last executing test programs: 2m32.03023985s ago: executing program 2 (id=3952): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001340)=[{0x10, 0x110, 0xa}, {0x10, 0x101, 0x2}], 0x20}, 0xfc40) 2m31.845106883s ago: executing program 2 (id=3954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x4) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000081004500001c1234", 0xa) 2m31.11907964s ago: executing program 2 (id=3959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000001c0)={r2}) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 2m30.431317424s ago: executing program 2 (id=3964): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001340)=[{0x10, 0x110, 0xa}, {0x10, 0x101, 0x2}], 0x20}, 0xfc40) 2m30.194966255s ago: executing program 2 (id=3966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2497f027", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25120400000800ef"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) 2m29.93991614s ago: executing program 2 (id=3970): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x41, 0x800, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r1, r2+10000000}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f0000002980)) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x41, 0x800, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r1, r2+10000000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 2m14.653194255s ago: executing program 32 (id=3970): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x41, 0x800, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r1, r2+10000000}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f0000002980)) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x41, 0x800, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x98, 0x0, 0x0, @fd=r3}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r1, r2+10000000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1m52.886493282s ago: executing program 3 (id=4260): r0 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) 1m52.522469392s ago: executing program 3 (id=4264): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xb}, 0x8) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000240)={0x8000200f}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f00000001c0)={0x5, 0x3ff, 0x8001, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000140)=[{0x8, 0x101, 0x9}, {0xa, 0xfe, 0x1}, {0x1c, 0x1ff, 0x80000000}, {0xe, 0x101, 0xffffffff}, {0x15, 0x101, 0x5}, {0x1, 0x101, 0x10}, {0xb, 0x1ff, 0xffffff00}, {0x21, 0x101}]}) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0xfffffffffffffc3d) accept4(r4, 0x0, 0x0, 0x80000) 1m51.564075649s ago: executing program 3 (id=4269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x400, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4140}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x40488c5}, 0x8000) 1m49.112907876s ago: executing program 3 (id=4271): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x2000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8084}, 0x4008890) 1m49.018609286s ago: executing program 3 (id=4272): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x2, 0x62a, {{0x13, 0x4, 0x2, 0x5, 0x4c, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@noop, @ssrr={0x89, 0x2b, 0xc, [@multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x6, 0x0, 0x9, [0xd6, 0x3ff]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x7800, 0x7800, 0x401, 0x0, {{0x3b, 0x4, 0x0, 0x36, 0xec, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x2c, 0xde, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@empty}, {@private=0xa010100, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x80000001}, {@empty, 0xdde}]}, @timestamp={0x44, 0x28, 0x12, 0x0, 0x2, [0x8, 0x827, 0x3a8, 0x3, 0x8, 0x0, 0x0, 0x2, 0x7]}, @end, @timestamp_addr={0x44, 0x44, 0x3d, 0x1, 0x7, [{@remote, 0x1ff}, {@private=0xa010102, 0x8}, {@remote, 0x2}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@broadcast, 0xfffff001}, {@private=0xa010101, 0x5}, {@broadcast, 0x80000000}]}, @timestamp={0x44, 0x24, 0x5e, 0x0, 0xc, [0xf, 0x4, 0x0, 0x10, 0x3, 0x5, 0x80e, 0x7]}, @generic={0x83, 0x2}, @lsrr={0x83, 0x17, 0x5b, [@loopback, @private=0xa010102, @multicast1, @loopback, @empty]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x401}}, 0x27c0}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback, 0xa7a}, 0x1c) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="48103cf000"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ffffffff06000f00fe010000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000", 0x33, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 1m48.268564915s ago: executing program 3 (id=4276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x80000000) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000400000000100007ee49bbe000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r2, &(0x7f0000000100)={0x2, 0x8020, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="bbdf26000000080002000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) (async, rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xe5, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa34ffffffffffff86dd65b5409000af3aff00000000000000000000000000000000fc0200000000000000000000000000018800907806000000000000000000000000000000000000010e099bc3442590a9f38a9cbad54b911eda8cdbcbb378d8cc0ed95a03cc5d88ab7af18d46f0bcb9a950750d1982f821a70210a5557dfcf315cade3535bff2b9207b2a109b0b4e59317e56684e661a57d011cffc2ade1d002209039bd1d185d9454c68af8c86b456b98b1c8d60153e0cf9573b005a3ab808d26b825001de7f6aa5f45abb21c77b15e3c67f979e642254164ccc273e7f16d30f4bf7dcfe35ec45c8c013029e"], 0x0) (async, rerun: 64) connect$inet(r2, 0x0, 0x0) (rerun: 64) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) (async, rerun: 64) listen(r1, 0x9ff) (rerun: 64) r10 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async, rerun: 64) sendmsg$tipc(r10, 0x0, 0x20040001) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r0, 0x23719000) socket$inet_smc(0x2b, 0x1, 0x0) 1m45.113254274s ago: executing program 4 (id=4308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2c001, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 1m44.81480713s ago: executing program 4 (id=4311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000001200), 0x0, 0x200000000000, 0x20000000000001bc}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x40}}, 0x0) unshare(0x8040600) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m43.807297143s ago: executing program 4 (id=4319): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000040)='GPL\x00', 0x3, 0x3, &(0x7f0000003300)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040884}, 0x4000810) connect$can_bcm(r1, &(0x7f00000001c0), 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="0500000000080000ca0800000000000095352e6272ac7351ff13e9a83a9f89376ca25036337a16f1da7df724e521ad2d979b52012c2a8769222c00"/74, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000004003000000e009fac39f6d1d26fc3efe111f8b0e15c72d53b7da5e09600bc567bef64fa61a0b3e3e93202dc586e33f57bd0a047b0b21c3eb217bb0bb403cf6c436cb174011"], 0x80}, 0x1, 0x0, 0x0, 0x3f9bbfad8c22256a}, 0x20000040) (async) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="0500000000080000ca0800000000000095352e6272ac7351ff13e9a83a9f89376ca25036337a16f1da7df724e521ad2d979b52012c2a8769222c00"/74, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000004003000000e009fac39f6d1d26fc3efe111f8b0e15c72d53b7da5e09600bc567bef64fa61a0b3e3e93202dc586e33f57bd0a047b0b21c3eb217bb0bb403cf6c436cb174011"], 0x80}, 0x1, 0x0, 0x0, 0x3f9bbfad8c22256a}, 0x20000040) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e80)={0x5, 0xe16, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "595b6028a0e4931133f6d9919fd4a457896811cd874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd26, 0x25dfdbfd, {0xa, 0x80, 0x80, 0x4, 0xb2, 0x0, 0x0, 0x3, 0x10001}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4040) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) (async) close(r4) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r4, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003f80)=""/106, 0x6a}, {0x0}], 0x2}, 0x2}], 0x1, 0x40010080, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6f43b2a756abcdf77e3bf8b2de3c922a25c55339d6c4ebae80d8848350ac43652dacf374681c0d85f3441e8bd6a334e08bd1cf2fee38f825165a668410a970867e83d1e8a77f9150a569a7e19762a413589089c7b175e944aacd0a6917537071ed23a4c78948e15b9c99c124fcab16e827830d3b3ea57bd4d203775a01f30bae1764555fa86792d1", @ANYRES16=r7, @ANYBLOB="040026bd7000fedbdf2505000000080009000c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000804) 1m42.790707163s ago: executing program 4 (id=4327): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="68000000000905040000000000000000020000000900010073790030000000001400028006000100000a0000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3d, 0x0, 0xffffffff, {}, [{0xa0, 0x1, [@m_ct={0x9c, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x5}]}, {0x6c, 0x6, "8596f72e3a30c3a97ded177baeaf31fef9c94f23f0236772d9122f8b20359c00f4bc3e732d343d0b9436ee47d29b9a99a3a9b79eb5d85689c07f6364e1fe5f6dde83ab42d7d8b214e7d61cd8ec0b280ac60d55caef32e6f1f03f7470a87e99936f0a1e2c15524a3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xb4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030f2abd70000000000034000000080003ee00030000"], 0x1c}}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c00000004000000010000840100000017000000020000000000000004000000000000010500000020000000006100612e616161610061007e7088ec454fd12dd40ebc972b2ff4e7c5bc75630b42d1"], 0x0, 0x4c}, 0x28) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = epoll_create(0x7d95) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0x80002028}) unshare(0x22020600) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r10, 0x0, 0x30, 0x0, @val=@tcx={@void, @value=r10}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0xfffffdc8, &(0x7f0000000340)}, 0xffffffffffffffb7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, 0x0, 0x0) listen(r8, 0x7866) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, 0x0) shutdown(r8, 0x0) 1m42.682274582s ago: executing program 4 (id=4328): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000c000000000000000000000000000009"], 0x0, 0x3a, 0x0, 0x1}, 0x28) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4ea0, 0x10001, @empty, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x300, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x8000000}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x9, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, 0x0, 0x25, 0x0, @void}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x4800) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa420800490000240064000100879078ac1414bbac14140c8907efe000006a860600000000000000"], 0x0) 1m41.793276771s ago: executing program 4 (id=4329): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x1, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fdfbdf255900000008000300953b93c08c5eb808fa708bd30a69674843598e9bcb4444237bad26daede76978dee5e51aa63e84bc26d07f965702521157ef6ac1ef4dfc1b1814aeb58d674c65890854460cde0c309a", @ANYRES32=r8, @ANYBLOB="0c0099000900000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c677665000000004400058005001b"], 0x7c}}, 0x24000004) 1m33.118789417s ago: executing program 33 (id=4276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x80000000) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000400000000100007ee49bbe000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r2, &(0x7f0000000100)={0x2, 0x8020, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="bbdf26000000080002000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) (async, rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xe5, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa34ffffffffffff86dd65b5409000af3aff00000000000000000000000000000000fc0200000000000000000000000000018800907806000000000000000000000000000000000000010e099bc3442590a9f38a9cbad54b911eda8cdbcbb378d8cc0ed95a03cc5d88ab7af18d46f0bcb9a950750d1982f821a70210a5557dfcf315cade3535bff2b9207b2a109b0b4e59317e56684e661a57d011cffc2ade1d002209039bd1d185d9454c68af8c86b456b98b1c8d60153e0cf9573b005a3ab808d26b825001de7f6aa5f45abb21c77b15e3c67f979e642254164ccc273e7f16d30f4bf7dcfe35ec45c8c013029e"], 0x0) (async, rerun: 64) connect$inet(r2, 0x0, 0x0) (rerun: 64) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) (async, rerun: 64) listen(r1, 0x9ff) (rerun: 64) r10 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async, rerun: 64) sendmsg$tipc(r10, 0x0, 0x20040001) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r0, 0x23719000) socket$inet_smc(0x2b, 0x1, 0x0) 1m26.545452964s ago: executing program 34 (id=4329): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x1, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fdfbdf255900000008000300953b93c08c5eb808fa708bd30a69674843598e9bcb4444237bad26daede76978dee5e51aa63e84bc26d07f965702521157ef6ac1ef4dfc1b1814aeb58d674c65890854460cde0c309a", @ANYRES32=r8, @ANYBLOB="0c0099000900000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c677665000000004400058005001b"], 0x7c}}, 0x24000004) 5.774184705s ago: executing program 5 (id=5022): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0x53, 0x1000, &(0x7f0000000180)="c2882eaf2d880a1bf6c4d383cbdee6c2585de497f239d8e7a593890f967028ef130ace82d4f6cfa6b25b36d9162a3d87ecda3923a3fa7e931e69c24745dd7d0ca0290b701685a6564859be76cb879aa4cbc9b0", &(0x7f0000000200)=""/4096, 0x81, 0x0, 0x73, 0x59, &(0x7f0000001200)="da6124113803f66a853cf1b4707566bfefe08eba989c7c33b11709e68cd2b1cd893c8535941d70bfd2e291d5eb5a74acc2f70e736d6e3639657b829202c4ef11db939f9586501e63b0b7e9e8d1b00f1b4a7c65e53655ff663817e7de641efaf8785c90af6f1501017687b29f74fd12126756de", &(0x7f0000001280)="b562e789ddad6ff6c5c946bce172b6b1f0aa543c3fd1029401579327489d389b3baa73d8b11584fe79da342a9cc79a727b4a18d0397c242cc7f49fea0eb271321f6dd3c4ea44c9555079abf1a040a3ff3b5bb51c1b3327cce3", 0x2, 0x0, 0x7}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000200)) r4 = epoll_create1(0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x10008, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netpci0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x6) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) 5.06734334s ago: executing program 5 (id=5025): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x6) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) close(0x3) 5.066278089s ago: executing program 7 (id=5026): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket(0x28, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0xae96, 0x10, 0x31, 0x3, 0x1}) (async) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) listen(r2, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000280)) (async) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) (async) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) (async) ioctl$PPPIOCGCHAN(r6, 0x80047437, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x4, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xc}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r8, 0x1, 0x30}, 0xc) 4.736053117s ago: executing program 7 (id=5028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x10, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x6fb536fc83795b92, 0x0, 0xfe, 0x0, 0x2000}}, 0x1c}}, 0x20002000) clock_gettime(0xb, &(0x7f0000000980)) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000001340)=ANY=[@ANYBLOB="080008000600060000000c000000450a0030006600000b67907864010102ffffffff2197e3ba0fa8a2e71bd9fe1a390c0dad392d66248a00000000000000"], 0x3e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x1ff003, 0x4, 0x10001, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x180, 0xfffffffd}, 0x50) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e22, @loopback}, 0x28, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x8, 0x3, 0x40}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r8, 0x6281}], 0x1, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000300)) sendmsg$nl_generic(r10, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, 0x21, 0x200, 0x70bd29, 0x25dfdbfb, {0x20}, [@nested={0x8, 0x124, 0x0, 0x1, [@nested={0x4, 0x5c}]}, @nested={0x8f, 0x52, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0x166}, @generic="b88f4b2ab06eabdbf91e44afbcc5550450b4dd7ece678adec65ad11b0b9cf7880ac1c251e9ff4794fe173717f7e68867a9c145e1dc402ee4365645370d57bb25bcd3e788dc454cf30e764f68aeee2f29febcc8cff8ad0304181ca16fa08859124a658d681dbc400895d5590b6061816695bc7f7aad58b583c5c94dace1a311", @nested={0x4, 0x26}]}, @typed={0x4, 0x83}, @nested={0x18, 0x112, 0x0, 0x1, [@nested={0x4, 0x148}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xfffffff9}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44}, 0x40840) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r9, &(0x7f0000000580)={0xa0000004}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 4.658913838s ago: executing program 5 (id=5029): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb80a, 0x5b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000066355bca7a743a355ce82d6180000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)="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", &(0x7f0000000340), 0x1003, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r6}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) 4.602981827s ago: executing program 1 (id=5031): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@private0={0xfc, 0x0, '\x00', 0xff}, 0x8000000, 0x0, 0xff, 0x1, 0x801, 0x8}, 0x20) 4.299324574s ago: executing program 1 (id=5032): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}}, 0x40000) sendmmsg$inet(r1, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 4.250399828s ago: executing program 0 (id=5033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018406000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000b91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x1c, &(0x7f0000002a80), &(0x7f0000cab000)=0xc) syz_emit_ethernet(0x42, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@sack={0x5, 0xa, [0x394, 0x6]}]}}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x3e, 0x20, 0xfffffffd, 0x0, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote, {[@end]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x5e, 0x2e, 0x30, 0x5f, 0x61]}}, &(0x7f0000000900)=""/234, 0x44, 0xea, 0x0, 0x10001, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r6, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000001b80)=[{}], 0x8, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x32, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x1b}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x2, 0x3, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x1, &(0x7f0000000740)=""/1, 0x41000, 0x63, '\x00', r10, 0x1b, r11, 0x8, &(0x7f0000000a40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x10, 0x6, 0xffffffff}, 0x10, r12, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x200, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x6851) 3.934789551s ago: executing program 6 (id=5035): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)={0x18, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x804) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffff2e, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000040)=""/118, 0x81}, {&(0x7f0000003800)=""/4106, 0x100a}, {&(0x7f0000000300)=""/65, 0x41}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x20000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x38000000}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000740)=""/132}, {&(0x7f0000000dc0)=""/4096}, {&(0x7f0000001dc0)=""/194}], 0x0, &(0x7f0000001f00)=""/135}, 0x2c}, {{&(0x7f0000001fc0)=@xdp, 0x0, &(0x7f0000002500)=[{&(0x7f0000002040)=""/249}, {&(0x7f0000002140)=""/68}, {&(0x7f00000021c0)=""/100}, {&(0x7f0000002240)=""/255}, {&(0x7f0000002340)=""/160}, {&(0x7f0000002400)=""/164}, {&(0x7f00000024c0)=""/60}], 0x0, &(0x7f0000002580)=""/249}, 0x1d}], 0x400019f, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r2, &(0x7f00000000c0)=0x4, r3, &(0x7f0000000100)=0x8, 0x7, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 3.73676118s ago: executing program 0 (id=5036): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed00007203020000ffffffbf44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000300fdff0c00168008"], 0x38}}, 0x20044804) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000010000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0x8}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x8, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0x7, 0x7, 0xe, 0x0, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x6, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x8000009, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0xc, 0x8, 0xfffffffa, 0xfffffff7, 0x3, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x6, 0x20, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0x1, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x6, 0x10000, 0xd41b, 0x7, 0xf, 0x40004, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x140, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x4000001, 0xfffffffe, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x5, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0xa, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x1fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0x10, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0x1, 0xff, 0xfffffff2, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0x1, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x8000009, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10001, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0xfff, 0x60000000, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 3.446382038s ago: executing program 6 (id=5037): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x7d, &(0x7f0000000080)={0x4, 0xffff, 0x800f, 0x6, 0x39c1, 0x400004, 0x0, 0xc}, &(0x7f00000001c0)=0x20) (async) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0x10, 0x110, 0xb}], 0x10}, 0xfc40) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r0, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) 3.361150003s ago: executing program 0 (id=5038): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}, {0x2d, 'freezer'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2d, 'blkio'}]}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}, {0x2d, 'freezer'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2d, 'blkio'}]}, 0x21) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) 3.300358641s ago: executing program 7 (id=5039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x200, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT={0xf4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7c}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000400)=0x1c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000440)={0x3c, 0x10, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, 0x88) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000640)={{r0, &(0x7f0000000500)='\x00', 0xc0200, &(0x7f0000000540)={@_ha_fsid={[0x4, 0x7]}, {0xcd, 0x4, 0xfffffffc, 0xffffffffffffffff}}, 0x7f, &(0x7f0000000580), &(0x7f00000005c0)}, {[0x2, 0x5, 0x9, 0x7]}, 0x6, 0xc, &(0x7f0000000600)=""/12}) r3 = gettid() write$cgroup_pid(r2, &(0x7f00000006c0)=r3, 0x12) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000700)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000740)='ns/mnt\x00') recvmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000800)=""/198, 0xc6}, {&(0x7f0000000900)=""/83, 0x53}], 0x2, &(0x7f00000009c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000000b00)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x0, @empty, 0x1}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x3}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xfffffff2}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x56}], 0xb0) r15 = socket$inet6(0xa, 0x1, 0x7fff) getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r7, 0x0, 0x8a, 0x88, &(0x7f0000000d00)="520ea3f6dca13ee5492d0817131a9d1ff11406a5bf5dabcdb38dc54de42779a58874469deb9465f90e49f3ce447a2e84fa425340286cf6cce85328cb51ed72f14706f8c2e5ee0a4abd315172b424606ea630a99df32fe0feaf9edefc932edcbab35594fb82f973781dd9a735c8ba648e2c3bc00bb309441d7144607304c29a6f3fea9369db8fc9a8cda1", &(0x7f0000000dc0)=""/136, 0x6, 0x0, 0x56, 0x74, &(0x7f0000000e80)="88f4ef9d2a4d6da99cc6aecf95a08006f42feb6ebe7eb649fbedf786d47ba5159f8579f703bff4a786acc4ec96729033adaef674f757105d1914864c9f1d5cbc10785b7782c6a2c7eab80122c84850089c12edf12e49", &(0x7f0000000f00)="d50e88896eb655ecaef3cbc99f7d300b66f094c5fec400c6549b443d5e98fcfb26f8c80b1c91317f002da5442c01de96bb7ba55cdd5f286da650a1ac0f07e149b39b006d71a8ed6817c17f1d2e2244127e86da5fc41a10206ed13daae5763441f54b8218d4ea703f299c1827aab4cb275b333938", 0x1, 0x0, 0x4b}, 0x50) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000001080)={&(0x7f0000001000)=[{0x80000000, 0x1, 0x0, {0x7fff, 0x6, 0x3}}, {0x40, 0xa101705485f3335e, 0x0, {0x4, 0x10, 0x1}}, {0x5, 0x1, 0x0, {0x7, 0x1000000, 0x1}}], 0x3, 0x20, 0x1, 0x800}) bind$vsock_stream(r2, &(0x7f00000010c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) nanosleep(&(0x7f0000001100), &(0x7f0000001140)) r17 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r17) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), r8) sendmsg$IPVS_CMD_SET_SERVICE(r15, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, r18, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0xc0) ioctl$XFS_IOC_SWAPEXT(r11, 0xc0c0586d, &(0x7f0000001300)={0x0, r9, r15, 0xfff, 0x10, '\x00', {0x5, 0x2, 0x0, 0x1, 0xb, 0xdcc, 0x18, 0x9, {0x6, 0x9}, {0x2, 0x136}, {0x8, 0x78000}, 0xfffffffffffffffe, 0x6, 0x7, 0x35c, 0xc, 0x0, 0x6, 0x4, 0x0, 0x3, '\x00', 0x20000, 0xa609, 0xd906, 0x4}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r14, 0x4048587b, &(0x7f0000002ac0)={{r6, &(0x7f00000013c0)='$,-[)]+-!