last executing test programs: 2m17.894390144s ago: executing program 4 (id=2035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0x10000}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x78bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {0x6}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000741faffffff00000000017c0000040042801400018006000600800a000005001c009600000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r7) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f000034e000/0x4000)=nil, 0x4000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000000000)=""/31, 0x1f) r8 = accept4(r6, 0x0, 0x0, 0x800) sendto$packet(r8, &(0x7f0000002380)="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", 0x180, 0x24000804, 0x0, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x44004}, 0x40080d4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) socket$inet(0x2, 0x5, 0x6) 2m17.099274597s ago: executing program 4 (id=2041): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x24004080) 2m16.837480957s ago: executing program 4 (id=2043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf250000000000000000000000003c000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m16.730457335s ago: executing program 4 (id=2045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 2m16.634271314s ago: executing program 4 (id=2046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x17}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.443486127s ago: executing program 4 (id=2050): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x9}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) 2m7.86394811s ago: executing program 0 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r6, 0x5}, &(0x7f0000000340)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r12, 0x4) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0x5, &(0x7f00000003c0)=0x1000, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x19, 0x84, 0x0, @rand_addr=' \x01\x00', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) 2m7.509104559s ago: executing program 0 (id=2083): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x10000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x401, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x80, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x100001, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x4, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x101, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x9, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x20001ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x5, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x7, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ee, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x1}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffefffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 2m7.077233425s ago: executing program 0 (id=2087): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x500, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m6.757287608s ago: executing program 0 (id=2091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x8, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1acf, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, 0x0}, 0x4) 2m6.387783067s ago: executing program 0 (id=2096): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x15, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000023c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="d5029a660f6c1ca28ea7129c46026c66cff99cedd714790fbcef0ff2204e52bf0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@can_newroute={0x34, 0x18, 0x2cf59e71e8a15bdb, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x3}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "af2c9b0175e0a035"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x1, 0xfffffffffffffff8, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x8c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0xa}, [@generic="ed7aca3d0faabe8cefe0f34866f1138a0386bb3e2c11b375f64de5c7040f8df771f8069621883b7820ac2556d7169dab9df0a457bf45d75a95106a40693f97f06b3eea2c0695e947bee07e11950fc693f0489f67ae650868594e43337c0eeae73f23679da51afa27a8435ece3168eaf5506c748659915097"]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) r10 = socket$kcm(0x2, 0x3, 0x84) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000018000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r11, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r12, 0x400454da, 0x0) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) 2m5.691763377s ago: executing program 0 (id=2099): syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x5, 0x1a0, 0x0, &(0x7f0000000940)="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", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m1.343585932s ago: executing program 32 (id=2050): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x9}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) 1m50.933998467s ago: executing program 1 (id=2199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000002000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) 1m50.597397573s ago: executing program 33 (id=2099): syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x5, 0x1a0, 0x0, &(0x7f0000000940)="25a59da143cec1a4b2716d643234536e69cc1ef725310ac08537311a3561b4551f23e608d1621299e463f496f9feb488b69c6605772f7c837345ba1f26a29dee72325c74092d6628100bfa9f7cebe2714bd7cf7957b7a41b37923b9f26daf8707c79793331e0f71be8e36a8714148b66108090316c88373f8d6e3ff46f875bc39d3abc33613172d4b1da9e9dc6dd171f5441f85afe725379de54ef7320e1ab3fbf39450000000009036b1d772bb40538a2bdc105a20a548caa7348c7c9bf79615bf5a5006cc94c146ab797aa25c305f4edc23c293243cf82f7c280d0e4606a0849b366e4cfe06f540e33ef633b783f33e6d34841fe02d714715c7fb071513449e2a067cf2500d64355ca95eaad0a12a69e5fe40a29374469fc6e37db9f6f58d5965dcc9caa0d0a5877c8fdd43beda65bcb6292efca1f001422bf9513b340081ff5af5485a725b526ef4119fbd252f248478675e6aafba52b1e8a5aa6d7fdc43900d66b6d6a91c1b8f156fbe2ed48ec5bf6566a720771b547a977b806ac363a899568ea827c60cc52d0252043911225b170786545b147c2cec33420d4b632e813", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m50.436943868s ago: executing program 1 (id=2206): socket$inet6(0xa, 0x3, 0x2f) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000000000442fffda020000000000000000000003400000ff020000000000000000000000000001"], 0x0) 1m50.177398905s ago: executing program 1 (id=2210): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 1m49.766837779s ago: executing program 5 (id=2212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff, 0x1d000000}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) 1m49.541382741s ago: executing program 5 (id=2213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000016000000060001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000180), 0xc00}, 0x20) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x7, 0x3, 0xff, 0x10, 0x4014}, @ipv4=@gre={{0xd, 0x4, 0x0, 0x1, 0x292, 0x66, 0x0, 0xf8, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1f, 0xb, [@dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @broadcast, @private=0xa010102]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x97, 0x1, [0x7, 0xf7c3], "8147a487e2f984a459d8ec8d707213de4d3572eeeb5ada7e2a2dc651b139a6bbb17c59ab624c5564a3e950be13a4f63edc3e94909bf6c8538a21086ea963376af21b209bd7b54b5104091b1e6d779e91685cf992ab577f832cdf385ad931b83b98ff8904bc2e66b76ad08491ae0814f35d720a8563befcee78879983c3ffc79162d5b286f0fcf461e8c12c7d178d1e9b604c5ec7473bb4"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "4c6916b41caa4ed160de7e5af901e646a58e52cf8c061d086f7988b66de40130f0b28e2c9a9603fd7bd6c94dd85c18725fc908d67e1463140ba1e2269a7eb9725e47d90585cc9bd5d5543883495bc8818d9bf8c18ee83cd00ac58618b6568e75796d194f2d2fea63f16eb2dc92c52d904b047ca8c4dc8a6a743f718e9d8c54c66b7c09"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "7e615ae733a7c4065850abb9754553dcb25e2f03bd7b8db26804abe631d31a19ff39842d5da96a27bbc4fc562e9125c802eaa5398e63a178c51051d0270ad505bed7ea6a61fbc3d8556e2277edaf29855d1bcd9f5fd212ec478e83689fdb5f64e45407d9ca0cb55231a0f4e1916c97ee3a988d4c486b38563726389e331a23f7794b90af51772ef7f1d826d318a7e0feefa5f3786951160162e35f9217fb8413a7738b23b22b47cc9028c43aa00207aacfdb905520722beaa7137cb7e662a7a06dfd77b1becd31bcf328"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0xf, 0x3, 0x1, 0x0, 0x6, 0xe}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x7f, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x0, 0x1, 0x1, 0x17, 0x1, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "f3077e050a52ed32871f44ceb9a3e57b8251cca66a3268afe4ddf77365bd4bcf4913ca4588e16bc25af4549e569eeaa78928"}}}}, 0x29c) 1m49.393187145s ago: executing program 1 (id=2214): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x18, r8, 0x1, 0x81}, 0x14) sendmmsg$inet6(r5, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000400)="c708d115acf3404bb7ee342293fc28c52905ab30615d2174f5c79b3a9d03557f75ab21655c59c4e878b127bb8db61a3117096d48bb51d9fd8b54afbf7f87e6335d3dacca78a838ea09f4bb373769438f77365fef391e3b6259d5ece3e8def0690839ccb0cc0528dea9bd9d5b463be7fbe97bd8e18e8ca83e32ed8bde32d87e9bb04d2dfd5b09b725203cc6", 0x8b}, {&(0x7f0000000580)="ca5555e5a78302602335cd143378bc7ee4cbd8b2a9b09400d2495145f05dc86c472df7d1f6b147454c3b1174d022fa7b2b70d70bd7eec179f86383eb32313951a47484b883e53a2a5c0e3709015ab794943f80b9b09e6aa019d3b07286d3f646cdb7e69dde3c00cb2de35b96f929eda0e2ad51e74985e71ecd40aaf1544cf89388901b1d7fcae834c4882c79a308a9dfcdd5fecf29430704777bd7e10d1be6c4043fabd35fd2ea6c74983c0e43", 0xad}, {&(0x7f0000000640)="3dcc5240413b5c26a27158bdb0d691e90bffbbe949e3f48dcd8de21551878494f1dd3e87fb330c59920cef21e55ef70673aa3913dd5fb8d1f6ae6ff84c9fa8e27f99e3287a046392e099ddf5f360c2cd803e59d345a417397e51fc39feca4ffcc315a4d9cb9609c2758226c118b287251a878b0bd87b00a7492de465868e4e7824", 0x81}, {&(0x7f0000000700)="512784941f85276fd0d7978edf45a495edb2a326fb460287537cadb7887ff3240bf7541eed506422115af2cd5ef7155300febd7aa26b09b5ad6e4d815bf253ff539721113db6f44a51001df8c6a825f5fffdb1f86539099695f685bdf796c0cff74e9d26768012c7c1eada5532307e196aa0d41a6aa367ca415d27524ff828ae25028ae7bd04", 0x86}], 0x4, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r8}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1d, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}]}}}, @dstopts={{0x110, 0x29, 0x37, {0x0, 0x1e, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x8}, @generic={0x1, 0xa1, "b60a5b4ccb977dc22725c148ad230ac62d76d504bf48e560964fd91de612a2f10835bc4ea65925d8820dceaf52a1306fcb96923e527ef57873bd86e40c410a0174599efef1ab44bbb5bfc1ff0915f0f75d8695c3d7624e804b31e68f6a638f596426f1de3b75b4a1b75d58fd02f0d5f8b03ddd6c58fcf5cfb278445b7c7f509681ea466cee7d1c49b2a9a216a7fcae52115ecce600981ee194f09969d5af0fb18f"}, @pad1, @generic={0x7f, 