e56a7055a6367843d51d592ed3991979ef4a419b75e83c398641105a47cf98ff7f8863c775f7c5e6516bcebdb8bd3bae6081b95b784b59e6f4c063d4d4512bf058fa737fef2716eccb283270996672d257"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "00c3ed2b7f691a745cb09567ab529bb58866531ff7a993f0"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "9c92cb53ea0bc082ce006867dcb159d44f54191f1b934735a2a3effc78c90fcf5b932a79e757438c25dc50dcbcc5fa868241f2f7f46d73907ee4eeddcd81de1cee1fc20eb8dea498e1dc5983dd68bc1f93150b48045e7f82a107b4f1551f9348435c183153eda14324f459c11206ca4800993bc8a94282ccb0cca06795bc4031baccceb484e79802345ea1"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0xa0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "e8eec16dd58b407b354564f3c40b120b80a171cdc038b43678c0636ec13712353d2b66c3d1c3cad6926b0896b6eb586e0ffb0a22aed7744dae45494105eb3de8a5a5b90fa6f404087395ceee3f303470b7d5ebabe3eb359457558c37a4c322244b036a04b09b1aa5afe99a1b276f81251fcceec0d3cc69b07e3e71af5dc197d806f6358f90c5e4b5d703237fd5e8e99081a4386f0e6081d7"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc2, 0x6, 0x1, 0x0, "39d5ea0f14980a344137a200d8a7b30d995300d1794960d0625e73447eecbc8ebfcc5a3fd3cc4cf8c69472bb969ec2ce6b3153d6d3e25c7de99bcc768aecb20d720ec9ade18ddcf11c06352722d3c343ba33b34f362dfc6d92ffa8baa2cb55a526296d7e5cfe40c0945447305598a1dfc53df5719d38519641e491a0e33f375691b9b887ad84921dc854937930ddb068a370483c3cbd2bac6655aad7b1145c78e7fc7eabb16134b43253bbbd00aeb724ee64c11d776bb2f1e43f819702ee"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x4}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x530d3b72}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "25c01cf039b54b83206b4074465337332dee0db03938dbd6c45a577bd5b3fc56616c208af262ffe9"}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "a02fb889af9c2843ae5958dbd3e2e0adee03e4d040e30ece12376ba434c59cc8dcff43d7d11336f5cb5d481c3ccbd53ce72c1ae4fa79b604bcf1b1352e376e047c134c051feac88f142afc90f71517d4e84961721d10bf0275e040f2f999e82bbfe17f839f0e7ee66656e7791272bc034a53674bdd69b9b3e14af5b6f22e59f902d73a3a9519287f6f32d2cc07d0a409278bbf71f57de41bb0"}, @NFTA_DATA_VALUE={0x3d, 0x1, "adacee9728fa661c7ec101b1f7a58e6deee3fc8765af2b163aa9b92b3e95006567c43570c2dd2665da9f570fda38d21a398b48371d6135e531"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x17b4}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000040)='\xd6\\([^.#]$(-\x00', 0x1, &(0x7f0000000080)={@align=0xb, {0x3ee, 0x1, 0xf, 0x1}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}, {[0x2, 0x3, 0x8000, 0x64e]}, 0x9, 0xb0, &(0x7f0000000300)=""/176}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xff, 0x7, 0x2a, @mcast2, @private1, 0x80, 0x700, 0x5, 0xffffffff}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r2, r3, 0x1, 0x1, 0x2}, 0x50) 2.948440092s ago: executing program 1 (id=17042): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="011a28bd7000fc1b000000000000bc3481d64424169925099a4b9ebbfbb4c4a4d6f17a66111de9340ee57f3bc1dc2b18d2c3d0764e739231cabf0fda41b4c972df0f1d8ae33c6ccb09b96bf3abc44ac136b22bd02fafcd5a6dceb6de5fa98d36173580bb8181b230aa0a149ff2fe68f551f60900726487891a19b88986028bfe4c5f097fcb27e1b74eaef8fe86ca539f8aa9330f9bcfc0dda4"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x4, 0x4, 0xa, 0x5}, {0x1, 0x2, 0x0, 0x3}], 0x10, 0x9d1}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r4, 0x25, 0xb, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)="f645c991b0fbb25be0928fe6936ac9c6421a98bc5461428989c9b71f8bd75ca4ed2b6a6af08d87ad57888b", 0x2b}, {0x0}], 0x3}}], 0x1, 0x20008000) 2.931783759s ago: executing program 3 (id=17043): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r9}, 0x8) 2.733097589s ago: executing program 0 (id=17045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @mcast1, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)='X', 0x1}], 0x1}}], 0x2, 0x40088d4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0xfffffffffffffedc, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000715007adf4fdb73683a69702c706f72742c6e6574000000000900020073797a30000000000c0007800800130000000020050005000200000005000400010000000500010007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x283469c4fb420076}, 0x20004000) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x4, 0x0, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0x7, 0xf, "484942daff8ef22bfd3b185cff"}, @lsrr={0x83, 0x3, 0x2b}, @cipso={0x86, 0x15, 0x3, [{0x7, 0xd, "e3467249f3d61188d07384"}, {0x1, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61152000000000006113500000000000bf5000000000000004000000080000003d0301000000000025050000000000006916660000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="56dcc33f10000100000000c3000000000000000a380b0000060a09040000000000000000020000000c00034000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="b9d87cec5871817020d30f12d1a586cd6c25fce2ba8464a95b7006899fda075e11ded4c850f1b20bd85f96b8ea895a6613e94f04bd02680ef14453c36b739d71f41062581b96157515e7272b524ace887af8582290abc722d06fb1bfcc991ffd4462f0fe9848d39ca2a15f637918712294e0c669a3de8e44726791933c90f90db36101eb95420d1691ae2707696b4983b24f37ca158f030772c4bf6e43b97981b106bffd39467956e5152296601eabd5085d73f5befb2b5d6529f09a336a", @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 2.378650976s ago: executing program 0 (id=17047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4030582a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a0, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x19}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7fffffff, 0x6, 0x800, 0x3, 0xe3, 0x8001, 0x98, 0xffff, 0x65f]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x18}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0xad7, 0x10001, 0x80, 0x4]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4621}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x1a0}}, 0x400c001) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2}}, 0x26) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r0, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001815000076eadb617b3278e363b56e73113b54d5", @ANYRES32=r0, @ANYBLOB="000000000000000018000000b29300000000000001000000058401800500000085000000bc000000da68200000000000184b00000000000000000000000000001861000002000000000000000600000009238000690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, r0, 0x8, &(0x7f0000001780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x2, 0x9}, 0x10, r7, r8, 0x0, &(0x7f00000018c0)=[r0, r9, r0, r3, r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f00000000c0), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@loopback}, {@private}]}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000007f557abeaf31b88500000083000000bf0900000000000055090100000000009500000000000000bf9100000000ff0d00000000000000008500000084000000b70000000000110095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.297019798s ago: executing program 0 (id=17048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) (fail_nth: 12) 2.209277557s ago: executing program 4 (id=17049): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], 0x0, 0x1, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x4, 0x4, 0xa, 0x5}, {0x1, 0x2, 0x0, 0x3}], 0x10, 0x9d1}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000"], 0xd0}}, 0x571f68543cec8180) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b00)={0x2dc, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d223c59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32879e95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xed16385}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1883899a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66aed3f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba2cf72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x670eedfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be9f034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f32f6d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc5fcea4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25e4040}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bdc90ad}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bbba00f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30dbbe9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a2a106f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ea9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab00034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5db3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x219a65b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb02c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21bd9729}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cf9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8bdf313}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbccf}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9383}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24eec895}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30059e17}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e9b2124}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b2629c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7c1701}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe43f51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x679a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57407894}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514f9f1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x766a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc8d0c31}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdade}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d9fde1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4788eaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x584e410e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x999e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672017a1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47b75a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x928f8de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d2057c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e553d7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6354}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r2, r3, 0x25, 0xb, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)="f645c991b0fbb25be0928fe6936ac9c6421a98bc5461428989c9b71f8bd75ca4ed2b6a6af08d87ad57888b", 0x2b}, {0x0}], 0x3}}], 0x1, 0x20008000) 2.188858036s ago: executing program 0 (id=17050): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027000000000008"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.068143604s ago: executing program 2 (id=17051): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x9, [0x0, 0x0, 0x3, 0x81, 0x5, 0x1, 0x80, 0x3ee3, 0x3]}, &(0x7f0000000100)=0x1a) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r7) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.055107379s ago: executing program 1 (id=17052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x58, r4, 0x1, 0xf000000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '\x96\'%\xfb<\xa6\xa4:\x15\xabG\xae\xbc\x828\x00'}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) connect$packet(r1, &(0x7f0000000440)={0x11, 0xd, r6, 0x1, 0xe}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8927, &(0x7f00000001c0)={'wg2\x00'}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f0000000040)='\x00', 0x800000, &(0x7f00000002c0)={@align=0x3, {0x3, 0x3, 0x2ce951ac}}, 0x5, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000380)}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'nicvf0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000500)=ANY=[@ANYBLOB="ba75581b0002aaaaaaaaaa09000d000000c00f0100ffe86ce3248de603228815c4eb58983f7f52c9b4c253747ccf7439ddae5ee0897a53a4aca4ff47df423b9faf6fc3928f71b273915b6305fc5b6b8e2e252ecdccbf"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x60bd26, 0x4, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e04305000f4000631177fbac14144588a8030394029f034d2f87e589ca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 1.985638864s ago: executing program 3 (id=17053): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x700}, 0x48) 1.2787103s ago: executing program 4 (id=17054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) write$nci(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="710502"], 0x6f) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 1.228580036s ago: executing program 0 (id=17055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a44"], 0x20}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) 872.676955ms ago: executing program 0 (id=17056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000340)='b', 0x1}], 0x1}}], 0x2, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000280), 0x4) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000380)="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"/423, 0x1a7, 0x4008012, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 871.63503ms ago: executing program 4 (id=17057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @mcast1, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)='X', 0x1}], 0x1}}], 0x2, 0x40088d4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0xfffffffffffffedc, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000715007adf4fdb73683a69702c706f72742c6e6574000000000900020073797a30000000000c0007800800130000000020050005000200000005000400010000000500010007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x283469c4fb420076}, 0x20004000) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x4, 0x0, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0x7, 0xf, "484942daff8ef22bfd3b185cff"}, @lsrr={0x83, 0x3, 0x2b}, @cipso={0x86, 0x15, 0x3, [{0x7, 0xd, "e3467249f3d61188d07384"}, {0x1, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="56dcc33f10000100000000c3000000000000000a380b0000060a09040000000000000000020000000c00034000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000"], 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="b9d87cec5871817020d30f12d1a586cd6c25fce2ba8464a95b7006899fda075e11ded4c850f1b20bd85f96b8ea895a6613e94f04bd02680ef14453c36b739d71f41062581b96157515e7272b524ace887af8582290abc722d06fb1bfcc991ffd4462f0fe9848d39ca2a15f637918712294e0c669a3de8e44726791933c90f90db36101eb95420d1691ae2707696b4983b24f37ca158f030772c4bf6e43b97981b106bffd39467956e5152296601eabd5085d73f5befb2b5d6529f09a336a", @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 805.299669ms ago: executing program 1 (id=17058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4030582a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a0, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x19}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7fffffff, 0x6, 0x800, 0x3, 0xe3, 0x8001, 0x98, 0xffff, 0x65f]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x18}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0xad7, 0x10001, 0x80, 0x4]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4621}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x1a0}}, 0x400c001) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2}}, 0x26) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r0, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001815000076eadb617b3278e363b56e73113b54d5", @ANYRES32=r0, @ANYBLOB="000000000000000018000000b29300000000000001000000058401800500000085000000bc000000da68200000000000184b00000000000000000000000000001861000002000000000000000600000009238000690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, r0, 0x8, &(0x7f0000001780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x2, 0x9}, 0x10, r7, r8, 0x0, &(0x7f00000018c0)=[r0, r9, r0, r3, r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f00000000c0), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@loopback}, {@private}]}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000007f557abeaf31b88500000083000000bf0900000000000055090100000000009500000000000000bf9100000000ff0d00000000000000008500000084000000b70000000000110095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 689.066366ms ago: executing program 3 (id=17059): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x9, 0x1010, r0, 0x849a6000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0xf511f000) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x4) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000000c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000900)={{r1, &(0x7f0000000100)='\x00', 0x14b800, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x6]}, {0x5, 0x7ff, 0x3, 0x101}}, 0x6, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x3}, 0x6, &(0x7f0000000840)=[{0x3, 0xd, &(0x7f0000000200)='*\x00', &(0x7f0000000240)="533fec7bd32a72d61893ef302cf3a2fbe4d024161df8814443647af2e1eb06782beb6713eec5e6a26be3838158e78508612ca9f888780dbc3399005b45f1cd298fffddfb52f3b52923355e8fe9a67a03b50a77015de5493642ac607e87869bf487924f664ef9396e17789d04bafd18df4c3cd30b6231804c55118688e07c9583d411505f78837625205642dd7f5307730bb91f9a2e354e3dc07ced34aa0075a58b5ce851f9343a4ccc3193", 0xab}, {0x3, 0x40, &(0x7f0000000300)='/proc/self\x00', &(0x7f0000000340)="a11fedea8e30297baafc364044e269b17ef546a0c5777dac4bc28ae4cfbbdc43b2c8849ed61f2cf7765f5c66b51424f7d817335c5bf9ca4e14ac188194720fa8cdf873fb05986beafaba6a885307a23ca71ba5e1913abbe9199b91eb770c5aaa6a0cca3f8846c9085fb4212c30b90e3f1d4f75966901a512d8043e4fb70b5774ceaa8835fffdc908e3f7f94c5fb216749a", 0x91, 0x8}, {0x1, 0xfffeffff, &(0x7f0000000400)='.}\xde${(\x00', &(0x7f0000000440)="69607f6191d58224b45f7e8c8aedf813328f8dcf8f390c478ad9ef572de5d83f576838cfc9825c62aad467d7fd61029825d982568adbe6e599849da0df107b296ba106d560b8cf091ab604bdad66631bfebcb5654ccc9ae6a11ab3959102c7bee356fd6d2e11d93058a057e525fe738b4aebf994d0978b495d9fec3780362c9728e524be06fd", 0x86, 0x30}, {0x3, 0x2803, &(0x7f0000000500)='-^[\x00', &(0x7f0000000540)="f1a165f513e6b0913780f96933140b2689ca812439913e7f70e99acb46dd858884005b80984f72537a43db9a42fa73653cf43d79ffbf6ec4660b2b7d6d243705737d89c347cf9580050b", 0x4a, 0x20}, {0x1, 0x3, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="936a9454df50e587c3be7e7bad2c6d3bbf23ed5359235cb75e8f1707997d8f197b63446729fde33b84d4fa5dc08f1e9d1aaac1811fab7577de1c2a4c3392be0cb757ae80e369bae6229c8bdb6c4b375112beedecfb7a51393a5d1cf95f2490d8b6e745a43e365d7079e831745f8eef94a5a2eca7354b619e202c80dc4391da3804b2c964403ea5b57919a368d1a64ba1a16fd28435d5d49a8dd0d967e9693cafb3eedbd6e598323708414c82579c71ef63b12ffcba2504cb3212a80797dc601f473902fea0fedd80335b8d941c011b5fb8ed2d567d74578530ba5d4d35ad", 0xde, 0x2}, {0x2, 0x4, &(0x7f0000000700)='$%\x00', &(0x7f0000000740)="4b8d999ddfba2c819cb3194d30271a8417587743e80719dcc1eaebdf63fe6785e5858cc76172a779ccedd698882bad8f8b8f49c719123089322fbeb4d98775e8a79773c256487557c736ff6dc328fe52ba1fce09f17170ba451d89de17e063cb4cbba5c13f3bead7c13e0bd2207b8949e17346a4a7d34f7cbebe8e279c0d770627f3d54adb49c766ecf5a83a1280b8a2eb7a06111961e031b94980dc34054613056d4922bd1fd664f808048ad140eb3a216628b77a829cffceb27badbe2ce2066049e172a523ae81", 0xc8, 0x8}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x6, 0xffff, {{0x2a, 0x4, 0x1, 0x25, 0xa8, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @remote, {[@cipso={0x86, 0x1c, 0x0, [{0x7, 0xb, "a8708a4e3d246368f8"}, {0x6, 0xb, "8afced320b6a676580"}]}, @end, @rr={0x7, 0xb, 0x9b, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0xd7, 0x0, 0xf, [0xfffffffc, 0x3, 0x2, 0x1]}, @cipso={0x86, 0x36, 0x2, [{0x6, 0x2}, {0x0, 0x2}, {0x7, 0xf, "7a36fd20730bf234413097721f"}, {0x1, 0xb, "5591f9874f33d8f379"}, {0x2, 0xf, "f46705dd12a89d11c12ba8d841"}, {0x2, 0x3, 'B'}]}, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x8, [{@rand_addr=0x64010101, 0x6}]}, @ssrr={0x89, 0x13, 0x18, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@getnexthop={0x40, 0x6a, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200440c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @remote}, &(0x7f0000000c00)=0xc) r5 = socket(0xb, 0x4, 0x1) accept4$llc(r5, &(0x7f0000000c40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000c80)=0x10, 0x80000) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000cc0)={'pimreg\x00', 0x2}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000d00)=@raw=[@call={0x85, 0x0, 0x0, 0x70}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x1, 0x2, 0x9, 0x40, 0xffffffffffffffff}], &(0x7f0000000dc0)='syzkaller\x00', 0x3ff, 0x76, &(0x7f0000000e00)=""/118, 0x1e00, 0x48, '\x00', r3, 0x19, r2, 0x8, &(0x7f0000000e80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x1, 0xe, 0x7f, 0x6}, 0x10, 0x29ff, r2, 0x5, 0x0, &(0x7f0000000f00)=[{0x3, 0x5, 0xf, 0x4}, {0x5, 0x2, 0x10, 0xc}, {0x5, 0x3, 0x10, 