\x00', 0x200000, &(0x7f0000001400)={@align=0x2, {0x0, 0x1, 0x401, 0x9}}, 0x0, &(0x7f0000001440), &(0x7f0000001480)=0x40000000}, 0x7, &(0x7f00000029c0)=[{0x1, 0x82, &(0x7f00000014c0)='!*{\x9d\x00', &(0x7f0000001500)="2aa84f227dad31a7a26eacfa6c94b73faac48bbeedf8a06d4ea92138384f668ac1ac4610421176a14a2c6505343f2e6857e1ea7bbc4da080166e4d68eb3f55832692778998b67b01d9b063d304f80698aa3acb15ba1b625b13b84ed45be14cc6c73a9cb0aa31eb398c755b231cf44f04fe86c2f25e62d81659a71d049f6a93d7b6ae84ed8db36ff0d8cdd59c17a0957af1c70fde44cda9a12b1bf9c57805947dac21524a44c70dd133936e68212ea0b3cedcf50c72ea62c6898ea702907dfed350a5d9c7df", 0xc5, 0x40}, {0x1, 0x1, &(0x7f0000001600)=':$!}+\'\x00', &(0x7f0000001640)="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", 0x1000, 0x19}, {0x2, 0x0, &(0x7f0000002640)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000002680)="2abd81ca559f9a7dc0f6bd013563d8a6d213dfffdbd1717c2a939a34c47f5256faed7937dd0068d1eb0041f1e37529b373", 0x31, 0x32}, {0x3, 0x10001, &(0x7f00000026c0)='lblc\x00', &(0x7f0000002700)="567d2f27b66abbb10e591a7d71c06251aea47b39b90aa1abc02df9ce2cef0eccc3e1133e0d55b9261461b783d472edcc05d56d8cc8cff7b319ddf65ec6baeb28912d5df1f8998bc21ea889287a21e6c261bc1fe9b2a3cdd82391e953a1c53e0784f06798d1f461b958734bf5540d81fd594a2f56ed5516abb3738ad2b46cf9896169e1ca33ca3804bc5d6b986cf0e3f9c7da1a3d5f20a1ae655171f1181e6e5c49037ba3a12e78bb250d31064441c81fbbda002f0b696193394f7dc0a6c896c167869d4fa5f696137f91b92ab3c9e5a7502f6c776dc2cd12b54aa28c8637a2e0dc679a03fd35", 0xe6, 0x3a}, {0x3, 0xffff, &(0x7f0000002800)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000002840)="a9bb", 0x2, 0x10}, {0x1, 0x8, &(0x7f0000002880)='\x00', &(0x7f00000028c0)="14406403411bb506d796c632a04d", 0xe, 0x2}, {0x3, 0x1, &(0x7f0000002900)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000002940)="f821381344612b5466d0ec9de8ebd17470fc4eabe61771a50dfc73bac379d05e7c54669aac964e730aa11ec5018d2a59a8c1e06a54cd5fbb1cc3f148d56ab9674584f2b2d504613159d3d2bf31d6", 0x4e, 0x18}]}) ioctl$TUNGETFILTER(r19, 0x801054db, &(0x7f0000002b40)=""/59) sendmsg$sock(r10, &(0x7f0000002dc0)={&(0x7f0000002b80)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="ec8168fcbf9b0a40c7d33a41632ca27c288b5367b434a312e8463b73948d82a0c32ff1f4dc0ca1044cc3f4a1cc3611bcbd9dde7f48e458b4610e38918a451509c4c0c27e3ed1c1885d97b6855ec7f760f33b4170bd42c9507f3e11d66039c1e49f7dd23e662121a18fb4542bb8a9838e8756599afa2b8fee6d0f0d37c6162046b57d5b6e3afe584a8056a9795a308748af737e27a18b112c96525821d23529a88cc1408984975ea34aad9efd", 0xac}], 0x1, &(0x7f0000002d00)=[@timestamping={{0x14, 0x1, 0x25, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0xe3}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9b}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}, 0x30000001) r20 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r20, &(0x7f0000002e00)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000002e40)={0x0, 0x8, 0x30}, 0xc) sendmmsg$inet6(r5, &(0x7f0000005280)=[{{&(0x7f0000002e80)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c, &(0x7f0000004500)=[{&(0x7f0000002ec0)="a56e8ec19c3304db400533d35df60639985a059555af18bf49d38537431feb9db49f24ef2299ea7be4d99f185146047c4f3fbd4ec2725f7f31c74d7b4fc1c1ea4758b526758d78332d48bfb4068eaad87cb897b68f0fca51fc607ae9b4571c6864dc68fdf07c670ed055a09f127f5f85617e1816598782efadccdbdc1bffc0117ab364434f20a08a421bdb06835db8da935ef73793351bfb8a41b0ce8d1df086a228ae037531930047d62764de68763656f3c4c775cf17e65242705e4c95775d057312d055d5a81464fecaba4e2d5460530d7623f981e2f91f44a85239760004ced1", 0xe2}, {&(0x7f0000002fc0)="9b0845592b28c5e849ff18147c19526f22a88ff39ecd9a6ff641e7c5af2b769e9600d6908a98a73b713ff485b756d5fc0fc8915de1c862c551d213da9da6c889f77c4fd006912216c267cff568003327b4233091ed9d5fdacf84d53ed79d540448d0277791ba89bcc07f03b397d7f3374cedb1f411e83d8745f4ccf91d474b0abbc773d58ae7d1424f5147f8524a780a28427d2f170a1efb81b95edeabff6ec0d2e1b376f57b4f5b43a14c22a649b79c70", 0xb1}, {&(0x7f0000003080)="eba79c460de24f3836a9a5d690cbaa89d60c1b188011d0a0f43213f9ddf4ec2d2d262df3054ca1e7d2a1b4fbf17242a3695be2f4046669e1de6d661124fcfffd21acbdb8c17c2e64d9cba7ddc3b250d72ea0ef0b30ef986fc1a072d6a3e7420afdbbcfa25677e5b1e67eca2e00f5a3811dede99492180eb4d6343412f8933e0361122a95221243a7ea6f08b3f9ebe4bc2f288228c9c540d9a656bc7124ea78f2592f118d07f7fb56dba399e340221611aaf497e1268af239e13cf1f1ae36df979279c4147ca22472415873273b282eb728e546338e7e8d26ffb39dfb237b11475bc22bf02dec06e71c416c11f5a32757ce2f5b65fffe099d9bf9c2e01f52127ac471cb111c2de8a4d8ccbe4414a3201e73a0ad2bf0e55e08cfed38b4a0e2c80a04bfc07334e976ad09f1229061ecc541cecd39ad528bae20ffe9fb3c7de0200f7f4677e1b416e01c4621bc86b1ae3e1ad927301b719b0f8c5c115eddf8be3d9187fc2d0cfcb792c01ec515a469a42f1931619937198dced975aef49a45e648e6f17b397e0bef1d81c6a7890abb0cf83dcd1c6058ea8266501d0e688995f20a29658261f928ce93127d8508577a6a43a31a1e185b8c200c776f2d12bc8ccf15b5df44638d230e4fa26557da87f184c669303ab435537128dbc8175483f0cd860f808aaa9806a1592bccc73d9578724c17d87ed9ed58fde26fe74f692034253414f52d0a2be9d53ce03aeffe0ab146caa4344d2e8b9020e07f7bcc030a31c6983207b027f320bddf7c4f1af8f47c14b853f2d50110c47ce1c9f781fc4ad3df1bdc4cedc8ba67b069591f6ea9ce1d3156168acea1ba8300398765fdbe2d7987612ac1756d3dfdc1d3463501e7efa9a248139da214ae1ecc5786f232bef39856d25c3f5f549f84bb74a17a2aa9e50c878ab242d3703ee575d1fbef2cb8ad06ba0a19e98bd422d418e73f1cc5eb2b3ce5c938ca548d91e9c03e55b2f05cac3fbc74415feac16fd371d1f3f6395b13b2305133a2c8d8f6a531c226d6996ad21b2f87287b5ad0d6489718134bd1ca4d6ed489b53803b2745d477aff8289386280f065a546ea0be1e55353bd138133a9424a36de098c0f30b5dc0e1d1d2be1ac4190de5d1df861aa2eb49222d7eff43f33607ec0174de3b572ade3de30ed161c6f8d5b13151dc62efccb63fe0b6492f1eefa36e90ca852c8b9704e0553e14ec82130ab1b8756dfbee76ba411532441d3d19aa5d4ca6fa05e235cc9a2346eb588d171ad4cd25e154998957a617815c220df5e98a129780ca72a32db748a756627c52d9709f8b9b52454c691171dacb3695b44d5e3411aa646bde4a444507aa2e3ea79775134f86189497b815c1ac894c5506ed5a6a2f921dbfca14b47a1ead4a0f9fa1643afdb47e4e6c3b389cd5fa325de136c5544dcb3ba59afe73621b35b604079feef3799fddb42f159f8858ae0b2ccc49380c45f469701f1cbc2eb263dbf7958ff15236c19323f057e7475f7b3d23007fa0e97d12db51c56905b392c73e40cb96fff4bc2e6e957cbd9b0a66d828e8fbba43492ef0b1f2cde3b4b4d7485c716230e2c1616d43c9ef55188f551ec000febd4df68b5e170dec7eb20dd572f739969cdac85f263c01b02d818bd2c62319c8ac49f22d36fdac5795e72e2746096fffa3ae48ef2337358948bfbe2334383581c4322d79a7338258d4df715dbd92df1bd6e9758af57a307902ada45386a4b85328c15f449a78056a102738ed9bb2d1b22cb1506f798a5967042c5714ad0e12884ad5817201a2d59b7bfa2b6860da9e0e82d56e019ff87d341ee04fc0cdf97450ab1c843c52be69c80460be9e1361f6f4105f36a86ce1909d3e4c2fc4639f0efca8ca2defb63bf64012b540ddfc9ce02b830766968a8764c3569db2c047ae1b9966fa802fe374330d2cb5b39ded0037ef461eb1f9ed0f0737f9c4ecc811dc7124d0118b826478a18ad136eb4d6fe2d90ed48f1d8ca600f2571eac20fd19662d3182ae5fa68a8d56effe00905d449d2bff89edabde9026ba6297869d675654e9036e3478de0bbece4a699dfdd30fc64b30437ca78b7585ba3c99fa11b56aeabc896923906f90d7bffd0335f48fac03cbd327f5f730a923f15d0027a8851f99b8bb4c3f58e139fc3d772e4cd3bd872960ebf8da512cc446ef3eacfdc4f69f069eeb5cb6e70875fbc6b77853f7f9fefca10bc5be6c0a54f74621ddd61d37ea6878e45e8a8ec8b61caba541b86add1e732eb060e3b7d26e04982188bf9b4b005a8e26f0d75531c220125346c8b8f8764ba5ab785a741ffd97a3589ca50e619919cc71274264a6535d2e23f4287740a41962012632584d258868f9721886567a82e358afcdfc3067f7c66b5cc24ef82b6a31b431775a7e052ffa147af86768862d88e642d30cac8092e4ae174c5de5b3c7b719f62fa5d621c5ae2352e8e31c9310c4f87e3a080592736228ee97cf94aca48149543172b69b9297dd8e8f08cab2c5dc682d2a233e3e458b97442e5eee9e7f995c69952e8c187f757636ec6017f5ccab351e16540860569fc41e1e4b82897e1265c4c241ec82b664d9652ca78e9ea75fd9dd14f2f6725a51564906c3b8fabc2aa5a5aee9f8430f83bfd1a8cd07db210b6985f255b9753390141ba417fc15ae5900fc6ee8e52a3f543143868976f1eaac40c7fc96c6de676fb7c95b4311d3901decc06deac197e3fa5c6013fceadfb3161acb44121e891bd88bbeb2e682f36abe7660165486b7cccb1d091f92869646f398aeb1a74df2483d16ca3e865468be1ccf0504cce9ab97caee62f4147fb234ec973b71b21a4ec3507f5a3e2642ff7c1fa9779bc6ae0694ca70d51f94e8fad9e613f7a3e80d33f28285ee1eec4d57dec56645d908b364e8b8131de195a5337782f790d2633a3ae6b9df1424bf7fde30fceeb1c5a1c98e1a9339be3fd3b67d35f78b995531d2c432b3680f59ac53925a8a77cfd4559c1a63a7618de19be352a37776e4fe8013e47086b1fcb55654213c0d0443e71f2a0064724d01e0aab702a489a5c7e3676ee0e0f6dc853b707863a2f671ff2406ebbe24893d8dd6932d8a4c746c674f2690ee33993c04cae10b6e0e6376fe83167013114d513b4a0df6dd7181af4db54816a6da1001e5b20808c23bf27be312d1a4e59590c9cbc8902f7e352f440169bb2046d9bbcf06da44c889143602c993ced792b7ccc287e084a0d5e2d4cf6773cc2ea5dcf027431407b0532c8e179b5221fd2d2e06fd8e5587727ad0c50839527589465986df6f7bc7496cfa91792746b8850fd90a0cc7f731429093397b28b9db344cf04381d18dc4805b0e8f5bcd1c1bdd755c1041f708146f296eb2a7a1f30283e1a60afb8fdcc02a62ec0fd10c037aa88359f6bd9e6ccd5c10dc612b2a97ef7f80a038806b4d732425151a5e7819cffa1545ca5bf93cca1f2fb37cd386e21a79361f8ac244519f9de9b4f21a1b514779a071f36ae4d1d2cc2c6977e969544c9bb3b3356905534613a526828e0e369a62560b1b53986f2909f37e8cba7879e9b00c454d6a250eea63bf9c11ffa1ec3b430431262bd2f3b5247b9f2ef146eba247f37b337b857e63780b845934d5bbfa83eb60fa0936d59aae0746c53cd9329014455a44c13c04b9f020979fca0d064c21211137e9d373eb798e5981dcfad95107585058643aee4a20cea03cb116ef57d1c9177118a17676cf5a3122870fb5194fcff7e20e50e3556c4dfed50880aaa6677c99b918dd2571f3a1e5e3a0b36f3db58f4d390ae24dec9b8d1dcb22f0cc516d9a13e9f6c04ef3e06a2ca0b3b3a9ec843cc8bdc9b5a5905c69ba3b4ca7ec8e34eced7108a3e034e241512bd718ab753bfa2723e0104b360408397dbbc0887e5d0026003759a00a48c82edc5a6175957b535ce7a09f18e79cacf9e08bde7f55a7d48572db30b83c64b033f8894ec88d29869d7d3af6c3ff1322df062d846d5bb56940dc7eb5936530f99d23a6ea2dd2a16e0b72dfcb4eee6ce9f9b2a85faad785a9e6241099dc2438355fdba133b82692fadcd04ec4183c649db45c4b60b9b0f3cf1522d044cf9f2013937fa434e31e0dbec93eb42ca926c9ebd858bdd921a2467dd6f56053e855d04d02f70e6af633fcc0f3691884947edefe435f0af77bf44d9e9949f10213907d3ec688e3dccc00ae6ddd95cb7484cf5efef9886dcfcf7751e05d0ab4d1ca04c9cb2c51ed3faa706fdae7d900e5740a97de413227ea93540895e0d4c25cdd9746e079549853b0080efd38b67b84ccd43f5de27d4464316fbac11db8e0dd5928074019cd777df8f89bb76f57c72cd0561619a25e13da86422d9b7a08621cc9902b8caab87f71c1090f789ea9d1c1fba70a677c1b31dd848028bc796f0b4ee448d1db66a43b22395ad3caf740591f744fe3c4475f8d8d7f0b2ad410f8b342893cb7f3bcb5a3371301b46ef280b84ea847aaa46cd855503f66f96ea8d26589c7573e10b11531e07945e7a0c2a821751dd88667dcdd0404b717551df8ed3c9c600dfd38701049e448735c9de6fd84ef5c445f2d7b879fd3349dc9b5dee63731fb44199011708812e91f4759d25b6b98373642b89024e287e611ecf99400a6265777bc7dc1f1f5971848d345cefbb71049792454ab9c4564a51d9212e73f76ba88bd4e6bfe9620fe50c5ac838ed76e967db591b18b566553fc3de57928680ba751c29777457966cf4fb23c44cf6a28ad42dd98550a568907f02e193578d60381dc447f3933c68ca7730fe375a419fe242680f5cbcbe282aa87d13f694dc281015be8f017ccd09e560a9881c8515bef8741ac6f8709ea3a0082c86af53b71464bb3e93137d803c27322e0d504d1789db468243127d35964dcb7feffcdc4d331fda9460de6437e00cc2b4a0231fe47b154d8c4aba184cb8103953c3271b0c732547e7c57f2ad1fcc82f1324c92e49302e068b53ff1f8cf59a9c52f8d1e4f42bf53fe077355bf9e9fd8cbd2d2e062bc854a953665ffdccce9619b55e76c8fbffddaa0b6b7faed9f690165538b6fb8a2a3fb79e7ac37e46c65f075b2a5f98e33b938ab4770be1368961fd45c18dd52395d7fb1e990e8a96d640a1348482d1981b6f64489be01b992ba391fff1b51ebe45ac0560b9261b6783abe172dd0f13e94f7574c3dd11f8933508ba313989eb104ef51576202a275d0bb14982823fbc0b378b9176d390a4f795c0b19924109af1d4341f2ce40bd4319d157035bad5e63ecb771fd4a0f97dc0e8bae379bc9e70e1df2b63d9d0a5535c10b7fc7561e232aa18a3a8180c8586737f2940549ab34f27905ea9c1920c4caf27ffbf9fa90f5655a2cda3796d5e1072abfd2efacc05fb660b7cd3c846f5022b3a346f010f0dbddaf48e548826ed61026b131e4e7f3de6a14af4a1f0fe423727d72adaf3f095a55ffd4af3f9377cdb86c8f4f0fbd0c8854f9dbe07efdf000e2f5f07c21b155acde085fa4e76e6752daaf047c52f69e0718d091f07f68ee599dff076f56a212028152aed37d94679107e7768b73c3a16fd89d2b750cddff5c65fe874cb9889cb106ccbc4113eee9482becaffad6d47cf355f960bb96afc23360d8814c2922d7b9dfa29f1f8661f77483cfb15456e6d141685200ee02f315cb8a5eb9037f76f507b98f2f4e9f3db4d735c4171608492e7f8f1a38dbe6f117c232a138856c704ee6b648b4c9d3dd50f8c88d75a2ecceff726df30e94fe78bea93a7c0767d1ef7a9522f86e61133a6aa2de337fde810242ef238ef421b9e433f3a1a13a467e2", 0x1000}, {&(0x7f0000004080)="5ac691dc6770281433f0063dffbc1eded68e04d646f85609d1206447e9cdb4bcb044dd9e7e243af9f72debc5f04a1b8695342f4eb4d6e442fc4109fd23a632dc716ab42b72753cbf8f", 0x49}, {&(0x7f0000004100)="2d211caa5355e28bb29dc4c0d6dd7ec3e29bd3fa381c5c6bc7d9c12c50c0e6ba8d265fefa543c6e2ab4d792b58fe6c3431ef186851cefa54544a17bd61b01914b4474b3ae3a72f51b28d3bdfcbe8dd88237e80fd66fb95d1bd4029f0eeaea5c270815b61c98e086b091d02aa7e0e8af3e3c44ff22f7d340491ffb574b9eac5227ad89fdf3f98aa798149aa402a9d488fe8a1d535f25750bdf0e008aa7c61a4f039bc688b325aeabfe2d9f9073d9b33734af357d90adc985b2724c9b2b94354f90195c5c2dab970536e73bc", 0xcb}, {&(0x7f0000004200)="afa5e70e137381a3327d43a408c9b4ce4f5f13eec91bc82d17a5e5742765342b9cedd4fd07f57b2489b874a237e6ae0f5f587d", 0x33}, {&(0x7f0000004240)="27660ca529b5ad6496b94bf9bbc3c77ca89d48dbc32f794a88cbce7a93ab212297f6244c4ac8e7f18b578202cfe8f33f74a0923dc9207a231ba0c39b9e1261a57271d6f1e23ae4f7add7a58435d46f6165d1df09972c9db95733a019c2397b0ad01d4b63b0b30788d9637a3e4c3c91c72c8d9f47599e9fc0757ebcf73ab3faae893b369f00b536c2fdcdad574ff6759a0930911199f991e73c3fe3b7fdfcb85b5600377fee4d99ae960d999b608937007d2644dd9a2f4d5648aefcb80531eb497c989b076ca448f3c6429a1bfef0002a4d2756", 0xd3}, {&(0x7f0000004340)="0045b096617b94de35f2a46af319092d38b0892b4c6d56bd41f8a2af3f4b4b8fa10a9d3114ad1203ef40e5bd3f28fbb3dc51fa537641ce19aae69ab942741552c9e1549cf74ab6d9a29d0aad738fd31a384a6bed12b7474867d2677594a27085c2df1e771c724cea6e8873a4ee4613ad637664259de741d0efd210269c", 0x7d}, {&(0x7f00000043c0)="f97467b4a2d3a6517fc2b6475d92a75cec7496d5f682b59633b3272d8813", 0x1e}, {&(0x7f0000004400)="5749bf1d0764ab2b370bf3704a94d3c9f7bfe1b3ede7531b4b7d838f8bea1772977316e2629e9b3159413981439ed4d95dcf19c707357efa1e57ebd2f5c0183d875d3cd00a1cbceb018e86924efa9ddacb65d3a2df7c54241bc6b09c2c07221902de8b6414f49dd040c3f8a0d8f7d3be2ae3f826491d6a14274af527e4fa12d8b5112d1b852abe4873538c6e22254597dfa5d1a45ea069ddfa1d7e18674dc56596954e4c78d793db859f0a0db0e8d22a05150342de59c94d23403d2ab734dce3ed19bb4c26a6116330ff7e1a791797eaf60abb64f17054e0e9acfc5c62e94b", 0xdf}], 0xa, &(0x7f00000045c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x67, 0x21, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xff, 0x10, [0x5, 0x4f08, 0x9, 0x0, 0xc5a0, 0x2d0]}}, @generic={0xd, 0xce, "0f1f6f199a17370efc962a204219703c8d30916f328a40b088ca3ca34e82a8c7a116ead77b1c47ae84188f2ecdecec9a5d4f4921cbdd937602ad56fc509ce13de516d08ce2b40b6938d970540939d189bafa6ac6af2346d5c66a288274163193c06fc2abc97b0f62bfc69a98690951729cdf8da189aa908bb35993b885840b96b92bd92f694b68d8bd29acf6b8362ee817db9b767fd7bd8ebcf28d335633e56d8c6d186529a3e3e70a05df3fca6609b9a288281f6877f46095c6a7ec245816c69d8e64fc054b34f3b53dd07b90e1"}, @pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1f}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x198}}, {{&(0x7f0000004780)={0xa, 0x4e22, 0x6f, @mcast1, 0x3}, 0x1c, &(0x7f0000004d40)=[{&(0x7f00000047c0)="b4599cdc91bf4276d4", 0x9}, {&(0x7f0000004800)="69b7d1b2de87b2e9755db1240688f2e7207463aff8c5b68bf4881eead507dedfc873e68f0bff7962bfb6911c30fc0fb231aec27f31e5873ab454d5582cb2ef81", 0x40}, {&(0x7f0000004840)="7913f298a80dabe6891432cde4a141f41d56fa77342f6f1b1eab92b5e538fa634e4c2ce664a62c3d02b3308106feb4a7790a2fe58da7259897b73e445ee9381881224cceaf09ed13fad3c2c09c41d2b606e7b5175146be229e9a34eb54612c5a5e924e61efaca0984859cc7e09e1d25bb244bf53711e7c5d32dcb174dddf10785548dd2b79b344cd0bdb6f04562d855c4a16008bc2d31ee884ceaf79c2a935c5a89f5bb8058243940d3d47bcaf62b7478d5aa229ce8f7ce00b1f8851b38cc5075326", 0xc2}, {&(0x7f0000004940)="f114507029816f84ad37e031b100a774091cd2f189561220beda400dfa719992af58f3cdb697f4ce37b213be2d3c39e471b69b299fad4e10fb2a3b7ed3a6584d08c3744471c7c926904cd3ed9a550b08e59adc78f947bd0e952a0c31c0a47d20fcd18605f526affc94bc12f37c1a19d2ff047b87237e0d147d0162fd765accc7ca8c3b68249af24fc7211288d52c85a038c3e77ec183e5077207", 0x9a}, {&(0x7f0000004a00)="5ccc49e4072de54963b0fab620f2f5f6fc57b362498025eae3760e94942bee6bca445f07d7a8366246fddcb59d3a244b00135a61ca1f69825a46c2e5ea77ea7e6d3470305f8b00eaf7525daab33ba5e769c2c2be24cbbc2da6beb110f77eee797efa3f942d0a450725d385a64203d7cfb7623961e7eb7d9527e6a7bdb810b50440f7e26f752f3544a6", 0x89}, {&(0x7f0000004ac0)="66fa814ce85cf131b2dad698f5a4cb2c18105984128021b3f712a55f0a6c6f011634f0d86f83e90d4b3a48565e0832de61ffb1744c3f816696bfe300ec2fde83f9d904f6772f72a91abb5c0dd406776f7b4b1ef2f57cd9889121ac8433313ec33f8193e3fd94801ba0e4681a131c428c8a9b257a6ed4934c1e4dfcb08f688748672593da0191fbb80025d977fe49e8f51a6f3e22dc61fedf9f4b33556ce975c33b0d361d5057eb849f6f5f74a6a4e614cd1e5c711aaf", 0xb6}, {&(0x7f0000004b80)="c5f22b42f788949bf15fa096be7a2e52fd2635d64bb3890411cdf349596e63566d2589abaf9f836baac2aecdf019bbf25fe7f67b02b2961e974bb4fb30157d2ff2c6ec9a7d142c1a0226b68f03ca0157f9fde5be68971a7c0f9adc04eede35c5c0171d55a4078374a56bfbade0109d9303312db0bd", 0x75}, {&(0x7f0000004c00)="6a5a70f80974fd5e", 0x8}, {&(0x7f0000004c40)="c6e2b669be92b1b21bc1489e39874839120cedb8c306d4768f0adfcb9ce872f301a33e2a8339795a2cdaee8f23bac059d2432d69ffbe543a3b4b9d448fe45630e43aac8f5f77357b8677b92e289646436d9efdb25498e53758218dcc3e051aff27fbdea4080deb593baf60025a276fb26381677725398391ea182278c00893f967f66c082756f488f6bae7df2ff38676114a6990d17a7abb6cdfa3815b384789e6d002d47bf908ca4bfcbbb7e37c570800b94433af59158cf32cf7f06429c12ef458b750d043e24bc855", 0xca}], 0x9, &(0x7f0000004e00)=[@rthdr={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0xf, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts={{0x70, 0x29, 0x37, {0x89, 0xa, '\x00', [@generic={0x5, 0x52, "bcd2813b91a573816797cccf573bdcbe8bda4d8de5a1c91acac64144439def96c4be2459e87ed83bb53816180d8e10ec82ba07dd50ed0c9733724b21f68c598f5d67cbcba8889a12ef069f6b59f02600e1d6"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1e}, r16}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x33, 0x12, 0xc89bdad1c0afa703, 0x0, 0x0, [@local, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0x58, 0x29, 0x39, {0x2f, 0x8, 0x1, 0xf9, 0x0, [@local, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x1, 0x0, 0x0, [@empty, @mcast2, @loopback, @local]}}}], 0x2b8}}, {{&(0x7f00000050c0)={0xa, 0x4e22, 0x400000, @loopback, 0x9857}, 0x1c, &(0x7f00000051c0)=[{&(0x7f0000005100)="2a27f5740088b8cb538a57c0123f634c2157abb0b70151bc90d60c9f4f43fda6d76b6bebeb21e8d3f7ca87bf764daef8608fce3221b7a4e3a20198ee80d6a040c2084303a516d83645a9406004e5fd60cf1f6746966790fb8e149244c9ee926a802dbbc4a45bace4617ee6100b43654df457cdc3afc3a7b35807e1c238e16fd8c858d917b82f9d736f11b3dc4be7699b9cad9dda35d7a8c134d741b173ce2a2f", 0xa0}], 0x1, &(0x7f0000005200)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r16}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts={{0x30, 0x29, 0x36, {0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}], 0x70}}], 0x3, 0x20000044) 3.134326511s ago: executing program 6 (id=5040): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00009900000000000000000000000000000000000000000000000000fe84eb6b2cc1f3689ad34adfb7aaf2c06586998c1eaa022a18e34ed2569366ac5cd54e0072ddf9fdd8d7d5ba5962ab66a081fbd595934c87d993b9778d183812e016fa4803e69902a6900257ee018ee0ec8e3bc52afe004a55881e1a1ebb5e754b2f2721ed2d09f4464812ef7f52fbd6587cf2dea11f4481689f2e1bedea8b0c61357fc8da6963fa23e9b701bb5f4acd9d166caa756eabff252a0c"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00005b82b00000000000d77bc0fb00"/28], 0x50) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async, rerun: 32) r5 = socket$inet(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b0000000500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r6, 0x0, 0xa0028000}, 