0x3f, "5c51908c70d9c21cc5a283cb6d5127d431197b0d6a3758d82aa61ff2b050053f43d0cdb581701e56e3e5cbc039a605841ba16ca9f010015f7a58aae0fdf142"}, @pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x56e6}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x62, 0x15, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0xc, 0x8001, [0xc57, 0x7, 0x18bf, 0x1, 0x7, 0xfffffffffffffecf, 0x4, 0x0, 0x9]}}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x6221}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x6, [0x7f]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}}}], 0x250}}, {{&(0x7f0000000b40)={0xa, 0x4e23, 0x1, @private1, 0x50}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000000b80)="fa0dd8f0a784ea2982fe331dfebb075bf21b3294ef0e845941a89f78fae944aea8ef110ca5b50e43971700dda44f91d18d4b6297aff578c2479b910b4104119e29ea3028849b0fc04262e4e3daab3f79c6d275f9d187c15d14870e9e6be78fd45f86a185ff29a389e23959fd8c2a6510983588404406b3aaa746ac06f35828d15ba2ab2cca94b0491daed1d3347d43e5724b8aafaa116cbc3fa6f18326244f8b2ab5b4252031880b0b9772e8c6f161057320845cbf863b82af7a901dd0875180dc1c5779c89fe93da36d80c8abd1d991bb0ff24b90da8c3cb1fd925cbada3475436a93f63df934596a02758108e09c387f5f64f32779264c9316f693db7b0d852719b727580dce9742ad9990f377cf181ab5c297b2a68e00197a5bb9b2c29369aa7367647a7e79e8e99a0dc66ad924b9634aa76e65a2b8fe1990c83ebb10a88ec75dfddbdc0b71f813de1c7b52adf28eba739cdaca9a430c6e947343b0c1acd897a86665933a5c716dc617ff2fdf67b3d7967249c45b7b331652121c1952cde9dc0686b015751f2fb8127e04de1dfe48c30be0b06b0e657eff9e1ef02a17620fa6acf19034c5b3d86530b6f3e3a17df96b28a7f76e3a6eb745f2896be6221487d0d3a3ea7b814d7f314525e037ea2cc3d4e3d5d43c78e6219a6a1ca29cf8c3054cf58506965b1a9d7bf2d7efd92589840dbe46612f270f37a4096f45ba2a2b7d0d3f1c31a1a12e34204f85ac97cbe0a70ec86cdc3d68fb9a6200fd1e9eedb51ce340855375cb4ec565ff5f312edf219d6650d644b2c1468b5535e6a0bc4933ab9c49a3724210055e2916d905f8c24248d2322f269c32431e1c4a339559bf83ed9c9263445eb5c3c50ba2b272ffb71c9ff3ca3c567418949d1a0d3e12e9748e10a2e8a218ffd39e134b1630b66cab245a343f9d36a58e3866ca491dbf09efbb2832f434644c7bcea7e0e482f99c699129e21ba5c317f523c86073ce22db7376dc800dada62011c450f09fef15954b32acbc5914e7f02e2cf5c6dd4b183960bb87657f109f69ecc203cf6c3e501fe0dd3650d7a52f1702175a446d76fd1428b0b439c2e36693b8331bce17f136361b2f9e9d919bdbb8dc23ddafb06d5533e84cbdc36642357b26a69f08e3c9a9f0787e712bd68c162e0207ffc3f75c1a0b62546508f947133de61ab18ecab6ef815881b20a013ccaeb685c98751fa9b58106486a61895a88336bca86ccb5db270d29d79da25e2a16eaecb6dd40675c65359220c6125a2fb7d5ee007d3827d3a9eb0e2ef15a4a5708bbb7d2b7a41354ebc71439ebb7311a794117864b44e7c56f6cfb7e769ccfceffff8f883d3c542732ba484128d1498139fd7367908e7773fe0242264d73f35672019c45daa303bc096863350fb243092a5d0f5de40744e2293638a87f9346307badce6bc1a2ee5c686881ef83e24267d9f4cada7c8afa615a9f92221cdce0b952a1026f790d5883d8584ba2ff72417b165d065c5423d491a44060ac20a0983a7eae61474009248566a1b37dcb67b1dc2271489f83f29ae7353f95e762234e5b763b4d1ebfbafe107119acd68ff12732de6b1a9d7de8facb418061ad5732ce6597f02f052d86cad47a14c245bbde28b29fe139b21bdc9f988a45562f8717e99ee1791c7956b31fc78ff21eb9ca3bfdbc9a19c016fbce7d184dae0a5d0b1ee757b6ac8536a396777d1e2eefe81a0900132db4c35593e0eec626ead7e835f30e9ff5519111819dcd895c739053c936160b5645a0b090f1d4ba28b48cbd694e5079afb99575282d2504ec19f261da74c8ab7cf77c764ba524e7f8d2f9abd19e88057fcf18923bf0591d3ccd156fa3298a87da6365536018fd6e19248bf75f5887286b458afb23326eedcb04fbe812a0b138a36a706517ac4775a4467fe9cea20ce0f42488a3e4f06998fc5ef049202507b5ef2e6e68edd6ac34478c494b74208c03ebba8ff74c2d5550ff2acc1f71bd7404e0be97ce0d105073c4f2923471926a3ee0a2e938751338baa4ec99bb38815efddcc893cd0721690f48e874d0c3cc77c7a80276598b1b78329a53f774be94786f8b22770b0258729f8a48068d8b793316fe1a6ba095fa3c54fbb80b9efa9023c675e3520f4aa87176756ba182ad138d1ec70e175854a445c0823dee78759b68c9bbc73fe1b90ff39470e79869fdaa43c7aa0b7fbab2a0cc57a24114227c1a20c103f236a821b263581f7ff362e29680fd8876a83ff763d507d67c599aaaa262b2857aa26e036715982403ad7b7b58d02de672d531070509b0dd263602cc100ae6d5bfff052dde52c3378e810d2601de5956f19ee7764559848c922f49beb59ca360f117e41a21bff9905fd6edbf0af7f2b24206d7d83296b61478705d9c226f8db029416c2b10fb6efa39d3fcde86dcd5392ae653870531db28f5bf03c2eafe5633c2a0f34186e7b9b3fb014ea78dfa0f60bb27a491cc2decb34d8ec26cb42cd3f837cc867d3493c69951e892b6e42e043f915da8c36970006894246bbeaad0273888251326d1bd936e8c9af9965cf31f7640fde277318c12c360d0b272fdbd707c6e60139aa167f241792949168bba15139404b746ee3cc0cbafd2bd98f8a2d74228273930cb1efebc6339c2e8fa1c116b1bf0ca9c286c01b1176588ef44044d2462e921d72ced0282d7d107a1541689b5ed523af687fc8e914cfd2537b088b9bdbb45ff0074b372a817898fa145dd08e8eaed3a16890f8afe8c47e98d71429b5d22a81d841fa73bfc94613e00a80364b139cd255d95a8f7cdea83f421e53ccb04a893d32933397868724033244fedea10c2baed2197d6e6e47f1a720c1c91dbcef78935b5e240f1df4681ff55d6f20d75e170429ab6ef37b3330c201314e10bccd35e64c92c78b9e9dd65e8373572782aaee1b02e9e0457e76601598e0ecc7e41ed4b003bead0165acaee5c2ca514bc8be70ef60dd6f562ab4c1824d939512ff965a44f60b764b12b6c3280d0261769e55a817bde768ba03baadcaf5d50c4d8d8abfca9da8fbcdce949806232330baf59a41c9bc1a4838f4397f94e22c216197cec9673ed5adf1b0e85afdfbcb7ae113066fb3c63d57c8aee01b2343104f863838b59f0a22c21348eab07c3425e9e280e3354af228dd0856132962e4f0b8fd823b13ffa04af59e0854ff8aaf6003f92bda2900a1983b8c50a97bbfee8c0f24edc28a6d50fe0906746bb6dda7c040e431dd4cf62684b9855694fa41d22c563a336b64d9c539525e971872feba7f0ea1b35b326e66afa08a1aea8e027d2368ba53bcba123371658b853e8b5a9e6881e2c396892ddcd68d78463e88c5a1058780cf3586e8b2ba19d8eb493dfce08083e91c0560e67b8d0b8cd4650d8f02aa14d4ff10a6da74d9b09fa2cd6a4720b506f3a19d68e74db67a1803dbafcf260f0a3871dbab7b63c2997c5096de010d9dcd72aae81a3dd62291aaacae14248d85e8ef03a579f2b0781d438ed28c49b2f4e15637e7356f6180e2ed34bf333f70746abc38bf7542cdb108f525d333a3883659545c675ec3582003eea2c83742f5b7fb9fc4e02a1907eccf661dd94275d44c6c8db39c963bd5f1f6b8ff38ea4fa4cbf9f6c66c6f153810f8795e9cb8ea5c6262915dc03dcaa31fc8cf2d4f47c51d1e3bceec3c987501aa3737014eedb0476c0219c68f6b8c2ba0dfc3c386e5bc1c57763ec24c39e48c00d5ab6cae5e8e2310365eded639b08421ad851c1c1b4f3e3ea140a641fbbd7943189a1aaab3810269c1978fdd3bb9c4551f2f1602e2f3281d8cfb12865d6c95eac7dfc4a2b17299774ac2f6f2bb0c58d318b42122191ba492a0cd18f52d00394c7db4617fd61126eefc8744bbbd27ea2932110e3cad722ecf426ee0f7b1d3085d5eb181ccb56652a13f50467a79316d05f9fd3e957815cfa997e11315de8d98f621c4c6fdc6331e70990e963493e0466fb57e46290c958613c294c6693ba05ea8053f93bfb51e659eae7ae9fbb7514e15195e8c880f9ddb056ff4cc71bfee1598adc1242cc9e725111757a9153d3a0d3d3697d08cfecc3c5690ffdc50ecbc8a34b7443f8a549d7c5d3bb81c1f32606945862c4066f030aa794a69ca43a00ee9d670449d8f1ad5be3cd0649be8b0625d29cd3374a8bd20b47b24255439ff7f2b29e0a46d915d716baa0040919bb42a3323530e1e4d78627810f819f87ddb7db662abf40d6f1ef9ac287bccc289dba89d34d942197efee8cb4bc3eba7fb9621f19ab8d4ee6873de3735c2f40c49deff897275629d219bdb656ce9b12be1e5ecf3f6724a940ca675b39d2c42c93d43a4a03aa0ce62eb1243b8f75faca41037446863b33450d272bf8a777a0a8bfbd89d31418539eed6ef2592d04ad72a6f4e7512471a4f21c02b97c42459bc5c1b35081e297740995b7fcf9f10b0dc37c33e4526dc93447122f2c318a8e4449c728cc2ae70edb68d19d9f959665402147b346a7161bee4c909514ca31d0aa83a081e531eb2a59d83e54427f3ea0bcc91345db20c9450de726259049cc684faa4bfc62b200afdb42b434d79c8e1e8d28cdb80302b18decfbc7ccbab72be7fd6e0322e6f9f53f7b81028ae5d385d79221ece4754fbb5def3fcdcfff1428cd353c8e3a56a8710c9ded7d16b9bfbb420d57a59a674ea41523a054ea42542b02fe0a3e6ee3ec01cbaa36cad284b08645a4547f63d8cf12dff124e490c4932a58ea4585138116d9a74b170fe54917edce65af23dced0fa90031706944d41d6d2209141a390bb8b1c4448e4a9e5fb316c057cd22aa8de0e3fee4e3e5f9e8e30382f5710cbb384b4dc4ae96d7db888e6db3daabdc822eb6ab3a0816632384f97f7e14dfddbdc728f9ac04b6cc8a72c421301d729e9f633ebbc73c9ba5ddc79390b31a4e1de6e5aff332c315b713e955b2db6614b916c405fe75f3d3e7fd0c9c70499f4e1cf3bf975b1352f36acbd7614cd183a1a903118360f9885472b0e5c8a18b2150acf20947ec8e9439ca9fdb47c76b2378db852d09477b527703542c745fc04c2713e83e9984d5f70878db11c464aca185e8f64a4a17c10c8028ba6c47384212cdf23aedab1ca6018813d21c7850691269fee8339ac266f6319e4cc8bc731c0e2a4c13d58537ff29048926fb2aec0835c83379094b1fd56d8558b1f99986daedeaa15df5918af0e512950a347759fd4c36748102be868109bbbe03d42f050d5c9968655542cffed8f684567db1fd2df1bad4c40fec999e9f20b98507b50abcf5de26ef2046d530d1d253a2d7b99f9e779782013852792779d544e44474e4f7242e3d8641ab14d9ddc5708793a302b06be702639bd6b24960e2887e960832f75524228e35fcaebad2c7a9b52f23695e5534958812d28cf976bb5f5ae8a7b016156e743d382db822be07acdaf1ba93ede91adf16ebef2770d0bfd432923cab611ba5a8ceef3f8993420f0a0d8df21ecb63feb16789a8080be6ce5813e7454685a5a0a45491a5a760547347580b84ff8174b3c5b3617a9b5ba07eeecc7b262cea13743717650a17c90c3857dd6280df2b2f6c4e792c07707b14caa3599e5fd04342d24af598db66d19819a1071ac1fd6bbd80765674fe43016e423a5974ead407420cf4df7dc0b1de2de9bf19391d7661891889b3cf0445ba13b6cb3b85da3b940f8453ba4d851627be51b0cd72b127bea201b06b3dece51def41e8f4801322169048a4ca8b9582b7002c6cfa43b7384f69f3c385ccf0c4ea5678a47149bfd783ac721a7b3806054f0f2dce49b09b83", 0x1000}, {&(0x7f0000001b80)="85384336a2acf5a505b8776103323c050d9fae460379633a8aab94df0e2f02c4a9b952503912e7b5bff0d62f7d3f1b10f0bbaf76379d44b06e335aaeb069fe8126d25ed820f9d757c773cc6b454ca8879b034de54f93631859ff90e0d3ce70fb6a81617dcb234a34f2c4259bc2f1f821a63b2548ae7104279cbfd2efc8e2ad41bb7d8f5b425c03366569c48edd0c9509934bdbabfd6c05f869358460f309cf7585fd2b9c961f63859ab9b3c0f8634b2b757f445af42acca9c100b3ded788ca83065579d30620e37d5485fc78bf8458", 0xcf}], 0x2, &(0x7f0000001cc0)=[@hopopts={{0x1c8, 0x29, 0x36, {0xa23db6eb97963d24, 0x35, '\x00', [@generic={0x7, 0xd0, "640db3b6253421d8b9b173af4d732e2e8fe3e4cca22095bda91a7c2ae85d4f1b2e7452cdb12e7f25541112bd9492a8446855c7e4570f8071662c985c79126f1a3e69a9756190635cebb920b4c6d663532552deb6000a0cd9916bee143f8dd273b198038e3c6fae58a30b57da0ac4c6d773be5fff17fbde018332b92e5f582e66879e86f275561f52374bec3c3c41ee7418ca5ac1ea100e33554280b6436626efa98830e32e5394405c3b830418746e8352964d2336bb97d04b8f71eec40f52bf5abdf5c677069eeaf3c5e45cb14b067e"}, @enc_lim={0x4, 0x1, 0xf7}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x6c8}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x7, 0x7ff, [0x5, 0x6, 0x4, 0x5, 0x7f, 0x10001]}}, @enc_lim={0x4, 0x1, 0x1}, @generic={0xfa, 0x91, "26aefd46b743b2e8115c344b89e4a056667c6cd36ee9c1d8e4d8edd0d62184c4e55334a9f5d492b3c974ffc2595badab7e90a3b8be08f43ef718908fc9e6fcd7ec15405717ab1fcf7aeb61847e02b4aeecc33a458e2cd009938c7edb27edbcf25e21f0955cab0295a2c3f184063baa1b3292953474274dcdf6eeba5adce3dfcb4b6c44b31ed21caafafcf7c4f24518b034"}]}}}], 0x1c8}}], 0x4, 0x0) close(0x3) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m48.964042329s ago: executing program 5 (id=2217): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$igmp6(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'macvtap0\x00', {0x2, 0x4e23, @loopback}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000140)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010122, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 1m48.384794902s ago: executing program 1 (id=2222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x102}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1m47.967739762s ago: executing program 1 (id=2224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200febe}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}]}, 0x58}}, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000500)={r3, &(0x7f0000000200)='#\\..