0xa}, {0x3, 0x2, 0xa, 0x2}, {0x1, 0x1, 0xd, 0xc}], 0x10, 0x5f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={r6, 0x0, 0xc, 0x9e, &(0x7f0000001040)="8ccf3882ed514e41c07be65c", &(0x7f0000001080)=""/158, 0x4, 0x0, 0x1000, 0xc1, &(0x7f0000001140)="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", &(0x7f0000002140)="ee6f6299acbfe94ab43f5d5d5518204dc9b039c640654cdb6c359654240e635dd2de69b1412e2bad30179bc074dd1d82ea3d27a445cdd663160d14d55ebb8534394c3a5ee44a58360499aa21f5a5fdf62852d6ee19db9fe486a6596f90bdf9845d33907e57f2d870b2ef8382b18ad5d16e511ea93e5f2e073a06584bd3a977ab10aaeadea9b92f38b87b3d33f547b325649bf38884d4a6832b1167b11d810cc1b3391b9234357a756ca6f3d9ad94c6928daa44437d97103a5dfceb0319e3db869b", 0x8, 0x0, 0x57f3}, 0x50) unshare(0x40400) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000022c0)={0x0, 0x9, 0x4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000026c0)={r7, 0x55f6, 0x9}) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x1}, 0x50) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000002b40)={0x3, 0x40}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000002bc0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40084c1) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002d00)={r7, 0x7, 0xffe}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000003200)={r5, &(0x7f0000003100)='\x00', 0x402100, &(0x7f0000003140)={@_ha_fsid={[0x1000, 0x2]}, {0x7, 0x1, 0x9, 0x8}}, 0x9, &(0x7f0000003180), &(0x7f00000031c0)=0x7}) ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, &(0x7f0000003240)) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000003280)=0x10000, 0x4) 603.176787ms ago: executing program 1 (id=17060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x80, 0x0, 0xe2e7db4f9a5f3857}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 425.079331ms ago: executing program 3 (id=17061): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 299.260089ms ago: executing program 4 (id=17062): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="011a28bd7000fc1b000000000000bc3481d64424169925099a4b9ebbfbb4c4a4d6f17a66111de9340ee57f3bc1dc2b18d2c3d0764e739231cabf0fda41b4c972df0f1d8ae33c6ccb09b96bf3abc44ac136b22bd02fafcd5a6dceb6de5fa98d36173580bb8181b230aa0a149ff2fe68f551f60900726487891a19b88986028bfe4c5f097fcb27e1b74eaef8fe86ca539f8aa9330f9bcfc0dda4"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x4, 0x4, 0xa, 0x5}, {0x1, 0x2, 0x0, 0x3}], 0x10, 0x9d1}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r4, 0x25, 0xb, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)="f645c991b0fbb25be0928fe6936ac9c6421a98bc5461428989c9b71f8bd75ca4ed2b6a6af08d87ad57888b", 0x2b}, {0x0}], 0x3}}], 0x1, 0x20008000) 268.619921ms ago: executing program 2 (id=17063): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r9}, 0x8) 163.623281ms ago: executing program 3 (id=17064): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], 0x0, 0x1, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x4, 0x4, 0xa, 0x5}, {0x1, 0x2, 0x0, 0x3}], 0x10, 0x9d1}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b00)={0x2dc, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d223c59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32879e95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xed16385}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1883899a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66aed3f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba2cf72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x670eedfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be9f034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f32f6d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc5fcea4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25e4040}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bdc90ad}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bbba00f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30dbbe9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a2a106f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ea9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab00034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5db3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x219a65b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb02c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21bd9729}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cf9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8bdf313}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbccf}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9383}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24eec895}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30059e17}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e9b2124}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b2629c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7c1701}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe43f51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x679a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57407894}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514f9f1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x766a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc8d0c31}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdade}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d9fde1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4788eaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x584e410e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x999e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672017a1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47b75a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x928f8de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d2057c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e553d7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6354}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r2, r3, 0x25, 0xb, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)="f645c991b0fbb25be0928fe6936ac9c6421a98bc5461428989c9b71f8bd75ca4ed2b6a6af08d87ad57888b", 0x2b}, {0x0}], 0x3}}], 0x1, 0x20008000) 153.027206ms ago: executing program 4 (id=17065): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027000000000008"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 60.260579ms ago: executing program 1 (id=17066): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x201, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000bc0)={{r2, &(0x7f0000000040)='*$-*\x00', 0x40601, &(0x7f0000000200)={@align=0x72a, {0xa9e, 0xd, 0x4, 0x5}}, 0x4c, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x5}, 0x7, &(0x7f0000000ac0)=[{0x3, 0x7, &(0x7f00000002c0)='}{\x00', &(0x7f0000000340)="f53eb754e5624066bf6373a4b46d094c", 0x10}, {0x1, 0x4, &(0x7f0000000380)='!{!.&&)%%\x00', &(0x7f00000004c0)="316b8d3efcb8095ac724b2c2fb2dfab04222559387e35e3149afd622726cef61dfa30260ce33560c8858fbce57b5a127bd92d1ad1a102075ddbd0b51554d91e03cc0f41818ca080c98682eb00f09d3e841f7ed7a39c4065e34255500df0b125a6e6027adc79d4b0a4827ba37fed75e68f486197a38c7b932c62dbc3538299a0e79b82b457942965955c30bdb2283a2cc3f8560e03e095be663a00b", 0x9b}, {0x1, 0x1, &(0x7f0000000580)='mptcp_pm\x00', &(0x7f00000005c0)="dcb00464ffe71885f471e024366ab5695ed2483b49088d442a68bb1ed88bd6408b5c13ab9eadcd3dd1f595627332e4115242b086830974c8fb1491d39b1ef3fd180d554de0fbc58e313be58089b423d8bb30d620dc85aabbf343d7531081639c60a194652c06fda05940d893bbb659a1b4058ad0f453ca04956333e90bd19f9151501640cebbb3e650b4ea933022ce9451f1d051f224271dcc6ba162c0ac32397c6c1091bf78bc88a3c4ae053a4cd0e0c7bf386d506d1359ce0c2206026dd3bbf106f450e406f9f7db52b0964f9a252a2294ecab7eb0b1f318af4d512e47d382a6a7b45466927e7133c31aa2c0", 0xed, 0x1a}, {0x1, 0x4, &(0x7f00000006c0)='^:-', &(0x7f0000000700)="99dfc5d033e344bf1617dabf5df8924453b3db9b029c56e2dcff225b705ab3639a96c89580a60e2b13ff0c6902de414d53b13abe076758be3259781b3c6064e048a35ad5b0f2be41641f21bc84f939391f9f51b04945036e598c2ea57ecb3b7133249add8a813d4e33776a35164b0f9bbbe21bc5ee439807380de266544978b0471b5d3fdbdf41249025811880b1cb52523eec9a838b74923b45edec71294770f78d68933c2cf0e44ac6a07db75f0270", 0xb0, 0x8}, {0x3, 0x200, &(0x7f00000007c0)='!/+!', &(0x7f0000000800)="f979498dd23c4382a032c06dc60b05ded4fcf54634a35372894b8e22af59c210", 0x20, 0x10}, {0x2, 0x59, &(0x7f0000000940)=',@-\xda^&\x00', &(0x7f0000000980)="4fa2798fbfbf0188ec053610160f0e217965f2c9af766f76b84b374ce6948bf33e15c4e941e25838e07bf6fb6eb852fb52ea3797bc52bcf8a7bfd5970b4336d60046f2efaea298f2e88dfa51d24898c2484c7e09a27cfc9038467b374f7b20280ccda8482f21eefe93a148f8b861034c9fb502733c76c85471aa20d7a4d055cc0a02a235d5a30e82150c7609362f867f1d", 0x91, 0x8}, {0x1, 0xfff, &(0x7f0000000a40)='+^\x00', &(0x7f0000000a80)="3ffb51d7dd6ffaf4a341a064aafab1423db628716c4412cacb3cb1fa5910ed4295", 0x21, 0x8}]}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000c40)) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd4b, 0x409c884, &(0x7f0000001040)={0xa, 0x4a20, 0x0, @local}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x542530d5486902b2}, {0xfff3, 0x5}}, [@TCA_INGRESS_BLOCK={0xfffffffffffffe32, 0xd, 0x6157}]}, 0x2c}}, 0x8d0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x1004}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/134, 0x86}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4093, 0xffd}, {&(0x7f0000001a00)=""/46, 0x2e}, {&(0x7f0000001100)=""/246, 0xf6}], 0x5}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x41, 0x0}, 0x8}], 0x4, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 0s ago: executing program 4 (id=17067): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x82}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000003009500000000000000bfa000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8bd45b8629442924e68ae80b2ac3b3884427890cc5865eaadc19117346647601810844212fb157f5bb6c695f956c996ddb19a9cbb0ea7c6c65d0dc7534463a95a70e2e76a9c4283d914eaa1974afdb0de58495a501d014aa93058b65466c0eef7477e0412f2e7502ca16e08079fae7ec79841f8e88777bea153666610f549c80a923696593b63510247394e558e1416ec09d2d37c3ed0055396c5d449987c2384d754f61308607094aa294d52d013ae0c52e0b93059b47ab18d6416688922df8d6a8d07ec858d7fc527e22f5a5c3ce9b38fe85a1af8acb64ac6785452b2fea1a751714d4afa693802a4f2a", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf252500000008000200", @ANYRES32=r2, @ANYBLOB="0500290000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) kernel console output (not intermixed with test programs): mode [ 1650.732941][T21959] syzkaller1: entered allmulticast mode [ 1651.387542][T21985] netlink: 'syz.0.16194': attribute type 61 has an invalid length. [ 1651.423369][T21988] __nla_validate_parse: 3 callbacks suppressed [ 1651.423387][T21988] netlink: 300 bytes leftover after parsing attributes in process `syz.2.16196'. [ 1651.438795][T21985] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1651.470877][T21989] netlink: 'syz.1.16197': attribute type 6 has an invalid length. [ 1651.515797][T21993] FAULT_INJECTION: forcing a failure. [ 1651.515797][T21993] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.581185][T21993] CPU: 0 UID: 0 PID: 21993 Comm: syz.4.16198 Not tainted syzkaller #0 PREEMPT(full) [ 1651.581213][T21993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1651.581224][T21993] Call Trace: [ 1651.581233][T21993] [ 1651.581241][T21993] dump_stack_lvl+0xe8/0x150 [ 1651.581270][T21993] should_fail_ex+0x412/0x560 [ 1651.581299][T21993] should_failslab+0xa8/0x100 [ 1651.581360][T21993] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1651.581386][T21993] ? __alloc_skb+0x186/0x7d0 [ 1651.581409][T21993] ? __alloc_skb+0x1d0/0x7d0 [ 1651.581430][T21993] ? __local_bh_enable_ip+0xd0/0x130 [ 1651.581454][T21993] __alloc_skb+0x1d0/0x7d0 [ 1651.581483][T21993] netlink_sendmsg+0x5d4/0xb40 [ 1651.581514][T21993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1651.581545][T21993] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1651.581570][T21993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1651.581599][T21993] ____sys_sendmsg+0x972/0x9f0 [ 1651.581625][T21993] ? __might_fault+0xaf/0x130 [ 1651.581651][T21993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1651.581683][T21993] ? import_iovec+0x73/0xa0 [ 1651.581711][T21993] ___sys_sendmsg+0x2a5/0x360 [ 1651.581736][T21993] ? __lock_acquire+0x6b5/0x2cf0 [ 1651.581761][T21993] ? __pfx____sys_sendmsg+0x10/0x10 [ 1651.581820][T21993] ? __fget_files+0x2a/0x420 [ 1651.581841][T21993] ? __fget_files+0x3a0/0x420 [ 1651.581872][T21993] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1651.581901][T21993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1651.581935][T21993] ? __pfx_ksys_write+0x10/0x10 [ 1651.581967][T21993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.581986][T21993] do_syscall_64+0x15f/0xf80 [ 1651.582003][T21993] ? trace_irq_disable+0x3b/0x140 [ 1651.582027][T21993] ? clear_bhb_loop+0x40/0x90 [ 1651.582047][T21993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.582064][T21993] RIP: 0033:0x7fd57e19ce59 [ 1651.582082][T21993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.582096][T21993] RSP: 002b:00007fd57c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.582115][T21993] RAX: ffffffffffffffda RBX: 00007fd57e415fa0 RCX: 00007fd57e19ce59 [ 1651.582127][T21993] RDX: 0000000004000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1651.582138][T21993] RBP: 00007fd57c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.582148][T21993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.582159][T21993] R13: 00007fd57e416038 R14: 00007fd57e415fa0 R15: 00007fff772dbb38 [ 1651.582186][T21993] [ 1652.189161][T22022] netlink: 300 bytes leftover after parsing attributes in process `syz.2.16210'. [ 1652.253041][T22025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16212'. [ 1652.466613][T22031] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1652.801832][T22035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.261746][T22035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.288634][T22065] netlink: 300 bytes leftover after parsing attributes in process `syz.3.16222'. [ 1653.294777][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16223'. [ 1653.439400][T22075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16226'. [ 1653.459560][T22075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16226'. [ 1653.471940][T22076] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1653.581905][T22035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.850925][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16234'. [ 1653.950595][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16234'. [ 1653.975696][T22098] netlink: 300 bytes leftover after parsing attributes in process `syz.1.16235'. [ 1654.108084][T22096] bridge_slave_1: left allmulticast mode [ 1654.142722][T22096] bridge_slave_1: left promiscuous mode [ 1654.161173][T22096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.196233][T22101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1654.393717][T22101] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1654.492702][T22035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.920730][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.977742][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.009359][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.039573][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.725784][T22203] netlink: 'syz.3.16263': attribute type 30 has an invalid length. [ 1656.795099][T22207] FAULT_INJECTION: forcing a failure. [ 1656.795099][T22207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.835921][T22207] CPU: 0 UID: 0 PID: 22207 Comm: syz.2.16265 Not tainted syzkaller #0 PREEMPT(full) [ 1656.835946][T22207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1656.835956][T22207] Call Trace: [ 1656.835963][T22207] [ 1656.835971][T22207] dump_stack_lvl+0xe8/0x150 [ 1656.835995][T22207] should_fail_ex+0x412/0x560 [ 1656.836020][T22207] _copy_to_user+0x31/0xb0 [ 1656.836044][T22207] bpf_test_finish+0x22c/0x6b0 [ 1656.836071][T22207] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1656.836094][T22207] ? __pfx_bpf_test_finish+0x10/0x10 [ 1656.836119][T22207] ? _copy_from_user+0x94/0xb0 [ 1656.836139][T22207] ? bpf_test_init+0x113/0x150 [ 1656.836160][T22207] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1656.836194][T22207] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1656.836218][T22207] ? __fget_files+0x2a/0x420 [ 1656.836240][T22207] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1656.836261][T22207] bpf_prog_test_run+0x2c7/0x340 [ 1656.836280][T22207] __sys_bpf+0x643/0x950 [ 1656.836304][T22207] ? __pfx___sys_bpf+0x10/0x10 [ 1656.836336][T22207] ? ksys_write+0x242/0x270 [ 1656.836359][T22207] ? __pfx_ksys_write+0x10/0x10 [ 1656.836383][T22207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.836400][T22207] __x64_sys_bpf+0x7c/0x90 [ 1656.836428][T22207] do_syscall_64+0x15f/0xf80 [ 1656.836443][T22207] ? trace_irq_disable+0x3b/0x140 [ 1656.836464][T22207] ? clear_bhb_loop+0x40/0x90 [ 1656.836482][T22207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.836497][T22207] RIP: 0033:0x7fd06d79ce59 [ 1656.836512][T22207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.836525][T22207] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1656.836541][T22207] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1656.836552][T22207] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1656.836561][T22207] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.836571][T22207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1656.836580][T22207] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1656.836603][T22207] [ 1657.500006][T22235] netlink: 'syz.0.16277': attribute type 3 has an invalid length. [ 1657.610751][T22246] __nla_validate_parse: 1 callbacks suppressed [ 1657.610765][T22246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16280'. [ 1659.745999][T22258] xt_connbytes: Forcing CT accounting to be enabled [ 1659.754086][T22258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1660.387397][T22227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1660.685033][T22272] netlink: 292 bytes leftover after parsing attributes in process `syz.3.16288'. [ 1660.714636][T22275] tipc: Started in network mode [ 1660.721713][T22275] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1660.738659][T22275] tipc: Enabling of bearer rejected, failed to enable media [ 1660.939551][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16295'. [ 1660.940082][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16297'. [ 1660.954562][T22297] openvswitch: netlink: Flow key attr not present in new flow. [ 1660.995173][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16295'. [ 1661.293249][T22319] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16303'. [ 1661.559716][T22330] bridge2: entered promiscuous mode [ 1661.561492][T22333] xt_cgroup: invalid path, errno=-2 [ 1661.564976][T22330] bridge2: entered allmulticast mode [ 1661.672652][T22338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16307'. [ 1662.034594][T22346] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.16310'. [ 1662.136494][T22350] netlink: 'syz.1.16311': attribute type 6 has an invalid length. [ 1662.710778][T22365] bond0: (slave wlan0): Releasing backup interface [ 1662.721292][T22361] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16314'. [ 1662.767232][T22367] netlink: 'syz.1.16317': attribute type 8 has an invalid length. [ 1662.854235][T22369] netlink: 'syz.0.16318': attribute type 1 has an invalid length. [ 1662.868877][T22369] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16318'. [ 1662.971830][T22374] xt_cgroup: invalid path, errno=-2 [ 1663.132088][T22379] netlink: 'syz.3.16322': attribute type 6 has an invalid length. [ 1663.429737][T22393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16320'. [ 1663.520833][T22396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16325'. [ 1663.766897][T22400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16327'. [ 1663.876494][T22402] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16328'. [ 1663.920911][T22405] openvswitch: netlink: Flow key attr not present in new flow. [ 1663.923787][T22409] FAULT_INJECTION: forcing a failure. [ 1663.923787][T22409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.964204][T22409] CPU: 1 UID: 0 PID: 22409 Comm: syz.1.16329 Not tainted syzkaller #0 PREEMPT(full) [ 1663.964233][T22409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1663.964244][T22409] Call Trace: [ 1663.964252][T22409] [ 