0x86) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000180)={0xffffffffffffffff}) (async, rerun: 32) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYBLOB="82bec1c4bb831ca419534b3c758cdae7e0cc7d86b0ea227a7d0a84c7dea85fe69e16c74eaf1d9b65bc8097bc04442b4283541dbd4adbf6d14cfec86bd4b5108e11c754ec0e1a075a94", @ANYBLOB="010000000300"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x9, 0x6, 0x8840, 0x1, 0x1, '\x00', r7, r11, 0x4, 0x2, 0x3, 0x8, @value=r12}, 0x50) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r13) (async) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r14, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}) (async) ioctl$TUNGETVNETLE(r13, 0x40107446, &(0x7f0000000180)) 3.05923159s ago: executing program 0 (id=5041): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmmsg$alg(r0, &(0x7f0000005000)=[{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000023c0)="512c0a8d", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x10010}], 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket(0x2, 0x80805, 0x0) close(r3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001}, &(0x7f0000000280)=0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$tun(r1, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) 2.977814393s ago: executing program 7 (id=5042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r3, 0x1, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x20040015}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) socket$key(0xf, 0x3, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 2.824189321s ago: executing program 1 (id=5043): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@private0={0xfc, 0x0, '\x00', 0xff}, 0x8000000, 0x0, 0xff, 0x1, 0x801, 0x8}, 0x20) 2.748912997s ago: executing program 5 (id=5044): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)=ANY=[@ANYBLOB="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"], 0x2018}}, 0x4008010) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{0x0, 0xdd12}], 0x1}, 0x200488d4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffe1d, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x672}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x9]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x6, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$mptcp(0x0, r1) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r10, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029"], 0x30}, 0x4004000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000043002001fefffffffcdbdf25027c0000c3000000028517eb387a1ae9ab49bb6ec79059c8cba1da536c70c93b341a44f2e3becb9da045cf22b85af9015b2b"], 0x18}}, 0x20048000) 2.60263514s ago: executing program 5 (id=5045): socketpair(0x1, 0x20000000000001, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) (async) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f00000007c0)) (async) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f00000007c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x17, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x17, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e0001002dbd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="00000800ff01000000000000"], 0x24}}, 0x20000000) sendto$inet(r10, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) (async) sendto$inet(r10, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000140)=0x785) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 2.555099562s ago: executing program 1 (id=5046): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="2b67f1404bf035cd077ce54af41c0737a4d2895e7ae180a9d373273d291088d171f9439677b57c3bc39a0fa2ffdb5bcf4db7998ee0ff01000000000000c9a160822dacf2", 0x44}], 0x1, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x38, 0x2000c080}, 0x2c0408d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c00028008000440000000054000000014080006400000000608000240000000020900020073797a3200000000140000001100010010000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xf5, "9145580d3bfeffb0c4e5149f3d830a5921b48a241243106daea1a4d8faa73c23e7b5f0236ed22d04a8e497d13fba461f1e5f093b2b686253e696cb11546b5fe76ff2674ab18b8091095003cfa58b775a067d0bc1fd8b72f10c4a84848d202b2565d5ae6a33e2885141534c54ee9d1baf555aafc458512f0aa3eb61d009246b787d033f8d2428f62ca9616c12301fc2c1e6e24a7cbb6b82dcf7dbec8ff004b1c92293f6f80506a3667c81d9ba3183790e18d4a2b4d790d71340bbebc4e4a8314f145b074db5dba7058ed5538803139aa1bbbc5e89b507baec9ee3e82c2d3feee43bcf35768c04645548352dfbbc1775900b8345c682"}, &(0x7f0000000340)=0xfd) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r2, 0x3ff, 0x8}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={r2, 0x7fff}, &(0x7f0000000600)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r8], 0x18}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4, @ANYBLOB="0c000b0003000060020000c0"], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x30004016) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r2, 0x10001}, &(0x7f0000000440)=0x8) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00014000000000000000000c0002400003680800044000000001140000001000010000000000000000000384000a"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRESDEC=r9, @ANYRES64=r4, @ANYBLOB="69da6e44434e7089c4411d462f6cb944747e131b7a1681c431d9aac20e7ab268e169ed822118496e177bdbbe9ca06337bda0d486046ecec35ee61e81ed98da4ea449ea7d54fb9d90f5ad0bcfb6860414630410df2ca9e32bd743986d371621461b5f6c025b12276ce45c105221906e86cafe153824b36bbca3b88767319d6de4f618eb00f6ecaa959eb884a198957b33b83f31ca910fe2d94f8b2395f7295f68b07f9aa5344af51ebc440ececeb85b50ea95b306c6f21dceca97720b3dfdd2aed10af73fffd8ca693a", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x1) 1.073048367s ago: executing program 7 (id=5047): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000300)='syztnl1\x00', 0x1a1000, &(0x7f0000000380)={@align=0x7, {0x1, 0x7, 0x4, 0xfffffffffffffffe}}, 0x9, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xb}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r4, r5, 0x25, 0x1a, @val=@tracing={r6, 0x8001}}, 0x20) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r8, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x8000, 0xbe9f, 0x1000, r9}, &(0x7f0000000200)=0x10) 988.073306ms ago: executing program 1 (id=5048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2402}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x1}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x2f, 0x8, 0x6, 0x0, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x5, 0x5}}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@delqdisc={0x7c, 0x25, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0x8}, {0xfff1, 0xfff1}, {0x1, 0x1ffcd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x5, 0x7ff, 0x0, 0x0, 0x4, 0x4}}, {0xc, 0x2, [0x0, 0x9, 0x1, 0x7]}}, {{0x1c, 0x1, {0xc, 0xfd, 0x8cfc, 0x6, 0x1, 0x8005, 0x7, 0x2}}, {0x8, 0x2, [0x5e, 0x8]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20004883) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x40, 0x29, 0xa, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffff, 0xa}, {0x8, 0x6}, {0xfff2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x40}}, 0x2001) 927.291951ms ago: executing program 0 (id=5049): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$inet(0x2, 0x80000, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES32=r6, @ANYBLOB="0176140642d15f33191767d6c431b5776ca40767eef713bd68fb81a8ee6511747cf22a35c0ad1b1b7b6a106052294e0000040000009f9b874c76bb2f4ab640ff03000000000000d9af7fbad1ffe8ca29d12d99a52a31505108fa984d83cc2ac55af8c9643f067987aa3d7c710a6636"], 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001900)={r7, 0xffffffffffffffff, 0x19, 0x0, @val=@tcx}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={@private1, @empty, 0x1c, 0xb}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r9, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xe) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x3, 0x0) accept4(r7, &(0x7f00000005c0)=@phonet, &(0x7f0000000640)=0x80, 0x80800) socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11) 843.134562ms ago: executing program 5 (id=5050): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r4}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x2, 0x204, 0xe, 0xb8, 0xf, 0x7, 0x80000000, r4}, &(0x7f0000000300)=0x20) 780.125132ms ago: executing program 6 (id=5051): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="750a00000000000061111400000000001800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8}, 0x94) 618.370443ms ago: executing program 6 (id=5052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000700)={0x0, 0x0, 0x1, [0x5, 0x6, 0x7f, 0x8000000000000000, 0xfd2], [0x4, 0x6, 0x9, 0x1, 0xffffffff, 0x8, 0xb0f3, 0x2, 0x238b, 0x4, 0x401, 0x6, 0x9, 0x5, 0x3, 0x7, 0x9fd4, 0x4, 0xa04b, 0xb3ee, 0x6, 0x10000, 0x8, 0x1, 0xfffffffffffffffe, 0xe, 0x717b, 0x3, 0x7, 0x10, 0x3, 0x10001, 0x5, 0x3, 0x1, 0x3, 0xd2d, 0x70, 0x6, 0x7b, 0x7, 0x2, 0x6, 0x3ff, 0x2, 0xd, 0x3d, 0xff, 0x8000000000000001, 0x8001, 0x1, 0x4, 0x9, 0x8, 0xd9bc, 0x1, 0x1, 0x2, 0x5909, 0xc00, 0x7, 0xc738, 0x8, 0x6, 0x2, 0xb8, 0x1, 0xb, 0x1e84800000, 0x6, 0x200, 0x8, 0x6, 0x7, 0x1, 0x7, 0x5, 0x5, 0x2, 0x7fffffff, 0x6, 0x0, 0x1, 0x8, 0x7, 0x3cea, 0x3, 0xfff, 0xc, 0x5, 0x1ff, 0xf, 0x1, 0x589, 0x1, 0x7, 0x8, 0xe8, 0x1, 0x7, 0x2da32bdb, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffaf1, 0x6, 0x9, 0x400, 0x7, 0x8, 0xfffffffffffffff8, 0x0, 0x7, 0x3bc506fb, 0x6, 0x101, 0x0, 0x6, 0x5, 0x2000000000000, 0x7f]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b40)={0x12, 0x7, {0x9, @usage=0x1ff, 0x0, 0x8, 0xc, 0x5, 0x8, 0xfffffffffffffffb, 0x408, @usage=0x5373, 0x9, 0x7fffffff, [0x8, 0x4, 0x10000, 0x1, 0x1, 0x2]}, {0x5, @usage, 0x0, 0x10000, 0x200, 0x8001, 0x9, 0x86, 0x4c2, @struct={0x1ff, 0x79}, 0x7, 0x9, [0x0, 0x1, 0x1, 0x101, 0x6, 0x4]}, {0xb0, @usage, 0x0, 0x0, 0x7, 0x727, 0x6, 0x5, 0x40, @usage=0x8, 0xffffff7f, 0x6, [0x3, 0x100000000, 0xdd, 0x7fff, 0x1, 0x1000]}, {0x505, 0xff, 0x1}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000f40)={0x0, 0x9, 0xf}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001340)={0x0, 0x2, {0xfffffffffffffffe, @struct={0x100, 0xff}, r2, 0x4, 0x4, 0xfffffffffffffffb, 0x4, 0x6, 0x80, @usage=0x7, 0x3, 0xd, [0x7ff, 0x227, 0x6b, 0xd, 0x2, 0xfffffffffffffff9]}, {0x1, @struct={0xf8, 0x3}, r3, 0x1, 0x3, 0x0, 0x4, 0x4, 0x10, @struct={0x8, 0x7fff}, 0x3, 0x6, [0xe, 0x0, 0x9, 0x8000, 0x10, 0xe5]}, {0x101, @usage, r4, 0x200, 0x2, 0x7, 0x1, 0x4, 0x0, @struct={0x4, 0x5a1}, 0x40, 0x80000000, [0x7, 0x0, 0x100000001, 0xffffffffffff0001, 0x1, 0x1]}, {0x6, 0x1ff, 0x8}}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x1, 0xfffffffe}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000000000000000004"], 0x25) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x40400c0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701000009000000b702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x24, '\x00', r9}, 0x94) 457.445491ms ago: executing program 7 (id=5053): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r5], 0x28}, 0x4044804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x1780) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001200010127bd700008000000060000000800e880040043800000000000000000"], 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0xfffffffb, 0x4) 188.461427ms ago: executing program 0 (id=5054): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000007800000008000000800000000000000f68b18c281d8e93a978a18888dfc788eb8abf33e8a039dfdee55acd5c79dc999f67233f402d6392336ee5c041403338a", @ANYRES32, @ANYBLOB="0200008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9e0000001000000100000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001280000001006d6163766c616e0000000280000004ffffffffffff0000000002000100000000000580000004000180c2000001000000000400aaaaaaaaaaaa0000000004000180c200000e000000"], 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r2, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x1}, 0x880) r4 = socket(0x10, 0x80000, 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000880) 123.257228ms ago: executing program 1 (id=5055): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0xf, 0x5}, {0xd, 0x2}]}]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x1, 0x410}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="000008891f29d4aa0000", @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a0018000303030303030000080026006c09000008002201cd000000"], 0x38}}, 0x0) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r5, 0x1, 0x7, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0x40}}], 0x18}, 0x8dff) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088c0}], 0x1, 0x4c800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 6 (id=5056): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@private0={0xfc, 0x0, '\x00', 0xff}, 0x8000000, 0x0, 0xff, 0x1, 0x801, 0x8}, 0x20) kernel console output (not intermixed with test programs): s an invalid length. [ 659.315951][T23372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4130'. [ 659.454128][T23375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4131'. [ 659.610032][T23388] FAULT_INJECTION: forcing a failure. [ 659.610032][T23388] name failslab, interval 1, probability 0, space 0, times 0 [ 659.610069][T23388] CPU: 0 UID: 0 PID: 23388 Comm: syz.0.4134 Not tainted syzkaller #0 PREEMPT(full) [ 659.610094][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.610108][T23388] Call Trace: [ 659.610118][T23388] [ 659.610130][T23388] dump_stack_lvl+0xe8/0x150 [ 659.610169][T23388] should_fail_ex+0x410/0x560 [ 659.610202][T23388] should_failslab+0xa8/0x100 [ 659.610234][T23388] __kmalloc_noprof+0xfe/0x720 [ 659.610256][T23388] ? sk_prot_alloc+0x57/0x210 [ 659.610286][T23388] ? security_sk_alloc+0x52/0x360 [ 659.610320][T23388] ? security_sk_alloc+0x52/0x360 [ 659.610356][T23388] ? kmem_cache_alloc_noprof+0x156/0x600 [ 659.610396][T23388] security_sk_alloc+0x52/0x360 [ 659.610440][T23388] sk_prot_alloc+0x101/0x210 [ 659.610475][T23388] sk_alloc+0x3a/0x390 [ 659.610509][T23388] inet6_create+0x81a/0x1270 [ 659.610534][T23388] ? inet6_create+0x80/0x1270 [ 659.610564][T23388] __sock_create+0x4b3/0x9d0 [ 659.610600][T23388] udp_sock_create6+0xd2/0x650 [ 659.610633][T23388] ? __pfx_udp_sock_create6+0x10/0x10 [ 659.610666][T23388] ? rxrpc_lookup_local+0xc84/0x15d0 [ 659.610700][T23388] rxrpc_lookup_local+0xcfa/0x15d0 [ 659.610739][T23388] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 659.610780][T23388] ? rxrpc_sendmsg+0x11e/0x6b0 [ 659.610817][T23388] ? __local_bh_enable_ip+0xd6/0x140 [ 659.610854][T23388] rxrpc_sendmsg+0x34b/0x6b0 [ 659.610887][T23388] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 659.610911][T23388] sock_sendmsg_nosec+0x13a/0x180 [ 659.610940][T23388] ____sys_sendmsg+0x54e/0x850 [ 659.610979][T23388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.611023][T23388] ? import_iovec+0x73/0xa0 [ 659.611057][T23388] ___sys_sendmsg+0x2a5/0x360 [ 659.611089][T23388] ? __lock_acquire+0x747/0x2de0 [ 659.611118][T23388] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.611191][T23388] ? __fget_files+0x2a/0x420 [ 659.611223][T23388] ? __fget_files+0x3a2/0x420 [ 659.611268][T23388] __x64_sys_sendmsg+0x1b1/0x290 [ 659.611305][T23388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 659.611362][T23388] do_syscall_64+0x166/0x520 [ 659.611393][T23388] ? trace_irq_disable+0x3b/0x140 [ 659.611416][T23388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.611440][T23388] ? clear_bhb_loop+0x70/0xc0 [ 659.611470][T23388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.611494][T23388] RIP: 0033:0x7fde47b9e159 [ 659.611516][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.611536][T23388] RSP: 002b:00007fde48ac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.611562][T23388] RAX: ffffffffffffffda RBX: 00007fde47e25fa0 RCX: 00007fde47b9e159 [ 659.611579][T23388] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000003 [ 659.611594][T23388] RBP: 00007fde48ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 659.611609][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.611624][T23388] R13: 00007fde47e26038 R14: 00007fde47e25fa0 R15: 00007ffef2c2a1b8 [ 659.611662][T23388] [ 660.315814][T23356] lo speed is unknown, defaulting to 1000 [ 660.344620][T23356] wg2 speed is unknown, defaulting to 1000 [ 660.378721][T23409] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4138'. [ 660.415210][T23405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4139'. [ 661.033622][T21214] Bluetooth: hci2: command tx timeout [ 662.324648][T21214] Bluetooth: hci3: command 0x0406 tx timeout [ 663.112304][T21214] Bluetooth: hci2: command tx timeout [ 663.670157][T23423] ip6gre1: entered promiscuous mode [ 663.670184][T23423] ip6gre1: entered allmulticast mode [ 663.692748][T12589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.692979][T12589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.723289][ T6686] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.874243][ T6686] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.948896][T23434] __nla_validate_parse: 2 callbacks suppressed [ 663.948918][T23434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4144'. [ 663.948937][T23434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4144'. [ 664.079042][T23449] net_ratelimit: 8 callbacks suppressed [ 664.079065][T23449] openvswitch: netlink: Message has 103 unknown bytes. [ 664.103799][ T6686] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.499649][T23356] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.499850][T23356] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.499986][T23356] bridge_slave_0: entered allmulticast mode [ 664.526177][T23356] bridge_slave_0: entered promiscuous mode [ 664.539424][T23356] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.539644][T23356] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.539783][T23356] bridge_slave_1: entered allmulticast mode [ 664.565561][T23356] bridge_slave_1: entered promiscuous mode [ 664.613746][T23356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.617630][T23356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.674707][T23356] team0: Port device team_slave_0 added [ 664.678098][T23356] team0: Port device team_slave_1 added [ 664.733986][T23356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.734006][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.734036][T23356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.736669][T23356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.736686][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.736715][T23356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.883438][T23356] hsr_slave_0: entered promiscuous mode [ 664.884677][T23356] hsr_slave_1: entered promiscuous mode [ 665.192304][ T5632] Bluetooth: hci2: command tx timeout [ 665.717041][T23356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 665.744302][T23356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.746953][T23356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 665.774564][T23356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.776937][T23356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 665.799700][T23356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.821887][T23356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 665.847512][T23356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.848081][T23487] netlink: 'syz.0.4156': attribute type 12 has an invalid length. [ 665.906907][T23487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.172538][T23356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.208440][T23356] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.225054][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.225154][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.247592][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.247703][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.556005][T23510] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4160'. [ 666.602325][T23513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4162'. [ 666.944451][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 666.999328][T23528] syzkaller1: entered promiscuous mode [ 666.999357][T23528] syzkaller1: entered allmulticast mode [ 667.110032][T23528] syzkaller1: left promiscuous mode [ 667.110057][T23528] syzkaller1: left allmulticast mode [ 667.281026][ T5632] Bluetooth: hci2: command tx timeout [ 667.648350][T23356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.832343][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.955899][T23549] netlink: 'syz.4.4169': attribute type 1 has an invalid length. [ 667.981907][T23547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4168'. [ 668.005970][T23550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4169'. [ 668.076383][T23549] bond4: entered promiscuous mode [ 668.104176][T23549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 668.129512][T23553] tipc: Enabling of bearer rejected, failed to enable media [ 668.699968][T12606] IPVS: starting estimator thread 0... [ 668.711489][T23573] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 668.760108][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4173'. [ 668.782355][T23574] IPVS: using max 25 ests per chain, 60000 per kthread [ 668.855794][T23356] veth0_vlan: entered promiscuous mode [ 668.905082][T23356] veth1_vlan: entered promiscuous mode [ 669.063245][T23356] veth0_macvtap: entered promiscuous mode [ 669.088318][T23356] veth1_macvtap: entered promiscuous mode [ 669.141095][T23356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.162536][T23356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.198519][T12603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.198613][T12603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.198695][T12603] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.305532][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.389420][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4178'. [ 669.490922][T23587] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 669.661641][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.661666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.835928][T23592] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.4180'. [ 669.835955][T23592] netlink: 'syz.3.4180': attribute type 2 has an invalid length. [ 669.873601][T12603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.873624][T12603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.038302][T23594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4181'. [ 670.038329][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4181'. [ 670.626980][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 670.944523][T23635] xt_connbytes: Forcing CT accounting to be enabled [ 