\x00', 0x4842, &(0x7f00000002c0)={@_ha_fsid={[0x2, 0x2]}, {0x6, 0x1057, 0x7, 0x9}}, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x2}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000540)={0x100, 0x8, 0x8, 0x0, 0x0, [{{r3}, 0x7}, {{r5}, 0x7}, {{r3}, 0x2}, {{}, 0x8001}, {{r3}}, {{r3}, 0x8}, {{r6}, 0x7}, {{r3}, 0xffffffffffffd281}]}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x81) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xcc, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x15, 0x3, 0x3a0, 0x13128552, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r9}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="07bd8936abb15f03a5e25996a881179bdf4538c5fd9348fbcf76179d7f4fd91defdce7a8e89984ca53fe83af85b43d28b445c3a2954f4527e07ad2c4a846886815935b747721e66786058bdd1414acf63662c7f93ff5bac3a690828a58fdfc3b813bd976142bed6b59a7c147450c4696c8ba0c4ec35be0d189b6dafbff403bf2e6286e62c16f5776db1fa5c7b6f02b702d8a3af7b3d65d4b14a1ab8b0de2e4b2817438cbae5cf74dd609ff482896d980195ece4ad634f3d334fe", @ANYRES16=r11, @ANYBLOB="03030000000000000000130000000e0001006e657464657673696d0000000f00025df4dc39438b9d7a2833006e65"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$tipc(r3, &(0x7f0000001f00)={&(0x7f0000000680)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000700)="d4cde8da4e374718478608ac76abf4a27a6c07f01780152f3c434206685f56549e2a3fca8ccff93bb3b568a933a20066e4980ee3ead1bed3afd3274efc602572b80d42fb30118511561530afe0e5fb07beacf3555624c5ea267e1ac2f047d3cfa844c4837f8290d0c5c0d7a2a4d3f8fc455c93478988c523a369ef7b270df64a737082233b9fa7de70344541082ea96bcbf38dcd9ec681b8c85c7ccb5d54afa414c2990119405735c0c16534c57f16c41d6b24dd259a6e5e7ffe2bfda8779fab", 0xc0}, {&(0x7f00000007c0)="9b4654527a03b18c80c09e0907262e7c5e3288b31d9f744feacc98d0b0ae58ef8f187673e2085102b3e5189071c32b", 0x2f}, {&(0x7f0000000800)="76a95054f517c63d9a47d95cf93029cf755ec1dba0907b2c026e473fdb8d5bf98d86c4eaf3e930b204618bdd96f9bb5e6580d0f7ee06b75ba506f6a0a263a7fac63804b4e7af6f1ac880a5278dc5c25d10a6a58819acc7b48e98c017fdd0cc775beea1f1e1882fd6059c79c730c78aa0904c4983d76a27c1023df3b9ee02fc82af13254c3babdb1d2808", 0x8a}, {&(0x7f00000008c0)="f9da7c9295f03e5de3ee1e960fc46b6b58de6e24b859b1ada8d69f4019c8338af250fd01ece6fe289eec9d8f2af7ddf725ea98a52493a72cd8bfdcbbfbca4d1e7c9be9007a96d206d5dd3d847dec4af656a84938ce680d4de2c3b6518011f31557f92d723f13d1f11931b575e16fda1037af021abf6b83addf677e82f10237f11797d3ac5403daac16658d1bd61fd3759ce6b776b78884da4e11f92a2d4e9af9ab6945151c5062ece75c37520c7669d12dc52d6b9c098b6786f88543fe0cf2a51f989b229a5131c485e095f535bc6448d8b15437712efb506860", 0xda}, {&(0x7f0000000b80)="6c8e00d71f04bf733628f98dffdbcba817e6cf21de0bb5bf898dc6ddd2871756dc1df8b98ecc7beac7dab5e5de7d1d8fec3e48bde4ab3a6644c466abdf4e4409c7d1ae6688eff3350e6fe25d88bc9a", 0x4f}, {&(0x7f0000000dc0)="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", 0x1000}], 0x6, &(0x7f0000001e40)="0a72c64574a15bc4407f8634e691891006fbdfcb64383e0d4eddd311a62f5adc59560779698ee149382a21d2459b8ca2bc0473390c8b6ec21fb264819d0cf14cf793dd85f0c43dacfca4682677e3e277dd521f7eb3471899066e4b5558cbdab05fc42221d5936854bc6952e5bb21e1ffa1150e9f180766965b3e40ba5d890cd3cf3e2fdb708d51b2b7c3a98aa1e3f784c1f414ed12169b63eeaef54b8a344c89e9ec7c2448bc", 0xa6, 0x4000010}, 0x4081) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r12], 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) 1m47.805227484s ago: executing program 5 (id=2226): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="240000004000070127bd7000fedbdf25037c00000400c2800800"/36], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'team_slave_0\x00', {'ip6gretap0\x00'}, 0xa1}) 1m47.516974011s ago: executing program 5 (id=2227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30f49c906218fe39fa636f6e646e616d650000597e89cb87d4c338e1377fb20ac0e23b429f359d57ba8b13bdab5b3cf03b21"], 0x44}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5}}, @TCA_CT_MARK={0x4, 0x10, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r5, 0x3e}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x24, r7, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) 1m47.14905818s ago: executing program 5 (id=2228): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000300bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xe) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000805000100070000007ce4b891c8bc3042c34e581b20a37f459f527231827bb3c3242ff43c0d97765a016a29b41f961ad744cd7fd691a28931fce8c037f367d809fe69fd196b9e1202a887cc9fdec338410df90625bd7ffaaa210778baad0b4c9b1415de1e8f8f0e4a10039b02e842765435b5acd292f8f98fe8fc356916f951a83a5d83360966434416d07be4e96a99"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r8) socket(0x3, 0x1, 0xfffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x54}}, 0x0) sendfile(r8, r7, 0x0, 0xf03a0005) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r11) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x35d}, @in6={0xa, 0x4e20, 0x413, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffff}, @in={0x2, 0x4e24, @remote}], 0x74) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2f, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, r6, r5}, {0x2, 0xc, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xb8}}, 0x2000000) 1m32.919250233s ago: executing program 34 (id=2224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200febe}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}]}, 0x58}}, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000500)={r3, &(0x7f0000000200)='#\\..\x00', 0x4842, &(0x7f00000002c0)={@_ha_fsid={[0x2, 0x2]}, {0x6, 0x1057, 0x7, 0x9}}, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x2}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000540)={0x100, 0x8, 0x8, 0x0, 0x0, [{{r3}, 0x7}, {{r5}, 0x7}, {{r3}, 0x2}, {{}, 0x8001}, {{r3}}, {{r3}, 0x8}, {{r6}, 0x7}, {{r3}, 0xffffffffffffd281}]}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x81) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xcc, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x15, 0x3, 0x3a0, 0x13128552, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r9}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="07bd8936abb15f03a5e25996a881179bdf4538c5fd9348fbcf76179d7f4fd91defdce7a8e89984ca53fe83af85b43d28b445c3a2954f4527e07ad2c4a846886815935b747721e66786058bdd1414acf63662c7f93ff5bac3a690828a58fdfc3b813bd976142bed6b59a7c147450c4696c8ba0c4ec35be0d189b6dafbff403bf2e6286e62c16f5776db1fa5c7b6f02b702d8a3af7b3d65d4b14a1ab8b0de2e4b2817438cbae5cf74dd609ff482896d980195ece4ad634f3d334fe", @ANYRES16=r11, @ANYBLOB="03030000000000000000130000000e0001006e657464657673696d0000000f00025df4dc39438b9d7a2833006e65"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$tipc(r3, &(0x7f0000001f00)={&(0x7f0000000680)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000700)="d4cde8da4e374718478608ac76abf4a27a6c07f01780152f3c434206685f56549e2a3fca8ccff93bb3b568a933a20066e4980ee3ead1bed3afd3274efc602572b80d42fb30118511561530afe0e5fb07beacf3555624c5ea267e1ac2f047d3cfa844c4837f8290d0c5c0d7a2a4d3f8fc455c93478988c523a369ef7b270df64a737082233b9fa7de70344541082ea96bcbf38dcd9ec681b8c85c7ccb5d54afa414c2990119405735c0c16534c57f16c41d6b24dd259a6e5e7ffe2bfda8779fab", 0xc0}, {&(0x7f00000007c0)="9b4654527a03b18c80c09e0907262e7c5e3288b31d9f744feacc98d0b0ae58ef8f187673e2085102b3e5189071c32b", 0x2f}, {&(0x7f0000000800)="76a95054f517c63d9a47d95cf93029cf755ec1dba0907b2c026e473fdb8d5bf98d86c4eaf3e930b204618bdd96f9bb5e6580d0f7ee06b75ba506f6a0a263a7fac63804b4e7af6f1ac880a5278dc5c25d10a6a58819acc7b48e98c017fdd0cc775beea1f1e1882fd6059c79c730c78aa0904c4983d76a27c1023df3b9ee02fc82af13254c3babdb1d2808", 0x8a}, {&(0x7f00000008c0)="f9da7c9295f03e5de3ee1e960fc46b6b58de6e24b859b1ada8d69f4019c8338af250fd01ece6fe289eec9d8f2af7ddf725ea98a52493a72cd8bfdcbbfbca4d1e7c9be9007a96d206d5dd3d847dec4af656a84938ce680d4de2c3b6518011f31557f92d723f13d1f11931b575e16fda1037af021abf6b83addf677e82f10237f11797d3ac5403daac16658d1bd61fd3759ce6b776b78884da4e11f92a2d4e9af9ab6945151c5062ece75c37520c7669d12dc52d6b9c098b6786f88543fe0cf2a51f989b229a5131c485e095f535bc6448d8b15437712efb506860", 0xda}, {&(0x7f0000000b80)="6c8e00d71f04bf733628f98dffdbcba817e6cf21de0bb5bf898dc6ddd2871756dc1df8b98ecc7beac7dab5e5de7d1d8fec3e48bde4ab3a6644c466abdf4e4409c7d1ae6688eff3350e6fe25d88bc9a", 0x4f}, {&(0x7f0000000dc0)="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", 0x1000}], 0x6, &(0x7f0000001e40)="0a72c64574a15bc4407f8634e691891006fbdfcb64383e0d4eddd311a62f5adc59560779698ee149382a21d2459b8ca2bc0473390c8b6ec21fb264819d0cf14cf793dd85f0c43dacfca4682677e3e277dd521f7eb3471899066e4b5558cbdab05fc42221d5936854bc6952e5bb21e1ffa1150e9f180766965b3e40ba5d890cd3cf3e2fdb708d51b2b7c3a98aa1e3f784c1f414ed12169b63eeaef54b8a344c89e9ec7c2448bc", 0xa6, 0x4000010}, 0x4081) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r12], 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) 1m31.87012952s ago: executing program 35 (id=2228): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000300bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xe) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000805000100070000007ce4b891c8bc3042c34e581b20a37f459f527231827bb3c3242ff43c0d97765a016a29b41f961ad744cd7fd691a28931fce8c037f367d809fe69fd196b9e1202a887cc9fdec338410df90625bd7ffaaa210778baad0b4c9b1415de1e8f8f0e4a10039b02e842765435b5acd292f8f98fe8fc356916f951a83a5d83360966434416d07be4e96a99"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r8) socket(0x3, 0x1, 0xfffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x54}}, 0x0) sendfile(r8, r7, 0x0, 0xf03a0005) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r11) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x35d}, @in6={0xa, 0x4e20, 0x413, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffff}, @in={0x2, 0x4e24, @remote}], 0x74) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2f, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, r6, r5}, {0x2, 0xc, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xb8}}, 0x2000000) 42.139356157s