1663.964261][T22409] dump_stack_lvl+0xe8/0x150 [ 1663.964288][T22409] should_fail_ex+0x412/0x560 [ 1663.964318][T22409] _copy_from_user+0x2d/0xb0 [ 1663.964346][T22409] core_sys_select+0x628/0xc30 [ 1663.964383][T22409] ? __pfx_core_sys_select+0x10/0x10 [ 1663.964427][T22409] ? __pfx_set_user_sigmask+0x10/0x10 [ 1663.964446][T22409] ? kmem_cache_free+0x182/0x650 [ 1663.964470][T22409] ? fd_install+0x94/0x3d0 [ 1663.964498][T22409] __se_sys_pselect6+0x267/0x320 [ 1663.964524][T22409] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1663.964544][T22409] ? __pfx_ksys_write+0x10/0x10 [ 1663.964573][T22409] ? __x64_sys_pselect6+0x21/0xf0 [ 1663.964593][T22409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.964614][T22409] do_syscall_64+0x15f/0xf80 [ 1663.964635][T22409] ? clear_bhb_loop+0x40/0x90 [ 1663.964658][T22409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.964673][T22409] RIP: 0033:0x7fe16b19ce59 [ 1663.964693][T22409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.964707][T22409] RSP: 002b:00007fe16c070028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1663.964727][T22409] RAX: ffffffffffffffda RBX: 00007fe16b415fa0 RCX: 00007fe16b19ce59 [ 1663.964739][T22409] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1663.964751][T22409] RBP: 00007fe16c070090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.964763][T22409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.964773][T22409] R13: 00007fe16b416038 R14: 00007fe16b415fa0 R15: 00007ffe3bbf0e58 [ 1663.964802][T22409] [ 1664.517218][T22428] netlink: 'syz.2.16334': attribute type 6 has an invalid length. [ 1664.570649][T22433] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16336'. [ 1664.636552][T22433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.699259][T22433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.707574][T22426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16333'. [ 1664.731598][T22433] bond0 (unregistering): Released all slaves [ 1664.742852][T22440] FAULT_INJECTION: forcing a failure. [ 1664.742852][T22440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.766093][T22440] CPU: 1 UID: 0 PID: 22440 Comm: syz.3.16337 Not tainted syzkaller #0 PREEMPT(full) [ 1664.766119][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1664.766133][T22440] Call Trace: [ 1664.766141][T22440] [ 1664.766150][T22440] dump_stack_lvl+0xe8/0x150 [ 1664.766178][T22440] should_fail_ex+0x412/0x560 [ 1664.766209][T22440] _copy_to_user+0x31/0xb0 [ 1664.766238][T22440] simple_read_from_buffer+0xe1/0x170 [ 1664.766267][T22440] proc_fail_nth_read+0x1bb/0x230 [ 1664.766294][T22440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.766320][T22440] ? rw_verify_area+0x2a6/0x4d0 [ 1664.766343][T22440] ? __fget_files+0x2a/0x420 [ 1664.766369][T22440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.766394][T22440] vfs_read+0x20c/0xa70 [ 1664.766424][T22440] ? __pfx___mutex_lock+0x10/0x10 [ 1664.766446][T22440] ? __pfx_vfs_read+0x10/0x10 [ 1664.766472][T22440] ? __fget_files+0x2a/0x420 [ 1664.766498][T22440] ? __fget_files+0x3a0/0x420 [ 1664.766519][T22440] ? __fget_files+0x2a/0x420 [ 1664.766550][T22440] ksys_read+0x150/0x270 [ 1664.766577][T22440] ? __pfx_ksys_read+0x10/0x10 [ 1664.766611][T22440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.766632][T22440] do_syscall_64+0x15f/0xf80 [ 1664.766650][T22440] ? trace_irq_disable+0x3b/0x140 [ 1664.766676][T22440] ? clear_bhb_loop+0x40/0x90 [ 1664.766700][T22440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.766719][T22440] RIP: 0033:0x7fee8675d68e [ 1664.766738][T22440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1664.766754][T22440] RSP: 002b:00007fee875b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1664.766774][T22440] RAX: ffffffffffffffda RBX: 00007fee875b56c0 RCX: 00007fee8675d68e [ 1664.766788][T22440] RDX: 000000000000000f RSI: 00007fee875b50a0 RDI: 0000000000000004 [ 1664.766800][T22440] RBP: 00007fee875b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.766812][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1664.766823][T22440] R13: 00007fee86a16038 R14: 00007fee86a15fa0 R15: 00007ffdceb67828 [ 1664.766855][T22440] [ 1665.034933][T22444] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16339'. [ 1665.106158][T22448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16341'. [ 1665.256901][T22453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 1665.952926][T22477] netlink: 'syz.1.16348': attribute type 1 has an invalid length. [ 1666.092663][T22481] batadv_slave_1: entered promiscuous mode [ 1666.116942][T22481] netlink: 'syz.1.16350': attribute type 1 has an invalid length. [ 1666.139312][T22481] netlink: 'syz.1.16350': attribute type 2 has an invalid length. [ 1666.155762][T22481] netlink: 'syz.1.16350': attribute type 1 has an invalid length. [ 1666.173614][T22481] netlink: 'syz.1.16350': attribute type 2 has an invalid length. [ 1666.219941][T22480] batadv_slave_1: left promiscuous mode [ 1666.378384][T11362] Bluetooth: hci1: command 0x0406 tx timeout [ 1666.413948][T22499] netlink: 'syz.1.16356': attribute type 11 has an invalid length. [ 1666.438234][T22500] bridge2: entered allmulticast mode [ 1666.649782][T22511] FAULT_INJECTION: forcing a failure. [ 1666.649782][T22511] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.662524][T22511] CPU: 0 UID: 0 PID: 22511 Comm: syz.0.16360 Not tainted syzkaller #0 PREEMPT(full) [ 1666.662548][T22511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1666.662558][T22511] Call Trace: [ 1666.662567][T22511] [ 1666.662573][T22511] dump_stack_lvl+0xe8/0x150 [ 1666.662600][T22511] should_fail_ex+0x412/0x560 [ 1666.662629][T22511] should_failslab+0xa8/0x100 [ 1666.662656][T22511] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1666.662678][T22511] ? __alloc_skb+0x186/0x7d0 [ 1666.662699][T22511] ? __alloc_skb+0x1d0/0x7d0 [ 1666.662717][T22511] ? __local_bh_enable_ip+0xd0/0x130 [ 1666.662881][T22511] __alloc_skb+0x1d0/0x7d0 [ 1666.662905][T22511] ? netlink_ack_tlv_len+0x6c/0x210 [ 1666.662934][T22511] netlink_ack+0x146/0xa50 [ 1666.662975][T22511] netlink_rcv_skb+0x2b6/0x4b0 [ 1666.663001][T22511] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1666.663028][T22511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1666.663063][T22511] ? bpf_lsm_capable+0x9/0x20 [ 1666.663080][T22511] ? security_capable+0x7e/0x2c0 [ 1666.663108][T22511] nfnetlink_rcv+0x2c0/0x27b0 [ 1666.663141][T22511] ? __local_bh_enable_ip+0xd0/0x130 [ 1666.663160][T22511] ? lockdep_hardirqs_on+0x7a/0x110 [ 1666.663186][T22511] ? __dev_queue_xmit+0x2b6/0x3950 [ 1666.663204][T22511] ? __local_bh_enable_ip+0xd0/0x130 [ 1666.663221][T22511] ? __dev_queue_xmit+0x2b6/0x3950 [ 1666.663237][T22511] ? __dev_queue_xmit+0x1fe5/0x3950 [ 1666.663250][T22511] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1666.663276][T22511] ? __dev_queue_xmit+0x2b6/0x3950 [ 1666.663299][T22511] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1666.663328][T22511] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1666.663353][T22511] ? ref_tracker_free+0x693/0x840 [ 1666.663381][T22511] ? __pfx_ref_tracker_free+0x10/0x10 [ 1666.663421][T22511] ? skb_clone+0x246/0x3a0 [ 1666.663443][T22511] ? __netlink_deliver_tap+0x807/0x850 [ 1666.663468][T22511] ? netlink_deliver_tap+0x2e/0x1b0 [ 1666.663514][T22511] ? netlink_deliver_tap+0x2e/0x1b0 [ 1666.663538][T22511] ? netlink_deliver_tap+0x2e/0x1b0 [ 1666.663567][T22511] netlink_unicast+0x75c/0x8e0 [ 1666.663600][T22511] netlink_sendmsg+0x813/0xb40 [ 1666.663631][T22511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1666.663657][T22511] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1666.663682][T22511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1666.663709][T22511] ____sys_sendmsg+0x972/0x9f0 [ 1666.663748][T22511] ? __might_fault+0xaf/0x130 [ 1666.663778][T22511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1666.663812][T22511] ? import_iovec+0x73/0xa0 [ 1666.663842][T22511] ___sys_sendmsg+0x2a5/0x360 [ 1666.663867][T22511] ? __lock_acquire+0x6b5/0x2cf0 [ 1666.663895][T22511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1666.663952][T22511] ? __fget_files+0x2a/0x420 [ 1666.663973][T22511] ? __fget_files+0x3a0/0x420 [ 1666.664004][T22511] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1666.664033][T22511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1666.664069][T22511] ? __pfx_ksys_write+0x10/0x10 [ 1666.664103][T22511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.664123][T22511] do_syscall_64+0x15f/0xf80 [ 1666.664141][T22511] ? trace_irq_disable+0x3b/0x140 [ 1666.664167][T22511] ? clear_bhb_loop+0x40/0x90 [ 1666.664190][T22511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.664209][T22511] RIP: 0033:0x7f980e99ce59 [ 1666.664227][T22511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.664243][T22511] RSP: 002b:00007f980f7e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1666.664263][T22511] RAX: ffffffffffffffda RBX: 00007f980ec15fa0 RCX: 00007f980e99ce59 [ 1666.664277][T22511] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1666.664289][T22511] RBP: 00007f980f7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.664300][T22511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.664311][T22511] R13: 00007f980ec16038 R14: 00007f980ec15fa0 R15: 00007ffd8071c8a8 [ 1666.664341][T22511] [ 1667.453521][T22520] netlink: 'syz.3.16364': attribute type 1 has an invalid length. [ 1667.912975][T22539] __nla_validate_parse: 6 callbacks suppressed [ 1667.912995][T22539] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16369'. [ 1668.261853][T22546] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.16372'. [ 1668.779125][T22562] netlink: 'syz.4.16375': attribute type 3 has an invalid length. [ 1669.408022][T22577] xt_hashlimit: size too large, truncated to 1048576 [ 1669.423823][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1669.468579][T22580] netlink: 'syz.4.16381': attribute type 1 has an invalid length. [ 1669.514169][T22580] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16381'. [ 1669.744213][T22590] FAULT_INJECTION: forcing a failure. [ 1669.744213][T22590] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.757028][T22590] CPU: 1 UID: 0 PID: 22590 Comm: syz.3.16382 Not tainted syzkaller #0 PREEMPT(full) [ 1669.757052][T22590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1669.757062][T22590] Call Trace: [ 1669.757069][T22590] [ 1669.757076][T22590] dump_stack_lvl+0xe8/0x150 [ 1669.757103][T22590] should_fail_ex+0x412/0x560 [ 1669.757135][T22590] should_failslab+0xa8/0x100 [ 1669.757160][T22590] ? skb_clone+0x212/0x3a0 [ 1669.757177][T22590] kmem_cache_alloc_noprof+0x87/0x650 [ 1669.757197][T22590] ? __bpf_redirect+0x9b4/0x12a0 [ 1669.757221][T22590] skb_clone+0x212/0x3a0 [ 1669.757238][T22590] bpf_clone_redirect+0x16a/0x4b0 [ 1669.757263][T22590] ? bpf_test_run+0x1d1/0x830 [ 1669.757285][T22590] bpf_prog_047103ee48f4f65a+0x5f/0x68 [ 1669.757303][T22590] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1669.757332][T22590] ? arch_stack_walk+0xfb/0x150 [ 1669.757359][T22590] ? ktime_get+0x45/0x220 [ 1669.757390][T22590] ? ktime_get+0x45/0x220 [ 1669.757412][T22590] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1669.757434][T22590] ? lockdep_hardirqs_on+0x7a/0x110 [ 1669.757458][T22590] ? ktime_get+0x45/0x220 [ 1669.757477][T22590] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1669.757498][T22590] ? bpf_test_run+0x1d1/0x830 [ 1669.757526][T22590] ? bpf_test_timer_continue+0x10c/0x320 [ 1669.757550][T22590] bpf_test_run+0x354/0x830 [ 1669.757592][T22590] ? __pfx_bpf_test_run+0x10/0x10 [ 1669.757626][T22590] ? eth_type_trans+0x348/0x7e0 [ 1669.757646][T22590] ? skb_dst_set+0x72/0x140 [ 1669.757674][T22590] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1669.757715][T22590] ? __fget_files+0x3a0/0x420 [ 1669.757732][T22590] ? __fget_files+0x2a/0x420 [ 1669.757753][T22590] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1669.757774][T22590] bpf_prog_test_run+0x2c7/0x340 [ 1669.757794][T22590] __sys_bpf+0x643/0x950 [ 1669.757817][T22590] ? __pfx___sys_bpf+0x10/0x10 [ 1669.757851][T22590] ? ksys_write+0x242/0x270 [ 1669.757873][T22590] ? __pfx_ksys_write+0x10/0x10 [ 1669.757898][T22590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.757915][T22590] __x64_sys_bpf+0x7c/0x90 [ 1669.757935][T22590] do_syscall_64+0x15f/0xf80 [ 1669.757950][T22590] ? clear_bhb_loop+0x40/0x90 [ 1669.757969][T22590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.757983][T22590] RIP: 0033:0x7fee8679ce59 [ 1669.757998][T22590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.758011][T22590] RSP: 002b:00007fee875b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1669.758028][T22590] RAX: ffffffffffffffda RBX: 00007fee86a15fa0 RCX: 00007fee8679ce59 [ 1669.758039][T22590] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1669.758049][T22590] RBP: 00007fee875b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.758059][T22590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.758068][T22590] R13: 00007fee86a16038 R14: 00007fee86a15fa0 R15: 00007ffdceb67828 [ 1669.758092][T22590] [ 1670.657769][T22619] syzkaller1: entered promiscuous mode [ 1670.663789][T22619] syzkaller1: entered allmulticast mode [ 1670.677033][T22623] bond0: entered promiscuous mode [ 1670.682917][T22623] bond_slave_0: entered promiscuous mode [ 1670.700334][T22623] bond_slave_1: entered promiscuous mode [ 1670.776001][T22622] netlink: 'syz.1.16389': attribute type 3 has an invalid length. [ 1670.783853][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16389'. [ 1670.807738][T22621] netlink: 'syz.1.16389': attribute type 3 has an invalid length. [ 1670.816557][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16389'. [ 1670.843843][T22621] bond0: left promiscuous mode [ 1670.849034][T22621] bond_slave_0: left promiscuous mode [ 1670.854646][T22621] bond_slave_1: left promiscuous mode [ 1671.124863][T22640] sock: sock_set_timeout: `syz.0.16394' (pid 22640) tries to set negative timeout [ 1671.135778][T22640] netlink: 'syz.0.16394': attribute type 21 has an invalid length. [ 1671.143724][T22640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16394'. [ 1671.281673][T22633] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.16392'. [ 1671.548432][T22649] xt_hashlimit: size too large, truncated to 1048576 [ 1671.612010][T22652] netlink: 'syz.4.16397': attribute type 1 has an invalid length. [ 1671.649192][T22652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16397'. [ 1671.861828][T22662] FAULT_INJECTION: forcing a failure. [ 1671.861828][T22662] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.874481][T22662] CPU: 0 UID: 0 PID: 22662 Comm: syz.2.16400 Not tainted syzkaller #0 PREEMPT(full) [ 1671.874506][T22662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1671.874517][T22662] Call Trace: [ 1671.874526][T22662] [ 1671.874535][T22662] dump_stack_lvl+0xe8/0x150 [ 1671.874563][T22662] should_fail_ex+0x412/0x560 [ 1671.874593][T22662] should_failslab+0xa8/0x100 [ 1671.874620][T22662] ? skb_clone+0x212/0x3a0 [ 1671.874639][T22662] kmem_cache_alloc_noprof+0x87/0x650 [ 1671.874663][T22662] ? apparmor_capable+0x126/0x170 [ 1671.874686][T22662] skb_clone+0x212/0x3a0 [ 1671.874702][T22662] ? nfnetlink_rcv+0x4b0/0x27b0 [ 1671.874731][T22662] nfnetlink_rcv+0x4de/0x27b0 [ 1671.874766][T22662] ? lockdep_hardirqs_on+0x7a/0x110 [ 1671.874794][T22662] ? __local_bh_enable_ip+0xd0/0x130 [ 1671.874814][T22662] ? __dev_queue_xmit+0x2b6/0x3950 [ 1671.874832][T22662] ? __dev_queue_xmit+0x1fe5/0x3950 [ 1671.874850][T22662] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1671.874889][T22662] ? __dev_queue_xmit+0x2b6/0x3950 [ 1671.874913][T22662] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1671.874954][T22662] ? ref_tracker_free+0x693/0x840 [ 1671.874982][T22662] ? __pfx_ref_tracker_free+0x10/0x10 [ 1671.875024][T22662] ? skb_clone+0x246/0x3a0 [ 1671.875045][T22662] ? __netlink_deliver_tap+0x807/0x850 [ 1671.875072][T22662] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.875104][T22662] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.875128][T22662] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.875159][T22662] netlink_unicast+0x75c/0x8e0 [ 1671.875194][T22662] netlink_sendmsg+0x813/0xb40 [ 1671.875229][T22662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.875258][T22662] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1671.875284][T22662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1671.875314][T22662] ____sys_sendmsg+0x972/0x9f0 [ 1671.875341][T22662] ? __might_fault+0xaf/0x130 [ 1671.875370][T22662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1671.875407][T22662] ? import_iovec+0x73/0xa0 [ 1671.875437][T22662] ___sys_sendmsg+0x2a5/0x360 [ 1671.875462][T22662] ? __lock_acquire+0x6b5/0x2cf0 [ 1671.875488][T22662] ? __pfx____sys_sendmsg+0x10/0x10 [ 1671.875550][T22662] ? __fget_files+0x2a/0x420 [ 1671.875571][T22662] ? __fget_files+0x3a0/0x420 [ 1671.875601][T22662] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1671.875630][T22662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1671.875662][T22662] ? __pfx_ksys_write+0x10/0x10 [ 1671.875691][T22662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.875708][T22662] do_syscall_64+0x15f/0xf80 [ 1671.875723][T22662] ? trace_irq_disable+0x3b/0x140 [ 1671.875745][T22662] ? clear_bhb_loop+0x40/0x90 [ 1671.875764][T22662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.875780][T22662] RIP: 0033:0x7fd06d79ce59 [ 1671.875796][T22662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.875810][T22662] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1671.875827][T22662] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1671.875838][T22662] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000011 [ 1671.875848][T22662] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.875858][T22662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.875867][T22662] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1671.875898][T22662] [ 1673.049848][T22693] lo: entered allmulticast mode [ 1673.136753][T22702] netlink: 'syz.0.16408': attribute type 1 has an invalid length. [ 1673.281133][T22702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.446587][T22721] FAULT_INJECTION: forcing a failure. [ 1673.446587][T22721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1673.459836][T22721] CPU: 0 UID: 0 PID: 22721 Comm: syz.2.16411 Not tainted syzkaller #0 PREEMPT(full) [ 1673.459862][T22721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1673.459873][T22721] Call Trace: [ 1673.459884][T22721] [ 1673.459894][T22721] dump_stack_lvl+0xe8/0x150 [ 1673.459921][T22721] should_fail_ex+0x412/0x560 [ 1673.459950][T22721] prepare_alloc_pages+0x22a/0x650 [ 1673.459985][T22721] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1673.460016][T22721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1673.460046][T22721] ? __pfx_policy_nodemask+0x10/0x10 [ 1673.460071][T22721] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1673.460096][T22721] ? lock_acquire+0x106/0x350 [ 1673.460124][T22721] alloc_pages_mpol+0x235/0x490 [ 1673.460155][T22721] folio_alloc_mpol_noprof+0x39/0x160 [ 1673.460184][T22721] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1673.460204][T22721] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1673.460232][T22721] do_wp_page+0x118a/0x4cc0 [ 1673.460258][T22721] ? __pte_offset_map+0x29/0x240 [ 1673.460289][T22721] ? __pfx_do_wp_page+0x10/0x10 [ 1673.460307][T22721] ? do_raw_spin_lock+0x12b/0x2f0 [ 1673.460334][T22721] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1673.460369][T22721] handle_mm_fault+0x151d/0x3170 [ 1673.460405][T22721] ? handle_mm_fault+0xee/0x3170 [ 1673.460433][T22721] ? __pfx_handle_mm_fault+0x10/0x10 [ 1673.460466][T22721] ? __pfx___up_read+0x10/0x10 [ 1673.460494][T22721] ? lock_mm_and_find_vma+0xa7/0x340 [ 1673.460522][T22721] do_user_addr_fault+0x75b/0x1340 [ 1673.460573][T22721] exc_page_fault+0x6a/0xc0 [ 1673.460603][T22721] asm_exc_page_fault+0x26/0x30 [ 1673.460622][T22721] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1673.460646][T22721] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1673.460662][T22721] RSP: 0018:ffffc9000619fb48 EFLAGS: 00050202 [ 1673.460679][T22721] RAX: ffffffff84b21801 RBX: 0000000000010001 RCX: 0000000000009d81 [ 1673.460692][T22721] RDX: 0000000000000000 RSI: ffff8880ab186288 RDI: 0000200000008000 [ 1673.460705][T22721] RBP: ffffc9000619fcc0 R08: 0000000000000000 R09: 0000000000000001 [ 1673.460717][T22721] R10: dffffc0000000000 R11: ffffed1015632001 R12: 0000200000011d81 [ 1673.460738][T22721] R13: 00007ffffffff000 R14: ffff8880ab180008 R15: 0000200000001d80 [ 1673.460759][T22721] ? _copy_to_user+0x1/0xb0 [ 1673.460792][T22721] _copy_to_user+0x8a/0xb0 [ 1673.460820][T22721] generic_map_lookup_batch+0xa93/0xeb0 [ 1673.460843][T22721] ? get_pid_task+0x20/0x1f0 [ 1673.460880][T22721] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1673.460910][T22721] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1673.460935][T22721] bpf_map_do_batch+0x285/0x630 [ 1673.460954][T22721] ? security_bpf+0x7e/0x2d0 [ 1673.460978][T22721] __sys_bpf+0x6b4/0x950 [ 1673.461006][T22721] ? __pfx___sys_bpf+0x10/0x10 [ 1673.461029][T22721] ? kmem_cache_free+0x182/0x650 [ 1673.461067][T22721] ? ksys_write+0x1fc/0x270 [ 1673.461094][T22721] ? __pfx_ksys_write+0x10/0x10 [ 1673.461123][T22721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.461143][T22721] __x64_sys_bpf+0x7c/0x90 [ 1673.461169][T22721] do_syscall_64+0x15f/0xf80 [ 1673.461186][T22721] ? trace_irq_disable+0x3b/0x140 [ 1673.461212][T22721] ? clear_bhb_loop+0x40/0x90 [ 1673.461233][T22721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.461251][T22721] RIP: 0033:0x7fd06d79ce59 [ 1673.461270][T22721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.461285][T22721] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1673.461304][T22721] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1673.461318][T22721] RDX: 0000000000000038 RSI: 0000200000001e40 RDI: 0000000000000018 [ 1673.461330][T22721] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.461342][T22721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.461352][T22721] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1673.461380][T22721] [ 1673.491376][T22717] veth7: entered allmulticast mode [ 1673.605750][T22722] netlink: 'syz.3.16412': attribute type 6 has an invalid length. [ 1673.723261][T22717] bond0: (slave veth7): Enslaving as an active interface with an up link [ 1674.077380][T22729] netlink: 'syz.3.16415': attribute type 6 has an invalid length. [ 1674.436668][T22747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16418'. [ 1674.913581][T22769] openvswitch: netlink: Flow key attr not present in new flow. [ 1675.374160][T22786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16430'. [ 1675.382860][T22788] netlink: 'syz.0.16432': attribute type 10 has an invalid length. [ 1675.392041][T22788] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 1675.444854][T22791] openvswitch: netlink: Missing valid actions attribute. [ 1675.452017][T22786] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16430'. [ 1675.479891][T22791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1676.100849][T22825] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16443'. [ 1676.371372][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16445'. [ 1676.412912][T22827] openvswitch: netlink: Invalid VLAN frame [ 1676.477297][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16444'. [ 1676.488668][T22833] openvswitch: netlink: Invalid VLAN frame [ 1676.740176][T22835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16446'. [ 1677.186944][T22848] xt_hashlimit: size too large, truncated to 1048576 [ 1677.414193][T22852] netlink: 'syz.0.16452': attribute type 6 has an invalid length. [ 1677.633021][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16454'. [ 1677.918911][T22868] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.16459'. [ 1678.198140][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16463'. [ 1678.229172][T22881] netlink: 'syz.0.16464': attribute type 6 has an invalid length. [ 1678.335959][T22883] FAULT_INJECTION: forcing a failure. [ 1678.335959][T22883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.349032][T22883] CPU: 0 UID: 0 PID: 22883 Comm: syz.0.16466 Not tainted syzkaller #0 PREEMPT(full) [ 1678.349057][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1678.349068][T22883] Call Trace: [ 1678.349078][T22883] [ 1678.349088][T22883] dump_stack_lvl+0xe8/0x150 [ 1678.349116][T22883] should_fail_ex+0x412/0x560 [ 1678.349155][T22883] _copy_from_iter+0x1d3/0x1670 [ 1678.349183][T22883] ? rcu_is_watching+0x15/0xb0 [ 1678.349211][T22883] ? __pfx__copy_from_iter+0x10/0x10 [ 1678.349244][T22883] ? netlink_sendmsg+0x650/0xb40 [ 1678.349268][T22883] ? skb_put+0x11b/0x210 [ 1678.349297][T22883] netlink_sendmsg+0x6c0/0xb40 [ 1678.349332][T22883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.349361][T22883] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1678.349388][T22883] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1678.349417][T22883] ____sys_sendmsg+0x972/0x9f0 [ 1678.349443][T22883] ? __might_fault+0xaf/0x130 [ 1678.349474][T22883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1678.349509][T22883] ? import_iovec+0x73/0xa0 [ 1678.349543][T22883] ___sys_sendmsg+0x2a5/0x360 [ 1678.349569][T22883] ? __lock_acquire+0x6b5/0x2cf0 [ 1678.349593][T22883] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.349655][T22883] ? __fget_files+0x2a/0x420 [ 1678.349676][T22883] ? __fget_files+0x3a0/0x420 [ 1678.349706][T22883] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1678.349735][T22883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.349771][T22883] ? __pfx_ksys_write+0x10/0x10 [ 1678.349816][T22883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.349836][T22883] do_syscall_64+0x15f/0xf80 [ 1678.349854][T22883] ? trace_irq_disable+0x3b/0x140 [ 1678.349880][T22883] ? clear_bhb_loop+0x40/0x90 [ 1678.349903][T22883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.349922][T22883] RIP: 0033:0x7f980e99ce59 [ 1678.349940][T22883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.349956][T22883] RSP: 002b:00007f980f7e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.349976][T22883] RAX: ffffffffffffffda RBX: 00007f980ec15fa0 RCX: 00007f980e99ce59 [ 1678.349990][T22883] RDX: 0000000000004000 RSI: 0000200000000740 RDI: 0000000000000003 [ 1678.350003][T22883] RBP: 00007f980f7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.350014][T22883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.350025][T22883] R13: 00007f980ec16038 R14: 00007f980ec15fa0 R15: 00007ffd8071c8a8 [ 1678.350057][T22883] [ 1679.171804][T22897] netlink: 'syz.0.16471': attribute type 3 has an invalid length. [ 1679.179680][T22897] netlink: 'syz.0.16471': attribute type 3 has an invalid length. [ 1679.357188][T22901] syzkaller0: entered promiscuous mode [ 1679.362708][T22901] syzkaller0: entered allmulticast mode [ 1679.428954][T22905] netlink: 'syz.2.16476': attribute type 3 has an invalid length. [ 1679.437075][T22905] netlink: 'syz.2.16476': attribute type 3 has an invalid length. [ 1679.473733][T22905] __nla_validate_parse: 2 callbacks suppressed [ 1679.473753][T22905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16476'. [ 1679.665590][T22918] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.16480'. [ 1679.819459][T22932] netlink: 'syz.4.16478': attribute type 10 has an invalid length. [ 1679.867765][T22932] bridge0: port 3(team0) entered disabled state [ 1679.880134][T22932] team0: left allmulticast mode [ 1679.885042][T22932] team_slave_0: left allmulticast mode [ 1679.890522][T22932] team_slave_1: left allmulticast mode [ 1679.896052][T22932] team0: left promiscuous mode [ 1679.900838][T22932] team_slave_0: left promiscuous mode [ 1679.906526][T22932] team_slave_1: left promiscuous mode [ 1679.912684][T22932] bridge0: port 3(team0) entered disabled state [ 1679.925574][T22932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.936307][T22932] bond0: (slave team0): Enslaving as an active interface with an up link [ 1680.631412][T22949] syzkaller0: entered promiscuous mode [ 1680.643597][T22949] syzkaller0: entered allmulticast mode [ 1680.706267][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16489'. [ 1681.364445][T22967] xt_TCPMSS: Only works on TCP SYN packets [ 1681.551304][T22974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16493'. [ 1681.705052][T11362] Bluetooth: hci3: command 0x0406 tx timeout [ 1682.885395][T22990] FAULT_INJECTION: forcing a failure. [ 1682.885395][T22990] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.898702][T22990] CPU: 1 UID: 0 PID: 22990 Comm: syz.0.16498 Not tainted syzkaller #0 PREEMPT(full) [ 1682.898729][T22990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1682.898741][T22990] Call Trace: [ 1682.898749][T22990] [ 1682.898757][T22990] dump_stack_lvl+0xe8/0x150 [ 1682.898785][T22990] should_fail_ex+0x412/0x560 [ 1682.898815][T22990] should_failslab+0xa8/0x100 [ 1682.898844][T22990] __kmalloc_cache_noprof+0x88/0x660 [ 1682.898871][T22990] ? limit_mt_check+0x1bf/0x530 [ 1682.898977][T22990] limit_mt_check+0x1bf/0x530 [ 1682.898999][T22990] xt_check_match+0x64c/0xce0 [ 1682.899056][T22990] ? __pfx_xt_check_match+0x10/0x10 [ 1682.899082][T22990] ? xt_find_match+0x20c/0x260 [ 1682.899135][T22990] translate_table+0x1567/0x2110 [ 1682.899172][T22990] ? __pfx_translate_table+0x10/0x10 [ 1682.899189][T22990] ? __might_fault+0xaf/0x130 [ 1682.899209][T22990] ? __might_fault+0xaf/0x130 [ 1682.899241][T22990] ? _copy_from_user+0x94/0xb0 [ 1682.899266][T22990] do_ipt_set_ctl+0x9f5/0xe00 [ 1682.899286][T22990] ? rcu_is_watching+0x15/0xb0 [ 1682.899304][T22990] ? trace_contention_end+0x3d/0x140 [ 1682.899325][T22990] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1682.899355][T22990] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1682.899374][T22990] ? __pfx___mutex_lock+0x10/0x10 [ 1682.899391][T22990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1682.899411][T22990] ? __pfx_aa_sk_perm+0x10/0x10 [ 1682.899435][T22990] nf_setsockopt+0x26f/0x290 [ 1682.899454][T22990] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1682.899475][T22990] do_sock_setsockopt+0x17c/0x1b0 [ 1682.899500][T22990] __x64_sys_setsockopt+0x13d/0x1b0 [ 1682.899522][T22990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.899538][T22990] do_syscall_64+0x15f/0xf80 [ 1682.899553][T22990] ? trace_irq_disable+0x3b/0x140 [ 1682.899574][T22990] ? clear_bhb_loop+0x40/0x90 [ 1682.899593][T22990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.899607][T22990] RIP: 0033:0x7f980e99ce59 [ 1682.899625][T22990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.899639][T22990] RSP: 002b:00007f980f7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1682.899655][T22990] RAX: ffffffffffffffda RBX: 00007f980ec15fa0 RCX: 00007f980e99ce59 [ 1682.899666][T22990] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1682.899675][T22990] RBP: 00007f980f7e6090 R08: 0000000000000438 R09: 0000000000000000 [ 1682.899684][T22990] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000002 [ 1682.899693][T22990] R13: 00007f980ec16038 R14: 00007f980ec15fa0 R15: 00007ffd8071c8a8 [ 1682.899718][T22990] [ 1683.535601][T23000] netlink: 'syz.3.16502': attribute type 1 has an invalid length. [ 1683.592437][T23001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16500'. [ 1686.561715][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16508'. [ 1686.631569][T23029] xt_cgroup: invalid path, errno=-2 [ 1686.845107][ T6490] Bluetooth: hci2: command 0x0406 tx timeout [ 1688.033950][T23072] netlink: 300 bytes leftover after parsing attributes in process `syz.4.16520'. [ 1688.254583][T23082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16523'. [ 1688.274530][T23082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16523'. [ 1688.294121][T23080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16522'. [ 1688.974177][T23113] netlink: 'syz.0.16533': attribute type 10 has an invalid length. [ 1689.016260][T23113] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.16533'. [ 1689.092150][T23116] netlink: 292 bytes leftover after parsing attributes in process `syz.1.16535'. [ 1689.253784][T23122] netlink: 690 bytes leftover after parsing attributes in process `syz.4.16537'. [ 1689.321059][T23122] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16537'. [ 1689.338237][T23128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16539'. [ 1689.345131][T23126] netlink: 'syz.1.16538': attribute type 6 has an invalid length. [ 1690.091692][T23159] netlink: 'syz.4.16551': attribute type 6 has an invalid length. [ 1690.305967][T23173] pim6reg: entered allmulticast mode [ 1690.605778][T23180] netlink: 'syz.2.16557': attribute type 6 has an invalid length. [ 1690.958501][T23162] pim6reg: left allmulticast mode [ 1691.006091][T23189] xt_hashlimit: size too large, truncated to 1048576 [ 1691.086539][T23193] netlink: 'syz.4.16562': attribute type 1 has an invalid length. [ 1691.309608][T23205] netlink: 'syz.3.16564': attribute type 6 has an invalid length. [ 1692.735308][T23229] netlink: 'syz.3.16569': attribute type 6 has an invalid length. [ 1692.776635][T23227] tipc: Enabled bearer , priority 0 [ 1692.799849][T23227] syzkaller0: entered promiscuous mode [ 1692.805356][T23227] syzkaller0: entered allmulticast mode [ 1692.889675][T23233] xt_cgroup: invalid path, errno=-2 [ 1692.899909][T23227] tipc: Resetting bearer [ 1692.914092][T23226] tipc: Resetting bearer [ 1692.971426][T23239] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16) [ 1692.981753][T23226] tipc: Disabling bearer [ 1693.004193][T23239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1693.077827][T23244] __nla_validate_parse: 7 callbacks suppressed [ 1693.077847][T23244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16571'. [ 1693.123858][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16577'. [ 1693.135965][T10133] IPVS: starting estimator thread 0... [ 1693.200182][T23253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1693.266066][T23250] IPVS: using max 29 ests per chain, 69600 per kthread [ 1693.297227][T23256] FAULT_INJECTION: forcing a failure. [ 1693.297227][T23256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1693.310480][T23256] CPU: 0 UID: 0 PID: 23256 Comm: syz.1.16579 Not tainted syzkaller #0 PREEMPT(full) [ 1693.310503][T23256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1693.310515][T23256] Call Trace: [ 1693.310524][T23256] [ 1693.310532][T23256] dump_stack_lvl+0xe8/0x150 [ 1693.310560][T23256] should_fail_ex+0x412/0x560 [ 1693.310589][T23256] prepare_alloc_pages+0x22a/0x650 [ 1693.310624][T23256] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1693.310662][T23256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1693.310694][T23256] ? __pfx_policy_nodemask+0x10/0x10 [ 1693.310731][T23256] alloc_pages_mpol+0x235/0x490 [ 1693.310764][T23256] ___kmalloc_large_node+0x4e/0x120 [ 1693.310792][T23256] __kmalloc_large_node_noprof+0x18/0x90 [ 1693.310819][T23256] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 1693.310912][T23256] __kmalloc_noprof+0x3e8/0x760 [ 1693.310934][T23256] ? wiphy_new_nm+0x625/0x19e0 [ 1693.310995][T23256] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 1693.311020][T23256] wiphy_new_nm+0x625/0x19e0 [ 1693.311042][T23256] ? ieee80211_alloc_hw_nm+0x3da/0x1fa0 [ 1693.311064][T23256] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 1693.311088][T23256] ieee80211_alloc_hw_nm+0x3f3/0x1fa0 [ 1693.311106][T23256] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1693.311138][T23256] mac80211_hwsim_new_radio+0x1de/0x57e0 [ 1693.311159][T23256] ? __lock_acquire+0x6b5/0x2cf0 [ 1693.311181][T23256] ? __lock_acquire+0x6b5/0x2cf0 [ 1693.311207][T23256] ? __lock_acquire+0x6b5/0x2cf0 [ 1693.311228][T23256] ? __lock_acquire+0x6b5/0x2cf0 [ 1693.311248][T23256] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1693.311279][T23256] hwsim_new_radio_nl+0xe20/0x26e0 [ 1693.311299][T23256] ? unwind_next_frame+0xa6/0x2550 [ 1693.311336][T23256] ? is_bpf_text_address+0x26/0x2b0 [ 1693.311368][T23256] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1693.311390][T23256] ? __kernel_text_address+0xd/0x30 [ 1693.311413][T23256] ? unwind_get_return_address+0x4d/0x90 [ 1693.311432][T23256] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1693.311457][T23256] ? arch_stack_walk+0xfb/0x150 [ 1693.311491][T23256] ? stack_trace_save+0xa9/0x100 [ 1693.311514][T23256] ? __pfx_stack_trace_save+0x10/0x10 [ 1693.311543][T23256] ? stack_depot_save_flags+0x33/0x810 [ 1693.311571][T23256] ? kasan_save_track+0x3e/0x80 [ 1693.311593][T23256] ? kasan_save_alloc_info+0x11/0x50 [ 1693.311612][T23256] ? __kasan_slab_free+0x5c/0x80 [ 1693.311646][T23256] ? __nla_validate_parse+0x2480/0x2dc0 [ 1693.311679][T23256] ? ____sys_sendmsg+0x972/0x9f0 [ 1693.311704][T23256] ? ___sys_sendmsg+0x2a5/0x360 [ 1693.311748][T23256] ? __pfx___nla_validate_parse+0x10/0x10 [ 1693.311794][T23256] ? rcu_is_watching+0x15/0xb0 [ 1693.311816][T23256] ? trace_kmalloc+0x2a/0xf0 [ 1693.311846][T23256] ? __nla_parse+0x40/0x60 [ 1693.311875][T23256] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1693.311896][T23256] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1693.311921][T23256] genl_family_rcv_msg_doit+0x22a/0x330 [ 1693.311945][T23256] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1693.311974][T23256] ? bpf_lsm_capable+0x9/0x20 [ 1693.311993][T23256] ? security_capable+0x7e/0x2c0 [ 1693.312019][T23256] genl_rcv_msg+0x61c/0x7a0 [ 1693.312041][T23256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1693.312056][T23256] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1693.312075][T23256] ? __pfx_ref_tracker_free+0x10/0x10 [ 1693.312103][T23256] netlink_rcv_skb+0x232/0x4b0 [ 1693.312126][T23256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1693.312143][T23256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1693.312177][T23256] ? down_read+0x270/0x2e0 [ 1693.312192][T23256] ? genl_rcv+0xd/0x40 [ 1693.312209][T23256] genl_rcv+0x28/0x40 [ 1693.312223][T23256] netlink_unicast+0x75c/0x8e0 [ 1693.312251][T23256] netlink_sendmsg+0x813/0xb40 [ 1693.312279][T23256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1693.312302][T23256] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1693.312323][T23256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1693.312345][T23256] ____sys_sendmsg+0x972/0x9f0 [ 1693.312366][T23256] ? __might_fault+0xaf/0x130 [ 1693.312390][T23256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1693.312419][T23256] ? import_iovec+0x73/0xa0 [ 1693.312444][T23256] ___sys_sendmsg+0x2a5/0x360 [ 1693.312463][T23256] ? __lock_acquire+0x6b5/0x2cf0 [ 1693.312483][T23256] ? __pfx____sys_sendmsg+0x10/0x10 [ 1693.312533][T23256] ? __fget_files+0x2a/0x420 [ 1693.312550][T23256] ? __fget_files+0x3a0/0x420 [ 1693.312576][T23256] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1693.312601][T23256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1693.312632][T23256] ? __pfx_ksys_write+0x10/0x10 [ 1693.312665][T23256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.312682][T23256] do_syscall_64+0x15f/0xf80 [ 1693.312695][T23256] ? trace_irq_disable+0x3b/0x140 [ 1693.312717][T23256] ? clear_bhb_loop+0x40/0x90 [ 1693.312735][T23256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.312750][T23256] RIP: 0033:0x7fe16b19ce59 [ 1693.312765][T23256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.312779][T23256] RSP: 002b:00007fe16c070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.312797][T23256] RAX: ffffffffffffffda RBX: 00007fe16b415fa0 RCX: 00007fe16b19ce59 [ 1693.312808][T23256] RDX: 0000000000004800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1693.312817][T23256] RBP: 00007fe16c070090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.312827][T23256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.312836][T23256] R13: 00007fe16b416038 R14: 00007fe16b415fa0 R15: 00007ffe3bbf0e58 [ 1693.312861][T23256] [ 1694.223205][T23273] netlink: 'syz.4.16584': attribute type 6 has an invalid length. [ 1694.719311][T23297] FAULT_INJECTION: forcing a failure. [ 1694.719311][T23297] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.752813][T23293] bridge5: entered promiscuous mode [ 1694.759492][T23293] bridge5: entered allmulticast mode [ 1694.764962][T23297] CPU: 1 UID: 0 PID: 23297 Comm: syz.2.16589 Not tainted syzkaller #0 PREEMPT(full) [ 1694.764985][T23297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1694.764996][T23297] Call Trace: [ 1694.765003][T23297] [ 1694.765011][T23297] dump_stack_lvl+0xe8/0x150 [ 1694.765038][T23297] should_fail_ex+0x412/0x560 [ 1694.765068][T23297] should_failslab+0xa8/0x100 [ 1694.765094][T23297] ? skb_clone+0x212/0x3a0 [ 1694.765112][T23297] kmem_cache_alloc_noprof+0x87/0x650 [ 1694.765136][T23297] ? __netlink_lookup+0xc6/0x8b0 [ 1694.765168][T23297] skb_clone+0x212/0x3a0 [ 