670.944599][T23635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.975608][T23635] netlink: 'syz.0.4193': attribute type 7 has an invalid length. [ 670.991550][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4194'. [ 670.991581][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 670.991752][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4194'. [ 670.991800][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 670.991945][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4194'. [ 670.991965][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.010534][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4194'. [ 671.010603][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.064402][T23637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4194'. [ 671.064432][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.064622][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.064819][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.064964][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.065106][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.066401][T23637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.701631][T23632] bridge0: port 3(syz_tun) entered blocking state [ 671.701733][T23632] bridge0: port 3(syz_tun) entered disabled state [ 671.701881][T23632] syz_tun: entered allmulticast mode [ 671.766688][T23632] syz_tun: entered promiscuous mode [ 671.768027][T23632] bridge0: port 3(syz_tun) entered blocking state [ 671.768136][T23632] bridge0: port 3(syz_tun) entered forwarding state [ 671.798185][T23655] bridge0: port 4(ip6gretap0) entered blocking state [ 671.798266][T23655] bridge0: port 4(ip6gretap0) entered disabled state [ 671.798383][T23655] ip6gretap0: entered allmulticast mode [ 671.818780][T23655] ip6gretap0: entered promiscuous mode [ 671.824483][T23655] bridge0: port 4(ip6gretap0) entered blocking state [ 671.824759][T23655] bridge0: port 4(ip6gretap0) entered forwarding state [ 672.364917][T23659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.457496][T23671] syzkaller1: entered promiscuous mode [ 672.457523][T23671] syzkaller1: entered allmulticast mode [ 673.115107][T23702] netlink: 'syz.0.4203': attribute type 1 has an invalid length. [ 673.328248][T23706] FAULT_INJECTION: forcing a failure. [ 673.328248][T23706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.328299][T23706] CPU: 1 UID: 0 PID: 23706 Comm: syz.1.4204 Not tainted syzkaller #0 PREEMPT(full) [ 673.328328][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.328342][T23706] Call Trace: [ 673.328351][T23706] [ 673.328362][T23706] dump_stack_lvl+0xe8/0x150 [ 673.328400][T23706] should_fail_ex+0x410/0x560 [ 673.328433][T23706] prepare_alloc_pages+0x223/0x600 [ 673.328466][T23706] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 673.328497][T23706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.328529][T23706] ? __pfx_policy_nodemask+0x10/0x10 [ 673.328564][T23706] ? __lock_acquire+0x747/0x2de0 [ 673.328591][T23706] alloc_pages_mpol+0x21e/0x390 [ 673.328627][T23706] folio_alloc_mpol_noprof+0x39/0x160 [ 673.328661][T23706] vma_alloc_folio_noprof+0xe1/0x1e0 [ 673.328694][T23706] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 673.328726][T23706] ? lock_acquire+0x115/0x350 [ 673.328758][T23706] do_pte_missing+0x173a/0x34b0 [ 673.328805][T23706] handle_mm_fault+0x1a53/0x3750 [ 673.328850][T23706] ? handle_mm_fault+0xf1/0x3750 [ 673.328893][T23706] ? __pfx_handle_mm_fault+0x10/0x10 [ 673.328940][T23706] ? __lock_acquire+0x747/0x2de0 [ 673.328967][T23706] ? lock_mm_and_find_vma+0xa7/0x340 [ 673.329006][T23706] do_user_addr_fault+0x746/0x1340 [ 673.329048][T23706] exc_page_fault+0x6a/0xc0 [ 673.329089][T23706] asm_exc_page_fault+0x26/0x30 [ 673.329111][T23706] RIP: 0010:put_cmsg+0x203/0x5c0 [ 673.329133][T23706] Code: f3 c3 18 f8 48 b8 00 f0 ff ff ff 7f 00 00 4c 8b 64 24 30 49 39 c4 4c 0f 47 e0 bf 07 00 00 00 48 89 de e8 90 c9 18 f8 0f 01 cb <4d> 89 34 24 8b 04 24 41 89 44 24 08 49 8d 44 24 0c 8b 4c 24 04 89 [ 673.329153][T23706] RSP: 0018:ffffc90005fe7240 EFLAGS: 00050293 [ 673.329174][T23706] RAX: ffffffff89af1830 RBX: 0000000000000030 RCX: ffff88803186ddc0 [ 673.329191][T23706] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000007 [ 673.329205][T23706] RBP: 1ffff92000bfcfa9 R08: ffffc90005fe72e0 R09: 1ffff1100eaf500c [ 673.329223][T23706] R10: dffffc0000000000 R11: ffffed100eaf500d R12: 0000200000001f80 [ 673.329240][T23706] R13: ffffc90005fe72e0 R14: 0000000000000040 R15: dffffc0000000000 [ 673.329267][T23706] ? put_cmsg+0x200/0x5c0 [ 673.329312][T23706] put_cmsg_scm_timestamping64+0x12e/0x190 [ 673.329338][T23706] ? __pfx_put_cmsg_scm_timestamping64+0x10/0x10 [ 673.329372][T23706] ? _copy_to_iter+0x30e/0x1810 [ 673.329405][T23706] __sock_recv_timestamp+0xe87/0x12a0 [ 673.329428][T23706] ? arch_stack_walk+0xfb/0x150 [ 673.329468][T23706] ? __pfx___sock_recv_timestamp+0x10/0x10 [ 673.329498][T23706] ? do_raw_spin_lock+0x12b/0x2f0 [ 673.329534][T23706] ? __skb_datagram_iter+0x618/0x980 [ 673.329590][T23706] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 673.329628][T23706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 673.329665][T23706] ? skb_copy_datagram_iter+0xb5/0x240 [ 673.329707][T23706] ipv6_recv_error+0x3b5/0x14d0 [ 673.329755][T23706] ? __pfx_ipv6_recv_error+0x10/0x10 [ 673.329787][T23706] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 673.329829][T23706] ? __lock_acquire+0x747/0x2de0 [ 673.329862][T23706] ? __pfx_inet6_recvmsg+0x10/0x10 [ 673.329888][T23706] udpv6_recvmsg+0x1c5/0x1320 [ 673.329933][T23706] ? lock_acquire+0x115/0x350 [ 673.329956][T23706] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 673.329983][T23706] ? aa_sock_msg_perm+0xf5/0x210 [ 673.330015][T23706] ? inet6_recvmsg+0xe7/0x490 [ 673.330039][T23706] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 673.330069][T23706] ? security_socket_recvmsg+0x7e/0x2c0 [ 673.330113][T23706] ? __pfx_inet6_recvmsg+0x10/0x10 [ 673.330137][T23706] sock_recvmsg+0xfa/0x1e0 [ 673.330167][T23706] ____sys_recvmsg+0x1e6/0x4a0 [ 673.330212][T23706] ? __pfx_____sys_recvmsg+0x10/0x10 [ 673.330266][T23706] ? import_iovec+0x73/0xa0 [ 673.330301][T23706] ___sys_recvmsg+0x213/0x5a0 [ 673.330343][T23706] ? __pfx____sys_recvmsg+0x10/0x10 [ 673.330385][T23706] ? lock_acquire+0x115/0x350 [ 673.330429][T23706] ? __fget_files+0x3a2/0x420 [ 673.330479][T23706] do_recvmmsg+0x31a/0x7f0 [ 673.330525][T23706] ? __pfx_do_recvmmsg+0x10/0x10 [ 673.330574][T23706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.330611][T23706] ? __fget_files+0x3a2/0x420 [ 673.330658][T23706] __x64_sys_recvmmsg+0x198/0x250 [ 673.330697][T23706] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 673.330748][T23706] do_syscall_64+0x166/0x520 [ 673.330779][T23706] ? trace_irq_disable+0x3b/0x140 [ 673.330803][T23706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.330827][T23706] ? clear_bhb_loop+0x70/0xc0 [ 673.330856][T23706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.330879][T23706] RIP: 0033:0x7f575bf9e159 [ 673.330901][T23706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.330921][T23706] RSP: 002b:00007f575ce33028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 673.330945][T23706] RAX: ffffffffffffffda RBX: 00007f575c225fa0 RCX: 00007f575bf9e159 [ 673.330963][T23706] RDX: 0000000000000002 RSI: 00002000000058c0 RDI: 0000000000000003 [ 673.330979][T23706] RBP: 00007f575ce33090 R08: 0000000000000000 R09: 0000000000000000 [ 673.330994][T23706] R10: 0000000040002142 R11: 0000000000000246 R12: 0000000000000001 [ 673.331009][T23706] R13: 00007f575c226038 R14: 00007f575c225fa0 R15: 00007fffcae34aa8 [ 673.331050][T23706] [ 673.554991][T23707] syzkaller1: entered promiscuous mode [ 673.555056][T23707] syzkaller1: entered allmulticast mode [ 674.331783][T23730] netlink: 'syz.5.4210': attribute type 1 has an invalid length. [ 674.378990][T23725] bond3: (slave syz_tun): Removing an active aggregator [ 674.380764][T23725] bond3: (slave syz_tun): Releasing backup interface [ 674.440733][T23725] batman_adv: batadv0: Interface deactivated: dummy0 [ 674.440760][T23725] batman_adv: batadv0: Removing interface: dummy0 [ 674.500466][T23725] team0: Port device team_slave_1 removed [ 674.953865][T23743] netlink: 'syz.5.4215': attribute type 4 has an invalid length. [ 675.645817][T23757] __nla_validate_parse: 40 callbacks suppressed [ 675.645842][T23757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4221'. [ 675.681160][T23760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4219'. [ 675.705549][T23757] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4221'. [ 675.711093][T23760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4219'. [ 675.842624][T23764] bond0: (slave team0): Releasing backup interface [ 675.928556][T23771] lo speed is unknown, defaulting to 1000 [ 675.940737][T23771] wg2 speed is unknown, defaulting to 1000 [ 676.232269][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.240622][ T1704] block nbd1: Possible stuck request ffff88807fe84b40: control (read@0,1024B). Runtime 60 seconds [ 676.240667][ T1704] block nbd1: Possible stuck request ffff88807fe84d00: control (read@1024,1024B). Runtime 60 seconds [ 676.240704][ T1704] block nbd1: Possible stuck request ffff88807fe84ec0: control (read@2048,1024B). Runtime 60 seconds [ 676.240733][ T1704] block nbd1: Possible stuck request ffff88807fe85080: control (read@3072,1024B). Runtime 60 seconds [ 676.379490][T23785] netlink: 'syz.0.4228': attribute type 8 has an invalid length. [ 676.861242][T23805] syz.1.4233: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.861342][T23805] CPU: 1 UID: 0 PID: 23805 Comm: syz.1.4233 Not tainted syzkaller #0 PREEMPT(full) [ 676.861371][T23805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.861386][T23805] Call Trace: [ 676.861396][T23805] [ 676.861407][T23805] dump_stack_lvl+0xe8/0x150 [ 676.861448][T23805] warn_alloc+0x24d/0x270 [ 676.861475][T23805] ? kasan_save_track+0x4f/0x80 [ 676.861501][T23805] ? kasan_save_track+0x3e/0x80 [ 676.861529][T23805] ? __pfx_warn_alloc+0x10/0x10 [ 676.861551][T23805] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 676.861584][T23805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.861631][T23805] __vmalloc_node_range_noprof+0x127/0x1540 [ 676.861695][T23805] ? rcu_is_watching+0x16/0xb0 [ 676.861730][T23805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.861765][T23805] ? __kmalloc_cache_noprof+0x321/0x600 [ 676.861791][T23805] ? __kmalloc_cache_noprof+0x14d/0x600 [ 676.861816][T23805] ? xskq_create+0x56/0x220 [ 676.861852][T23805] xskq_create+0x148/0x220 [ 676.861882][T23805] ? xsk_init_queue+0x8a/0xe0 [ 676.861914][T23805] xsk_init_queue+0x8a/0xe0 [ 676.861946][T23805] xsk_setsockopt+0x52a/0x960 [ 676.861978][T23805] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.862007][T23805] ? __pfx_aa_sk_perm+0x10/0x10 [ 676.862052][T23805] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 676.862083][T23805] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.862113][T23805] do_sock_setsockopt+0x17c/0x1b0 [ 676.862150][T23805] __x64_sys_setsockopt+0x13d/0x1b0 [ 676.862189][T23805] do_syscall_64+0x166/0x520 [ 676.862221][T23805] ? trace_irq_disable+0x3b/0x140 [ 676.862246][T23805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.862270][T23805] ? clear_bhb_loop+0x70/0xc0 [ 676.862300][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.862336][T23805] RIP: 0033:0x7f575bf9e159 [ 676.862358][T23805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.862379][T23805] RSP: 002b:00007f575ce33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.862405][T23805] RAX: ffffffffffffffda RBX: 00007f575c225fa0 RCX: 00007f575bf9e159 [ 676.862424][T23805] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 676.862439][T23805] RBP: 00007f575c03506b R08: 0000000000000004 R09: 0000000000000000 [ 676.862455][T23805] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.862472][T23805] R13: 00007f575c226038 R14: 00007f575c225fa0 R15: 00007fffcae34aa8 [ 676.862511][T23805] [ 676.878847][T23805] Mem-Info: [ 676.878864][T23805] active_anon:9685 inactive_anon:0 isolated_anon:0 [ 676.878864][T23805] active_file:0 inactive_file:43731 isolated_file:0 [ 676.878864][T23805] unevictable:0 dirty:177 writeback:0 [ 676.878864][T23805] slab_reclaimable:11860 slab_unreclaimable:110406 [ 676.878864][T23805] mapped:35897 shmem:2179 pagetables:1347 [ 676.878864][T23805] sec_pagetables:0 bounce:0 [ 676.878864][T23805] kernel_misc_reclaimable:0 [ 676.878864][T23805] free:1241440 free_pcp:22567 free_cma:0 [ 676.878931][T23805] Node 0 active_anon:38740kB inactive_anon:0kB active_file:0kB inactive_file:174720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143588kB dirty:708kB writeback:0kB shmem:8716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15732kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.878995][T23805] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.881284][T23805] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.881646][T23805] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 676.881768][T23805] Node 0 DMA32 free:1006428kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38740kB inactive_anon:0kB active_file:0kB inactive_file:174720kB unevictable:0kB writepending:708kB zspages:0kB present:3129332kB managed:2546844kB mlocked:0kB bounce:0kB free_pcp:90252kB local_pcp:21236kB free_cma:0kB [ 676.881938][T23805] lowmem_reserve[]: 0 0 0 0 0 [ 677.282924][T23805] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.283104][T23805] lowmem_reserve[]: 0 0 0 0 0 [ 677.283227][T23805] Node 1 Normal free:3943972kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.283454][T23805] lowmem_reserve[]: 0 0 0 0 0 [ 677.283567][T23805] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 677.283915][T23805] Node 0 DMA32: 1399*4kB (UME) 996*8kB (UME) 668*16kB (UME) 1497*32kB (U) 750*64kB (UME) 261*128kB (UME) 45*256kB (UME) 21*512kB (UE) 21*1024kB (UME) 7*2048kB (UME) 195*4096kB (UM) = 1010396kB [ 677.284430][T23805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.311516][T23805] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 9*32kB (UM) 6*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3943972kB [ 677.312234][T23805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.312278][T23805] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.312338][T23805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.312390][T23805] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.312440][T23805] 45460 total pagecache pages [ 677.312470][T23805] 0 pages in swap cache [ 677.312493][T23805] Free swap = 124996kB [ 677.312521][T23805] Total swap = 124996kB [ 677.312544][T23805] 2097051 pages RAM [ 677.312572][T23805] 0 pages HighMem/MovableOnly [ 677.312593][T23805] 428724 pages reserved [ 677.312616][T23805] 0 pages cma reserved [ 677.717564][T23813] xt_esp: unknown flags DD [ 677.718306][T23812] sctp: [Deprecated]: syz.0.4235 (pid 23812) Use of int in maxseg socket option. [ 677.718306][T23812] Use struct sctp_assoc_value instead [ 677.799693][T23813] xt_hashlimit: size too large, truncated to 1048576 [ 678.053549][T23826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4239'. [ 679.205450][T23860] batadv_slave_1: entered promiscuous mode [ 679.205737][T23860] batadv_slave_1: left promiscuous mode [ 679.526775][T23875] tipc: Invalid UDP bearer configuration [ 679.526825][T23875] tipc: Enabling of bearer rejected, failed to enable media [ 679.551998][T23875] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 679.861648][T23890] veth5: entered allmulticast mode [ 679.973212][T23892] FAULT_INJECTION: forcing a failure. [ 679.973212][T23892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.973247][T23892] CPU: 0 UID: 0 PID: 23892 Comm: syz.1.4256 Not tainted syzkaller #0 PREEMPT(full) [ 679.973273][T23892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.973287][T23892] Call Trace: [ 679.973297][T23892] [ 679.973306][T23892] dump_stack_lvl+0xe8/0x150 [ 679.973344][T23892] should_fail_ex+0x410/0x560 [ 679.973388][T23892] _copy_to_user+0x31/0xb0 [ 679.973424][T23892] simple_read_from_buffer+0xe1/0x170 [ 679.973462][T23892] proc_fail_nth_read+0x1bb/0x230 [ 679.973484][T23892] ? common_file_perm+0x20e/0x2b0 [ 679.973515][T23892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.973542][T23892] ? rw_verify_area+0x24a/0x4c0 [ 679.973577][T23892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.973599][T23892] vfs_read+0x213/0xa80 [ 679.973639][T23892] ? __pfx___mutex_lock+0x10/0x10 [ 679.973671][T23892] ? __pfx_vfs_read+0x10/0x10 [ 679.973707][T23892] ? __fget_files+0x2a/0x420 [ 679.973743][T23892] ? __fget_files+0x3a2/0x420 [ 679.973773][T23892] ? __fget_files+0x2a/0x420 [ 679.973814][T23892] ksys_read+0x150/0x270 [ 679.973851][T23892] ? __pfx_ksys_read+0x10/0x10 [ 679.973897][T23892] do_syscall_64+0x166/0x520 [ 679.973927][T23892] ? trace_irq_disable+0x3b/0x140 [ 679.973949][T23892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.973972][T23892] ? clear_bhb_loop+0x70/0xc0 [ 679.974000][T23892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.974024][T23892] RIP: 0033:0x7f575bf5e98e [ 679.974045][T23892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 679.974064][T23892] RSP: 002b:00007f575ce32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.974088][T23892] RAX: ffffffffffffffda RBX: 00007f575ce336c0 RCX: 00007f575bf5e98e [ 679.974105][T23892] RDX: 000000000000000f RSI: 00007f575ce330a0 RDI: 0000000000000004 [ 679.974119][T23892] RBP: 00007f575ce33090 R08: 0000000000000000 R09: 0000000000000000 [ 679.974134][T23892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.974149][T23892] R13: 00007f575c226038 R14: 00007f575c225fa0 R15: 00007fffcae34aa8 [ 679.974186][T23892] [ 680.519665][T23905] netlink: 'syz.5.4258': attribute type 1 has an invalid length. [ 680.519690][T23905] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4258'. [ 680.519709][T23905] netlink: 'syz.5.4258': attribute type 1 has an invalid length. [ 680.770148][T23915] syzkaller0: entered promiscuous mode [ 680.770176][T23915] syzkaller0: entered allmulticast mode [ 680.879620][T23917] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4262'. [ 681.093682][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'. [ 681.836315][T23948] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4269'. [ 681.836344][T23948] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4269'. [ 684.756711][T23927] bond1: left promiscuous mode [ 684.771504][T23927] bridge1: left allmulticast mode [ 684.787430][T23927] veth5: left allmulticast mode [ 684.843600][T12602] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.843647][T12602] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.846006][T12602] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.846042][T12602] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.846081][T12602] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.846109][T12602] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.846147][T12602] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.846176][T12602] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.971177][T23964] netlink: 'syz.0.4273': attribute type 1 has an invalid length. [ 684.987683][T23964] netlink: 'syz.0.4273': attribute type 1 has an invalid length. [ 685.071728][T23968] syzkaller0: entered promiscuous mode [ 685.071755][T23968] syzkaller0: entered allmulticast mode [ 685.098728][T23968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4275'. [ 685.134922][T23968] tipc: Enabled bearer , priority 0 [ 685.199400][T23967] tipc: Resetting bearer [ 685.445857][T23991] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4274'. [ 685.521262][T23967] tipc: Disabling bearer [ 685.836034][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.858310][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 685.930217][T12603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.930239][T12603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.959773][T12606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.959799][T12606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.971732][T24006] syzkaller0: entered promiscuous mode [ 685.971793][T24006] syzkaller0: entered allmulticast mode [ 686.001117][T24006] tipc: Started in network mode [ 686.001150][T24006] tipc: Node identity 16fbbe6224f7, cluster identity 4711 [ 686.001305][T24006] tipc: Enabled bearer , priority 0 [ 686.057588][T24006] tipc: Resetting bearer [ 686.208547][T24019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4283'. [ 686.222533][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4283'. [ 686.279932][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4284'. [ 686.330499][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805698b400: rx timeout, send abort [ 686.518899][T24029] net_ratelimit: 90 callbacks suppressed [ 686.518921][T24029] openvswitch: netlink: Message has 8 unknown bytes. [ 686.579485][T24035] netlink: 'syz.1.4287': attribute type 1 has an invalid length. [ 686.830558][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805698b400: abort rx timeout. Force session deactivation [ 686.838976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805698b000: rx timeout, send abort [ 686.961599][T24004] tipc: Resetting bearer [ 686.986759][T24046] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 686.986795][T24046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.026183][T24004] tipc: Disabling bearer [ 687.175063][T24054] syzkaller1: entered promiscuous mode [ 687.175088][T24054] syzkaller1: entered allmulticast mode [ 687.339079][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805698b000: abort rx timeout. Force session deactivation [ 687.627669][T24082] netlink: 'syz.5.4299': attribute type 21 has an invalid length. [ 688.117981][T24095] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.4305'. [ 689.149198][T24128] bridge0: entered allmulticast mode [ 689.225861][ T31] audit: type=1800 audit(1790433396.135:7): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4317" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1044 res=0 errno=0 [ 689.418301][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4318'. [ 689.444848][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4318'. [ 689.671997][T24141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4320'. [ 690.401391][T24167] netlink: zone id is out of range [ 690.401405][T24167] netlink: zone id is out of range [ 690.401412][T24167] netlink: zone id is out of range [ 690.401418][T24167] netlink: zone id is out of range [ 690.401425][T24167] netlink: zone id is out of range [ 690.401431][T24167] netlink: zone id is out of range [ 690.401437][T24167] netlink: zone id is out of range [ 690.408435][T24167] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4326'. [ 