ago: executing program 3 (id=2669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204880, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0xa4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}}, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30fff500003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c00"], 0x428}}, 0x40088) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x28, 0x1, 0xfffffffffffffffb}) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x452, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4048000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r11, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 41.512603252s ago: executing program 7 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) syz_genetlink_get_family_id$team(&(0x7f0000000f00), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESOCT=0x0, @ANYBLOB='\b\x00', @ANYRES64=r2], 0x40}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="b5daf85e28f9992a03512a5c338ece94ef9b4662f7f4a9c46f4e2ca946bf3b9956a31ca170242a5e2cc4b3758cf5edf30811b77f6154ec7988d26d2957bed43a8528344f19241019550ad69947fa82895311ab8b62d7d3b664a6faca320b438d809cef3d058b8981ca310cb7f4ee27807278feb556df4713f785f6b879779dba233ea2e4", @ANYRES64=r4, @ANYBLOB="44948bff1d99c1270e58a01b51edfcff8c32ba75a7d23515db4af9f3c68d74aee5fa575466b44259c8865084", @ANYRES64=r1, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRESDEC=0x0], 0x54}}, 0x20040080) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0x100}, {0xff}, 0x21, 0x2, 0x40}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e23, 0x4e21, 0x4e20, 0x4e21, 0x4e20, 0x4e22, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x4e20, 0x4e20, 0x4e20, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1]}}, @common=@unspec=@mac={{0x30}, {@random="27ab0e3c796b"}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0xd, 0x3b, 0x1a, 0x0, 0x3e, 0x9, 0x2, 0x24, 0x39], 0x1, 0x6, 0xa}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'team0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0xa, 0x20, 0x28, 0x18, 0x22, 0xa], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffb}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100040000000000091931007b115b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r9], 0x5c}}, 0x800) 39.877368343s ago: executing program 2 (id=2674): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0xf803, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 39.519681721s ago: executing program 7 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 39.08718493s ago: executing program 8 (id=2677): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000200000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 38.940804747s ago: executing program 7 (id=2679): r0 = socket$inet(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="424a2ca772beaacb64952a56204d9f6cbb239c0ebc413156aa7c6a66c76b0dd259773c343af43e45ae6424", 0x2b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x2}, 0xc) 38.888438319s ago: executing program 2 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000006800e9"], 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="040025bd7000fcdbdf250800000008000500010400000800050026060000080005000100000008000400040000005c00028006000e004e230000080008000000000014000100fe8000000000000000000000000000bb080008000300000006000b000a00000008000800fa05000014000100ac1e000100000000000000000000000008000900f9ffffff3800028006000b000a00000014000100ac1414aa00000000000000000000000006000f000400000006000e004e21000008000700ff000000300003800800050000000000140002007465616d300000000000000000000000060007004e22000008000500e000000124000380080005000000000008000500ac1414bb060007004e23000008000100010000000800040004000000"], 0x124}, 0x1, 0x0, 0x0, 0x4000840}, 0x8010) unshare(0x2c020400) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r11, 0x1) recvmmsg(r11, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58) 38.821014656s ago: executing program 3 (id=2681): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 38.583406225s ago: executing program 8 (id=2682): unshare(0x60600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x66, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x48, r3, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x7, 0x1, 0x7}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@empty}]}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x49a0}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffff1c0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x96ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xacf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2a1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x35}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) write(r2, &(0x7f0000000140)="15a4a7199691c4d262239535c5a103d6a105b8f41e584ae6fe95ae28e50e516021ceda5d6aee7f15fc468382f46b1eef1f632471c051290efc934e62a546ded0563f2fd71a192bd213483a5ab564ad08203048af06a5b20124eee49aa604ac29481252e3dba5386656c20242ff22e63b", 0x70) 38.44503194s ago: executing program 6 (id=2683): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) sendto$inet(r0, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) 37.894244061s ago: executing program 3 (id=2684): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r5, @ANYBLOB="0200000000004200240012800b00010065727370616e000014000280050016000000000006000e00d5"], 0x44}}, 0x20000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/104) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0x89e7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) 37.758749369s ago: executing program 8 (id=2685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000036574683a73797a6b616c6c657230"], 0x38}}, 0x0) 37.043638248s ago: executing program 7 (id=2686): socket$inet6(0xa, 0x3, 0x2f) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000000000442fffda02000000000086ddffffffffffff00ff020000000000000000000000000001"], 0x0) 36.875609176s ago: executing program 3 (id=2687): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8, 0x2, [0x3, 0xa]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x7014}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x20400) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x6e22, 0x5, @rand_addr=' \x01\x00', 0x3}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) 36.596895477s ago: executing program 7 (id=2688): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 36.322886462s ago: executing program 8 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 36.231767054s ago: executing program 6 (id=2690): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x1000000000000000, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0xffef, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 36.154389018s ago: executing program 7 (id=2691): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040), 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61f0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002602000000dbdf2516004000"], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x52fd794718c63698) mmap$xdp(&(0x7f0000ad9000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r4, 0x100000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x2c, &(0x7f0000000380)="ac1a5ba4c0ee8a30bf6ff2d548e4dc1e0dce3627060afb80d6631b55724b53f943e84a3f6bbf09cb7b6bd03286be20f8b887f673346c04a318380775645773d89ff91e05fb5372f0acf6efa604a4092074a6565c1b679f594d1d693469f5c1c0a8511d277c9c653de267a2de27ce6b5681c0b13f", 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$inet6(0xa, 0x800, 0xffffffff) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @loopback, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 35.884937707s ago: executing program 8 (id=2692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204880, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0xa4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}}, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000033c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c00"], 0x428}}, 0x40088) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x28, 0x1, 0xfffffffffffffffb}) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x452, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4048000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r11, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 35.668834704s ago: executing program 6 (id=2693): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000680)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x6, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x1, 0x12, "e701d30bd224f83998a918ef379b44f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600000000000000000b00000000"}, {0x0, 0xa, "65807fe97612fe86"}, {0x6, 0x11, "73bc2300ad9d19a300000000000000"}, {0x6, 0xa, "c8f46976e79e56c5"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 35.502968188s ago: executing program 2 (id=2694): r0 = socket(0x1, 0x2, 0x7) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @mcast2, 0x3}, 0x1c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x9) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6000000000000000290000003700000084090000000000000001000401010740000000010e31580605000000000000000800000000000000000000000000008008000000000000000100000000000000c9000000000000000200000000000000140000"], 0x78}}], 0x1, 0x4008080) 35.350268925s ago: executing program 6 (id=2695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x62, 0x8, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @exit], {0x95, 0x0, 0x300}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 35.196735691s ago: executing program 3 (id=2696): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000100feffff7fa100000008000500", @ANYRES32=r1], 0x50}}, 0x0) 35.104811528s ago: executing program 2 (id=2697): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0x5, 0x4a0, 0xffff}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x78974984}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x62bc}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r5, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004804) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) 34.869033728s ago: executing program 6 (id=2698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 34.46064794s ago: executing program 8 (id=2699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 34.45344629s ago: executing program 2 (id=2700): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000290000003700000084090000000000000001000401010740000000010e31580605000000000000000800000000000000000000000000008008000000000000000100000000000000c9000000000000000200000000000000140000"], 0x78}}], 0x1, 0x4008080) 34.422145413s ago: executing program 6 (id=2701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000bec700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1a) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$cgroup_int(r6, &(0x7f00000000c0)=0x40000000005, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r4, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000183100000400000000020000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x11}, 0x94) 34.340732671s ago: executing program 3 (id=2702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 24.434817322s ago: executing program 2 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000216574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 36 (id=2701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000bec700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1a) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$cgroup_int(r6, &(0x7f00000000c0)=0x40000000005, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r4, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000183100000400000000020000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x11}, 0x94) kernel console output (not intermixed with test programs): 11282] dump_stack_lvl+0xe8/0x150 [ 267.470089][T11282] should_fail_ex+0x40c/0x560 [ 267.470128][T11282] should_failslab+0xa8/0x100 [ 267.470162][T11282] ? skb_clone+0x212/0x3a0 [ 267.470187][T11282] kmem_cache_alloc_noprof+0x87/0x650 [ 267.470225][T11282] skb_clone+0x212/0x3a0 [ 267.470252][T11282] __netlink_deliver_tap+0x413/0x860 [ 267.470289][T11282] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.470315][T11282] netlink_deliver_tap+0x19c/0x1b0 [ 267.470339][T11282] netlink_unicast+0x77f/0x940 [ 267.470386][T11282] netlink_sendmsg+0x813/0xb40 [ 267.470420][T11282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.470448][T11282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.470482][T11282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.470510][T11282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.470537][T11282] ____sys_sendmsg+0x9b9/0xa20 [ 267.470560][T11282] ? __might_fault+0xaf/0x130 [ 267.470595][T11282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.470626][T11282] ? import_iovec+0x73/0xa0 [ 267.470655][T11282] ___sys_sendmsg+0x2a5/0x360 [ 267.470686][T11282] ? __lock_acquire+0x683/0x2cd0 [ 267.470713][T11282] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.470785][T11282] ? __fget_files+0x2a/0x420 [ 267.470811][T11282] ? __fget_files+0x3a2/0x420 [ 267.470850][T11282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.470876][T11282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.470911][T11282] ? __pfx_ksys_write+0x10/0x10 [ 267.470952][T11282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.470976][T11282] do_syscall_64+0x174/0x580 [ 267.471000][T11282] ? trace_irq_disable+0x3b/0x140 [ 267.471032][T11282] ? clear_bhb_loop+0x40/0x90 [ 267.471059][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.471081][T11282] RIP: 0033:0x7f66b479ce59 [ 267.471102][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.471120][T11282] RSP: 002b:00007f66b55c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.471143][T11282] RAX: ffffffffffffffda RBX: 00007f66b4a15fa0 RCX: 00007f66b479ce59 [ 267.471159][T11282] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 267.471173][T11282] RBP: 00007f66b55c3090 R08: 0000000000000000 R09: 0000000000000000 [ 267.471186][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.471198][T11282] R13: 00007f66b4a16038 R14: 00007f66b4a15fa0 R15: 00007fff6a36e628 [ 267.471236][T11282] [ 267.584098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.750333][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.030148][T11306] FAULT_INJECTION: forcing a failure. [ 268.030148][T11306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.056324][T11306] CPU: 1 UID: 0 PID: 11306 Comm: syz.4.1923 Not tainted syzkaller #0 PREEMPT(full) [ 268.056355][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.056369][T11306] Call Trace: [ 268.056378][T11306] [ 268.056387][T11306] dump_stack_lvl+0xe8/0x150 [ 268.056419][T11306] should_fail_ex+0x40c/0x560 [ 268.056460][T11306] _copy_to_user+0x31/0xb0 [ 268.056489][T11306] simple_read_from_buffer+0xe1/0x170 [ 268.056522][T11306] proc_fail_nth_read+0x1bb/0x230 [ 268.056554][T11306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.056586][T11306] ? rw_verify_area+0x24a/0x4c0 [ 268.056619][T11306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.056646][T11306] vfs_read+0x213/0xa80 [ 268.056683][T11306] ? __pfx___mutex_lock+0x10/0x10 [ 268.056711][T11306] ? __pfx_vfs_read+0x10/0x10 [ 268.056743][T11306] ? __fget_files+0x2a/0x420 [ 268.056775][T11306] ? __fget_files+0x3a2/0x420 [ 268.056801][T11306] ? __fget_files+0x2a/0x420 [ 268.056836][T11306] ksys_read+0x150/0x270 [ 268.056871][T11306] ? __pfx_ksys_read+0x10/0x10 [ 268.056911][T11306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.056935][T11306] do_syscall_64+0x174/0x580 [ 268.056959][T11306] ? trace_irq_disable+0x3b/0x140 [ 268.056991][T11306] ? clear_bhb_loop+0x40/0x90 [ 268.057019][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.057040][T11306] RIP: 0033:0x7f08c5b5d68e [ 268.057061][T11306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.057080][T11306] RSP: 002b:00007f08c6a87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.057103][T11306] RAX: ffffffffffffffda RBX: 00007f08c6a886c0 RCX: 00007f08c5b5d68e [ 268.057119][T11306] RDX: 000000000000000f RSI: 00007f08c6a880a0 RDI: 0000000000000003 [ 268.057132][T11306] RBP: 00007f08c6a88090 R08: 0000000000000000 R09: 0000000000000000 [ 268.057145][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.057157][T11306] R13: 00007f08c5e16038 R14: 00007f08c5e15fa0 R15: 00007ffc99a989a8 [ 268.057190][T11306] [ 268.462030][T11319] FAULT_INJECTION: forcing a failure. [ 268.462030][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 268.464684][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.476912][T11319] CPU: 1 UID: 0 PID: 11319 Comm: syz.1.1929 Not tainted syzkaller #0 PREEMPT(full) [ 268.476984][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.477023][T11319] Call Trace: [ 268.477043][T11319] [ 268.477064][T11319] dump_stack_lvl+0xe8/0x150 [ 268.477155][T11319] should_fail_ex+0x40c/0x560 [ 268.477264][T11319] should_failslab+0xa8/0x100 [ 268.477358][T11319] __kmalloc_noprof+0xe8/0x750 [ 268.477472][T11319] ? sock_kmalloc+0xd6/0x160 [ 268.477558][T11319] sock_kmalloc+0xd6/0x160 [ 268.477618][T11319] ____sys_sendmsg+0x1d7/0xa20 [ 268.477678][T11319] ? __might_fault+0xaf/0x130 [ 268.477769][T11319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.477859][T11319] ? import_iovec+0x73/0xa0 [ 268.477940][T11319] ___sys_sendmsg+0x2a5/0x360 [ 268.477993][T11319] ? __lock_acquire+0x683/0x2cd0 [ 268.478063][T11319] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.478142][T11319] ? kstrtouint+0x6e/0xe0 [ 268.478293][T11319] ? __fget_files+0x2a/0x420 [ 268.478356][T11319] ? __fget_files+0x3a2/0x420 [ 268.478455][T11319] __sys_sendmmsg+0x27c/0x4e0 [ 268.478527][T11319] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.478585][T11319] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 268.478718][T11319] ? ksys_write+0x242/0x270 [ 268.478822][T11319] ? __pfx_ksys_write+0x10/0x10 [ 268.478943][T11319] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.479003][T11319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.479065][T11319] do_syscall_64+0x174/0x580 [ 268.479126][T11319] ? trace_irq_disable+0x3b/0x140 [ 268.479215][T11319] ? clear_bhb_loop+0x40/0x90 [ 268.479285][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.479337][T11319] RIP: 0033:0x7f66b479ce59 [ 268.479395][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.479444][T11319] RSP: 002b:00007f66b55c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.479499][T11319] RAX: ffffffffffffffda RBX: 00007f66b4a15fa0 RCX: 00007f66b479ce59 [ 268.479547][T11319] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 268.479579][T11319] RBP: 00007f66b55c3090 R08: 0000000000000000 R09: 0000000000000000 [ 268.479612][T11319] R10: 0000000004008080 R11: 0000000000000246 R12: 0000000000000001 [ 268.479644][T11319] R13: 00007f66b4a16038 R14: 00007f66b4a15fa0 R15: 00007fff6a36e628 [ 268.479735][T11319] [ 269.112358][T11338] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1936'. [ 269.149156][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'. [ 269.175210][T11338] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 269.186347][T11338] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 269.195688][T11338] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 269.492076][T11350] syzkaller1: entered promiscuous mode [ 269.508840][T11350] syzkaller1: entered allmulticast mode [ 269.697983][T11362] FAULT_INJECTION: forcing a failure. [ 269.697983][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 269.739295][T11362] CPU: 0 UID: 0 PID: 11362 Comm: syz.0.1944 Not tainted syzkaller #0 PREEMPT(full) [ 269.739341][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.739355][T11362] Call Trace: [ 269.739364][T11362] [ 269.739374][T11362] dump_stack_lvl+0xe8/0x150 [ 269.739406][T11362] should_fail_ex+0x40c/0x560 [ 269.739451][T11362] should_failslab+0xa8/0x100 [ 269.739509][T11362] __kmalloc_node_noprof+0xf0/0x7b0 [ 269.739547][T11362] ? crypto_create_tfm_node+0x81/0x3c0 [ 269.739579][T11362] ? crypto_spawn_alg+0x8b/0x1a0 [ 269.739609][T11362] crypto_create_tfm_node+0x81/0x3c0 [ 269.739647][T11362] crypto_spawn_tfm2+0x5c/0x90 [ 269.739673][T11362] crypto_authenc_esn_init_tfm+0x46/0x230 [ 269.739709][T11362] crypto_create_tfm_node+0x143/0x3c0 [ 269.739746][T11362] crypto_alloc_tfm_node+0x169/0x3e0 [ 269.739791][T11362] alg_bind+0x2fa/0x570 [ 269.739822][T11362] __sys_bind+0x2e3/0x410 [ 269.739861][T11362] ? __pfx___sys_bind+0x10/0x10 [ 269.739911][T11362] ? __pfx_ksys_write+0x10/0x10 [ 269.739961][T11362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.739988][T11362] __x64_sys_bind+0x7a/0x90 [ 269.740024][T11362] do_syscall_64+0x174/0x580 [ 269.740052][T11362] ? trace_irq_disable+0x3b/0x140 [ 269.740087][T11362] ? clear_bhb_loop+0x40/0x90 [ 269.740116][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.740140][T11362] RIP: 0033:0x7f746819ce59 [ 269.740163][T11362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.740183][T11362] RSP: 002b:00007f7468f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 269.740208][T11362] RAX: ffffffffffffffda RBX: 00007f7468415fa0 RCX: 00007f746819ce59 [ 269.740226][T11362] RDX: 0000000000000058 RSI: 0000200000000180 RDI: 0000000000000009 [ 269.740248][T11362] RBP: 00007f7468f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 