1694.765190][T23297] __netlink_deliver_tap+0x404/0x850 [ 1694.765228][T23297] ? netlink_deliver_tap+0x2e/0x1b0 [ 1694.765255][T23297] netlink_deliver_tap+0x19c/0x1b0 [ 1694.765280][T23297] netlink_unicast+0x730/0x8e0 [ 1694.765314][T23297] netlink_sendmsg+0x813/0xb40 [ 1694.765349][T23297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1694.765378][T23297] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1694.765404][T23297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1694.765431][T23297] ____sys_sendmsg+0x972/0x9f0 [ 1694.765458][T23297] ? __might_fault+0xaf/0x130 [ 1694.765486][T23297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1694.765518][T23297] ? import_iovec+0x73/0xa0 [ 1694.765545][T23297] ___sys_sendmsg+0x2a5/0x360 [ 1694.765567][T23297] ? __lock_acquire+0x6b5/0x2cf0 [ 1694.765595][T23297] ? __pfx____sys_sendmsg+0x10/0x10 [ 1694.765664][T23297] ? __fget_files+0x2a/0x420 [ 1694.765686][T23297] ? __fget_files+0x3a0/0x420 [ 1694.765717][T23297] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1694.765747][T23297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1694.765783][T23297] ? __pfx_ksys_write+0x10/0x10 [ 1694.765817][T23297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.765838][T23297] do_syscall_64+0x15f/0xf80 [ 1694.765856][T23297] ? trace_irq_disable+0x3b/0x140 [ 1694.765881][T23297] ? clear_bhb_loop+0x40/0x90 [ 1694.765903][T23297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.765921][T23297] RIP: 0033:0x7fd06d79ce59 [ 1694.765938][T23297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.765954][T23297] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1694.765973][T23297] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1694.765986][T23297] RDX: 0000000024000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1694.765998][T23297] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.766010][T23297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.766021][T23297] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1694.766051][T23297] [ 1694.770969][T23293] team0: Port device bridge5 added [ 1695.275703][T23303] bond3: option arp_interval: invalid value (18446744073709551615) [ 1695.296352][T23303] bond3: option arp_interval: allowed values 0 - 2147483647 [ 1695.307868][T23303] bond3 (unregistering): Released all slaves [ 1695.698872][T23324] netlink: 'syz.0.16597': attribute type 6 has an invalid length. [ 1695.712553][T23326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16598'. [ 1695.884071][ T30] audit: type=1804 audit(1778679161.747:24): pid=23330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.16599" name="/newroot/247/cgroup.controllers" dev="tmpfs" ino=1279 res=1 errno=0 [ 1695.950320][ T30] audit: type=1800 audit(1778679161.747:25): pid=23330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16599" name="cgroup.controllers" dev="tmpfs" ino=1279 res=0 errno=0 [ 1696.814387][T23367] syzkaller1: entered promiscuous mode [ 1696.824392][T23367] syzkaller1: entered allmulticast mode [ 1696.984678][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16612'. [ 1697.178273][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16611'. [ 1697.187243][T23376] openvswitch: netlink: Invalid VLAN frame [ 1697.391890][T23395] openvswitch: netlink: Flow key attr not present in new flow. [ 1697.479989][T23400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 1697.552352][T23400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.560478][T23400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.630370][T23400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.771114][T23410] netlink: 'syz.0.16619': attribute type 8 has an invalid length. [ 1697.842319][T23400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.904054][T23400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.905524][T10133] IPVS: starting estimator thread 0... [ 1697.935872][T23400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1697.946231][T23400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1697.959679][T23400] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1697.982514][T25367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.989742][T25367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.076403][T23418] IPVS: using max 35 ests per chain, 84000 per kthread [ 1698.104175][T25367] bridge0: port 1(team0) entered blocking state [ 1698.110504][T25367] bridge0: port 1(team0) entered forwarding state [ 1698.118775][T23423] netlink: 'syz.1.16622': attribute type 61 has an invalid length. [ 1698.208636][T23425] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1698.216977][T23425] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1698.262221][T23427] xt_hashlimit: size too large, truncated to 1048576 [ 1698.325642][T23429] netlink: 'syz.0.16624': attribute type 1 has an invalid length. [ 1698.348356][T23429] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16624'. [ 1698.909310][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1699.042969][T23474] netlink: 'syz.3.16633': attribute type 61 has an invalid length. [ 1699.327612][T23489] xt_limit: Overflow, try lower: 324382443/0 [ 1699.406933][ T6490] Bluetooth: hci0: command 0x0405 tx timeout [ 1726.202386][T23523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16644'. [ 1726.284460][T23530] netlink: 'syz.3.16648': attribute type 61 has an invalid length. [ 1726.472849][T23535] netlink: 'syz.3.16651': attribute type 10 has an invalid length. [ 1726.481650][T23535] netlink: 228 bytes leftover after parsing attributes in process `syz.3.16651'. [ 1726.540847][T23537] netlink: 'syz.0.16650': attribute type 1 has an invalid length. [ 1726.553341][T23537] netlink: 'syz.0.16650': attribute type 2 has an invalid length. [ 1726.647570][T23542] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 1726.685400][T23547] tipc: Cannot configure node identity twice [ 1726.885511][T23557] FAULT_INJECTION: forcing a failure. [ 1726.885511][T23557] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.898365][T23557] CPU: 1 UID: 0 PID: 23557 Comm: syz.2.16658 Not tainted syzkaller #0 PREEMPT(full) [ 1726.898390][T23557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1726.898402][T23557] Call Trace: [ 1726.898410][T23557] [ 1726.898416][T23557] dump_stack_lvl+0xe8/0x150 [ 1726.898443][T23557] should_fail_ex+0x412/0x560 [ 1726.898473][T23557] should_failslab+0xa8/0x100 [ 1726.898500][T23557] __kmalloc_cache_noprof+0x88/0x660 [ 1726.898523][T23557] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1726.898543][T23557] ? sctp_add_bind_addr+0x8c/0x370 [ 1726.898572][T23557] sctp_add_bind_addr+0x8c/0x370 [ 1726.898597][T23557] sctp_copy_local_addr_list+0x314/0x4f0 [ 1726.898623][T23557] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1726.898645][T23557] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1726.898668][T23557] ? sctp_v6_is_any+0x64/0x80 [ 1726.898684][T23557] ? sctp_copy_one_addr+0x93/0x360 [ 1726.898708][T23557] sctp_bind_addr_copy+0xb3/0x3c0 [ 1726.898731][T23557] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1726.898754][T23557] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1726.898774][T23557] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1726.898804][T23557] ? __local_bh_enable_ip+0xd0/0x130 [ 1726.898819][T23557] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1726.898840][T23557] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1726.898861][T23557] sctp_sendmsg+0x1528/0x2c10 [ 1726.898890][T23557] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1726.898909][T23557] ? aa_sk_perm+0x6d5/0x900 [ 1726.898927][T23557] ? __might_fault+0xaf/0x130 [ 1726.898951][T23557] ? __pfx_aa_sk_perm+0x10/0x10 [ 1726.898971][T23557] ? sock_rps_record_flow+0x19/0x350 [ 1726.898987][T23557] ? __pfx_inet_sendmsg+0x10/0x10 [ 1726.899003][T23557] ? inet_sendmsg+0x2f4/0x370 [ 1726.899019][T23557] ? __pfx_inet_sendmsg+0x10/0x10 [ 1726.899034][T23557] __sys_sendto+0x5de/0x710 [ 1726.899058][T23557] ? __pfx___sys_sendto+0x10/0x10 [ 1726.899075][T23557] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1726.899102][T23557] ? __fget_files+0x3a0/0x420 [ 1726.899132][T23557] ? rcu_is_watching+0x15/0xb0 [ 1726.899156][T23557] __x64_sys_sendto+0xde/0x100 [ 1726.899177][T23557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.899193][T23557] do_syscall_64+0x15f/0xf80 [ 1726.899209][T23557] ? clear_bhb_loop+0x40/0x90 [ 1726.899228][T23557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.899243][T23557] RIP: 0033:0x7fd06d79ce59 [ 1726.899258][T23557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.899271][T23557] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1726.899289][T23557] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1726.899300][T23557] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1726.899310][T23557] RBP: 00007fd06b9ee090 R08: 0000200000000340 R09: 000000000000001c [ 1726.899320][T23557] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 1726.899329][T23557] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1726.899355][T23557] [ 1727.294895][T23564] netlink: 'syz.1.16661': attribute type 61 has an invalid length. [ 1727.866088][T23585] netlink: 'syz.3.16666': attribute type 1 has an invalid length. [ 1727.874309][T23585] netlink: 'syz.3.16666': attribute type 2 has an invalid length. [ 1728.079476][T23592] bridge0: port 1(team0) entered disabled state [ 1728.091943][T23592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.112870][T23596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16669'. [ 1728.162511][T23592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.172552][T23592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.315821][T11384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1728.349394][T23599] FAULT_INJECTION: forcing a failure. [ 1728.349394][T23599] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.370076][T23599] CPU: 0 UID: 0 PID: 23599 Comm: syz.3.16674 Not tainted syzkaller #0 PREEMPT(full) [ 1728.370103][T23599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1728.370114][T23599] Call Trace: [ 1728.370121][T23599] [ 1728.370129][T23599] dump_stack_lvl+0xe8/0x150 [ 1728.370156][T23599] should_fail_ex+0x412/0x560 [ 1728.370185][T23599] should_failslab+0xa8/0x100 [ 1728.370214][T23599] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1728.370237][T23599] ? __alloc_skb+0x186/0x7d0 [ 1728.370258][T23599] ? __alloc_skb+0x1d0/0x7d0 [ 1728.370276][T23599] ? __local_bh_enable_ip+0xd0/0x130 [ 1728.370300][T23599] __alloc_skb+0x1d0/0x7d0 [ 1728.370329][T23599] netlink_sendmsg+0x5d4/0xb40 [ 1728.370364][T23599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.370392][T23599] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1728.370414][T23599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1728.370441][T23599] ____sys_sendmsg+0x972/0x9f0 [ 1728.370466][T23599] ? __might_fault+0xaf/0x130 [ 1728.370496][T23599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1728.370527][T23599] ? import_iovec+0x73/0xa0 [ 1728.370575][T23599] ___sys_sendmsg+0x2a5/0x360 [ 1728.370599][T23599] ? __lock_acquire+0x6b5/0x2cf0 [ 1728.370620][T23599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1728.370672][T23599] ? __fget_files+0x2a/0x420 [ 1728.370691][T23599] ? __fget_files+0x3a0/0x420 [ 1728.370720][T23599] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1728.370747][T23599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1728.370780][T23599] ? __pfx_ksys_write+0x10/0x10 [ 1728.370812][T23599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.370831][T23599] do_syscall_64+0x15f/0xf80 [ 1728.370847][T23599] ? trace_irq_disable+0x3b/0x140 [ 1728.370871][T23599] ? clear_bhb_loop+0x40/0x90 [ 1728.370893][T23599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.370909][T23599] RIP: 0033:0x7fee8679ce59 [ 1728.370927][T23599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.370941][T23599] RSP: 002b:00007fee875b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.370960][T23599] RAX: ffffffffffffffda RBX: 00007fee86a15fa0 RCX: 00007fee8679ce59 [ 1728.370973][T23599] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1728.370984][T23599] RBP: 00007fee875b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.370994][T23599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.371004][T23599] R13: 00007fee86a16038 R14: 00007fee86a15fa0 R15: 00007ffdceb67828 [ 1728.371032][T23599] [ 1728.387939][T23601] netlink: 'syz.4.16672': attribute type 6 has an invalid length. [ 1728.536235][T11384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1728.828716][T23616] netlink: 'syz.4.16677': attribute type 61 has an invalid length. [ 1728.856879][T23616] bond0: (slave wlan0): Opening slave failed [ 1729.429236][T23644] netlink: 'syz.2.16687': attribute type 6 has an invalid length. [ 1729.544707][T23637] dummy0: entered promiscuous mode [ 1729.567730][T23637] batadv0: entered promiscuous mode [ 1729.577842][T23637] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1729.609373][T23637] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1729.968567][T23666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16697'. [ 1730.079944][T23669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16698'. [ 1730.094883][T23669] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1730.109652][T23669] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1730.127878][T23669] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1730.150242][T23669] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1730.174316][T23672] pim6reg: entered allmulticast mode [ 1730.198848][T23663] pim6reg: left allmulticast mode [ 1730.504167][T23687] xt_hashlimit: size too large, truncated to 1048576 [ 1730.507680][T23689] bond0: (slave wlan0): Opening slave failed [ 1730.519319][T23687] xt_hashlimit: max too large, truncated to 1048576 [ 1730.567283][T23687] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1731.105450][T23724] netlink: 712 bytes leftover after parsing attributes in process `syz.3.16712'. [ 1731.114835][T23724] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.16712'. [ 1731.124074][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16712'. [ 1731.213256][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16717'. [ 1731.222730][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16717'. [ 1731.233260][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16717'. [ 1731.243150][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16717'. [ 1731.252993][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16717'. [ 1731.266792][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16717'. [ 1731.302146][T23733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16719'. [ 1731.356599][T23738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16719'. [ 1732.352899][T23758] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16725'. [ 1732.444917][T23766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16730'. [ 1732.471844][T23762] validate_nla: 9 callbacks suppressed [ 1732.471867][T23762] netlink: 'syz.0.16729': attribute type 3 has an invalid length. [ 1733.456925][T23801] FAULT_INJECTION: forcing a failure. [ 1733.456925][T23801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.472301][T23801] CPU: 0 UID: 0 PID: 23801 Comm: syz.1.16739 Not tainted syzkaller #0 PREEMPT(full) [ 1733.472331][T23801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1733.472343][T23801] Call Trace: [ 1733.472352][T23801] [ 1733.472360][T23801] dump_stack_lvl+0xe8/0x150 [ 1733.472387][T23801] should_fail_ex+0x412/0x560 [ 1733.472412][T23801] _copy_from_user+0x2d/0xb0 [ 1733.472436][T23801] __copy_msghdr+0x3c5/0x5b0 [ 1733.472465][T23801] ___sys_sendmsg+0x213/0x360 [ 1733.472489][T23801] ? __lock_acquire+0x6b5/0x2cf0 [ 1733.472511][T23801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1733.472542][T23801] ? kstrtouint+0x6e/0xe0 [ 1733.472585][T23801] ? __fget_files+0x2a/0x420 [ 1733.472607][T23801] ? __fget_files+0x3a0/0x420 [ 1733.472632][T23801] __sys_sendmmsg+0x27c/0x4e0 [ 1733.472659][T23801] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1733.472679][T23801] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1733.472715][T23801] ? ksys_write+0x242/0x270 [ 1733.472738][T23801] ? __pfx_ksys_write+0x10/0x10 [ 1733.472764][T23801] __x64_sys_sendmmsg+0xa0/0xc0 [ 1733.472786][T23801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.472802][T23801] do_syscall_64+0x15f/0xf80 [ 1733.472815][T23801] ? trace_irq_disable+0x3b/0x140 [ 1733.472837][T23801] ? clear_bhb_loop+0x40/0x90 [ 1733.472856][T23801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.472870][T23801] RIP: 0033:0x7fe16b19ce59 [ 1733.472887][T23801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.472900][T23801] RSP: 002b:00007fe16c070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1733.472917][T23801] RAX: ffffffffffffffda RBX: 00007fe16b415fa0 RCX: 00007fe16b19ce59 [ 1733.472928][T23801] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1733.472938][T23801] RBP: 00007fe16c070090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.472948][T23801] R10: 0000000024040054 R11: 0000000000000246 R12: 0000000000000001 [ 1733.472958][T23801] R13: 00007fe16b416038 R14: 00007fe16b415fa0 R15: 00007ffe3bbf0e58 [ 1733.472985][T23801] [ 1733.925168][T23811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1734.502444][T23839] netlink: 'syz.0.16748': attribute type 1 has an invalid length. [ 1734.510315][T23839] netlink: 'syz.0.16748': attribute type 2 has an invalid length. [ 1734.527274][T23839] netlink: 'syz.0.16748': attribute type 1 has an invalid length. [ 1734.536485][T23839] netlink: 'syz.0.16748': attribute type 2 has an invalid length. [ 1734.664974][T23848] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 1734.672023][T23847] netlink: 'syz.4.16751': attribute type 1 has an invalid length. [ 1734.693211][T23847] netlink: 'syz.4.16751': attribute type 2 has an invalid length. [ 1734.703559][T23847] netlink: 'syz.4.16751': attribute type 1 has an invalid length. [ 1734.711405][T23847] netlink: 'syz.4.16751': attribute type 2 has an invalid length. [ 1734.757183][T23848] sock: sock_timestamping_bind_phc: sock not bind to device [ 1734.880704][T23857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1734.973070][T23861] xt_hashlimit: size too large, truncated to 1048576 [ 1735.613296][T23896] wg1: entered promiscuous mode [ 1735.622712][T23896] wg1: entered allmulticast mode [ 1735.645795][T23896] netlink: 'syz.3.16764': attribute type 1 has an invalid length. [ 1736.131172][T23925] xt_cgroup: invalid path, errno=-2 [ 1736.349515][T23916] __nla_validate_parse: 10 callbacks suppressed [ 1736.349552][T23916] netlink: 112 bytes leftover after parsing attributes in process `syz.1.16766'. [ 1736.376450][T23920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16767'. [ 1736.720100][T23930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16771'. [ 1737.606941][T23964] xt_cgroup: invalid path, errno=-2 [ 1737.760191][T23966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16782'. [ 1737.964420][T23973] sock: sock_timestamping_bind_phc: sock not bind to device [ 1738.092175][T23981] Bluetooth: MGMT ver 1.23 [ 1738.119726][T23982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16788'. [ 1738.269149][T23991] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.16791'. [ 1738.389650][T23994] FAULT_INJECTION: forcing a failure. [ 1738.389650][T23994] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.418183][T23994] CPU: 1 UID: 0 PID: 23994 Comm: syz.4.16792 Not tainted syzkaller #0 PREEMPT(full) [ 1738.418207][T23994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1738.418217][T23994] Call Trace: [ 1738.418223][T23994] [ 1738.418230][T23994] dump_stack_lvl+0xe8/0x150 [ 1738.418253][T23994] should_fail_ex+0x412/0x560 [ 1738.418277][T23994] should_failslab+0xa8/0x100 [ 1738.418298][T23994] ? dst_alloc+0x105/0x170 [ 1738.418322][T23994] kmem_cache_alloc_noprof+0x87/0x650 [ 1738.418349][T23994] dst_alloc+0x105/0x170 [ 1738.418368][T23994] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1738.418385][T23994] ? ip_route_output_key_hash_rcu+0x1c91/0x25d0 [ 1738.418405][T23994] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1738.418421][T23994] ip_route_output_key_hash+0x18d/0x2a0 [ 1738.418439][T23994] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1738.418469][T23994] tcp_v4_connect+0x74e/0x19b0 [ 1738.418575][T23994] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1738.418592][T23994] ? aa_label_sk_perm+0x532/0x6e0 [ 1738.418609][T23994] ? tcp_v6_connect+0x62d/0x1b10 [ 1738.418630][T23994] tcp_v6_connect+0xbbb/0x1b10 [ 1738.418645][T23994] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1738.418668][T23994] ? __lock_acquire+0x6b5/0x2cf0 [ 1738.418685][T23994] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1738.418710][T23994] __inet_stream_connect+0x25a/0xdd0 [ 1738.418731][T23994] ? do_raw_spin_lock+0x12b/0x2f0 [ 1738.418749][T23994] ? lock_sock_nested+0x6a/0x100 [ 1738.418767][T23994] ? __pfx___inet_stream_connect+0x10/0x10 [ 1738.418785][T23994] ? inet_stream_connect+0x51/0xa0 [ 1738.418801][T23994] ? __local_bh_enable_ip+0xd0/0x130 [ 1738.418821][T23994] inet_stream_connect+0x66/0xa0 [ 1738.418838][T23994] __sys_connect+0x312/0x450 [ 1738.418860][T23994] ? __pfx___sys_connect+0x10/0x10 [ 1738.418887][T23994] ? __pfx_ksys_write+0x10/0x10 [ 1738.418909][T23994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.418925][T23994] __x64_sys_connect+0x7a/0x90 [ 1738.418945][T23994] do_syscall_64+0x15f/0xf80 [ 1738.418958][T23994] ? trace_irq_disable+0x3b/0x140 [ 1738.418979][T23994] ? clear_bhb_loop+0x40/0x90 [ 1738.418996][T23994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.419010][T23994] RIP: 0033:0x7fd57e19ce59 [ 1738.419025][T23994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.419037][T23994] RSP: 002b:00007fd57c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1738.419053][T23994] RAX: ffffffffffffffda RBX: 00007fd57e415fa0 RCX: 00007fd57e19ce59 [ 1738.419064][T23994] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1738.419073][T23994] RBP: 00007fd57c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.419082][T23994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.419091][T23994] R13: 00007fd57e416038 R14: 00007fd57e415fa0 R15: 00007fff772dbb38 [ 1738.419115][T23994] [ 1738.882346][ T30] audit: type=1800 audit(1778679204.667:26): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16789" name="memory.events" dev="tmpfs" ino=2025 res=0 errno=0 [ 1739.001952][T24008] xt_cgroup: invalid path, errno=-2 [ 1739.697458][T24043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16803'. [ 1739.762103][T24046] syzkaller1: entered promiscuous mode [ 1739.777362][T24046] syzkaller1: entered allmulticast mode [ 1739.821688][T24048] xt_hashlimit: size too large, truncated to 1048576 [ 1739.894311][T24054] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.16808'. [ 1739.977419][T24053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.003139][T24053] bridge_slave_0 (unregistering): left allmulticast mode [ 1740.011880][T24050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 1740.065094][T24053] bridge_slave_0 (unregistering): left promiscuous mode [ 1740.072231][T24053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.334097][T24058] bond5: option lacp_active: invalid value (8) [ 1740.372115][T24058] bond5 (unregistering): Released all slaves [ 1740.565755][T24085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1740.960057][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16813'. [ 1741.203959][T24109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16815'. [ 1741.230086][T24111] netlink: 'syz.2.16818': attribute type 10 has an invalid length. [ 1741.263715][T24111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1741.272433][T24111] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1741.284869][T24111] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1741.293119][T24111] team0: Port device netdevsim1 added [ 1741.383317][T24116] netlink: 220 bytes leftover after parsing attributes in process `syz.2.16820'. [ 1741.393260][T24116] tc_dump_action: action bad kind [ 1741.447965][T24121] syzkaller1: entered promiscuous mode [ 1741.453713][T24121] syzkaller1: entered allmulticast mode [ 1741.650500][T24129] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.16825'. [ 1741.955907][T24137] netlink: 'syz.2.16827': attribute type 6 has an invalid length. [ 1742.063567][T24139] dummy0: entered promiscuous mode [ 1742.076896][ T2072] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1742.095959][T24139] batadv0: entered promiscuous mode [ 1742.110237][T24139] debugfs: 'hsr1' already exists in 'hsr' [ 1742.123410][T24139] Cannot create hsr debugfs directory [ 1742.133519][T24139] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1742.144306][T24139] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1742.167495][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16829'. [ 1742.268792][T24146] FAULT_INJECTION: forcing a failure. [ 1742.268792][T24146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.282505][T24146] CPU: 1 UID: 0 PID: 24146 Comm: syz.2.16830 Not tainted syzkaller #0 PREEMPT(full) [ 1742.282530][T24146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1742.282541][T24146] Call Trace: [ 1742.282549][T24146] [ 1742.282558][T24146] dump_stack_lvl+0xe8/0x150 [ 1742.282586][T24146] should_fail_ex+0x412/0x560 [ 1742.282616][T24146] _copy_from_user+0x2d/0xb0 [ 1742.282642][T24146] mptcp_getsockopt+0x12a9/0x1ed0 [ 1742.282737][T24146] ? process_measurement+0x195e/0x1c80 [ 1742.282759][T24146] ? process_measurement+0x371/0x1c80 [ 1742.282777][T24146] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1742.282809][T24146] ? __pfx_process_measurement+0x10/0x10 [ 1742.282829][T24146] ? tomoyo_check_open_permission+0x38e/0x470 [ 1742.282857][T24146] ? __lock_acquire+0x6b5/0x2cf0 [ 1742.282884][T24146] ? __lock_acquire+0x6b5/0x2cf0 [ 1742.282907][T24146] ? __lock_acquire+0x6b5/0x2cf0 [ 1742.282936][T24146] ? unwind_next_frame+0xa6/0x2550 [ 1742.282968][T24146] ? __lock_acquire+0x6b5/0x2cf0 [ 1742.283012][T24146] ? aa_file_perm+0x192/0x15e0 [ 1742.283039][T24146] ? aa_label_sk_perm+0x532/0x6e0 [ 1742.283070][T24146] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1742.283095][T24146] ? _parse_integer_limit+0x1ae/0x1f0 [ 1742.283133][T24146] ? __lock_acquire+0x6b5/0x2cf0 [ 1742.283176][T24146] ? __might_fault+0xaf/0x130 [ 1742.283205][T24146] ? __might_fault+0xaf/0x130 [ 1742.283243][T24146] ? sock_common_getsockopt+0x2d/0xb0 [ 1742.283267][T24146] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1742.283290][T24146] do_sock_getsockopt+0x51d/0x7e0 [ 1742.283323][T24146] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1742.283364][T24146] ? __fget_files+0x3a0/0x420 [ 1742.283385][T24146] ? __fget_files+0x2a/0x420 [ 1742.283415][T24146] __x64_sys_getsockopt+0x1a4/0x240 [ 1742.283446][T24146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.283467][T24146] do_syscall_64+0x15f/0xf80 [ 1742.283485][T24146] ? trace_irq_disable+0x3b/0x140 [ 1742.283511][T24146] ? clear_bhb_loop+0x40/0x90 [ 1742.283534][T24146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.283553][T24146] RIP: 0033:0x7fd06d79ce59 [ 1742.283571][T24146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.283587][T24146] RSP: 002b:00007fd06b9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1742.283606][T24146] RAX: ffffffffffffffda RBX: 00007fd06da16090 RCX: 00007fd06d79ce59 [ 1742.283618][T24146] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 1742.283629][T24146] RBP: 00007fd06b9cd090 R08: 0000200000000080 R09: 0000000000000000 [ 1742.283641][T24146] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1742.283652][T24146] R13: 00007fd06da16128 R14: 00007fd06da16090 R15: 00007ffc5fb96de8 [ 1742.283681][T24146] [ 1742.716359][T24155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16833'. [ 1742.728071][T24155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16833'. [ 1742.850020][T24159] syzkaller1: entered promiscuous mode [ 1742.855747][T24159] syzkaller1: entered allmulticast mode [ 1742.905987][T10146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1742.917375][T24161] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20005 [ 1742.960847][T24161] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1743.286773][T24170] netlink: 'syz.3.16838': attribute type 6 has an invalid length. [ 1743.733650][T24182] Bluetooth: MGMT ver 1.23 [ 1743.839326][T24182] tap0: tun_chr_ioctl cmd 2148553947 [ 1744.366097][T10146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1744.726735][T24205] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.16847'. [ 1744.995137][T24216] netlink: 'syz.2.16852': attribute type 6 has an invalid length. [ 1745.109045][T24221] netlink: 'syz.4.16854': attribute type 1 has an invalid length. [ 1745.124327][T24221] netlink: 'syz.4.16854': attribute type 2 has an invalid length. [ 1745.151977][T24221] netlink: 'syz.4.16854': attribute type 1 has an invalid length. [ 1745.174505][T24221] netlink: 'syz.4.16854': attribute type 2 has an invalid length. [ 1745.218786][T24229] FAULT_INJECTION: forcing a failure. [ 1745.218786][T24229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.271708][T24229] CPU: 1 UID: 0 PID: 24229 Comm: syz.3.16856 Not tainted syzkaller #0 PREEMPT(full) [ 1745.271735][T24229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1745.271747][T24229] Call Trace: [ 1745.271755][T24229] [ 1745.271764][T24229] dump_stack_lvl+0xe8/0x150 [ 1745.271792][T24229] should_fail_ex+0x412/0x560 [ 1745.271823][T24229] _copy_from_iter+0x1d3/0x1670 [ 1745.271851][T24229] ? rcu_is_watching+0x15/0xb0 [ 1745.271879][T24229] ? __pfx__copy_from_iter+0x10/0x10 [ 1745.271917][T24229] ? netlink_sendmsg+0x650/0xb40 [ 1745.271942][T24229] ? skb_put+0x11b/0x210 [ 1745.271970][T24229] netlink_sendmsg+0x6c0/0xb40 [ 1745.272006][T24229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1745.272035][T24229] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1745.272060][T24229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1745.272088][T24229] ____sys_sendmsg+0x972/0x9f0 [ 1745.272115][T24229] ? __might_fault+0xaf/0x130 [ 1745.272143][T24229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1745.272178][T24229] ? import_iovec+0x73/0xa0 [ 1745.272206][T24229] ___sys_sendmsg+0x2a5/0x360 [ 1745.272232][T24229] ? __lock_acquire+0x6b5/0x2cf0 [ 1745.272255][T24229] ? __pfx____sys_sendmsg+0x10/0x10 [ 1745.272353][T24229] ? __fget_files+0x2a/0x420 [ 1745.272378][T24229] ? __fget_files+0x3a0/0x420 [ 1745.272408][T24229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1745.272442][T24229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1745.272477][T24229] ? __pfx_ksys_write+0x10/0x10 [ 1745.272511][T24229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.272532][T24229] do_syscall_64+0x15f/0xf80 [ 1745.272550][T24229] ? trace_irq_disable+0x3b/0x140 [ 1745.272576][T24229] ? clear_bhb_loop+0x40/0x90 [ 1745.272599][T24229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.272617][T24229] RIP: 0033:0x7fee8679ce59 [ 1745.272636][T24229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.272652][T24229] RSP: 002b:00007fee875b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.272672][T24229] RAX: ffffffffffffffda RBX: 00007fee86a15fa0 RCX: 00007fee8679ce59 [ 1745.272685][T24229] RDX: 0000000000000880 RSI: 0000200000000140 RDI: 0000000000000004 [ 1745.272698][T24229] RBP: 00007fee875b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.272710][T24229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.272720][T24229] R13: 00007fee86a16038 R14: 00007fee86a15fa0 R15: 00007ffdceb67828 [ 1745.272750][T24229] [ 1745.575940][ T2072] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1745.830538][T24239] netlink: 'syz.3.16859': attribute type 3 has an invalid length. [ 1746.199461][T24250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1746.256697][T24254] FAULT_INJECTION: forcing a failure. [ 1746.256697][T24254] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.269430][T24254] CPU: 0 UID: 0 PID: 24254 Comm: syz.2.16863 Not tainted syzkaller #0 PREEMPT(full) [ 1746.269456][T24254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1746.269468][T24254] Call Trace: [ 1746.269476][T24254] [ 1746.269485][T24254] dump_stack_lvl+0xe8/0x150 [ 1746.269512][T24254] should_fail_ex+0x412/0x560 [ 1746.269543][T24254] should_failslab+0xa8/0x100 [ 1746.269572][T24254] __kmalloc_cache_noprof+0x88/0x660 [ 1746.269600][T24254] ? tcf_proto_create+0x65/0x330 [ 1746.269626][T24254] tcf_proto_create+0x65/0x330 [ 1746.269652][T24254] tc_new_tfilter+0x12ff/0x1780 [ 1746.269697][T24254] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1746.269732][T24254] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1746.269773][T24254] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1746.269791][T24254] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1746.269819][T24254] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1746.269842][T24254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1746.269864][T24254] ? ref_tracker_free+0x693/0x840 [ 1746.269892][T24254] ? __pfx_ref_tracker_free+0x10/0x10 [ 1746.269928][T24254] netlink_rcv_skb+0x232/0x4b0 [ 1746.269955][T24254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1746.269981][T24254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1746.270020][T24254] ? netlink_deliver_tap+0x2e/0x1b0 [ 1746.270044][T24254] ? netlink_deliver_tap+0x2e/0x1b0 [ 1746.270075][T24254] netlink_unicast+0x75c/0x8e0 [ 1746.270110][T24254] netlink_sendmsg+0x813/0xb40 [ 1746.270147][T24254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.270177][T24254] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1746.270203][T24254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1746.270231][T24254] ____sys_sendmsg+0x972/0x9f0 [ 1746.270257][T24254] ? __might_fault+0xaf/0x130 [ 1746.270287][T24254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1746.270328][T24254] ? import_iovec+0x73/0xa0 [ 1746.270357][T24254] ___sys_sendmsg+0x2a5/0x360 [ 1746.270382][T24254] ? __lock_acquire+0x6b5/0x2cf0 [ 1746.270407][T24254] ? __pfx____sys_sendmsg+0x10/0x10 [ 1746.270470][T24254] ? __fget_files+0x2a/0x420 [ 1746.270492][T24254] ? __fget_files+0x3a0/0x420 [ 1746.270524][T24254] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1746.270552][T24254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1746.270588][T24254] ? __pfx_ksys_write+0x10/0x10 [ 1746.270623][T24254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.270642][T24254] do_syscall_64+0x15f/0xf80 [ 1746.270660][T24254] ? trace_irq_disable+0x3b/0x140 [ 1746.270683][T24254] ? clear_bhb_loop+0x40/0x90 [ 1746.270705][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.270724][T24254] RIP: 0033:0x7fd06d79ce59 [ 1746.270743][T24254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.270759][T24254] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1746.270778][T24254] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1746.270792][T24254] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 1746.270805][T24254] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.270816][T24254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.270826][T24254] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1746.270857][T24254] [ 1746.687294][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16866'. [ 1746.703591][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16866'. [ 1746.715778][T24256] netlink: 'syz.1.16865': attribute type 6 has an invalid length. [ 1746.814415][T24262] netlink: 'syz.4.16867': attribute type 1 has an invalid length. [ 1746.883103][T24262] netlink: 'syz.4.16867': attribute type 2 has an invalid length. [ 1746.932501][T24262] netlink: 'syz.4.16867': attribute type 1 has an invalid length. [ 1746.998955][T24262] netlink: 'syz.4.16867': attribute type 2 has an invalid length. [ 1747.111109][T24268] syzkaller1: entered promiscuous mode [ 1747.135804][T24268] syzkaller1: entered allmulticast mode [ 1747.141743][T24275] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.16871'. [ 1747.560830][T24287] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16873'. [ 1747.678770][T24295] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1747.726384][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1747.754779][T24295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1747.782128][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1747.815314][T24295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1747.828926][T24295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16876'. [ 1747.846021][T24299] netlink: 'syz.2.16877': attribute type 178 has an invalid length. [ 1747.993147][T24304] netlink: 'syz.1.16880': attribute type 6 has an invalid length. [ 1748.040569][T24310] FAULT_INJECTION: forcing a failure. [ 1748.040569][T24310] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.061473][T24307] netlink: 'syz.3.16881': attribute type 1 has an invalid length. [ 1748.092256][T24310] CPU: 1 UID: 0 PID: 24310 Comm: syz.2.16883 Not tainted syzkaller #0 PREEMPT(full) [ 1748.092290][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.092301][T24310] Call Trace: [ 1748.092309][T24310] [ 1748.092317][T24310] dump_stack_lvl+0xe8/0x150 [ 1748.092345][T24310] should_fail_ex+0x412/0x560 [ 1748.092375][T24310] should_failslab+0xa8/0x100 [ 1748.092405][T24310] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1748.092429][T24310] ? __alloc_skb+0x186/0x7d0 [ 1748.092453][T24310] ? __alloc_skb+0x1d0/0x7d0 [ 1748.092474][T24310] ? __local_bh_enable_ip+0xd0/0x130 [ 1748.092499][T24310] __alloc_skb+0x1d0/0x7d0 [ 1748.092521][T24310] ? netlink_ack_tlv_len+0x6c/0x210 [ 1748.092548][T24310] netlink_ack+0x146/0xa50 [ 1748.092577][T24310] ? kasan_quarantine_put+0xbb/0x1f0 [ 1748.092598][T24310] ? lockdep_hardirqs_on+0x7a/0x110 [ 1748.092631][T24310] ? nfnetlink_rcv+0x260f/0x27b0 [ 1748.092659][T24310] nfnetlink_rcv+0x251a/0x27b0 [ 1748.092711][T24310] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1748.092750][T24310] ? ref_tracker_free+0x693/0x840 [ 1748.092799][T24310] ? __netlink_deliver_tap+0x807/0x850 [ 1748.092831][T24310] ? netlink_deliver_tap+0x2e/0x1b0 [ 1748.092853][T24310] ? netlink_deliver_tap+0x2e/0x1b0 [ 1748.092882][T24310] netlink_unicast+0x75c/0x8e0 [ 1748.092916][T24310] netlink_sendmsg+0x813/0xb40 [ 1748.092950][T24310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1748.092978][T24310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1748.093004][T24310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1748.093031][T24310] ____sys_sendmsg+0x972/0x9f0 [ 1748.093058][T24310] ? __might_fault+0xaf/0x130 [ 1748.093086][T24310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1748.093120][T24310] ? import_iovec+0x73/0xa0 [ 1748.093149][T24310] ___sys_sendmsg+0x2a5/0x360 [ 1748.093174][T24310] ? __lock_acquire+0x6b5/0x2cf0 [ 1748.093198][T24310] ? __pfx____sys_sendmsg+0x10/0x10 [ 1748.093269][T24310] ? __fget_files+0x2a/0x420 [ 1748.093290][T24310] ? __fget_files+0x3a0/0x420 [ 1748.093321][T24310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1748.093351][T24310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1748.093386][T24310] ? __pfx_ksys_write+0x10/0x10 [ 1748.093419][T24310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.093440][T24310] do_syscall_64+0x15f/0xf80 [ 1748.093456][T24310] ? trace_irq_disable+0x3b/0x140 [ 1748.093482][T24310] ? clear_bhb_loop+0x40/0x90 [ 1748.093504][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.093522][T24310] RIP: 0033:0x7fd06d79ce59 [ 1748.093540][T24310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.093554][T24310] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1748.093574][T24310] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1748.093587][T24310] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1748.093599][T24310] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.093609][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.093620][T24310] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1748.093650][T24310] [ 1748.407402][T24307] netlink: 'syz.3.16881': attribute type 2 has an invalid length. [ 1748.415486][T24307] netlink: 'syz.3.16881': attribute type 1 has an invalid length. [ 1748.717021][T24333] FAULT_INJECTION: forcing a failure. [ 1748.717021][T24333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.795812][T24333] CPU: 1 UID: 0 PID: 24333 Comm: syz.2.16891 Not tainted syzkaller #0 PREEMPT(full) [ 1748.795838][T24333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.795848][T24333] Call Trace: [ 1748.795854][T24333] [ 1748.795862][T24333] dump_stack_lvl+0xe8/0x150 [ 1748.795890][T24333] should_fail_ex+0x412/0x560 [ 1748.795920][T24333] core_sys_select+0x8dd/0xc30 [ 1748.795955][T24333] ? __pfx_core_sys_select+0x10/0x10 [ 1748.795999][T24333] ? __pfx_set_user_sigmask+0x10/0x10 [ 1748.796017][T24333] ? kmem_cache_free+0x182/0x650 [ 1748.796040][T24333] ? fd_install+0x94/0x3d0 [ 1748.796067][T24333] __se_sys_pselect6+0x267/0x320 [ 1748.796092][T24333] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1748.796110][T24333] ? __pfx_ksys_write+0x10/0x10 [ 1748.796140][T24333] ? __x64_sys_pselect6+0x21/0xf0 [ 1748.796160][T24333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.796178][T24333] do_syscall_64+0x15f/0xf80 [ 1748.796195][T24333] ? trace_irq_disable+0x3b/0x140 [ 1748.796220][T24333] ? clear_bhb_loop+0x40/0x90 [ 1748.796243][T24333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.796262][T24333] RIP: 0033:0x7fd06d79ce59 [ 1748.796279][T24333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.796293][T24333] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1748.796311][T24333] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1748.796323][T24333] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1748.796335][T24333] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.796345][T24333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.796355][T24333] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1748.796381][T24333] [ 1750.204031][ T2065] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1750.425814][T24389] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1750.702972][T24407] FAULT_INJECTION: forcing a failure. [ 1750.702972][T24407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1750.716461][T24407] CPU: 1 UID: 0 PID: 24407 Comm: syz.4.16916 Not tainted syzkaller #0 PREEMPT(full) [ 1750.716488][T24407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1750.716500][T24407] Call Trace: [ 1750.716508][T24407] [ 1750.716517][T24407] dump_stack_lvl+0xe8/0x150 [ 1750.716545][T24407] should_fail_ex+0x412/0x560 [ 1750.716573][T24407] _copy_from_iter+0x1d3/0x1670 [ 1750.716601][T24407] ? rcu_is_watching+0x15/0xb0 [ 1750.716629][T24407] ? __pfx__copy_from_iter+0x10/0x10 [ 1750.716661][T24407] ? netlink_sendmsg+0x650/0xb40 [ 1750.716686][T24407] ? skb_put+0x11b/0x210 [ 1750.716715][T24407] netlink_sendmsg+0x6c0/0xb40 [ 1750.716750][T24407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.716779][T24407] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1750.716805][T24407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1750.716833][T24407] ____sys_sendmsg+0x972/0x9f0 [ 1750.716860][T24407] ? __might_fault+0xaf/0x130 [ 1750.716890][T24407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1750.716926][T24407] ? import_iovec+0x73/0xa0 [ 1750.716955][T24407] ___sys_sendmsg+0x2a5/0x360 [ 1750.716979][T24407] ? __lock_acquire+0x6b5/0x2cf0 [ 1750.717004][T24407] ? __pfx____sys_sendmsg+0x10/0x10 [ 1750.717072][T24407] ? __fget_files+0x2a/0x420 [ 1750.717094][T24407] ? __fget_files+0x3a0/0x420 [ 1750.717126][T24407] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1750.717155][T24407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1750.717191][T24407] ? __pfx_ksys_write+0x10/0x10 [ 1750.717225][T24407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.717246][T24407] do_syscall_64+0x15f/0xf80 [ 1750.717264][T24407] ? trace_irq_disable+0x3b/0x140 [ 1750.717290][T24407] ? clear_bhb_loop+0x40/0x90 [ 1750.717313][T24407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.717332][T24407] RIP: 0033:0x7fd57e19ce59 [ 1750.717350][T24407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.717366][T24407] RSP: 002b:00007fd57c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1750.717386][T24407] RAX: ffffffffffffffda RBX: 00007fd57e415fa0 RCX: 00007fd57e19ce59 [ 1750.717400][T24407] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1750.717413][T24407] RBP: 00007fd57c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.717425][T24407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.717436][T24407] R13: 00007fd57e416038 R14: 00007fd57e415fa0 R15: 00007fff772dbb38 [ 1750.717467][T24407] [ 1751.589320][T24425] FAULT_INJECTION: forcing a failure. [ 1751.589320][T24425] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.602533][T24425] CPU: 1 UID: 0 PID: 24425 Comm: syz.3.16919 Not tainted syzkaller #0 PREEMPT(full) [ 1751.602559][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1751.602572][T24425] Call Trace: [ 1751.602580][T24425] [ 1751.602589][T24425] dump_stack_lvl+0xe8/0x150 [ 1751.602617][T24425] should_fail_ex+0x412/0x560 [ 1751.602647][T24425] should_failslab+0xa8/0x100 [ 1751.602677][T24425] __kmalloc_cache_noprof+0x88/0x660 [ 1751.602702][T24425] ? nft_pernet+0x23/0x240 [ 1751.602725][T24425] ? nf_tables_commit+0x936/0xa7c0 [ 1751.602752][T24425] nf_tables_commit+0x936/0xa7c0 [ 1751.602782][T24425] ? irqentry_exit+0x218/0x730 [ 1751.602821][T24425] ? __pfx_nf_tables_commit+0x10/0x10 [ 1751.602840][T24425] ? preempt_count_sub+0x65/0x170 [ 1751.602865][T24425] ? __free_frozen_pages+0x749/0xd30 [ 1751.602898][T24425] ? nf_tables_newrule+0x2590/0x28b0 [ 1751.602935][T24425] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1751.602954][T24425] ? nfnl_pernet+0x23/0x240 [ 1751.603000][T24425] nfnetlink_rcv+0x1c19/0x27b0 [ 1751.603059][T24425] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1751.603132][T24425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.603168][T24425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.603192][T24425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.603223][T24425] netlink_unicast+0x75c/0x8e0 [ 1751.603258][T24425] netlink_sendmsg+0x813/0xb40 [ 1751.603293][T24425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.603321][T24425] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1751.603347][T24425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1751.603375][T24425] ____sys_sendmsg+0x972/0x9f0 [ 1751.603432][T24425] ? __might_fault+0xaf/0x130 [ 1751.603462][T24425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1751.603498][T24425] ? import_iovec+0x73/0xa0 [ 1751.603527][T24425] ___sys_sendmsg+0x2a5/0x360 [ 1751.603553][T24425] ? __lock_acquire+0x6b5/0x2cf0 [ 1751.603577][T24425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1751.603644][T24425] ? __fget_files+0x2a/0x420 [ 1751.603665][T24425] ? __fget_files+0x3a0/0x420 [ 1751.603697][T24425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1751.603727][T24425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1751.603763][T24425] ? __pfx_ksys_write+0x10/0x10 [ 1751.603798][T24425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.603818][T24425] do_syscall_64+0x15f/0xf80 [ 1751.603835][T24425] ? trace_irq_disable+0x3b/0x140 [ 1751.603861][T24425] ? clear_bhb_loop+0x40/0x90 [ 1751.603884][T24425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.603903][T24425] RIP: 0033:0x7fee8679ce59 [ 1751.603921][T24425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.603936][T24425] RSP: 002b:00007fee875b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1751.603957][T24425] RAX: ffffffffffffffda RBX: 00007fee86a15fa0 RCX: 00007fee8679ce59 [ 1751.603970][T24425] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1751.603983][T24425] RBP: 00007fee875b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1751.603995][T24425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.604006][T24425] R13: 00007fee86a16038 R14: 00007fee86a15fa0 R15: 00007ffdceb67828 [ 1751.604038][T24425] [ 1751.853873][T24423] validate_nla: 13 callbacks suppressed [ 1751.853900][T24423] netlink: 'syz.4.16920': attribute type 6 has an invalid length. [ 1752.015786][T24434] __nla_validate_parse: 9 callbacks suppressed [ 1752.015805][T24434] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16923'. [ 1752.170309][T24443] sch_tbf: burst 3 is lower than device xfrm0 mtu (1500) ! [ 1752.178338][T24433] block nbd59: server does not support multiple connections per device. [ 1752.193336][T24433] block nbd59: shutting down sockets [ 1752.204052][T24437] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16924'. [ 1752.415503][T24444] netlink: 'syz.2.16926': attribute type 1 has an invalid length. [ 1752.417047][T24451] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.16929'. [ 1752.423364][T24444] netlink: 'syz.2.16926': attribute type 2 has an invalid length. [ 1752.441540][T24444] netlink: 'syz.2.16926': attribute type 1 has an invalid length. [ 1752.441562][T24444] netlink: 'syz.2.16926': attribute type 2 has an invalid length. [ 1752.461806][T24454] FAULT_INJECTION: forcing a failure. [ 1752.461806][T24454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1752.475203][T24454] CPU: 0 UID: 0 PID: 24454 Comm: syz.1.16931 Not tainted syzkaller #0 PREEMPT(full) [ 1752.475227][T24454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1752.475239][T24454] Call Trace: [ 1752.475247][T24454] [ 1752.475255][T24454] dump_stack_lvl+0xe8/0x150 [ 1752.475282][T24454] should_fail_ex+0x412/0x560 [ 1752.475311][T24454] _copy_from_iter+0x1d3/0x1670 [ 1752.475334][T24454] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1752.475353][T24454] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1752.475373][T24454] ? rcu_is_watching+0x15/0xb0 [ 1752.475399][T24454] ? __pfx__copy_from_iter+0x10/0x10 [ 1752.475419][T24454] ? trace_kmalloc+0x2a/0xf0 [ 1752.475446][T24454] ? __kmalloc_noprof+0x37d/0x760 [ 1752.475478][T24454] bcm_tx_setup+0x6d9/0x1bd0 [ 1752.475540][T24454] bcm_sendmsg+0x46e/0x6c0 [ 1752.475571][T24454] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1752.475603][T24454] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1752.475629][T24454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1752.475657][T24454] ____sys_sendmsg+0x972/0x9f0 [ 1752.475684][T24454] ? __might_fault+0xaf/0x130 [ 1752.475712][T24454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.475744][T24454] ? import_iovec+0x73/0xa0 [ 1752.475771][T24454] ___sys_sendmsg+0x2a5/0x360 [ 1752.475803][T24454] ? __lock_acquire+0x6b5/0x2cf0 [ 1752.475827][T24454] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.475890][T24454] ? __fget_files+0x2a/0x420 [ 1752.475910][T24454] ? __fget_files+0x3a0/0x420 [ 1752.475941][T24454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1752.475970][T24454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1752.476007][T24454] ? __pfx_ksys_write+0x10/0x10 [ 1752.476041][T24454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.476061][T24454] do_syscall_64+0x15f/0xf80 [ 1752.476079][T24454] ? trace_irq_disable+0x3b/0x140 [ 1752.476104][T24454] ? clear_bhb_loop+0x40/0x90 [ 1752.476126][T24454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.476144][T24454] RIP: 0033:0x7fe16b19ce59 [ 1752.476161][T24454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.476177][T24454] RSP: 002b:00007fe16c070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.476196][T24454] RAX: ffffffffffffffda RBX: 00007fe16b415fa0 RCX: 00007fe16b19ce59 [ 1752.476210][T24454] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1752.476222][T24454] RBP: 00007fe16c070090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.476233][T24454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.476244][T24454] R13: 00007fe16b416038 R14: 00007fe16b415fa0 R15: 00007ffe3bbf0e58 [ 1752.476276][T24454] [ 1752.812886][T24459] netlink: 'syz.4.16932': attribute type 1 has an invalid length. [ 1752.822770][T24459] netlink: 'syz.4.16932': attribute type 2 has an invalid length. [ 1753.003896][T24465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16933'. [ 1753.085400][T10146] page_pool_release_retry() stalled pool shutdown: id 647, 1 inflight 61 sec [ 1753.180858][T24470] netlink: 'syz.2.16935': attribute type 6 has an invalid length. [ 1753.706417][T24500] netlink: 284 bytes leftover after parsing attributes in process `syz.3.16940'. [ 1753.728678][T24501] netlink: 'syz.2.16945': attribute type 1 has an invalid length. [ 1753.737767][T24501] netlink: 'syz.2.16945': attribute type 2 has an invalid length. [ 1754.015449][T24518] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.16948'. [ 1754.092764][T24521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16950'. [ 1754.114561][T24521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16950'. [ 1754.124698][T24521] netlink: 580 bytes leftover after parsing attributes in process `syz.3.16950'. [ 1754.466035][T24532] netlink: 324 bytes leftover after parsing attributes in process `syz.4.16952'. [ 1754.660335][T24532] dvmrp0: entered allmulticast mode [ 1755.074082][T24564] vlan2: entered promiscuous mode [ 1755.093892][T24564] bridge0: entered promiscuous mode [ 1755.335099][T24562] bond4 (unregistering): Released all slaves [ 1756.124413][T24611] xt_hashlimit: size too large, truncated to 1048576 [ 1756.546646][T24627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1756.553960][T24627] IPv6: NLM_F_CREATE should be set when creating new route [ 1756.561317][T24627] IPv6: NLM_F_CREATE should be set when creating new route [ 1756.878348][T24644] validate_nla: 19 callbacks suppressed [ 1756.878371][T24644] netlink: 'syz.4.16985': attribute type 1 has an invalid length. [ 1756.894328][T24644] netlink: 'syz.4.16985': attribute type 2 has an invalid length. [ 1756.936426][T24644] netlink: 'syz.4.16985': attribute type 1 has an invalid length. [ 1756.960320][T24644] netlink: 'syz.4.16985': attribute type 2 has an invalid length. [ 1757.190339][T24636] žÿ: renamed from hsr0 (while UP) [ 1757.290366][T24659] __nla_validate_parse: 10 callbacks suppressed [ 1757.290388][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16986'. [ 1757.470125][T24666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16987'. [ 1757.515826][T24659] netlink: 'syz.2.16986': attribute type 10 has an invalid length. [ 1757.523095][T24670] syzkaller0: entered promiscuous mode [ 1757.562724][T24670] syzkaller0: entered allmulticast mode [ 1757.773612][T24680] Unsupported ieee802154 address type: 0 [ 1757.795832][T24659] veth0_vlan: left promiscuous mode [ 1757.814110][T24678] can: request_module (can-proto-3) failed. [ 1757.822343][T24659] veth0_vlan: entered promiscuous mode [ 1757.860123][T24659] team0: Device veth0_vlan failed to register rx_handler [ 1758.105987][T24689] FAULT_INJECTION: forcing a failure. [ 1758.105987][T24689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1758.125830][T24689] CPU: 0 UID: 0 PID: 24689 Comm: syz.1.16994 Not tainted syzkaller #0 PREEMPT(full) [ 1758.125857][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1758.125870][T24689] Call Trace: [ 1758.125877][T24689] [ 1758.125886][T24689] dump_stack_lvl+0xe8/0x150 [ 1758.125912][T24689] should_fail_ex+0x412/0x560 [ 1758.125941][T24689] prepare_alloc_pages+0x22a/0x650 [ 1758.125973][T24689] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1758.126004][T24689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1758.126033][T24689] ? __pfx_policy_nodemask+0x10/0x10 [ 1758.126058][T24689] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1758.126082][T24689] ? lock_acquire+0x106/0x350 [ 1758.126108][T24689] alloc_pages_mpol+0x235/0x490 [ 1758.126137][T24689] folio_alloc_mpol_noprof+0x39/0x160 [ 1758.126164][T24689] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1758.126185][T24689] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1758.126214][T24689] do_wp_page+0x118a/0x4cc0 [ 1758.126242][T24689] ? __pte_offset_map+0x29/0x240 [ 1758.126275][T24689] ? __pfx_do_wp_page+0x10/0x10 [ 1758.126293][T24689] ? do_raw_spin_lock+0x12b/0x2f0 [ 1758.126321][T24689] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1758.126356][T24689] handle_mm_fault+0x151d/0x3170 [ 1758.126399][T24689] ? handle_mm_fault+0xee/0x3170 [ 1758.126429][T24689] ? __pfx_handle_mm_fault+0x10/0x10 [ 1758.126463][T24689] ? __pfx___up_read+0x10/0x10 [ 1758.126490][T24689] ? lock_mm_and_find_vma+0xa7/0x340 [ 1758.126518][T24689] do_user_addr_fault+0x75b/0x1340 [ 1758.126555][T24689] exc_page_fault+0x6a/0xc0 [ 1758.126583][T24689] asm_exc_page_fault+0x26/0x30 [ 1758.126602][T24689] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1758.126625][T24689] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1758.126641][T24689] RSP: 0018:ffffc90004ce7b48 EFLAGS: 00050202 [ 1758.126656][T24689] RAX: ffffffff84b21801 RBX: 0000000000010001 RCX: 0000000000008d81 [ 1758.126669][T24689] RDX: 0000000000000000 RSI: ffff8880aaa47288 RDI: 0000200000009000 [ 1758.126680][T24689] RBP: ffffc90004ce7cc0 R08: 0000000000000000 R09: 0000000000000001 [ 1758.126691][T24689] R10: dffffc0000000000 R11: ffffed101554a001 R12: 0000200000011d81 [ 1758.126704][T24689] R13: 00007ffffffff000 R14: ffff8880aaa40008 R15: 0000200000001d80 [ 1758.126724][T24689] ? _copy_to_user+0x1/0xb0 [ 1758.126755][T24689] _copy_to_user+0x8a/0xb0 [ 1758.126780][T24689] generic_map_lookup_batch+0xa93/0xeb0 [ 1758.126803][T24689] ? get_pid_task+0x20/0x1f0 [ 1758.126838][T24689] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1758.126869][T24689] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1758.126891][T24689] bpf_map_do_batch+0x285/0x630 [ 1758.126910][T24689] ? security_bpf+0x7e/0x2d0 [ 1758.126943][T24689] __sys_bpf+0x6b4/0x950 [ 1758.126971][T24689] ? __pfx___sys_bpf+0x10/0x10 [ 1758.126992][T24689] ? kmem_cache_free+0x182/0x650 [ 1758.127030][T24689] ? ksys_write+0x1fc/0x270 [ 1758.127056][T24689] ? __pfx_ksys_write+0x10/0x10 [ 1758.127083][T24689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.127103][T24689] __x64_sys_bpf+0x7c/0x90 [ 1758.127131][T24689] do_syscall_64+0x15f/0xf80 [ 1758.127150][T24689] ? clear_bhb_loop+0x40/0x90 [ 1758.127174][T24689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.127192][T24689] RIP: 0033:0x7fe16b19ce59 [ 1758.127209][T24689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.127224][T24689] RSP: 002b:00007fe16c070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1758.127243][T24689] RAX: ffffffffffffffda RBX: 00007fe16b415fa0 RCX: 00007fe16b19ce59 [ 1758.127257][T24689] RDX: 0000000000000038 RSI: 0000200000001e40 RDI: 0000000000000018 [ 1758.127269][T24689] RBP: 00007fe16c070090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.127281][T24689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.127293][T24689] R13: 00007fe16b416038 R14: 00007fe16b415fa0 R15: 00007ffe3bbf0e58 [ 1758.127325][T24689] [ 1758.575415][T24695] xt_hashlimit: size too large, truncated to 1048576 [ 1758.854891][T24708] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1758.871494][T24711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1759.297920][T24739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17003'. [ 1759.570772][T24746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17005'. [ 1760.015736][T24766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17011'. [ 1760.041653][T24773] netlink: 'syz.2.17013': attribute type 8 has an invalid length. [ 1760.174408][T24776] xt_hashlimit: size too large, truncated to 1048576 [ 1760.262142][T24782] FAULT_INJECTION: forcing a failure. [ 1760.262142][T24782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1760.281213][T24780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17016'. [ 1760.310260][T24782] CPU: 1 UID: 0 PID: 24782 Comm: syz.2.17017 Not tainted syzkaller #0 PREEMPT(full) [ 1760.310287][T24782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1760.310299][T24782] Call Trace: [ 1760.310307][T24782] [ 1760.310316][T24782] dump_stack_lvl+0xe8/0x150 [ 1760.310345][T24782] should_fail_ex+0x412/0x560 [ 1760.310375][T24782] _copy_to_iter+0x1e4/0x17d0 [ 1760.310414][T24782] ? aa_label_sk_perm+0x532/0x6e0 [ 1760.310437][T24782] ? __pfx__copy_to_iter+0x10/0x10 [ 1760.310465][T24782] ? tipc_wait_for_rcvmsg+0x4e0/0x640 [ 1760.310571][T24782] __skb_datagram_iter+0xf8/0x980 [ 1760.310593][T24782] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1760.310618][T24782] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 1760.310642][T24782] ? tipc_recvmsg+0x12a/0x1410 [ 1760.310672][T24782] skb_copy_datagram_iter+0xb5/0x240 [ 1760.310696][T24782] tipc_recvmsg+0x7ce/0x1410 [ 1760.310738][T24782] ? __pfx_tipc_recvmsg+0x10/0x10 [ 1760.310779][T24782] ? __lock_acquire+0x6b5/0x2cf0 [ 1760.310799][T24782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1760.310825][T24782] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1760.310850][T24782] ? security_socket_recvmsg+0x7e/0x2c0 [ 1760.310878][T24782] ? __pfx_tipc_recvmsg+0x10/0x10 [ 1760.310905][T24782] sock_recvmsg+0x172/0x1b0 [ 1760.310932][T24782] ____sys_recvmsg+0x1e6/0x4a0 [ 1760.310968][T24782] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1760.311011][T24782] ? import_iovec+0x73/0xa0 [ 1760.311041][T24782] ___sys_recvmsg+0x215/0x590 [ 1760.311057][T24782] ? get_pid_task+0x20/0x1f0 [ 1760.311086][T24782] ? __pfx____sys_recvmsg+0x10/0x10 [ 