690.408499][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'. [ 690.475548][T24168] netlink: 'syz.1.4326': attribute type 5 has an invalid length. [ 690.475602][T24168] netlink: 'syz.1.4326': attribute type 15 has an invalid length. [ 690.475947][T24168] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4326'. [ 690.571390][T24170] syzkaller1: entered promiscuous mode [ 690.571421][T24170] syzkaller1: entered allmulticast mode [ 691.651925][T24177] netlink: 'syz.4.4329': attribute type 8 has an invalid length. [ 692.821490][T24148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.034979][T24206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4330'. [ 693.037312][T24206] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4330'. [ 693.038232][T24206] bond_slave_0: entered promiscuous mode [ 693.038255][T24206] bond_slave_0: entered allmulticast mode [ 693.105949][T24206] syzkaller1: entered promiscuous mode [ 693.105974][T24206] syzkaller1: entered allmulticast mode [ 693.509550][T24226] net_ratelimit: 4 callbacks suppressed [ 693.509598][T24226] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 693.512244][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.095529][T24245] geneve2: entered promiscuous mode [ 694.136789][T12602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.136895][T12602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.136928][T12602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.136964][T12602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.595401][T24300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4347'. [ 695.595425][T24300] netlink: 468 bytes leftover after parsing attributes in process `syz.1.4347'. [ 695.595446][T24300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4347'. [ 696.176831][T24318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4353'. [ 696.176872][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4353'. [ 696.218661][T24318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4353'. [ 696.218715][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4353'. [ 696.237410][T12594] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.237603][T12594] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.237741][T12594] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.237852][T12594] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.660696][T24360] ip_tables: iptables: counters copy to user failed while replacing table [ 697.823250][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4363'. [ 697.924379][T24370] IPVS: Scheduler module ip_vs_sip not found [ 698.090784][T24377] lo: left promiscuous mode [ 698.099899][T24377] netlink: 'syz.1.4365': attribute type 1 has an invalid length. [ 698.132006][T24378] __nla_validate_parse: 1 callbacks suppressed [ 698.140244][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4366'. [ 698.151064][T24377] bond2: (slave geneve4): making interface the new active one [ 698.154443][T24377] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 698.159936][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4365'. [ 698.232522][ T5811] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 698.244756][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.244886][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.245057][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.245149][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.662622][ T5811] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.391423][T24408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4377'. [ 699.476022][T24408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 699.487934][T24408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.757469][T24418] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 699.987075][T24418] bond5 (unregistering): Released all slaves [ 700.306067][T24435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 700.598947][T24440] netlink: 'syz.1.4382': attribute type 2 has an invalid length. [ 700.598975][T24440] netlink: 'syz.1.4382': attribute type 11 has an invalid length. [ 700.598992][T24440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4382'. [ 700.832594][T21214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 700.835871][T21214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 700.840545][T21214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 700.841969][T21214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 700.890016][T21214] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.000758][T24459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4385'. [ 701.501565][T24475] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4389'. [ 702.319673][T24449] lo speed is unknown, defaulting to 1000 [ 702.340789][T24449] wg2 speed is unknown, defaulting to 1000 [ 702.519501][T24494] netlink: 'syz.5.4393': attribute type 44 has an invalid length. [ 702.726885][T24494] netlink: 'syz.5.4393': attribute type 44 has an invalid length. [ 702.793917][T24514] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4396'. [ 702.902764][T24494] netlink: 'syz.5.4393': attribute type 44 has an invalid length. [ 702.952607][T21214] Bluetooth: hci6: command tx timeout [ 703.051188][T24494] netlink: 'syz.5.4393': attribute type 44 has an invalid length. [ 703.106992][T24528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4398'. [ 703.148148][T24526] xt_CT: No such helper "snmp" [ 703.538820][T24543] netlink: 'syz.1.4401': attribute type 2 has an invalid length. [ 703.780494][T24547] syzkaller0: entered promiscuous mode [ 703.780515][T24547] syzkaller0: entered allmulticast mode [ 703.829691][T24449] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.829951][T24449] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.830122][T24449] bridge_slave_0: entered allmulticast mode [ 703.860418][T24449] bridge_slave_0: entered promiscuous mode [ 703.910619][T24449] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.910782][T24449] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.910971][T24449] bridge_slave_1: entered allmulticast mode [ 703.927918][T24449] bridge_slave_1: entered promiscuous mode [ 703.983783][T24449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.987098][T24449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.081921][T24449] team0: Port device team_slave_0 added [ 704.098302][T24449] team0: Port device team_slave_1 added [ 704.219775][T24449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.219796][T24449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.219824][T24449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.222999][T24449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.223015][T24449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.223046][T24449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.356609][T24573] netlink: 'syz.5.4405': attribute type 21 has an invalid length. [ 704.530236][T24573] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4405'. [ 704.639720][T24578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4406'. [ 704.647745][T21214] Bluetooth: hci2: link tx timeout [ 704.648214][T21214] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 704.740261][T24449] hsr_slave_0: entered promiscuous mode [ 704.748430][T24449] hsr_slave_1: entered promiscuous mode [ 704.751174][T24449] debugfs: 'hsr0' already exists in 'hsr' [ 704.751241][T24449] Cannot create hsr debugfs directory [ 704.791850][T24578] syz_tun: entered allmulticast mode [ 704.818492][T24583] syzkaller0: left promiscuous mode [ 704.818519][T24583] syzkaller0: left allmulticast mode [ 704.889795][T24577] syz_tun: left allmulticast mode [ 705.032822][T21214] Bluetooth: hci6: command tx timeout [ 705.415169][T24449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 705.420581][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.421621][T24449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 705.459332][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.460780][T24449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 705.473034][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 705.481612][T24449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 705.506443][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 705.607605][T24449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.627260][T24449] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.643967][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.644056][T12603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.669773][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.669893][T12606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.700607][T21214] Bluetooth: hci2: link tx timeout [ 705.709097][T21214] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 706.300750][T24625] netlink: 'syz.0.4417': attribute type 1 has an invalid length. [ 706.327354][ T1704] block nbd1: Possible stuck request ffff88807fe84b40: control (read@0,1024B). Runtime 90 seconds [ 706.327395][ T1704] block nbd1: Possible stuck request ffff88807fe84d00: control (read@1024,1024B). Runtime 90 seconds [ 706.327423][ T1704] block nbd1: Possible stuck request ffff88807fe84ec0: control (read@2048,1024B). Runtime 90 seconds [ 706.327452][ T1704] block nbd1: Possible stuck request ffff88807fe85080: control (read@3072,1024B). Runtime 90 seconds [ 706.427811][T24628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4418'. [ 706.547967][T24449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.585116][T24629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 706.649174][T24631] bond5: entered promiscuous mode [ 706.649201][T24631] bond5: entered allmulticast mode [ 706.649585][T24631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 706.713005][T21214] Bluetooth: hci2: command 0x0405 tx timeout [ 706.985401][T24641] netlink: 'syz.1.4419': attribute type 1 has an invalid length. [ 707.106390][T21214] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 707.115986][ T5625] Bluetooth: hci6: command tx timeout [ 707.130596][T21214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 707.139836][T21214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 707.144655][T21214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 707.147441][T21214] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 707.249525][T24641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.279129][T24649] syz_tun: left promiscuous mode [ 707.296860][T24649] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 707.297048][ T6689] s`z1: Port: 1 Link ACTIVE [ 707.385359][T12606] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 707.505714][T24661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'. [ 707.554676][T12584] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 707.562666][T24659] netlink: 'syz.0.4423': attribute type 1 has an invalid length. [ 707.562688][T24659] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4423'. [ 707.710419][T24671] À: option downdelay: invalid value (18446744073709547007) [ 707.710438][T24671] À: option downdelay: allowed values 0 - 2147483647 [ 707.711717][T24671] À (unregistering): Released all slaves [ 707.909317][T24675] À: option downdelay: invalid value (18446744073709547007) [ 707.909340][T24675] À: option downdelay: allowed values 0 - 2147483647 [ 707.911125][T24675] À (unregistering): Released all slaves [ 708.041502][T24679] bridge0: left allmulticast mode [ 708.171542][T24679] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.174187][T24679] bridge_slave_0: left allmulticast mode [ 708.180425][T24679] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.261941][T24682] bond0: left allmulticast mode [ 708.261968][T24682] bond_slave_0: left allmulticast mode [ 708.261986][T24682] bond_slave_1: left allmulticast mode [ 708.264362][T24682] bridge0: port 3(bond0) entered disabled state [ 708.316928][T24682] bridge_slave_1: left allmulticast mode [ 708.317182][T24682] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.385724][T24694] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 708.385748][T24694] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4427'. [ 708.453582][T24699] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4428'. [ 708.515516][T24449] veth0_vlan: entered promiscuous mode [ 708.564004][T24644] lo speed is unknown, defaulting to 1000 [ 708.581149][T24449] veth1_vlan: entered promiscuous mode [ 708.591639][T24644] wg2 speed is unknown, defaulting to 1000 [ 708.889423][T24708] bridge3: entered promiscuous mode [ 708.889451][T24708] bridge3: entered allmulticast mode [ 708.903313][T24708] team0: Port device bridge3 added [ 709.151383][T24449] veth0_macvtap: entered promiscuous mode [ 709.185924][T24449] veth1_macvtap: entered promiscuous mode [ 709.198339][T21214] Bluetooth: hci7: command tx timeout [ 709.199150][T21214] Bluetooth: hci6: command tx timeout [ 709.440435][T24449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.484465][T24739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4438'. [ 709.554905][T24737] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4436'. [ 709.649431][T24449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.738222][T12594] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.738333][T12594] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.738385][T12594] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.738426][T12594] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.054182][T24743] lo speed is unknown, defaulting to 1000 [ 710.090324][T24743] wg2 speed is unknown, defaulting to 1000 [ 710.590667][T12584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.590691][T12584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.647909][T24780] netlink: 'syz.0.4443': attribute type 1 has an invalid length. [ 710.785546][T24780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 710.790249][T24776] bond7: entered promiscuous mode [ 710.790268][T24776] bond7: entered allmulticast mode [ 710.852231][T24644] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.852411][T24644] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.852572][T24644] bridge_slave_0: entered allmulticast mode [ 710.857713][T24644] bridge_slave_0: entered promiscuous mode [ 710.876172][T24644] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.876467][T24644] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.876875][T24644] bridge_slave_1: entered allmulticast mode [ 710.881619][T24644] bridge_slave_1: entered promiscuous mode [ 711.056459][T24644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.120242][T24644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.187712][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.187735][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.262758][T24795] sctp: [Deprecated]: syz.0.4447 (pid 24795) Use of int in max_burst socket option. [ 711.262758][T24795] Use struct sctp_assoc_value instead [ 711.272791][ T5632] Bluetooth: hci7: command tx timeout [ 711.347313][T24644] team0: Port device team_slave_0 added [ 711.408396][T24644] team0: Port device team_slave_1 added [ 711.548495][T24810] Bluetooth: MGMT ver 1.23 [ 711.568695][T24813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4450'. [ 711.581123][T24814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4450'. [ 711.681637][T24644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.681653][T24644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.681673][T24644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.714812][T24644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.714863][T24644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.714942][T24644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.888616][T24822] openvswitch: netlink: Missing key (keys=40, expected=100) [ 712.107528][T24644] hsr_slave_0: entered promiscuous mode [ 712.108843][T24644] hsr_slave_1: entered promiscuous mode [ 712.111417][T24644] debugfs: 'hsr0' already exists in 'hsr' [ 712.111440][T24644] Cannot create hsr debugfs directory [ 712.143264][T24820] lo speed is unknown, defaulting to 1000 [ 712.324606][T24827] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 712.327329][T24827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.329460][T24820] wg2 speed is unknown, defaulting to 1000 [ 712.800306][T24839] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 712.821958][T24843] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 712.837866][T24843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 713.353272][ T5632] Bluetooth: hci7: command tx timeout [ 714.085329][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4463'. [ 714.137510][T24644] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 714.145819][T24868] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4463'. [ 714.177742][T24644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.210334][T24644] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 714.236214][T24644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.241154][T24644] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 714.334298][T24644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.336031][T24644] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 714.380844][T24644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.440221][T24876] netlink: 'syz.1.4465': attribute type 9 has an invalid length. [ 714.838497][T24887] SET target dimension over the limit! [ 714.961288][T24644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.056464][T24897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4466'. [ 715.056492][T24897] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 715.088076][T24644] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.210001][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.210116][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.240241][T24906] netlink: 'syz.0.4469': attribute type 34 has an invalid length. [ 715.240266][T24906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4469'. [ 715.427205][T24906] bond9: option lacp_strict: invalid value (110) [ 715.428951][T24906] bond9 (unregistering): Released all slaves [ 715.432613][ T5632] Bluetooth: hci7: command tx timeout [ 715.459405][T24909] netlink: 'syz.6.4470': attribute type 11 has an invalid length. [ 715.654482][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.654623][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.727039][T24922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'. [ 715.755752][T24908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.353766][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4477'. [ 718.104582][T24978] ip_tables: iptables: counters copy to user failed while replacing table [ 718.145872][T24644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.180868][T24978] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 719.088661][T24644] veth0_vlan: entered promiscuous mode [ 719.120468][T24644] veth1_vlan: entered promiscuous mode [ 719.187737][T24644] veth0_macvtap: entered promiscuous mode [ 719.201223][T24644] veth1_macvtap: entered promiscuous mode [ 719.239052][T24644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.301799][T24644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.493696][T25053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4493'. [ 719.637072][T25048] bond9: entered promiscuous mode [ 719.639908][T25048] 8021q: adding VLAN 0 to HW filter on device bond9 [ 719.699111][T12594] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.699550][T12594] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.699595][T12594] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.699635][T12594] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.070640][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.070665][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.256252][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.256292][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.647246][T25101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4504'. [ 720.651680][T25106] FAULT_INJECTION: forcing a failure. [ 720.651680][T25106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.651714][T25106] CPU: 1 UID: 0 PID: 25106 Comm: syz.7.4420 Not tainted syzkaller #0 PREEMPT(full) [ 720.651753][T25106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.651767][T25106] Call Trace: [ 720.651776][T25106] [ 720.651785][T25106] dump_stack_lvl+0xe8/0x150 [ 720.651822][T25106] should_fail_ex+0x410/0x560 [ 720.651854][T25106] _copy_from_iter+0x1d3/0x1660 [ 720.651882][T25106] ? __alloc_skb+0x27a/0x7a0 [ 720.651913][T25106] ? __alloc_skb+0x27a/0x7a0 [ 720.651948][T25106] ? __alloc_skb+0x27a/0x7a0 [ 720.651976][T25106] ? __pfx__copy_from_iter+0x10/0x10 [ 720.652000][T25106] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 720.652033][T25106] ? __alloc_skb+0x27a/0x7a0 [ 720.652058][T25106] ? __alloc_skb+0x27a/0x7a0 [ 720.652090][T25106] ? netlink_sendmsg+0x650/0xb40 [ 720.652112][T25106] ? skb_put+0x112/0x210 [ 720.652141][T25106] netlink_sendmsg+0x6c0/0xb40 [ 720.652173][T25106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.652205][T25106] ? apparmor_socket_sendmsg+0x98/0x360 [ 720.652234][T25106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.652255][T25106] sock_sendmsg_nosec+0x13a/0x180 [ 720.652283][T25106] ____sys_sendmsg+0x54e/0x850 [ 720.652320][T25106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.652362][T25106] ? import_iovec+0x73/0xa0 [ 720.652394][T25106] ___sys_sendmsg+0x2a5/0x360 [ 720.652424][T25106] ? __lock_acquire+0x747/0x2de0 [ 720.652453][T25106] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.652522][T25106] ? __fget_files+0x2a/0x420 [ 720.652560][T25106] ? __fget_files+0x3a2/0x420 [ 720.652603][T25106] __x64_sys_sendmsg+0x1b1/0x290 [ 720.652638][T25106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 720.652694][T25106] do_syscall_64+0x166/0x520 [ 720.652723][T25106] ? trace_irq_disable+0x3b/0x140 [ 720.652757][T25106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.652779][T25106] ? clear_bhb_loop+0x70/0xc0 [ 720.652804][T25106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.652825][T25106] RIP: 0033:0x7f5d00d9e159 [ 720.652845][T25106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.652862][T25106] RSP: 002b:00007f5cfeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.652884][T25106] RAX: ffffffffffffffda RBX: 00007f5d01025fa0 RCX: 00007f5d00d9e159 [ 720.652901][T25106] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000006 [ 720.652915][T25106] RBP: 00007f5cfeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 720.652928][T25106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.652942][T25106] R13: 00007f5d01026038 R14: 00007f5d01025fa0 