269.740263][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.740277][T11362] R13: 00007f7468416038 R14: 00007f7468415fa0 R15: 00007ffcab5096a8 [ 269.740315][T11362] [ 270.397320][T11386] FAULT_INJECTION: forcing a failure. [ 270.397320][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 270.420800][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.0.1954 Not tainted syzkaller #0 PREEMPT(full) [ 270.420829][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.420842][T11386] Call Trace: [ 270.420850][T11386] [ 270.420859][T11386] dump_stack_lvl+0xe8/0x150 [ 270.420888][T11386] should_fail_ex+0x40c/0x560 [ 270.420928][T11386] should_failslab+0xa8/0x100 [ 270.420963][T11386] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 270.420994][T11386] ? __alloc_skb+0x189/0x7a0 [ 270.421025][T11386] ? __alloc_skb+0x1d7/0x7a0 [ 270.421055][T11386] ? __local_bh_enable_ip+0xd0/0x130 [ 270.421082][T11386] __alloc_skb+0x1d7/0x7a0 [ 270.421124][T11386] netlink_sendmsg+0x5d4/0xb40 [ 270.421157][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.421185][T11386] ? aa_sock_msg_perm+0xf1/0x1b0 [ 270.421220][T11386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.421248][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.421274][T11386] ____sys_sendmsg+0x9b9/0xa20 [ 270.421297][T11386] ? __might_fault+0xaf/0x130 [ 270.421332][T11386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.421374][T11386] ? import_iovec+0x73/0xa0 [ 270.421404][T11386] ___sys_sendmsg+0x2a5/0x360 [ 270.421426][T11386] ? __lock_acquire+0x683/0x2cd0 [ 270.421453][T11386] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.421514][T11386] ? __fget_files+0x2a/0x420 [ 270.421541][T11386] ? __fget_files+0x3a2/0x420 [ 270.421579][T11386] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.421606][T11386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.421639][T11386] ? __pfx_ksys_write+0x10/0x10 [ 270.421681][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.421704][T11386] do_syscall_64+0x174/0x580 [ 270.421729][T11386] ? trace_irq_disable+0x3b/0x140 [ 270.421761][T11386] ? clear_bhb_loop+0x40/0x90 [ 270.421788][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.421810][T11386] RIP: 0033:0x7f746819ce59 [ 270.421830][T11386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.421848][T11386] RSP: 002b:00007f7468f8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.421871][T11386] RAX: ffffffffffffffda RBX: 00007f7468415fa0 RCX: 00007f746819ce59 [ 270.421887][T11386] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 270.421900][T11386] RBP: 00007f7468f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 270.421914][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.421926][T11386] R13: 00007f7468416038 R14: 00007f7468415fa0 R15: 00007ffcab5096a8 [ 270.421959][T11386] [ 271.193697][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1958'. [ 271.314319][T11411] syzkaller0: entered promiscuous mode [ 271.331849][T11411] syzkaller0: entered allmulticast mode [ 271.342267][ T48] net_ratelimit: 12 callbacks suppressed [ 271.342285][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.386838][T11411] tipc: Enabled bearer , priority 0 [ 271.538263][T11410] tipc: Resetting bearer [ 271.612439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.654518][T11410] tipc: Disabling bearer [ 271.684611][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 271.764723][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.804404][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.922317][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.088740][T11432] netlink: 'syz.3.1969': attribute type 1 has an invalid length. [ 272.220835][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1969'. [ 272.245707][T11438] 8021q: adding VLAN 0 to HW filter on device bond8 [ 272.300051][T11440] sctp: [Deprecated]: syz.1.1971 (pid 11440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.300051][T11440] Use struct sctp_sack_info instead [ 272.400471][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 272.483116][T11447] xt_hashlimit: size too large, truncated to 1048576 [ 272.503550][ T3350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.578807][T11440] syzkaller0: entered promiscuous mode [ 272.598147][T11440] syzkaller0: entered allmulticast mode [ 272.621673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.664379][T11442] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 272.824258][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 272.929207][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 272.942153][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.952424][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.632543][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.247807][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 274.314340][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1986'. [ 274.337009][T11484] netlink: 'syz.3.1986': attribute type 30 has an invalid length. [ 274.378816][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.398104][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.427911][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.467095][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.880948][T11495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 274.960437][T11498] ipt_REJECT: TCP_RESET invalid for non-tcp [ 275.111061][T11506] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1994'. [ 275.203612][T11509] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 275.291659][T11500] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 275.369860][T11513] IPVS: set_ctl: invalid protocol: 158 0.0.0.0:1 [ 275.382081][T11509] bond12: entered promiscuous mode [ 275.407765][T11509] 8021q: adding VLAN 0 to HW filter on device bond12 [ 275.421148][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 275.524691][T11514] bond12: (slave bridge2): making interface the new active one [ 275.538908][T11514] bridge2: entered promiscuous mode [ 275.566648][T11514] bond12: (slave bridge2): Enslaving as an active interface with an up link [ 275.816425][T11523] FAULT_INJECTION: forcing a failure. [ 275.816425][T11523] name failslab, interval 1, probability 0, space 0, times 0 [ 275.857300][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.2.1998 Not tainted syzkaller #0 PREEMPT(full) [ 275.857331][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.857344][T11523] Call Trace: [ 275.857353][T11523] [ 275.857361][T11523] dump_stack_lvl+0xe8/0x150 [ 275.857391][T11523] should_fail_ex+0x40c/0x560 [ 275.857432][T11523] should_failslab+0xa8/0x100 [ 275.857470][T11523] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 275.857504][T11523] ? xfrm_add_sa+0x1abd/0x40d0 [ 275.857540][T11523] kmemdup_noprof+0x2b/0x70 [ 275.857562][T11523] xfrm_add_sa+0x1abd/0x40d0 [ 275.857601][T11523] ? __pfx_xfrm_add_sa+0x10/0x10 [ 275.857630][T11523] ? apparmor_capable+0x126/0x170 [ 275.857658][T11523] ? __nla_parse+0x40/0x60 [ 275.857685][T11523] xfrm_user_rcv_msg+0x7a8/0xf30 [ 275.857721][T11523] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 275.857783][T11523] ? __mutex_trylock_common+0x15f/0x270 [ 275.857814][T11523] ? __pfx___mutex_trylock_common+0x10/0x10 [ 275.857844][T11523] ? rcu_is_watching+0x15/0xb0 [ 275.857869][T11523] ? trace_contention_end+0x3d/0x140 [ 275.857908][T11523] netlink_rcv_skb+0x226/0x4a0 [ 275.857932][T11523] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 275.857978][T11523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.858017][T11523] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.858040][T11523] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.858067][T11523] xfrm_netlink_rcv+0x79/0x90 [ 275.858102][T11523] netlink_unicast+0x7bb/0x940 [ 275.858150][T11523] netlink_sendmsg+0x813/0xb40 [ 275.858185][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.858214][T11523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 275.858247][T11523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.858275][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.858302][T11523] ____sys_sendmsg+0x9b9/0xa20 [ 275.858325][T11523] ? __might_fault+0xaf/0x130 [ 275.858360][T11523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.858394][T11523] ? import_iovec+0x73/0xa0 [ 275.858427][T11523] ___sys_sendmsg+0x2a5/0x360 [ 275.858451][T11523] ? __lock_acquire+0x683/0x2cd0 [ 275.858478][T11523] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.858542][T11523] ? __fget_files+0x2a/0x420 [ 275.858568][T11523] ? __fget_files+0x3a2/0x420 [ 275.858607][T11523] __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.858634][T11523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.858668][T11523] ? __pfx_ksys_write+0x10/0x10 [ 275.858710][T11523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.858734][T11523] do_syscall_64+0x174/0x580 [ 275.858759][T11523] ? trace_irq_disable+0x3b/0x140 [ 275.858791][T11523] ? clear_bhb_loop+0x40/0x90 [ 275.858818][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.858841][T11523] RIP: 0033:0x7f9923d9ce59 [ 275.858860][T11523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.858879][T11523] RSP: 002b:00007f9924d3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.858903][T11523] RAX: ffffffffffffffda RBX: 00007f9924015fa0 RCX: 00007f9923d9ce59 [ 275.858919][T11523] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 275.858932][T11523] RBP: 00007f9924d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 275.858945][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.858958][T11523] R13: 00007f9924016038 R14: 00007f9924015fa0 R15: 00007ffff4a19398 [ 275.859002][T11523] [ 276.541881][ T810] net_ratelimit: 2057 callbacks suppressed [ 276.541902][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.585808][T11536] FAULT_INJECTION: forcing a failure. [ 276.585808][T11536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.642250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.651687][T11536] CPU: 1 UID: 0 PID: 11536 Comm: syz.2.2003 Not tainted syzkaller #0 PREEMPT(full) [ 276.651717][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.651730][T11536] Call Trace: [ 276.651739][T11536] [ 276.651747][T11536] dump_stack_lvl+0xe8/0x150 [ 276.651777][T11536] should_fail_ex+0x40c/0x560 [ 276.651817][T11536] _copy_from_user+0x2d/0xb0 [ 276.651843][T11536] bpf_test_init+0xd8/0x150 [ 276.651871][T11536] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 276.651922][T11536] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.651953][T11536] ? __fget_files+0x2a/0x420 [ 276.651985][T11536] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.652010][T11536] bpf_prog_test_run+0x2c5/0x340 [ 276.652035][T11536] __sys_bpf+0x643/0x950 [ 276.652070][T11536] ? __pfx___sys_bpf+0x10/0x10 [ 276.652119][T11536] ? ksys_write+0x242/0x270 [ 276.652152][T11536] ? __pfx_ksys_write+0x10/0x10 [ 276.652188][T11536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.652212][T11536] __x64_sys_bpf+0x7c/0x90 [ 276.652243][T11536] do_syscall_64+0x174/0x580 [ 276.652267][T11536] ? trace_irq_disable+0x3b/0x140 [ 276.652299][T11536] ? clear_bhb_loop+0x40/0x90 [ 276.652326][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.652347][T11536] RIP: 0033:0x7f9923d9ce59 [ 276.652367][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.652385][T11536] RSP: 002b:00007f9924d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.652408][T11536] RAX: ffffffffffffffda RBX: 00007f9924015fa0 RCX: 00007f9923d9ce59 [ 276.652423][T11536] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 276.652437][T11536] RBP: 00007f9924d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 276.652450][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.652462][T11536] R13: 00007f9924016038 R14: 00007f9924015fa0 R15: 00007ffff4a19398 [ 276.652495][T11536] [ 276.852085][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.970860][T11543] FAULT_INJECTION: forcing a failure. [ 276.970860][T11543] name failslab, interval 1, probability 0, space 0, times 0 [ 277.008275][T11543] CPU: 0 UID: 0 PID: 11543 Comm: syz.4.2005 Not tainted syzkaller #0 PREEMPT(full) [ 277.008306][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 277.008319][T11543] Call Trace: [ 277.008328][T11543] [ 277.008337][T11543] dump_stack_lvl+0xe8/0x150 [ 277.008372][T11543] should_fail_ex+0x40c/0x560 [ 277.008420][T11543] should_failslab+0xa8/0x100 [ 277.008458][T11543] __kmalloc_cache_noprof+0x88/0x660 [ 277.008491][T11543] ? __inet_diag_dump_start+0x90/0xbb0 [ 277.008529][T11543] __inet_diag_dump_start+0x90/0xbb0 [ 277.008562][T11543] ? netlink_lookup+0x30/0x200 [ 277.008585][T11543] ? netlink_lookup+0x30/0x200 [ 277.008614][T11543] __netlink_dump_start+0x442/0x7b0 [ 277.008645][T11543] inet_diag_rcv_msg_compat+0x214/0x420 [ 277.008682][T11543] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 277.008721][T11543] ? sock_diag_rcv_msg+0x184/0x5f0 [ 277.008753][T11543] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 277.008784][T11543] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 277.008815][T11543] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 277.008854][T11543] ? sock_diag_rcv_msg+0x184/0x5f0 [ 277.008891][T11543] sock_diag_rcv_msg+0x4b0/0x5f0 [ 277.008928][T11543] netlink_rcv_skb+0x226/0x4a0 [ 277.008954][T11543] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 277.008989][T11543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.009027][T11543] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.009051][T11543] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.009081][T11543] netlink_unicast+0x7bb/0x940 [ 277.009128][T11543] netlink_sendmsg+0x813/0xb40 [ 277.009164][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.009192][T11543] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.009226][T11543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.009255][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.009281][T11543] ____sys_sendmsg+0x9b9/0xa20 [ 277.009305][T11543] ? __might_fault+0xaf/0x130 [ 277.009340][T11543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.009380][T11543] ? import_iovec+0x73/0xa0 [ 277.009410][T11543] ___sys_sendmsg+0x2a5/0x360 [ 277.009432][T11543] ? __lock_acquire+0x683/0x2cd0 [ 277.009461][T11543] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.009525][T11543] ? __fget_files+0x2a/0x420 [ 277.009551][T11543] ? __fget_files+0x3a2/0x420 [ 277.009589][T11543] __x64_sys_sendmsg+0x1bd/0x2a0 [ 277.009617][T11543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.009652][T11543] ? __pfx_ksys_write+0x10/0x10 [ 277.009693][T11543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.009718][T11543] do_syscall_64+0x174/0x580 [ 277.009742][T11543] ? trace_irq_disable+0x3b/0x140 [ 277.009775][T11543] ? clear_bhb_loop+0x40/0x90 [ 277.009811][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.009833][T11543] RIP: 0033:0x7f08c5b9ce59 [ 277.009853][T11543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.009872][T11543] RSP: 002b:00007f08c6a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.009895][T11543] RAX: ffffffffffffffda RBX: 00007f08c5e16090 RCX: 00007f08c5b9ce59 [ 277.009912][T11543] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 277.009925][T11543] RBP: 00007f08c6a67090 R08: 0000000000000000 R09: 0000000000000000 [ 277.009939][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.009952][T11543] R13: 00007f08c5e16128 R14: 00007f08c5e16090 R15: 00007ffc99a989a8 [ 277.009987][T11543] [ 277.477136][T11548] ip6tnl0: Caught tx_queue_len zero misconfig [ 277.582069][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.662220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.795082][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.825705][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.875834][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 278.018910][T11566] netlink: 'syz.4.2014': attribute type 12 has an invalid length. [ 278.027223][T11566] netlink: 'syz.4.2014': attribute type 29 has an invalid length. [ 278.036393][T11566] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2014'. [ 278.046275][T11566] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2014'. [ 278.061879][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.256796][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.491123][T11578] sctp: [Deprecated]: syz.4.2019 (pid 11578) Use of int in max_burst socket option. [ 278.491123][T11578] Use struct sctp_assoc_value instead [ 278.623305][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.687658][T11588] FAULT_INJECTION: forcing a failure. [ 278.687658][T11588] name failslab, interval 1, probability 0, space 0, times 0 [ 278.721528][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.1.2022 Not tainted syzkaller #0 PREEMPT(full) [ 278.721563][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.721578][T11588] Call Trace: [ 278.721588][T11588] [ 278.721598][T11588] dump_stack_lvl+0xe8/0x150 [ 278.721636][T11588] should_fail_ex+0x40c/0x560 [ 278.721683][T11588] should_failslab+0xa8/0x100 [ 278.721724][T11588] __kmalloc_node_noprof+0xf0/0x7b0 [ 278.721760][T11588] ? crypto_create_tfm_node+0x81/0x3c0 [ 278.721800][T11588] crypto_create_tfm_node+0x81/0x3c0 [ 278.721838][T11588] crypto_ahash_init_tfm+0x153/0x6c0 [ 278.721868][T11588] ? crypto_create_tfm_node+0x81/0x3c0 [ 278.721907][T11588] crypto_create_tfm_node+0x143/0x3c0 [ 278.721945][T11588] crypto_spawn_tfm2+0x5c/0x90 [ 278.721972][T11588] crypto_authenc_esn_init_tfm+0x46/0x230 [ 278.722008][T11588] crypto_create_tfm_node+0x143/0x3c0 [ 278.722046][T11588] crypto_alloc_tfm_node+0x169/0x3e0 [ 278.722091][T11588] alg_bind+0x2fa/0x570 [ 278.722123][T11588] __sys_bind+0x2e3/0x410 [ 278.722161][T11588] ? __pfx___sys_bind+0x10/0x10 [ 278.722213][T11588] ? __pfx_ksys_write+0x10/0x10 [ 278.722255][T11588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.722282][T11588] __x64_sys_bind+0x7a/0x90 [ 278.722320][T11588] do_syscall_64+0x174/0x580 [ 278.722368][T11588] ? trace_irq_disable+0x3b/0x140 [ 278.722405][T11588] ? clear_bhb_loop+0x40/0x90 [ 278.722436][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.722460][T11588] RIP: 0033:0x7f66b479ce59 [ 278.722484][T11588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.722505][T11588] RSP: 002b:00007f66b55c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 278.722530][T11588] RAX: ffffffffffffffda RBX: 00007f66b4a15fa0 RCX: 00007f66b479ce59 [ 278.722549][T11588] RDX: 0000000000000058 RSI: 0000200000000180 RDI: 0000000000000009 [ 278.722564][T11588] RBP: 00007f66b55c3090 R08: 0000000000000000 R09: 0000000000000000 [ 278.722578][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.722592][T11588] R13: 00007f66b4a16038 R14: 00007f66b4a15fa0 R15: 00007fff6a36e628 [ 278.722632][T11588] [ 279.830777][T11622] xt_hl: Unknown TTL match mode: 237 [ 280.345561][T11642] sctp: [Deprecated]: syz.1.2038 (pid 11642) Use of int in max_burst socket option. [ 280.345561][T11642] Use struct sctp_assoc_value instead [ 281.614368][T11688] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 281.695941][T11687] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 281.742137][ T5633] net_ratelimit: 14 callbacks suppressed [ 281.742157][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.786897][T11695] netlink: 'syz.4.2050': attribute type 13 has an invalid length. [ 281.828250][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 281.972167][T11701] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 282.432016][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 284.045226][T11720] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 285.992700][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.000396][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.136320][T11694] batman_adv: batadv0: Interface deactivated: dummy0 [ 286.651535][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.719139][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.065339][T11720] team0: Port device veth1_to_hsr added [ 288.088657][ T152] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.106710][ T152] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.136464][ T152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.166307][ T152] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.222627][ T152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.253813][ T152] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.296852][ T152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.338362][ T152] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.459163][T11739] syzkaller0: entered promiscuous mode [ 288.473922][T11739] syzkaller0: entered allmulticast mode [ 288.611076][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 288.863727][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 288.916935][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 289.331978][T11767] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2070'. [ 289.375564][T11766] tc action pedit 'at' offset 6 out of bounds [ 290.099940][T11779] syzkaller0: entered promiscuous mode [ 290.121433][T11779] syzkaller0: entered allmulticast mode [ 290.294901][T11788] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 290.424735][T11788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'. [ 290.454395][T11788] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.711387][T11801] tc