1760.311109][T24782] ? __fget_files+0x2a/0x420 [ 1760.311151][T24782] ? __fget_files+0x3a0/0x420 [ 1760.311183][T24782] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1760.311205][T24782] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1760.311234][T24782] ? __pfx_ksys_write+0x10/0x10 [ 1760.311267][T24782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.311287][T24782] do_syscall_64+0x15f/0xf80 [ 1760.311305][T24782] ? trace_irq_disable+0x3b/0x140 [ 1760.311330][T24782] ? clear_bhb_loop+0x40/0x90 [ 1760.311353][T24782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.311372][T24782] RIP: 0033:0x7fd06d79ce59 [ 1760.311390][T24782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.311405][T24782] RSP: 002b:00007fd06b9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1760.311425][T24782] RAX: ffffffffffffffda RBX: 00007fd06da15fa0 RCX: 00007fd06d79ce59 [ 1760.311438][T24782] RDX: 0000000000020060 RSI: 0000200000000900 RDI: 0000000000000003 [ 1760.311451][T24782] RBP: 00007fd06b9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.311462][T24782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.311473][T24782] R13: 00007fd06da16038 R14: 00007fd06da15fa0 R15: 00007ffc5fb96de8 [ 1760.311504][T24782] [ 1761.017909][T24803] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1761.157432][T24803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1761.249105][T24815] sctp: [Deprecated]: syz.4.17021 (pid 24815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1761.249105][T24815] Use struct sctp_sack_info instead [ 1761.303627][T24813] rdma_op ffff888058b951f0 conn xmit_rdma 0000000000000000 [ 1761.562482][T24823] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17025'. [ 1761.636451][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1762.035534][T24838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17029'. [ 1762.088668][T24845] xt_hashlimit: size too large, truncated to 1048576 [ 1762.674229][T24867] FAULT_INJECTION: forcing a failure. [ 1762.674229][T24867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.686674][T24863] bond5: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1762.696301][T24863] bond5: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 1762.715941][T24867] CPU: 0 UID: 0 PID: 24867 Comm: syz.4.17036 Not tainted syzkaller #0 PREEMPT(full) [ 1762.715968][T24867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1762.715991][T24867] Call Trace: [ 1762.715998][T24867] [ 1762.716007][T24867] dump_stack_lvl+0xe8/0x150 [ 1762.716034][T24867] should_fail_ex+0x412/0x560 [ 1762.716062][T24867] _copy_from_iter+0x1d3/0x1670 [ 1762.716090][T24867] ? rcu_is_watching+0x15/0xb0 [ 1762.716117][T24867] ? __pfx__copy_from_iter+0x10/0x10 [ 1762.716148][T24867] ? netlink_sendmsg+0x650/0xb40 [ 1762.716174][T24867] ? skb_put+0x11b/0x210 [ 1762.716199][T24867] netlink_sendmsg+0x6c0/0xb40 [ 1762.716232][T24867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.716259][T24867] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1762.716283][T24867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1762.716356][T24867] ____sys_sendmsg+0x972/0x9f0 [ 1762.716383][T24867] ? __might_fault+0xaf/0x130 [ 1762.716411][T24867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1762.716443][T24867] ? import_iovec+0x73/0xa0 [ 1762.716467][T24867] ___sys_sendmsg+0x2a5/0x360 [ 1762.716490][T24867] ? __lock_acquire+0x6b5/0x2cf0 [ 1762.716520][T24867] ? __pfx____sys_sendmsg+0x10/0x10 [ 1762.716576][T24867] ? __fget_files+0x2a/0x420 [ 1762.716595][T24867] ? __fget_files+0x3a0/0x420 [ 1762.716624][T24867] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1762.716652][T24867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1762.716694][T24867] ? __pfx_ksys_write+0x10/0x10 [ 1762.716729][T24867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.716749][T24867] do_syscall_64+0x15f/0xf80 [ 1762.716767][T24867] ? trace_irq_disable+0x3b/0x140 [ 1762.716793][T24867] ? clear_bhb_loop+0x40/0x90 [ 1762.716815][T24867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.716833][T24867] RIP: 0033:0x7fd57e19ce59 [ 1762.716851][T24867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.716866][T24867] RSP: 002b:00007fd57c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.716885][T24867] RAX: ffffffffffffffda RBX: 00007fd57e415fa0 RCX: 00007fd57e19ce59 [ 1762.716898][T24867] RDX: 0000000000004000 RSI: 0000200000000740 RDI: 0000000000000003 [ 1762.716910][T24867] RBP: 00007fd57c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.716921][T24867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.716931][T24867] R13: 00007fd57e416038 R14: 00007fd57e415fa0 R15: 00007fff772dbb38 [ 1762.716968][T24867] [ 1762.737258][T24870] tipc: Enabled bearer , priority 0 [ 1763.179668][T24869] tipc: Enabling of bearer rejected, already enabled [ 1763.264295][T24892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17039'. [ 1763.446136][T24869] tipc: Disabling bearer [ 1763.460271][T24895] netlink: 'syz.2.17040': attribute type 1 has an invalid length. [ 1763.468556][T24895] netlink: 'syz.2.17040': attribute type 1 has an invalid length. [ 1763.483303][T24895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17040'. [ 1763.492566][T24895] netlink: 1 bytes leftover after parsing attributes in process `syz.2.17040'. [ 1763.572641][T24901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17040'. [ 1763.628252][T24902] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17042'. [ 1763.654382][T24907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17040'. [ 1763.670677][T24908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1763.809067][T24913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17045'. [ 1764.028639][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17046'. [ 1764.115467][T24919] netlink: 'syz.4.17046': attribute type 10 has an invalid length. [ 1764.162030][T24921] netlink: 'syz.0.17047': attribute type 6 has an invalid length. [ 1764.631965][T24931] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17049'. [ 1765.121900][T24927] netlink: 'syz.0.17050': attribute type 1 has an invalid length. [ 1765.155908][T24927] netlink: 'syz.0.17050': attribute type 2 has an invalid length. [ 1765.175169][T24936] xt_hashlimit: size too large, truncated to 1048576 [ 1765.190969][T24927] netlink: 'syz.0.17050': attribute type 1 has an invalid length. [ 1765.198828][T24927] netlink: 'syz.0.17050': attribute type 2 has an invalid length. [ 1765.424277][T24949] xt_cgroup: invalid path, errno=-2 [ 1765.778965][T24963] netlink: 'syz.1.17058': attribute type 6 has an invalid length. [ 1765.843942][T24961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17057'. [ 1766.004756][T24973] syzkaller0: entered promiscuous mode [ 1766.010282][T24973] syzkaller0: entered allmulticast mode [ 1766.381123][T24994] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1766.497403][ T13] [ 1766.499781][ T13] ====================================================== [ 1766.506831][ T13] WARNING: possible circular locking dependency detected [ 1766.513914][ T13] syzkaller #0 Not tainted [ 1766.518353][ T13] ------------------------------------------------------ [ 1766.525401][ T13] kworker/u8:1/13 is trying to acquire lock: [ 1766.531366][ T13] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1766.541299][ T13] [ 1766.541299][ T13] but task is already holding lock: [ 1766.548663][ T13] ffff8880226aee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1766.558314][ T13] [ 1766.558314][ T13] which lock already depends on the new lock. [ 1766.558314][ T13] [ 1766.569042][ T13] [ 1766.569042][ T13] the existing dependency chain (in reverse order) is: [ 1766.578125][ T13] [ 1766.578125][ T13] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1766.586157][ T13] lock_sock_nested+0x41/0x100 [ 1766.591449][ T13] mptcp_sendmsg_fastopen+0x128/0x580 [ 1766.597340][ T13] mptcp_sendmsg+0x1b0c/0x1dc0 [ 1766.602646][ T13] ____sys_sendmsg+0x5c7/0x9f0 [ 1766.607942][ T13] ___sys_sendmsg+0x2a5/0x360 [ 1766.613134][ T13] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1766.618589][ T13] do_syscall_64+0x15f/0xf80 [ 1766.623687][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.630093][ T13] [ 1766.630093][ T13] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1766.637816][ T13] lock_sock_nested+0x41/0x100 [ 1766.643094][ T13] inet_shutdown+0x6a/0x390 [ 1766.648102][ T13] nbd_mark_nsock_dead+0x2e9/0x560 [ 1766.653734][ T13] sock_shutdown+0x15e/0x260 [ 1766.658869][ T13] nbd_clear_sock+0x24/0x170 [ 1766.663968][ T13] nbd_config_put+0x2dd/0x580 [ 1766.669151][ T13] nbd_genl_connect+0x19d5/0x1cf0 [ 1766.674682][ T13] genl_family_rcv_msg_doit+0x22a/0x330 [ 1766.680737][ T13] genl_rcv_msg+0x61c/0x7a0 [ 1766.685764][ T13] netlink_rcv_skb+0x232/0x4b0 [ 1766.691049][ T13] genl_rcv+0x28/0x40 [ 1766.695544][ T13] netlink_unicast+0x75c/0x8e0 [ 1766.700818][ T13] netlink_sendmsg+0x813/0xb40 [ 1766.706104][ T13] ____sys_sendmsg+0x972/0x9f0 [ 1766.711406][ T13] ___sys_sendmsg+0x2a5/0x360 [ 1766.716617][ T13] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1766.722094][ T13] do_syscall_64+0x15f/0xf80 [ 1766.727225][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.733628][ T13] [ 1766.733628][ T13] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1766.741304][ T13] __mutex_lock+0x1a3/0x1550 [ 1766.746445][ T13] nbd_queue_rq+0x37b/0x1100 [ 1766.751607][ T13] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1766.757774][ T13] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1766.764666][ T13] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1766.771168][ T13] blk_mq_run_hw_queue+0x348/0x4f0 [ 1766.776794][ T13] blk_mq_dispatch_list+0xd16/0xe10 [ 1766.782661][ T13] blk_mq_flush_plug_list+0x48d/0x570 [ 1766.788551][ T13] __blk_flush_plug+0x3ed/0x4d0 [ 1766.794014][ T13] __submit_bio+0x28d/0x580 [ 1766.799025][ T13] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1766.805270][ T13] block_read_full_folio+0x599/0x830 [ 1766.811069][ T13] filemap_read_folio+0x137/0x3b0 [ 1766.816609][ T13] do_read_cache_folio+0x358/0x590 [ 1766.822242][ T13] read_part_sector+0xb6/0x2b0 [ 1766.827582][ T13] adfspart_check_ICS+0xb1/0x960 [ 1766.833037][ T13] bdev_disk_changed+0x817/0x1770 [ 1766.838577][ T13] blkdev_get_whole+0x380/0x510 [ 1766.843998][ T13] bdev_open+0x31e/0xd30 [ 1766.848759][ T13] blkdev_open+0x470/0x610 [ 1766.853684][ T13] do_dentry_open+0x785/0x14e0 [ 1766.858955][ T13] vfs_open+0x3b/0x340 [ 1766.863562][ T13] path_openat+0x2e08/0x3860 [ 1766.868662][ T13] do_file_open+0x23e/0x4a0 [ 1766.873680][ T13] do_sys_openat2+0x113/0x200 [ 1766.878870][ T13] __x64_sys_openat+0x138/0x170 [ 1766.884239][ T13] do_syscall_64+0x15f/0xf80 [ 1766.889345][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.895755][ T13] [ 1766.895755][ T13] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1766.902954][ T13] __mutex_lock+0x1a3/0x1550 [ 1766.908068][ T13] nbd_queue_rq+0xc6/0x1100 [ 1766.913097][ T13] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1766.919222][ T13] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1766.926425][ T13] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1766.932923][ T13] blk_mq_run_hw_queue+0x348/0x4f0 [ 1766.938549][ T13] blk_mq_dispatch_list+0xd16/0xe10 [ 1766.944265][ T13] blk_mq_flush_plug_list+0x48d/0x570 [ 1766.950154][ T13] __blk_flush_plug+0x3ed/0x4d0 [ 1766.955662][ T13] __submit_bio+0x28d/0x580 [ 1766.960783][ T13] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1766.966948][ T13] block_read_full_folio+0x599/0x830 [ 1766.972749][ T13] filemap_read_folio+0x137/0x3b0 [ 1766.978292][ T13] do_read_cache_folio+0x358/0x590 [ 1766.983925][ T13] read_part_sector+0xb6/0x2b0 [ 1766.989243][ T13] adfspart_check_ICS+0xb1/0x960 [ 1766.994710][ T13] bdev_disk_changed+0x817/0x1770 [ 1767.000250][ T13] blkdev_get_whole+0x380/0x510 [ 1767.005614][ T13] bdev_open+0x31e/0xd30 [ 1767.010419][ T13] blkdev_open+0x470/0x610 [ 1767.015408][ T13] do_dentry_open+0x785/0x14e0 [ 1767.020703][ T13] vfs_open+0x3b/0x340 [ 1767.025292][ T13] path_openat+0x2e08/0x3860 [ 1767.030394][ T13] do_file_open+0x23e/0x4a0 [ 1767.035410][ T13] do_sys_openat2+0x113/0x200 [ 1767.040596][ T13] __x64_sys_openat+0x138/0x170 [ 1767.045960][ T13] do_syscall_64+0x15f/0xf80 [ 1767.051073][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.057484][ T13] [ 1767.057484][ T13] -> #3 (set->srcu){.+.+}-{0:0}: [ 1767.064652][ T13] __synchronize_srcu+0xca/0x300 [ 1767.070109][ T13] elevator_switch+0x1e8/0x7a0 [ 1767.075389][ T13] elevator_change+0x2cc/0x450 [ 1767.080695][ T13] elevator_set_default+0x36c/0x430 [ 1767.086414][ T13] blk_register_queue+0x3e9/0x4e0 [ 1767.091963][ T13] __add_disk+0x677/0xd50 [ 1767.096803][ T13] add_disk_fwnode+0xfb/0x480 [ 1767.101993][ T13] nbd_dev_add+0x72c/0xb50 [ 1767.106937][ T13] nbd_init+0x168/0x1f0 [ 1767.111728][ T13] do_one_initcall+0x250/0x870 [ 1767.117028][ T13] do_initcall_level+0x104/0x190 [ 1767.122509][ T13] do_initcalls+0x59/0xa0 [ 1767.127359][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 1767.133076][ T13] kernel_init+0x1d/0x1d0 [ 1767.137928][ T13] ret_from_fork+0x514/0xb70 [ 1767.143031][ T13] ret_from_fork_asm+0x1a/0x30 [ 1767.148479][ T13] [ 1767.148479][ T13] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1767.156294][ T13] __mutex_lock+0x1a3/0x1550 [ 1767.161392][ T13] elevator_change+0x1b3/0x450 [ 1767.166669][ T13] elevator_set_none+0xb5/0x140 [ 1767.172036][ T13] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1767.178351][ T13] nbd_start_device+0x17f/0xb10 [ 1767.183712][ T13] nbd_genl_connect+0x165b/0x1cf0 [ 1767.189250][ T13] genl_family_rcv_msg_doit+0x22a/0x330 [ 1767.195308][ T13] genl_rcv_msg+0x61c/0x7a0 [ 1767.200320][ T13] netlink_rcv_skb+0x232/0x4b0 [ 1767.205597][ T13] genl_rcv+0x28/0x40 [ 1767.210088][ T13] netlink_unicast+0x75c/0x8e0 [ 1767.215359][ T13] netlink_sendmsg+0x813/0xb40 [ 1767.221170][ T13] ____sys_sendmsg+0x972/0x9f0 [ 1767.226465][ T13] ___sys_sendmsg+0x2a5/0x360 [ 1767.231662][ T13] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1767.237111][ T13] do_syscall_64+0x15f/0xf80 [ 1767.242208][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.248612][ T13] [ 1767.248612][ T13] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1767.257335][ T13] blk_alloc_queue+0x546/0x680 [ 1767.262614][ T13] __blk_mq_alloc_disk+0x197/0x390 [ 1767.268240][ T13] nbd_dev_add+0x499/0xb50 [ 1767.273182][ T13] nbd_init+0x168/0x1f0 [ 1767.277845][ T13] do_one_initcall+0x250/0x870 [ 1767.283117][ T13] do_initcall_level+0x104/0x190 [ 1767.288570][ T13] do_initcalls+0x59/0xa0 [ 1767.293502][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 1767.299217][ T13] kernel_init+0x1d/0x1d0 [ 1767.304060][ T13] ret_from_fork+0x514/0xb70 [ 1767.309162][ T13] ret_from_fork_asm+0x1a/0x30 [ 1767.314434][ T13] [ 1767.314434][ T13] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1767.321719][ T13] __lock_acquire+0x15a5/0x2cf0 [ 1767.327084][ T13] lock_acquire+0x106/0x350 [ 1767.332096][ T13] fs_reclaim_acquire+0x71/0x100 [ 1767.337547][ T13] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1767.343878][ T13] __alloc_skb+0x1d0/0x7d0 [ 1767.348830][ T13] tcp_stream_alloc_skb+0x3f/0x580 [ 1767.354461][ T13] tcp_connect+0x1570/0x5400 [ 1767.359567][ T13] tcp_v6_connect+0x1295/0x1b10 [ 1767.364930][ T13] __inet_stream_connect+0x25a/0xdd0 [ 1767.370733][ T13] inet_stream_connect+0x66/0xa0 [ 1767.376181][ T13] kernel_connect+0x141/0x1c0 [ 1767.381367][ T13] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1767.387523][ T13] rds_connect_worker+0x1d8/0x290 [ 1767.393074][ T13] process_scheduled_works+0xb5d/0x1860 [ 1767.399131][ T13] worker_thread+0xa53/0xfc0 [ 1767.404326][ T13] kthread+0x388/0x470 [ 1767.408910][ T13] ret_from_fork+0x514/0xb70 [ 1767.414009][ T13] ret_from_fork_asm+0x1a/0x30 [ 1767.419306][ T13] [ 1767.419306][ T13] other info that might help us debug this: [ 1767.419306][ T13] [ 1767.429519][ T13] Chain exists of: [ 1767.429519][ T13] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1767.429519][ T13] [ 1767.442574][ T13] Possible unsafe locking scenario: [ 1767.442574][ T13] [ 1767.450023][ T13] CPU0 CPU1 [ 1767.455424][ T13] ---- ---- [ 1767.460771][ T13] lock(k-sk_lock-AF_INET6); [ 1767.465440][ T13] lock(sk_lock-AF_INET6); [ 1767.472536][ T13] lock(k-sk_lock-AF_INET6); [ 1767.479715][ T13] lock(fs_reclaim); [ 1767.483684][ T13] [ 1767.483684][ T13] *** DEADLOCK *** [ 1767.483684][ T13] [ 1767.491859][ T13] 4 locks held by kworker/u8:1/13: [ 1767.496958][ T13] #0: ffff888036749940 ((wq_completion)krds_cp_wq#18/0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1767.508744][ T13] #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1767.521603][ T13] #2: ffff88805ba3de80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 1767.532647][ T13] #3: ffff8880226aee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1767.542909][ T13] [ 1767.542909][ T13] stack backtrace: [ 1767.548788][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 1767.548806][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1767.548816][ T13] Workqueue: krds_cp_wq#18/0 rds_connect_worker [ 1767.548836][ T13] Call Trace: [ 1767.548845][ T13] [ 1767.548853][ T13] dump_stack_lvl+0xe8/0x150 [ 1767.548872][ T13] print_circular_bug+0x2e1/0x300 [ 1767.548892][ T13] check_noncircular+0x12e/0x150 [ 1767.548912][ T13] __lock_acquire+0x15a5/0x2cf0 [ 1767.548935][ T13] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1767.548954][ T13] lock_acquire+0x106/0x350 [ 1767.548969][ T13] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1767.548988][ T13] ? ip6_dst_check+0xe2/0x7e0 [ 1767.549011][ T13] fs_reclaim_acquire+0x71/0x100 [ 1767.549031][ T13] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1767.549049][ T13] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1767.549068][ T13] ? ip6_default_advmss+0x80/0x3b0 [ 1767.549082][ T13] ? __alloc_skb+0x1d0/0x7d0 [ 1767.549102][ T13] __alloc_skb+0x1d0/0x7d0 [ 1767.549121][ T13] tcp_stream_alloc_skb+0x3f/0x580 [ 1767.549144][ T13] ? __asan_memset+0x22/0x50 [ 1767.549162][ T13] tcp_connect+0x1570/0x5400 [ 1767.549184][ T13] ? ktime_get_with_offset+0x93/0x2d0 [ 1767.549208][ T13] ? __pfx_tcp_connect+0x10/0x10 [ 1767.549222][ T13] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1767.549243][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.549264][ T13] ? ktime_get_with_offset+0x93/0x2d0 [ 1767.549284][ T13] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1767.549307][ T13] ? __asan_memset+0x22/0x50 [ 1767.549325][ T13] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1767.549348][ T13] ? inet6_hash_connect+0xeb/0x170 [ 1767.549366][ T13] tcp_v6_connect+0x1295/0x1b10 [ 1767.549387][ T13] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1767.549404][ T13] ? __bfs+0x153/0x290 [ 1767.549418][ T13] ? __bfs+0x153/0x290 [ 1767.549432][ T13] ? __pfx_hlock_conflict+0x10/0x10 [ 1767.549450][ T13] __inet_stream_connect+0x25a/0xdd0 [ 1767.549468][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 1767.549486][ T13] ? lock_sock_nested+0x6a/0x100 [ 1767.549503][ T13] ? __pfx___inet_stream_connect+0x10/0x10 [ 1767.549519][ T13] ? inet_stream_connect+0x51/0xa0 [ 1767.549534][ T13] ? __local_bh_enable_ip+0xd0/0x130 [ 1767.549551][ T13] inet_stream_connect+0x66/0xa0 [ 1767.549566][ T13] kernel_connect+0x141/0x1c0 [ 1767.549580][ T13] ? net_generic+0x1e/0x240 [ 1767.549597][ T13] ? __pfx_kernel_connect+0x10/0x10 [ 1767.549616][ T13] ? __local_bh_enable_ip+0xd0/0x130 [ 1767.549631][ T13] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1767.549655][ T13] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1767.549674][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1767.549694][ T13] ? process_scheduled_works+0xa70/0x1860 [ 1767.549709][ T13] ? process_scheduled_works+0xa70/0x1860 [ 1767.549725][ T13] rds_connect_worker+0x1d8/0x290 [ 1767.549741][ T13] ? process_scheduled_works+0xa70/0x1860 [ 1767.549755][ T13] process_scheduled_works+0xb5d/0x1860 [ 1767.549780][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1767.549796][ T13] ? assign_work+0x3d5/0x5e0 [ 1767.549811][ T13] worker_thread+0xa53/0xfc0 [ 1767.549835][ T13] kthread+0x388/0x470 [ 1767.549852][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1767.549866][ T13] ? __pfx_kthread+0x10/0x10 [ 1767.549883][ T13] ret_from_fork+0x514/0xb70 [ 1767.549900][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1767.549913][ T13] ? __switch_to+0xc79/0x1410 [ 1767.549934][ T13] ? __pfx_kthread+0x10/0x10 [ 1767.549952][ T13] ret_from_fork_asm+0x1a/0x30 [ 1767.549974][ T13]