R15: 00007ffd1580db78 [ 720.652975][T25106] [ 721.443645][T25125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4508'. [ 721.447991][T25125] ip6gretap0: left allmulticast mode [ 721.448016][T25125] ip6gretap0: left promiscuous mode [ 721.448240][T25125] bridge0: port 4(ip6gretap0) entered disabled state [ 721.499238][T25125] syz_tun: left allmulticast mode [ 721.499266][T25125] syz_tun: left promiscuous mode [ 721.499521][T25125] bridge0: port 3(syz_tun) entered disabled state [ 721.630969][T25125] bridge_slave_1: left allmulticast mode [ 721.631007][T25125] bridge_slave_1: left promiscuous mode [ 721.631219][T25125] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.695539][T25125] bridge_slave_0: left allmulticast mode [ 721.695569][T25125] bridge_slave_0: left promiscuous mode [ 721.695785][T25125] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.821704][T25140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.286209][T25152] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 722.356095][ T43] IPVS: starting estimator thread 0... [ 722.455113][T25156] IPVS: using max 26 ests per chain, 62400 per kthread [ 722.698943][T25168] FAULT_INJECTION: forcing a failure. [ 722.698943][T25168] name failslab, interval 1, probability 0, space 0, times 0 [ 722.698978][T25168] CPU: 0 UID: 0 PID: 25168 Comm: syz.6.4519 Not tainted syzkaller #0 PREEMPT(full) [ 722.699003][T25168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.699017][T25168] Call Trace: [ 722.699026][T25168] [ 722.699036][T25168] dump_stack_lvl+0xe8/0x150 [ 722.699074][T25168] should_fail_ex+0x410/0x560 [ 722.699106][T25168] should_failslab+0xa8/0x100 [ 722.699155][T25168] ? skb_clone+0x212/0x3a0 [ 722.699189][T25168] kmem_cache_alloc_noprof+0xa1/0x600 [ 722.699228][T25168] ? skb_clone+0x212/0x3a0 [ 722.699269][T25168] skb_clone+0x212/0x3a0 [ 722.699302][T25168] ? nfnetlink_rcv+0x4b0/0x28c0 [ 722.699340][T25168] nfnetlink_rcv+0x4de/0x28c0 [ 722.699378][T25168] ? __dev_queue_xmit+0x29b/0x3820 [ 722.699434][T25168] ? __local_bh_enable_ip+0xd6/0x140 [ 722.699464][T25168] ? lockdep_hardirqs_on+0x7b/0x110 [ 722.699494][T25168] ? __dev_queue_xmit+0x29b/0x3820 [ 722.699526][T25168] ? __local_bh_enable_ip+0xd6/0x140 [ 722.699553][T25168] ? __dev_queue_xmit+0x29b/0x3820 [ 722.699591][T25168] ? __dev_queue_xmit+0x1edc/0x3820 [ 722.699639][T25168] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 722.699695][T25168] ? __copy_skb_header+0xa3/0x4a0 [ 722.699749][T25168] ? skb_clone+0x246/0x3a0 [ 722.699785][T25168] ? __netlink_deliver_tap+0x681/0x6e0 [ 722.699813][T25168] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.699844][T25168] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.699866][T25168] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.699894][T25168] netlink_unicast+0x7bd/0x940 [ 722.699939][T25168] netlink_sendmsg+0x813/0xb40 [ 722.699972][T25168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.700004][T25168] ? apparmor_socket_sendmsg+0x98/0x360 [ 722.700032][T25168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.700054][T25168] sock_sendmsg_nosec+0x13a/0x180 [ 722.700082][T25168] ____sys_sendmsg+0x54e/0x850 [ 722.700120][T25168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.700161][T25168] ? import_iovec+0x73/0xa0 [ 722.700193][T25168] ___sys_sendmsg+0x2a5/0x360 [ 722.700224][T25168] ? __lock_acquire+0x747/0x2de0 [ 722.700252][T25168] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.700323][T25168] ? __fget_files+0x2a/0x420 [ 722.700353][T25168] ? __fget_files+0x3a2/0x420 [ 722.700395][T25168] __x64_sys_sendmsg+0x1b1/0x290 [ 722.700430][T25168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.700485][T25168] do_syscall_64+0x166/0x520 [ 722.700515][T25168] ? trace_irq_disable+0x3b/0x140 [ 722.700556][T25168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.700580][T25168] ? clear_bhb_loop+0x70/0xc0 [ 722.700608][T25168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.700632][T25168] RIP: 0033:0x7f226519e159 [ 722.700653][T25168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.700673][T25168] RSP: 002b:00007f22660ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.700698][T25168] RAX: ffffffffffffffda RBX: 00007f2265425fa0 RCX: 00007f226519e159 [ 722.700716][T25168] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000006 [ 722.700731][T25168] RBP: 00007f22660ec090 R08: 0000000000000000 R09: 0000000000000000 [ 722.700746][T25168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.700760][T25168] R13: 00007f2265426038 R14: 00007f2265425fa0 R15: 00007ffd4e1fedb8 [ 722.700797][T25168] [ 723.559371][T25197] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4530'. [ 723.848895][T25215] FAULT_INJECTION: forcing a failure. [ 723.848895][T25215] name failslab, interval 1, probability 0, space 0, times 0 [ 723.848933][T25215] CPU: 0 UID: 0 PID: 25215 Comm: syz.5.4534 Not tainted syzkaller #0 PREEMPT(full) [ 723.848960][T25215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.848974][T25215] Call Trace: [ 723.848991][T25215] [ 723.849001][T25215] dump_stack_lvl+0xe8/0x150 [ 723.849042][T25215] should_fail_ex+0x410/0x560 [ 723.849076][T25215] should_failslab+0xa8/0x100 [ 723.849107][T25215] __kmalloc_cache_noprof+0xa3/0x600 [ 723.849133][T25215] ? nfnetlink_rcv+0x1021/0x28c0 [ 723.849165][T25215] ? nfnetlink_rcv+0x1021/0x28c0 [ 723.849209][T25215] nfnetlink_rcv+0x1021/0x28c0 [ 723.849279][T25215] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 723.849367][T25215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.849397][T25215] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 723.849458][T25215] netlink_unicast+0x7bd/0x940 [ 723.849505][T25215] netlink_sendmsg+0x813/0xb40 [ 723.849540][T25215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.849574][T25215] ? apparmor_socket_sendmsg+0x98/0x360 [ 723.849604][T25215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.849627][T25215] sock_sendmsg_nosec+0x13a/0x180 [ 723.849657][T25215] ____sys_sendmsg+0x54e/0x850 [ 723.849696][T25215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.849749][T25215] ? import_iovec+0x73/0xa0 [ 723.849784][T25215] ___sys_sendmsg+0x2a5/0x360 [ 723.849815][T25215] ? __lock_acquire+0x747/0x2de0 [ 723.849844][T25215] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.849917][T25215] ? __fget_files+0x2a/0x420 [ 723.849949][T25215] ? __fget_files+0x3a2/0x420 [ 723.849993][T25215] __x64_sys_sendmsg+0x1b1/0x290 [ 723.850030][T25215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.850085][T25215] do_syscall_64+0x166/0x520 [ 723.850116][T25215] ? trace_irq_disable+0x3b/0x140 [ 723.850140][T25215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.850164][T25215] ? clear_bhb_loop+0x70/0xc0 [ 723.850192][T25215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.850215][T25215] RIP: 0033:0x7f27b6b9e159 [ 723.850236][T25215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.850256][T25215] RSP: 002b:00007f27b7aeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.850281][T25215] RAX: ffffffffffffffda RBX: 00007f27b6e25fa0 RCX: 00007f27b6b9e159 [ 723.850297][T25215] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000006 [ 723.850312][T25215] RBP: 00007f27b7aeb090 R08: 0000000000000000 R09: 0000000000000000 [ 723.850326][T25215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.850341][T25215] R13: 00007f27b6e26038 R14: 00007f27b6e25fa0 R15: 00007ffc4bafad18 [ 723.850379][T25215] [ 724.280748][T25221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4536'. [ 724.359039][T25220] bridge1: entered promiscuous mode [ 724.685617][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4540'. [ 724.768142][T25242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4543'. [ 724.920106][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4544'. [ 724.949686][T25246] macsec0: entered promiscuous mode [ 724.996613][T25248] macsec0 (unregistering): left promiscuous mode [ 725.327291][T25254] FAULT_INJECTION: forcing a failure. [ 725.327291][T25254] name failslab, interval 1, probability 0, space 0, times 0 [ 725.327330][T25254] CPU: 0 UID: 0 PID: 25254 Comm: syz.7.4546 Not tainted syzkaller #0 PREEMPT(full) [ 725.327358][T25254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.327372][T25254] Call Trace: [ 725.327381][T25254] [ 725.327392][T25254] dump_stack_lvl+0xe8/0x150 [ 725.327433][T25254] should_fail_ex+0x410/0x560 [ 725.327465][T25254] ? __alloc_skb+0x1db/0x7a0 [ 725.327494][T25254] should_failslab+0xa8/0x100 [ 725.327525][T25254] ? __alloc_skb+0x1db/0x7a0 [ 725.327555][T25254] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 725.327600][T25254] ? __alloc_skb+0x18d/0x7a0 [ 725.327629][T25254] ? __alloc_skb+0x1db/0x7a0 [ 725.327666][T25254] __alloc_skb+0x1db/0x7a0 [ 725.327700][T25254] netlink_ack+0x136/0xb30 [ 725.327730][T25254] ? __kmalloc_cache_noprof+0x14d/0x600 [ 725.327752][T25254] ? nfnetlink_rcv+0x1021/0x28c0 [ 725.327795][T25254] nfnetlink_rcv+0x260c/0x28c0 [ 725.327868][T25254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 725.327953][T25254] ? skb_clone+0x246/0x3a0 [ 725.328002][T25254] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.328025][T25254] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.328055][T25254] netlink_unicast+0x7bd/0x940 [ 725.328103][T25254] netlink_sendmsg+0x813/0xb40 [ 725.328137][T25254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.328172][T25254] ? apparmor_socket_sendmsg+0x98/0x360 [ 725.328201][T25254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.328224][T25254] sock_sendmsg_nosec+0x13a/0x180 [ 725.328253][T25254] ____sys_sendmsg+0x54e/0x850 [ 725.328293][T25254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.328337][T25254] ? import_iovec+0x73/0xa0 [ 725.328370][T25254] ___sys_sendmsg+0x2a5/0x360 [ 725.328402][T25254] ? __lock_acquire+0x747/0x2de0 [ 725.328431][T25254] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.328505][T25254] ? __fget_files+0x2a/0x420 [ 725.328536][T25254] ? __fget_files+0x3a2/0x420 [ 725.328586][T25254] __x64_sys_sendmsg+0x1b1/0x290 [ 725.328623][T25254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.328681][T25254] do_syscall_64+0x166/0x520 [ 725.328713][T25254] ? trace_irq_disable+0x3b/0x140 [ 725.328737][T25254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.328761][T25254] ? clear_bhb_loop+0x70/0xc0 [ 725.328789][T25254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.328813][T25254] RIP: 0033:0x7f5d00d9e159 [ 725.328834][T25254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.328854][T25254] RSP: 002b:00007f5cfeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.328881][T25254] RAX: ffffffffffffffda RBX: 00007f5d01025fa0 RCX: 00007f5d00d9e159 [ 725.328899][T25254] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000006 [ 725.328914][T25254] RBP: 00007f5cfeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 725.328929][T25254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.328944][T25254] R13: 00007f5d01026038 R14: 00007f5d01025fa0 R15: 00007ffd1580db78 [ 725.328982][T25254] [ 725.719439][T25265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4547'. [ 725.739488][T25251] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 725.804246][T25268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4549'. [ 725.834419][T25256] syzkaller0: entered promiscuous mode [ 725.834446][T25256] syzkaller0: entered allmulticast mode [ 726.031739][T25270] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4548'. [ 726.083369][T25275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4551'. [ 726.162987][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4551'. [ 726.249361][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4551'. [ 726.306809][T25283] xt_l2tp: missing protocol rule (udp|l2tpip) [ 726.357268][T25287] openvswitch: netlink: Message has 8 unknown bytes. [ 726.516881][T25280] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4553'. [ 726.616998][T25286] v: renamed from veth0_vlan [ 726.696651][T25293] netlink: 'syz.5.4557': attribute type 1 has an invalid length. [ 726.824146][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4557'. [ 726.824174][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4557'. [ 726.956504][T25293] bond1: entered promiscuous mode [ 726.957756][T25293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.433302][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.593891][T25332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4563'. [ 728.954955][ T5278] v: left promiscuous mode [ 728.968224][T16232] v: entered promiscuous mode [ 730.725992][T25409] FAULT_INJECTION: forcing a failure. [ 730.725992][T25409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.726029][T25409] CPU: 0 UID: 0 PID: 25409 Comm: syz.5.4571 Not tainted syzkaller #0 PREEMPT(full) [ 730.726055][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.726071][T25409] Call Trace: [ 730.726080][T25409] [ 730.726091][T25409] dump_stack_lvl+0xe8/0x150 [ 730.726148][T25409] should_fail_ex+0x410/0x560 [ 730.726182][T25409] _copy_to_user+0x31/0xb0 [ 730.726216][T25409] simple_read_from_buffer+0xe1/0x170 [ 730.726257][T25409] proc_fail_nth_read+0x1bb/0x230 [ 730.726280][T25409] ? common_file_perm+0x20e/0x2b0 [ 730.726312][T25409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.726344][T25409] ? rw_verify_area+0x24a/0x4c0 [ 730.726380][T25409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.726402][T25409] vfs_read+0x213/0xa80 [ 730.726441][T25409] ? __pfx___mutex_lock+0x10/0x10 [ 730.726475][T25409] ? __pfx_vfs_read+0x10/0x10 [ 730.726510][T25409] ? __fget_files+0x2a/0x420 [ 730.726548][T25409] ? __fget_files+0x3a2/0x420 [ 730.726579][T25409] ? __fget_files+0x2a/0x420 [ 730.726637][T25409] ksys_read+0x150/0x270 [ 730.726674][T25409] ? __pfx_ksys_read+0x10/0x10 [ 730.726720][T25409] do_syscall_64+0x166/0x520 [ 730.726750][T25409] ? trace_irq_disable+0x3b/0x140 [ 730.726773][T25409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.726797][T25409] ? clear_bhb_loop+0x70/0xc0 [ 730.726826][T25409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.726849][T25409] RIP: 0033:0x7f27b6b5e98e [ 730.726870][T25409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 730.726890][T25409] RSP: 002b:00007f27b7aeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 730.726914][T25409] RAX: ffffffffffffffda RBX: 00007f27b7aeb6c0 RCX: 00007f27b6b5e98e [ 730.726931][T25409] RDX: 000000000000000f RSI: 00007f27b7aeb0a0 RDI: 0000000000000007 [ 730.726947][T25409] RBP: 00007f27b7aeb090 R08: 0000000000000000 R09: 0000000000000000 [ 730.726961][T25409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.726976][T25409] R13: 00007f27b6e26038 R14: 00007f27b6e25fa0 R15: 00007ffc4bafad18 [ 730.727012][T25409] [ 730.944687][T25406] netlink: 'syz.0.4570': attribute type 1 has an invalid length. [ 730.944743][T25406] __nla_validate_parse: 1 callbacks suppressed [ 730.944784][T25406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4570'. [ 731.266688][T25422] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4574'. [ 731.451380][T25428] netlink: 'syz.0.4576': attribute type 1 has an invalid length. [ 731.478832][T25420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4573'. [ 731.596661][T25428] bond10: entered promiscuous mode [ 731.597151][T25428] 8021q: adding VLAN 0 to HW filter on device bond10 [ 731.898916][T25428] 8021q: adding VLAN 0 to HW filter on device bond10 [ 731.899355][T25428] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 731.899378][T25428] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 731.992362][T25428] bond10: (slave xfrm1): making interface the new active one [ 731.992389][T25428] xfrm1: entered promiscuous mode [ 732.102467][T25428] xfrm1: left promiscuous mode [ 732.506686][T25465] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4579'. [ 732.581936][T25469] netlink: 'syz.0.4581': attribute type 3 has an invalid length. [ 732.581990][T25469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'. [ 732.672904][T25472] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 733.323271][T25486] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4586'. [ 733.545843][T25496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 733.654248][T25489] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4587'. [ 734.144175][T25512] syzkaller1: entered promiscuous mode [ 734.144203][T25512] syzkaller1: entered allmulticast mode [ 734.328986][T25523] ip_tables: iptables: counters copy to user failed while replacing table [ 734.763379][T25535] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4596'. [ 734.763407][T25535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.806545][T25543] ip6tnl0: mtu less than device minimum [ 735.064797][T25560] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4600'. [ 735.851984][T25586] lo speed is unknown, defaulting to 1000 [ 735.876330][T25586] wg2 speed is unknown, defaulting to 1000 [ 736.180237][T25598] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 736.221170][T25598] syzkaller0: entered promiscuous mode [ 736.221197][T25598] syzkaller0: entered allmulticast mode [ 736.304201][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4607'. [ 736.400031][ T1704] block nbd1: Possible stuck request ffff88807fe84b40: control (read@0,1024B). Runtime 120 seconds [ 736.400078][ T1704] block nbd1: Possible stuck request ffff88807fe84d00: control (read@1024,1024B). Runtime 120 seconds [ 736.400109][ T1704] block nbd1: Possible stuck request ffff88807fe84ec0: control (read@2048,1024B). Runtime 120 seconds [ 736.400139][ T1704] block nbd1: Possible stuck request ffff88807fe85080: control (read@3072,1024B). Runtime 120 seconds [ 736.835586][T25629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.343996][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 737.344022][T25640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4617'. [ 737.395543][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4619'. [ 737.411058][T25640] netlink: 'syz.1.4617': attribute type 3 has an invalid length. [ 737.411125][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 737.669233][T25645] x_tables: duplicate underflow at hook 2 [ 737.683327][T25647] syzkaller0: entered promiscuous mode [ 737.683395][T25647] syzkaller0: entered allmulticast mode [ 737.707947][T25647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4621'. [ 737.798002][T25651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4621'. [ 738.215355][T25661] can: request_module (can-proto-0) failed. [ 738.456051][T25680] netlink: 'syz.0.4628': attribute type 16 has an invalid length. [ 738.456091][T25680] netlink: 'syz.0.4628': attribute type 17 has an invalid length. [ 738.460329][T25682] netlink: 'syz.0.4628': attribute type 16 has an invalid length. [ 738.460350][T25682] netlink: 'syz.0.4628': attribute type 17 has an invalid length. [ 738.503043][T25678] x_tables: duplicate underflow at hook 2 [ 738.548896][T25680] v: left promiscuous mode [ 738.582492][T25692] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4631'. [ 738.587352][T25680] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 738.627063][T25680] geneve2: left promiscuous mode [ 738.680823][T25680] bond5: left promiscuous mode [ 738.680851][T25680] bond5: left allmulticast mode [ 738.693586][T25680] bridge3: left promiscuous mode [ 738.693612][T25680] bridge3: left allmulticast mode [ 738.700106][T25680] bond7: left promiscuous mode [ 738.700132][T25680] bond7: left allmulticast mode [ 738.731887][T25680] bond9: left promiscuous mode [ 738.744256][T12600] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.749736][T12600] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.749866][T12600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.803401][T12600] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.995208][T25700] tipc: Enabling of bearer rejected, failed to enable media [ 738.995610][T25700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4633'. [ 739.557042][T25732] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4640'. [ 739.670658][T25738] FAULT_INJECTION: forcing a failure. [ 739.670658][T25738] name failslab, interval 1, probability 0, space 0, times 0 [ 739.670707][T25738] CPU: 1 UID: 0 PID: 25738 Comm: syz.6.4641 Not tainted syzkaller #0 PREEMPT(full) [ 739.670731][T25738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.670744][T25738] Call Trace: [ 739.670753][T25738] [ 739.670762][T25738] dump_stack_lvl+0xe8/0x150 [ 739.670802][T25738] should_fail_ex+0x410/0x560 [ 739.670833][T25738] ? __alloc_skb+0x1db/0x7a0 [ 739.670862][T25738] should_failslab+0xa8/0x100 [ 739.670893][T25738] ? __alloc_skb+0x1db/0x7a0 [ 739.670919][T25738] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 739.670955][T25738] ? __alloc_skb+0x18d/0x7a0 [ 739.670984][T25738] ? __alloc_skb+0x1db/0x7a0 [ 739.671023][T25738] __alloc_skb+0x1db/0x7a0 [ 739.671057][T25738] netlink_sendmsg+0x5d4/0xb40 [ 739.671092][T25738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.671125][T25738] ? apparmor_socket_sendmsg+0x98/0x360 [ 739.671155][T25738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.671177][T25738] sock_sendmsg_nosec+0x13a/0x180 [ 739.671206][T25738] ____sys_sendmsg+0x54e/0x850 [ 739.671244][T25738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.671288][T25738] ? import_iovec+0x73/0xa0 [ 739.671321][T25738] ___sys_sendmsg+0x2a5/0x360 [ 739.671351][T25738] ? __lock_acquire+0x747/0x2de0 [ 739.671381][T25738] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.671452][T25738] ? __fget_files+0x2a/0x420 [ 739.671517][T25738] ? __fget_files+0x3a2/0x420 [ 739.671560][T25738] __x64_sys_sendmsg+0x1b1/0x290 [ 739.671597][T25738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.671654][T25738] do_syscall_64+0x166/0x520 [ 739.671687][T25738] ? trace_irq_disable+0x3b/0x140 [ 739.671711][T25738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.671735][T25738] ? clear_bhb_loop+0x70/0xc0 [ 739.671764][T25738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.671787][T25738] RIP: 0033:0x7f226519e159 [ 739.671809][T25738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.671830][T25738] RSP: 002b:00007f22660ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.671855][T25738] RAX: ffffffffffffffda RBX: 00007f2265425fa0 RCX: 00007f226519e159 [ 739.671873][T25738] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 739.671889][T25738] RBP: 00007f22660ec090 R08: 0000000000000000 R09: 0000000000000000 [ 739.671904][T25738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.671919][T25738] R13: 00007f2265426038 R14: 00007f2265425fa0 R15: 00007ffd4e1fedb8 [ 739.671956][T25738] [ 739.972273][T12603] IPVS: starting estimator thread 0... [ 740.062294][T25740] IPVS: using max 27 ests per chain, 64800 per kthread [ 740.264522][T25745] bond3: (slave syz_tun): Removing an active aggregator [ 740.271348][T25745] bond3: (slave syz_tun): Releasing backup interface [ 740.306224][ T10] s`z1: Port: 1 Link DOWN [ 740.437898][T25756] netlink: 'syz.6.4647': attribute type 3 has an invalid length. [ 740.437924][T25756] netlink: 'syz.6.4647': attribute type 1 has an invalid length. [ 741.041395][T25788] netlink: zone id is out of range [ 741.041416][T25788] netlink: zone id is out of range [ 741.041427][T25788] netlink: zone id is out of range [ 741.041437][T25788] netlink: zone id is out of range [ 741.041447][T25788] netlink: zone id is out of range [ 741.041456][T25788] netlink: zone id is out of range [ 741.041470][T25788] netlink: zone id is out of range [ 741.041484][T25788] netlink: zone id is out of range [ 741.041494][T25788] netlink: zone id is out of range [ 741.041504][T25788] netlink: zone id is out of range [ 741.849399][T25801] __nla_validate_parse: 4 callbacks suppressed [ 741.849421][T25801] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4657'. [ 742.679020][T25781] bond_slave_0: left promiscuous mode [ 742.679124][T25781] bond_slave_0: left allmulticast mode [ 742.719855][T25781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.734671][T25781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.213493][T25781] syzkaller0: left promiscuous mode [ 743.213519][T25781] syzkaller0: left allmulticast mode [ 743.215676][T25781] bond1: left promiscuous mode [ 743.605284][ T6852] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.605325][ T6852] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.605380][ T6852] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.605408][ T6852] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.605445][ T6852] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.605472][ T6852] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.605508][ T6852] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.605556][ T6852] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.810290][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4665'. [ 744.236172][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4671'. [ 744.236543][T25881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4671'. [ 744.315514][ T148] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.325104][ T148] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.325341][ T148] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.325440][ T148] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.527044][T25890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4674'. [ 744.840869][T25905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4679'. [ 744.840888][T25905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4679'. [ 745.779650][T25943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4690'. [ 746.170795][T25924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.575080][T25951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4691'. [ 747.276639][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.135925][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4693'. [ 749.276773][T25967] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4697'. [ 749.780073][T25996] x_tables: duplicate entry at hook 2 [ 749.794831][T25996] block nbd2: server does not support multiple connections per device. [ 749.795176][T25996] block nbd2: shutting down sockets [ 750.061705][T26001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4704'. [ 750.697192][T26023] netlink: 'syz.1.4709': attribute type 10 has an invalid length. [ 750.697231][T26023] dummy0: left promiscuous mode [ 750.701911][T26028] netlink: 'syz.1.4709': attribute type 10 has an invalid length. [ 750.757031][T26023] dummy0: entered promiscuous mode [ 750.766393][T26032] netlink: 'syz.1.4709': attribute type 10 has an invalid length. [ 750.784312][T26023] team0: Port device dummy0 added [ 750.861927][T26032] dummy0 (unregistering): left promiscuous mode [ 750.881220][T26032] team0: Port device dummy0 removed [ 750.926708][T26031] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.4710'. [ 751.305186][T26054] batman_adv: batadv0: Adding interface: syzkaller0 [ 751.305207][T26054] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.305243][T26054] batman_adv: batadv0: Interface activated: syzkaller0 [ 751.374953][T26053] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 751.448593][T26053] batman_adv: batadv0: Removing interface: syzkaller0 [ 751.660077][T26075] netlink: 'syz.1.4721': attribute type 23 has an invalid length. [ 751.660101][T26075] netlink: 'syz.1.4721': attribute type 21 has an invalid length. [ 751.660119][T26075] IPv6: NLM_F_CREATE should be specified when creating new route [ 751.905829][T26087] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4725'. [ 752.000168][T26087] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4725'. [ 752.203952][T26110] netlink: 'syz.0.4731': attribute type 28 has an invalid length. [ 752.578752][T26121] x_tables: duplicate underflow at hook 1 [ 752.619959][ T5632] Bluetooth: hci7: SCO packet too small [ 752.836017][T26129] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4737'. [ 753.411724][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'. [ 753.653529][T26170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4748'. [ 753.653603][T26170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4748'. [ 753.957916][T26179] bond2: (slave batadv0): Releasing active interface [ 754.005005][T26183] ieee802154 phy1 wpan1: encryption failed: -126 [ 754.158688][T26198] __nla_validate_parse: 3 callbacks suppressed [ 754.158714][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4756'. [ 754.284560][T26193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4756'. [ 754.639005][T26219] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4762'. [ 754.895354][T26231] syzkaller0: entered promiscuous mode [ 754.895373][T26231] syzkaller0: entered allmulticast mode [ 755.336409][T26204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.870719][T26250] syzkaller0: entered promiscuous mode [ 755.870745][T26250] syzkaller0: entered allmulticast mode [ 756.064011][ T5632] Bluetooth: hci7: link tx timeout [ 756.068148][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 756.681690][T26295] syz.6.4780: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 756.681769][T26295] CPU: 1 UID: 0 PID: 26295 Comm: syz.6.4780 Not tainted syzkaller #0 PREEMPT(full) [ 756.681796][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.681811][T26295] Call Trace: [ 756.681821][T26295] [ 756.681833][T26295] dump_stack_lvl+0xe8/0x150 [ 756.681874][T26295] warn_alloc+0x24d/0x270 [ 756.681901][T26295] ? kasan_save_track+0x4f/0x80 [ 756.681925][T26295] ? kasan_save_track+0x3e/0x80 [ 756.681960][T26295] ? __pfx_warn_alloc+0x10/0x10 [ 756.681982][T26295] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 756.682017][T26295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.682062][T26295] __vmalloc_node_range_noprof+0x127/0x1540 [ 756.682123][T26295] ? rcu_is_watching+0x16/0xb0 [ 756.682158][T26295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 756.682194][T26295] ? __kmalloc_cache_noprof+0x321/0x600 [ 756.682221][T26295] ? __kmalloc_cache_noprof+0x14d/0x600 [ 756.682245][T26295] ? xskq_create+0x56/0x220 [ 756.682280][T26295] xskq_create+0x148/0x220 [ 756.682313][T26295] ? xsk_init_queue+0x8a/0xe0 [ 756.682344][T26295] xsk_init_queue+0x8a/0xe0 [ 756.682383][T26295] xsk_setsockopt+0x5e0/0x960 [ 756.682414][T26295] ? __pfx_xsk_setsockopt+0x10/0x10 [ 756.682450][T26295] ? __pfx_aa_sk_perm+0x10/0x10 [ 756.682485][T26295] ? aa_sock_opt_perm+0x142/0x1e0 [ 756.682522][T26295] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 756.682552][T26295] ? __pfx_xsk_setsockopt+0x10/0x10 [ 756.682582][T26295] do_sock_setsockopt+0x17c/0x1b0 [ 756.682620][T26295] __x64_sys_setsockopt+0x13d/0x1b0 [ 756.682659][T26295] do_syscall_64+0x166/0x520 [ 756.682692][T26295] ? trace_irq_disable+0x3b/0x140 [ 756.682711][T26295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.682734][T26295] ? clear_bhb_loop+0x70/0xc0 [ 756.682762][T26295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.682786][T26295] RIP: 0033:0x7f226519e159 [ 756.682807][T26295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.682827][T26295] RSP: 002b:00007f22660ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 756.682852][T26295] RAX: ffffffffffffffda RBX: 00007f2265425fa0 RCX: 00007f226519e159 [ 756.682869][T26295] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 756.682886][T26295] RBP: 00007f226523506b R08: 0000000000000004 R09: 0000000000000000 [ 756.682901][T26295] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.682917][T26295] R13: 00007f2265426038 R14: 00007f2265425fa0 R15: 00007ffd4e1fedb8 [ 756.682955][T26295] [ 756.820232][T26295] Mem-Info: [ 756.820296][T26295] active_anon:8946 inactive_anon:0 isolated_anon:0 [ 756.820296][T26295] active_file:0 inactive_file:43830 isolated_file:0 [ 756.820296][T26295] unevictable:0 dirty:84 writeback:0 [ 756.820296][T26295] slab_reclaimable:12352 slab_unreclaimable:119757 [ 756.820296][T26295] mapped:45207 shmem:583 pagetables:1539 [ 756.820296][T26295] sec_pagetables:0 bounce:0 [ 756.820296][T26295] kernel_misc_reclaimable:0 [ 756.820296][T26295] free:1213656 free_pcp:18401 free_cma:0 [ 756.820460][T26295] Node 0 active_anon:35784kB inactive_anon:0kB active_file:0kB inactive_file:175116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180828kB dirty:336kB writeback:0kB shmem:2332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16964kB pagetables:6012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 756.820674][T26295] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 756.820850][T26295] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.821042][T26295] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 756.821153][T26295] Node 0 DMA32 free:895356kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35784kB inactive_anon:0kB active_file:0kB inactive_file:175116kB unevictable:0kB writepending:336kB zspages:0kB present:3129332kB managed:2546844kB mlocked:0kB bounce:0kB free_pcp:73604kB local_pcp:17332kB free_cma:0kB [ 756.827415][T26295] lowmem_reserve[]: 0 0 0 0 0 [ 756.827611][T26295] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.832787][T26295] lowmem_reserve[]: 0 0 0 0 0 [ 756.832833][T26295] Node 1 Normal free:3943908kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.832899][T26295] lowmem_reserve[]: 0 0 0 0 0 [ 756.832947][T26295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 756.833082][T26295] Node 0 DMA32: 1904*4kB (UME) 1543*8kB (UME) 909*16kB (UM) 1467*32kB (UME) 451*64kB (UME) 41*128kB (UME) 4*256kB (UM) 15*512kB (UM) 25*1024kB (UM) 12*2048kB (UME) 176*4096kB (UM) = 895336kB [ 756.833266][T26295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 756.833379][T26295] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 7*32kB (UM) 6*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3943908kB [ 756.838162][T26295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.838216][T26295] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.838268][T26295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.841251][T26295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.841311][T26295] 44409 total pagecache pages [ 756.841334][T26295] 0 pages in swap cache [ 756.841362][T26295] Free swap = 124996kB [ 756.841385][T26295] Total swap = 124996kB [ 756.841418][T26295] 2097051 pages RAM [ 756.841440][T26295] 0 pages HighMem/MovableOnly [ 756.841462][T26295] 428724 pages reserved [ 756.841484][T26295] 0 pages cma reserved [ 757.825940][T26312] sctp: [Deprecated]: syz.1.4784 (pid 26312) Use of int in maxseg socket option. [ 757.825940][T26312] Use struct sctp_assoc_value instead [ 758.074088][T26319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4786'. [ 758.152284][ T5632] Bluetooth: hci7: command 0x0406 tx timeout [ 758.216667][T26336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4791'. [ 758.274314][T26339] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4791'. [ 758.334246][T26340] nbd2: detected capacity change from 0 to 32 [ 758.334642][ T5625] block nbd2: Receive control failed (result -22) [ 758.360694][ T2074] block nbd2: Dead connection, failed to find a fallback [ 758.360722][ T2074] block nbd2: shutting down sockets [ 758.360738][ T2074] blk_print_req_error: 97 callbacks suppressed [ 758.360753][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.360782][ T2074] buffer_io_error: 138 callbacks suppressed [ 758.360795][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.360972][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.361001][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.361121][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.361149][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.361403][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.361434][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.361564][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.361592][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.361750][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.361778][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.361933][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.361962][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.378775][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.378878][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.379002][T21995] ldm_validate_partition_table(): Disk read failed. [ 758.379745][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.379847][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.380162][ T2074] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.380234][ T2074] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.403556][T21995] Dev nbd2: unable to read RDB block 0 [ 758.424037][T21995] nbd2: unable to read partition table [ 758.571359][T21995] ldm_validate_partition_table(): Disk read failed. [ 758.589169][T21995] Dev nbd2: unable to read RDB block 0 [ 758.614858][T21995] nbd2: unable to read partition table [ 759.140125][T26349] netlink: 'syz.6.4792': attribute type 3 has an invalid length. [ 759.140147][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4792'. [ 759.545420][T26369] dummy0: entered promiscuous mode [ 759.779473][T26378] lo speed is unknown, defaulting to 1000 [ 759.794843][T26378] wg2 speed is unknown, defaulting to 1000 [ 760.057037][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4805'. [ 760.057067][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4805'. [ 760.059105][T26389] syzkaller0: entered promiscuous mode [ 760.059127][T26389] syzkaller0: entered allmulticast mode [ 760.211013][T26391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.273960][T26394] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4807'. [ 760.898503][T21214] Bluetooth: hci2: link tx timeout [ 760.898525][T21214] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 761.279590][T26432] netlink: 'syz.7.4816': attribute type 16 has an invalid length. [ 761.279617][T26432] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.4816'. [ 761.347359][T26435] net_ratelimit: 497 callbacks suppressed [ 761.347380][T26435] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 761.347427][T26435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.445485][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'. [ 761.448325][T26439] netlink: zone id is out of range [ 761.448340][T26439] netlink: zone id is out of range [ 761.448349][T26439] netlink: zone id is out of range [ 761.448359][T26439] netlink: zone id is out of range [ 761.448368][T26439] netlink: zone id is out of range [ 761.448378][T26439] netlink: zone id is out of range [ 761.448390][T26439] netlink: zone id is out of range [ 761.448400][T26439] netlink: zone id is out of range [ 762.953179][ T5625] Bluetooth: hci2: command 0x0405 tx timeout [ 765.458893][T26468] netlink: 616 bytes leftover after parsing attributes in process `syz.5.4827'. [ 765.460971][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'. [ 765.635183][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'. [ 765.768177][T26489] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4829'. [ 766.214253][ T12] tipc: Subscription rejected, illegal request [ 766.280492][T26514] netlink: 'syz.0.4835': attribute type 10 has an invalid length. [ 766.280510][T26514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4835'. [ 766.478726][ T1704] block nbd1: Possible stuck request ffff88807fe84b40: control (read@0,1024B). Runtime 150 seconds [ 766.478773][ T1704] block nbd1: Possible stuck request ffff88807fe84d00: control (read@1024,1024B). Runtime 150 seconds [ 766.478803][ T1704] block nbd1: Possible stuck request ffff88807fe84ec0: control (read@2048,1024B). Runtime 150 seconds [ 766.478831][ T1704] block nbd1: Possible stuck request ffff88807fe85080: control (read@3072,1024B). Runtime 150 seconds [ 767.001978][T26540] lo: entered promiscuous mode [ 767.002773][T26540] lo: entered allmulticast mode [ 767.030131][T26540] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4841'. [ 767.030156][T26540] net_ratelimit: 485 callbacks suppressed [ 767.030170][T26540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.306277][T26548] netlink: 'syz.0.4844': attribute type 1 has an invalid length. [ 767.306303][T26548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4844'. [ 767.408877][T26555] netlink: 'syz.1.4849': attribute type 30 has an invalid length. [ 767.474712][T26555] netlink: 'syz.1.4849': attribute type 30 has an invalid length. [ 767.603716][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4846'. [ 767.678502][T26559] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 768.020351][T26559] xt_CT: No such helper "netbios-ns" [ 768.207390][T26552] team0: Port device team_slave_0 removed [ 768.246042][T26578] FAULT_INJECTION: forcing a failure. [ 768.246042][T26578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.246080][T26578] CPU: 1 UID: 0 PID: 26578 Comm: syz.1.4854 Not tainted syzkaller #0 PREEMPT(full) [ 768.246115][T26578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.246129][T26578] Call Trace: [ 768.246139][T26578] [ 768.246149][T26578] dump_stack_lvl+0xe8/0x150 [ 768.246187][T26578] should_fail_ex+0x410/0x560 [ 768.246221][T26578] _copy_to_user+0x31/0xb0 [ 768.246253][T26578] simple_read_from_buffer+0xe1/0x170 [ 768.246292][T26578] proc_fail_nth_read+0x1bb/0x230 [ 768.246314][T26578] ? common_file_perm+0x20e/0x2b0 [ 768.246346][T26578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.246373][T26578] ? rw_verify_area+0x24a/0x4c0 [ 768.246410][T26578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.246433][T26578] vfs_read+0x213/0xa80 [ 768.246474][T26578] ? __pfx___mutex_lock+0x10/0x10 [ 768.246508][T26578] ? __pfx_vfs_read+0x10/0x10 [ 768.246544][T26578] ? __fget_files+0x2a/0x420 [ 768.246585][T26578] ? __fget_files+0x3a2/0x420 [ 768.246616][T26578] ? __fget_files+0x2a/0x420 [ 768.246658][T26578] ksys_read+0x150/0x270 [ 768.246695][T26578] ? __pfx_ksys_read+0x10/0x10 [ 768.246744][T26578] do_syscall_64+0x166/0x520 [ 768.246776][T26578] ? trace_irq_disable+0x3b/0x140 [ 768.246799][T26578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.246824][T26578] ? clear_bhb_loop+0x70/0xc0 [ 768.246852][T26578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.246876][T26578] RIP: 0033:0x7f575bf5e98e [ 768.246897][T26578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 768.246918][T26578] RSP: 002b:00007f575ce32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 768.246944][T26578] RAX: ffffffffffffffda RBX: 00007f575ce336c0 RCX: 00007f575bf5e98e [ 768.246962][T26578] RDX: 000000000000000f RSI: 00007f575ce330a0 RDI: 0000000000000004 [ 768.246977][T26578] RBP: 00007f575ce33090 R08: 0000000000000000 R09: 0000000000000000 [ 768.246991][T26578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.247006][T26578] R13: 00007f575c226038 R14: 00007f575c225fa0 R15: 00007fffcae34aa8 [ 768.247045][T26578] [ 768.476198][T26581] syzkaller1: entered promiscuous mode [ 768.476274][T26581] syzkaller1: entered allmulticast mode [ 768.679881][T26587] sctp: [Deprecated]: syz.6.4857 (pid 26587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.679881][T26587] Use struct sctp_sack_info instead [ 768.721878][T26592] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 768.721902][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 769.015142][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4861'. [ 769.340238][T26618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.359598][T26620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.685161][T26631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 772.110792][T26734] __nla_validate_parse: 2 callbacks suppressed [ 772.110815][T26734] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4893'. [ 772.193872][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4891'. [ 772.810770][T26745] netlink: NAT attribute has 1 unknown bytes [ 772.810808][T26745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.943963][T26752] netlink: 'syz.1.4899': attribute type 1 has an invalid length. [ 773.046950][T26752] bond4: entered promiscuous mode [ 773.047452][T26752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.051389][T26752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4899'. [ 773.051424][T26752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4899'. [ 773.441316][T26752] bond4: (slave bridge3): making interface the new active one [ 773.441345][T26752] bridge3: entered promiscuous mode [ 773.469132][T26752] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 773.531245][T26752] syzkaller0: entered promiscuous mode [ 773.531272][T26752] syzkaller0: entered allmulticast mode [ 773.906363][T26773] openvswitch: netlink: Unknown key attributes 1 [ 774.292307][T26788] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4906'. [ 774.389268][T26791] netlink: 'syz.1.4905': attribute type 1 has an invalid length. [ 774.467224][T26791] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.579152][T26794] bond5: (slave gretap2): making interface the new active one [ 774.596399][T26794] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 775.317972][T26826] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode [ 775.318033][T26826] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode [ 775.320765][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4915'. [ 775.349076][T26829] netlink: zone id is out of range [ 775.349119][T26829] netlink: zone id is out of range [ 775.349143][T26829] netlink: zone id is out of range [ 775.349158][T26829] netlink: zone id is out of range [ 775.349181][T26829] netlink: zone id is out of range [ 775.349203][T26829] netlink: zone id is out of range [ 775.349233][T26829] netlink: zone id is out of range [ 775.814561][T26844] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4918'. [ 776.097655][T26859] netlink: 'syz.7.4923': attribute type 11 has an invalid length. [ 776.200001][T26864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4920'. [ 776.200043][T26864] IPv6: NLM_F_CREATE should be specified when creating new route [ 776.259288][T26860] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4923'. [ 777.375036][T26906] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4932'. [ 777.727121][T26918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'. [ 777.777576][T26918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 777.833438][T26918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 777.836307][T26918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4934'. [ 777.862609][T26918] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 777.869185][T26918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 778.735286][T26949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4944'. [ 778.808132][T26954] FAULT_INJECTION: forcing a failure. [ 778.808132][T26954] name failslab, interval 1, probability 0, space 0, times 0 [ 778.808168][T26954] CPU: 0 UID: 0 PID: 26954 Comm: syz.7.4946 Not tainted syzkaller #0 PREEMPT(full) [ 778.808204][T26954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.808219][T26954] Call Trace: [ 778.808228][T26954] [ 778.808238][T26954] dump_stack_lvl+0xe8/0x150 [ 778.808278][T26954] should_fail_ex+0x410/0x560 [ 778.808310][T26954] should_failslab+0xa8/0x100 [ 778.808341][T26954] __kmalloc_noprof+0xfe/0x720 [ 778.808362][T26954] ? rcu_is_watching+0x16/0xb0 [ 778.808391][T26954] ? tomoyo_realpath_from_path+0xef/0x640 [ 778.808421][T26954] ? tomoyo_realpath_from_path+0xef/0x640 [ 778.808461][T26954] tomoyo_realpath_from_path+0xef/0x640 [ 778.808505][T26954] ? tomoyo_path_number_perm+0x219/0x5f0 [ 778.808536][T26954] tomoyo_path_number_perm+0x246/0x5f0 [ 778.808567][T26954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 778.808593][T26954] ? __lock_acquire+0x747/0x2de0 [ 778.808635][T26954] ? hook_file_ioctl+0x1f2/0x600 [ 778.808686][T26954] ? __fget_files+0x2a/0x420 [ 778.808723][T26954] ? __fget_files+0x2a/0x420 [ 778.808754][T26954] ? __fget_files+0x3a2/0x420 [ 778.808784][T26954] ? __fget_files+0x2a/0x420 [ 778.808820][T26954] security_file_ioctl+0xc3/0x2a0 [ 778.808849][T26954] __se_sys_ioctl+0x47/0x170 [ 778.808878][T26954] do_syscall_64+0x166/0x520 [ 778.808909][T26954] ? trace_irq_disable+0x3b/0x140 [ 778.808933][T26954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.808958][T26954] ? clear_bhb_loop+0x70/0xc0 [ 778.808987][T26954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.809010][T26954] RIP: 0033:0x7f5d00d9e159 [ 778.809031][T26954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.809051][T26954] RSP: 002b:00007f5cfeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.809076][T26954] RAX: ffffffffffffffda RBX: 00007f5d01025fa0 RCX: 00007f5d00d9e159 [ 778.809094][T26954] RDX: 0000200000000040 RSI: 00000000000089fb RDI: 0000000000000003 [ 778.809110][T26954] RBP: 00007f5cfeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 778.809125][T26954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.809139][T26954] R13: 00007f5d01026038 R14: 00007f5d01025fa0 R15: 00007ffd1580db78 [ 778.809185][T26954] [ 778.809234][T26954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.154748][T26956] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4945'. [ 779.410087][T26962] netlink: 'syz.6.4948': attribute type 16 has an invalid length. [ 779.497763][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4948'. [ 779.519376][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4951'. [ 779.569493][T26970] net_ratelimit: 403 callbacks suppressed [ 779.569516][T26970] openvswitch: netlink: IP tunnel dst address not specified [ 779.569545][T26970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.694201][T26966] nbd: couldn't find a device at index 64 [ 780.116622][T26985] Cannot find del_set index 3 as target [ 780.887061][T27022] netlink: 'syz.0.4963': attribute type 18 has an invalid length. [ 780.967617][T12584] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.969383][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.969427][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.969507][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.610684][T27053] bridge0: port 1(macsec1) entered blocking state [ 781.610803][T27053] bridge0: port 1(macsec1) entered disabled state [ 781.610969][T27053] macsec1: entered allmulticast mode [ 781.610987][T27053] bridge0: entered allmulticast mode [ 781.611032][T27053] bridge0: entered promiscuous mode [ 781.645263][T27053] macsec1: left allmulticast mode [ 781.645286][T27053] bridge0: left allmulticast mode [ 781.680563][T27062] netlink: 'syz.7.4971': attribute type 1 has an invalid length. [ 781.846295][ T5349] bridge0: left promiscuous mode [ 782.643722][T27098] __nla_validate_parse: 11 callbacks suppressed [ 782.643745][T27098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4981'. [ 782.921313][T27104] bond6: entered allmulticast mode [ 783.070537][T27108] 8021q: adding VLAN 0 to HW filter on device bond7 [ 783.085073][T27108] bond7: entered allmulticast mode [ 783.085528][T27108] bond6: (slave bond7): Enslaving as an active interface with an up link [ 783.125262][T27117] netlink: 'syz.0.4983': attribute type 1 has an invalid length. [ 783.159306][T27104] bond6 (unregistering): (slave bond7): Releasing backup interface [ 783.160686][T27104] bond7: left allmulticast mode [ 783.189783][T27104] bond6 (unregistering): Released all slaves [ 783.597114][T27117] 8021q: adding VLAN 0 to HW filter on device bond11 [ 783.706410][T27119] bond11: (slave gretap1): making interface the new active one [ 783.708986][T27119] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 784.215550][T27150] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4989'. [ 784.513483][T27161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4996'. [ 784.514030][T27159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4993'. [ 784.749964][T27161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'. [ 784.865990][T27176] tipc: Trying to set illegal importance in message [ 784.869083][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4998'. [ 784.921665][T27180] bond1: entered promiscuous mode [ 784.979123][T27176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4998'. [ 785.015015][T27187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5001'. [ 785.192290][T21214] Bluetooth: hci1: command 0x0405 tx timeout [ 786.093892][T27219] netlink: 'syz.1.5008': attribute type 49 has an invalid length. [ 786.271775][T27219] ip6gretap0: entered allmulticast mode [ 786.622261][T27234] netlink: 'syz.1.5013': attribute type 1 has an invalid length. [ 786.849079][T27247] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5014'. [ 786.849105][T27247] IPv6: NLM_F_CREATE should be specified when creating new route [ 787.141370][T27259] netlink: 4416 bytes leftover after parsing attributes in process `syz.7.5019'. [ 787.440391][T27253] tun0: tun_chr_ioctl cmd 1074025675 [ 787.440419][T27253] tun0: persist disabled [ 787.635761][T27283] netlink: 'syz.0.5020': attribute type 1 has an invalid length. [ 787.898059][T27283] 8021q: adding VLAN 0 to HW filter on device bond12 [ 788.421640][T27316] __nla_validate_parse: 32 callbacks suppressed [ 788.421663][T27316] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5026'. [ 788.476114][T27316] vlan0: entered promiscuous mode [ 788.476134][T27316] bridge0: entered promiscuous mode [ 789.239881][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5033'. [ 789.304987][T27346] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5034'. [ 789.311569][T27344] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 789.740396][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5035'. [ 789.800672][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5035'. [ 790.519359][T27392] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5042'. [ 790.628012][T27399] tipc: Enabled bearer , priority 0 [ 790.628590][T27399] syzkaller0: entered promiscuous mode [ 790.628610][T27399] syzkaller0: entered allmulticast mode [ 790.631613][T27399] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5044'. [ 790.631917][T27399] syzkaller0: mtu less than device minimum [ 790.770204][T27405] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5042'. [ 790.799679][T27405] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5042'. [ 790.799725][T27405] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5042'. [ 790.968880][T27401] netlink: 'syz.5.5045': attribute type 10 has an invalid length. [ 791.308825][T27405] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.310533][T27405] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.550223][T27409] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 791.568286][T27409] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 791.917021][T27405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.978902][T27405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.201397][T27401] team0 (unregistering): Port device team_slave_0 removed [ 792.216883][T27401] team0 (unregistering): Port device team_slave_1 removed [ 792.256714][T12584] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.256778][T12584] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.256818][T12584] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.256856][T12584] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.288338][T16826] tipc: Node number set to 839695970 [ 792.467848][T27418] netlink: 'syz.0.5049': attribute type 1 has an invalid length. [ 792.826211][T27421] bond13: (slave geneve3): making interface the new active one [ 792.828154][T27421] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 793.024151][T12585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.026484][ T1257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.026561][ T1257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.026603][ T1257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.352940][ T32] INFO: task syz.2.3970:22671 blocked for more than 143 seconds. [ 793.352976][ T32] Not tainted syzkaller #0 [ 793.352989][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.353000][ T32] task:syz.2.3970 state:D stack:27328 pid:22671 tgid:22653 ppid:19635 task_flags:0x400140 flags:0x00080002 [ 793.353071][ T32] Call Trace: [ 793.353079][ T32] [ 793.353094][ T32] __schedule+0x17db/0x58f0 [ 793.353161][ T32] ? __pfx___schedule+0x10/0x10 [ 793.353201][ T32] ? schedule+0x90/0x2b0 [ 793.353233][ T32] schedule+0x164/0x2b0 [ 793.353264][ T32] schedule_preempt_disabled+0x13/0x30 [ 793.353293][ T32] __mutex_lock+0x7c1/0x1550 [ 793.353331][ T32] ? __mutex_lock+0x5d4/0x1550 [ 793.353367][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 793.353400][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 793.353429][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 793.353463][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 793.353493][ T32] ? do_syscall_64+0x166/0x520 [ 793.353548][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.353584][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 793.353622][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 793.353672][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 793.353703][ T32] ? trace_kmalloc+0x2a/0xf0 [ 793.353728][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 793.353755][ T32] ? __nla_parse+0x40/0x60 [ 793.353869][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 793.353903][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 793.353942][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 793.353990][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 793.354036][ T32] ? bpf_lsm_capable+0x9/0x20 [ 793.354058][ T32] ? security_capable+0x7e/0x2c0 [ 793.354094][ T32] genl_rcv_msg+0x614/0x7a0 [ 793.354132][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.354162][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 793.354208][ T32] netlink_rcv_skb+0x226/0x4a0 [ 793.354234][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.354266][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.354307][ T32] ? down_read+0x2be/0x330 [ 793.354359][ T32] genl_rcv+0x28/0x40 [ 793.354385][ T32] netlink_unicast+0x7bd/0x940 [ 793.354495][ T32] netlink_sendmsg+0x813/0xb40 [ 793.354555][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.354589][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 793.354618][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.354640][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 793.354666][ T32] ____sys_sendmsg+0x54e/0x850 [ 793.354704][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.354744][ T32] ? import_iovec+0x73/0xa0 [ 793.354777][ T32] ___sys_sendmsg+0x2a5/0x360 [ 793.354807][ T32] ? __lock_acquire+0x747/0x2de0 [ 793.354836][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.354990][ T32] ? __fget_files+0x2a/0x420 [ 793.355022][ T32] ? __fget_files+0x3a2/0x420 [ 793.355062][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 793.355092][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 793.355120][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.355185][ T32] do_syscall_64+0x166/0x520 [ 793.355215][ T32] ? trace_irq_disable+0x3b/0x140 [ 793.355237][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.355261][ T32] ? clear_bhb_loop+0x70/0xc0 [ 793.355289][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.355311][ T32] RIP: 0033:0x7f97fe39e159 [ 793.355331][ T32] RSP: 002b:00007f97fc5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.355356][ T32] RAX: ffffffffffffffda RBX: 00007f97fe626540 RCX: 00007f97fe39e159 [ 793.355374][ T32] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000008 [ 793.355389][ T32] RBP: 00007f97fe43506b R08: 0000000000000000 R09: 0000000000000000 [ 793.355405][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.355418][ T32] R13: 00007f97fe6265d8 R14: 00007f97fe626540 R15: 00007ffcde0ed258 [ 793.355456][ T32] [ 793.355515][ T32] [ 793.355515][ T32] Showing all locks held in the system: [ 793.355554][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 793.355571][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 793.355655][ T32] locks held by kworker/u8:8/1257: 3, last CPU#1: [ 793.355671][ T32] #0: ffff888032284940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.355735][ T32] #1: ffffc9000561fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.355800][ T32] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 793.355874][ T32] locks held by getty/5375: 2, on CPU#1: [ 793.355891][ T32] #0: ffff888035e860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 793.355967][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 793.357285][ T32] locks held by udevd/16112: 1, on CPU#0: [ 793.357304][ T32] #0: ffff888067b83350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 793.358136][ T32] locks held by syz.2.3970/22656: 2, on CPU#0: [ 793.358157][ T32] #0: ffffffff902c61c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 793.358220][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 793.358284][ T32] locks held by syz.2.3970/22671: 2, on CPU#1: [ 793.358301][ T32] #0: ffffffff902c61c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 793.358360][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 793.358424][ T32] locks held by syz.3.4276/23973: 3, on CPU#0: [ 793.358441][ T32] #0: ffffffff902c61c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 793.358596][ T32] #1: ffff88807ff5b6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 793.358667][ T32] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 793.358730][ T32] locks held by syz.4.4329/24175: 3, on CPU#1: [ 793.358747][ T32] #0: ffffffff902c61c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 793.358806][ T32] #1: ffff88803266e6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 793.358875][ T32] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 793.358937][ T32] locks held by syz-executor/24449: 2, last CPU#0: [ 793.358954][ T32] #0: ffff8880325e02e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 793.359027][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 793.359091][ T32] locks held by syz.5.5050/27430: 1, last CPU#1: [ 793.359108][ T32] #0: ffff888076b74918 (&p->pi_lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 793.359176][ T32] locks held by syz.0.5054/27450: 2, last CPU#1: [ 793.359192][ T32] #0: ffff88807aa4b6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 793.359255][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 793.359330][ T32] locks held by syz.1.5055/27444: 2, last CPU#1: [ 793.359346][ T32] #0: ffff88807aa4d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 793.359407][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 793.359468][ T32] [ 793.359475][ T32] ============================================= [ 793.359475][ T32] [ 793.359494][ T32] NMI backtrace for cpu 0 [ 793.359509][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 793.359536][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.359550][ T32] Call Trace: [ 793.359558][ T32] [ 793.359568][ T32] dump_stack_lvl+0xe8/0x150 [ 793.359602][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 793.359628][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.359667][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 793.359696][ T32] sys_info+0x135/0x170 [ 793.359717][ T32] watchdog+0xfd7/0x1030 [ 793.359749][ T32] ? watchdog+0x1c7/0x1030 [ 793.359779][ T32] kthread+0x38b/0x480 [ 793.359802][ T32] ? __pfx_watchdog+0x10/0x10 [ 793.359822][ T32] ? __pfx_kthread+0x10/0x10 [ 793.359846][ T32] ret_from_fork+0x514/0xb70 [ 793.359870][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 793.359893][ T32] ? __switch_to+0xc89/0x1420 [ 793.359927][ T32] ? __pfx_kthread+0x10/0x10 [ 793.359950][ T32] ret_from_fork_asm+0x1a/0x30 [ 793.360009][ T32] [ 793.360073][ T32] Sending NMI from CPU 0 to CPUs 1: [ 793.360166][ C1] NMI backtrace for cpu 1 [ 793.360181][ C1] CPU: 1 UID: 0 PID: 27444 Comm: syz.1.5055 Not tainted syzkaller #0 PREEMPT(full) [ 793.360202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.360213][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 793.360244][ C1] Code: 8b 3d 64 c4 a6 0c 48 89 de 5b e9 43 82 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d f8 c3 cd 11 65 48 8b 15 f8 c3 cd 11 f7 c2 00 01 00 ff [ 793.360260][ C1] RSP: 0018:ffffc90005bff560 EFLAGS: 00000202 [ 793.360277][ C1] RAX: ffffffff82248e5e RBX: ffffea0001725380 RCX: ffff888025789f40 [ 793.360292][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.360303][ C1] RBP: 0000000000000000 R08: ffffea00017253b3 R09: 1ffffd40002e4a76 [ 793.360316][ C1] R10: dffffc0000000000 R11: fffff940002e4a77 R12: ffffea0001725380 [ 793.360330][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffea00017253b0 [ 793.360344][ C1] FS: 0000000000000000(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 793.360360][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.360373][ C1] CR2: 000000110c32331a CR3: 0000000034738000 CR4: 00000000003526f0 [ 793.360390][ C1] Call Trace: [ 793.360397][ C1] [ 793.360404][ C1] folio_remove_rmap_ptes+0x56e/0xe40 [ 793.360425][ C1] ? page_table_check_clear+0x124/0x500 [ 793.360447][ C1] ? page_table_check_clear+0x49d/0x500 [ 793.360479][ C1] __zap_vma_range+0x2302/0x4f80 [ 793.360533][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 793.360583][ C1] ? mas_find+0x6d6/0xcb0 [ 793.360611][ C1] unmap_vmas+0x390/0x550 [ 793.360636][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 793.360655][ C1] ? mas_next_slot+0xc91/0xd70 [ 793.360694][ C1] exit_mmap+0x293/0x9f0 [ 793.360724][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 793.360766][ C1] ? __pfx_exit_aio+0x10/0x10 [ 793.360802][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 793.360832][ C1] __mmput+0x118/0x420 [ 793.360857][ C1] exit_mm+0x221/0x2d0 [ 793.360877][ C1] do_exit+0x6cd/0x2360 [ 793.360898][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 793.360921][ C1] ? __pfx_do_exit+0x10/0x10 [ 793.360939][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 793.360964][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 793.360990][ C1] do_group_exit+0x22d/0x2f0 [ 793.361012][ C1] __x64_sys_exit_group+0x3f/0x40 [ 793.361032][ C1] x64_sys_call+0x18c6/0x18d0 [ 793.361049][ C1] do_syscall_64+0x166/0x520 [ 793.361074][ C1] ? trace_irq_disable+0x3b/0x140 [ 793.361093][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.361113][ C1] ? clear_bhb_loop+0x70/0xc0 [ 793.361135][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.361154][ C1] RIP: 0033:0x7f575bf9e159 [ 793.361191][ C1] Code: Unable to access opcode bytes at 0x7f575bf9e12f. [ 793.361201][ C1] RSP: 002b:00007fffcae34de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 793.361221][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f575bf9e159 [ 793.361235][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.361246][ C1] RBP: 00007fffcae34e4c R08: 0000000000000000 R09: 00000000000927c0 [ 793.361259][ C1] R10: 00007f575c226038 R11: 0000000000000246 R12: 0000000000000162 [ 793.361272][ C1] R13: 00000000000927c0 R14: 00000000000c19fa R15: 00007fffcae34ea0 [ 793.361296][ C1] [ 793.556232][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 794.515652][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 794.524782][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.534865][ T32] Call Trace: [ 794.538164][ T32] [ 794.541111][ T32] vpanic+0x56d/0xa60 [ 794.545121][ T32] ? __pfx___schedule+0x10/0x10 [ 794.549999][ T32] ? __pfx_vpanic+0x10/0x10 [ 794.554545][ T32] panic+0xc5/0xd0 [ 794.558296][ T32] ? __pfx_panic+0x10/0x10 [ 794.562738][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 794.568233][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 794.573639][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 794.579833][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 794.586017][ T32] watchdog+0x1030/0x1030 [ 794.590374][ T32] ? watchdog+0x1c7/0x1030 [ 794.594816][ T32] kthread+0x38b/0x480 [ 794.598917][ T32] ? __pfx_watchdog+0x10/0x10 [ 794.603608][ T32] ? __pfx_kthread+0x10/0x10 [ 794.608221][ T32] ret_from_fork+0x514/0xb70 [ 794.612836][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 794.617963][ T32] ? __switch_to+0xc89/0x1420 [ 794.622668][ T32] ? __pfx_kthread+0x10/0x10 [ 794.627287][ T32] ret_from_fork_asm+0x1a/0x30 [ 794.632119][ T32] [ 794.635773][ T32] Kernel Offset: disabled [ 794.640117][ T32] Rebooting in 86400 seconds..