action pedit 'at' offset 6 out of bounds [ 290.727040][T11803] netlink: 'syz.2.2084': attribute type 21 has an invalid length. [ 290.757250][T11803] netlink: 'syz.2.2084': attribute type 21 has an invalid length. [ 290.818525][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 290.853483][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 290.906567][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.915854][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 290.924930][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.938326][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 290.960618][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.978364][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.376623][T11823] syzkaller0: entered promiscuous mode [ 291.403676][T11823] syzkaller0: entered allmulticast mode [ 291.813189][T11838] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2096'. [ 292.137221][T11843] tc action pedit 'at' offset 6 out of bounds [ 292.449969][T11846] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 292.910213][T11852] macsec2: entered promiscuous mode [ 293.306816][T11871] syzkaller0: entered promiscuous mode [ 293.321317][T11871] syzkaller0: entered allmulticast mode [ 293.665997][T11873] __nla_validate_parse: 4 callbacks suppressed [ 293.666018][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 294.506603][T11889] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.037229][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 295.418047][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2127'. [ 295.451105][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2127'. [ 295.500784][T11919] syzkaller0: entered promiscuous mode [ 295.506805][T11919] syzkaller0: entered allmulticast mode [ 295.589104][T11921] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2129'. [ 295.772009][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 295.781172][T11925] netlink: 'syz.1.2131': attribute type 30 has an invalid length. [ 295.805971][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.829656][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.862748][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.891478][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.073321][T11939] syzkaller0: entered promiscuous mode [ 296.078985][T11939] syzkaller0: entered allmulticast mode [ 296.159616][T11941] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 296.272567][T11941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2137'. [ 296.284697][T11945] FAULT_INJECTION: forcing a failure. [ 296.284697][T11945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.297906][T11945] CPU: 1 UID: 0 PID: 11945 Comm: syz.1.2138 Not tainted syzkaller #0 PREEMPT(full) [ 296.297933][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.297945][T11945] Call Trace: [ 296.297954][T11945] [ 296.297963][T11945] dump_stack_lvl+0xe8/0x150 [ 296.297990][T11945] should_fail_ex+0x40c/0x560 [ 296.298038][T11945] _copy_to_user+0x31/0xb0 [ 296.298064][T11945] simple_read_from_buffer+0xe1/0x170 [ 296.298097][T11945] proc_fail_nth_read+0x1bb/0x230 [ 296.298133][T11945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.298167][T11945] ? rw_verify_area+0x24a/0x4c0 [ 296.298197][T11945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.298222][T11945] vfs_read+0x213/0xa80 [ 296.298257][T11945] ? __pfx___mutex_lock+0x10/0x10 [ 296.298283][T11945] ? __pfx_vfs_read+0x10/0x10 [ 296.298313][T11945] ? __fget_files+0x2a/0x420 [ 296.298344][T11945] ? __fget_files+0x3a2/0x420 [ 296.298368][T11945] ? __fget_files+0x2a/0x420 [ 296.298401][T11945] ksys_read+0x150/0x270 [ 296.298434][T11945] ? __pfx_ksys_read+0x10/0x10 [ 296.298478][T11945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.298503][T11945] do_syscall_64+0x174/0x580 [ 296.298529][T11945] ? trace_irq_disable+0x3b/0x140 [ 296.298565][T11945] ? clear_bhb_loop+0x40/0x90 [ 296.298589][T11945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.298609][T11945] RIP: 0033:0x7f66b475d68e [ 296.298629][T11945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.298647][T11945] RSP: 002b:00007f66b55c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.298668][T11945] RAX: ffffffffffffffda RBX: 00007f66b55c36c0 RCX: 00007f66b475d68e [ 296.298681][T11945] RDX: 000000000000000f RSI: 00007f66b55c30a0 RDI: 0000000000000005 [ 296.298694][T11945] RBP: 00007f66b55c3090 R08: 0000000000000000 R09: 0000000000000000 [ 296.298706][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.298718][T11945] R13: 00007f66b4a16038 R14: 00007f66b4a15fa0 R15: 00007fff6a36e628 [ 296.298750][T11945] [ 296.358387][T11941] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.804766][T11955] syzkaller0: entered promiscuous mode [ 296.823371][T11955] syzkaller0: entered allmulticast mode [ 296.973976][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.983976][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.996719][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.007444][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.015529][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.916281][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.924265][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.931632][T11963] bridge_slave_0: entered allmulticast mode [ 297.939705][T11963] bridge_slave_0: entered promiscuous mode [ 297.951959][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.959366][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.966984][T11963] bridge_slave_1: entered allmulticast mode [ 297.975262][T11963] bridge_slave_1: entered promiscuous mode [ 298.017254][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.030899][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.075309][T11963] team0: Port device team_slave_0 added [ 298.084848][T11963] team0: Port device team_slave_1 added [ 298.122117][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.129143][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.157720][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.170756][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.178037][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.204896][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.277582][T11963] hsr_slave_0: entered promiscuous mode [ 298.284869][T11963] hsr_slave_1: entered promiscuous mode [ 298.292158][T11963] debugfs: 'hsr0' already exists in 'hsr' [ 298.297961][T11963] Cannot create hsr debugfs directory [ 299.102881][ T5647] Bluetooth: hci5: command tx timeout [ 299.843390][T11959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.868338][T11963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.922208][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.953273][T11963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.995676][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.020967][T11963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.033438][T11991] FAULT_INJECTION: forcing a failure. [ 300.033438][T11991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.064733][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.079495][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.2.2148 Not tainted syzkaller #0 PREEMPT(full) [ 300.079524][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.079551][T11991] Call Trace: [ 300.079560][T11991] [ 300.079569][T11991] dump_stack_lvl+0xe8/0x150 [ 300.079599][T11991] should_fail_ex+0x40c/0x560 [ 300.079638][T11991] _copy_to_user+0x31/0xb0 [ 300.079666][T11991] simple_read_from_buffer+0xe1/0x170 [ 300.079699][T11991] proc_fail_nth_read+0x1bb/0x230 [ 300.079731][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.079763][T11991] ? rw_verify_area+0x24a/0x4c0 [ 300.079796][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.079824][T11991] vfs_read+0x213/0xa80 [ 300.079860][T11991] ? __pfx___mutex_lock+0x10/0x10 [ 300.079888][T11991] ? __pfx_vfs_read+0x10/0x10 [ 300.079921][T11991] ? __fget_files+0x2a/0x420 [ 300.079952][T11991] ? __fget_files+0x3a2/0x420 [ 300.079978][T11991] ? __fget_files+0x2a/0x420 [ 300.080014][T11991] ksys_read+0x150/0x270 [ 300.080046][T11991] ? __pfx_ksys_read+0x10/0x10 [ 300.080085][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.080108][T11991] do_syscall_64+0x174/0x580 [ 300.080131][T11991] ? trace_irq_disable+0x3b/0x140 [ 300.080165][T11991] ? clear_bhb_loop+0x40/0x90 [ 300.080193][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.080215][T11991] RIP: 0033:0x7f9923d5d68e [ 300.080235][T11991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.080253][T11991] RSP: 002b:00007f9924d3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.080284][T11991] RAX: ffffffffffffffda RBX: 00007f9924d3c6c0 RCX: 00007f9923d5d68e [ 300.080299][T11991] RDX: 000000000000000f RSI: 00007f9924d3c0a0 RDI: 0000000000000006 [ 300.080312][T11991] RBP: 00007f9924d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 300.080325][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.080338][T11991] R13: 00007f9924016038 R14: 00007f9924015fa0 R15: 00007ffff4a19398 [ 300.080371][T11991] [ 300.315498][T11963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 300.377304][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.620553][T12005] FAULT_INJECTION: forcing a failure. [ 300.620553][T12005] name failslab, interval 1, probability 0, space 0, times 0 [ 300.664571][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.3.2152 Not tainted syzkaller #0 PREEMPT(full) [ 300.664602][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.664615][T12005] Call Trace: [ 300.664633][T12005] [ 300.664643][T12005] dump_stack_lvl+0xe8/0x150 [ 300.664673][T12005] should_fail_ex+0x40c/0x560 [ 300.664715][T12005] should_failslab+0xa8/0x100 [ 300.664752][T12005] __kmalloc_noprof+0xe8/0x750 [ 300.664781][T12005] ? __pfx___mutex_trylock_common+0x10/0x10 [ 300.664811][T12005] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 300.664862][T12005] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 300.664903][T12005] genl_family_rcv_msg_doit+0xda/0x340 [ 300.664940][T12005] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.664979][T12005] ? apparmor_capable+0x126/0x170 [ 300.665006][T12005] ? bpf_lsm_capable+0x9/0x20 [ 300.665026][T12005] ? security_capable+0x7e/0x2c0 [ 300.665062][T12005] genl_rcv_msg+0x614/0x7a0 [ 300.665098][T12005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.665127][T12005] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 300.665172][T12005] netlink_rcv_skb+0x226/0x4a0 [ 300.665196][T12005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.665227][T12005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.665267][T12005] ? down_read+0x270/0x2e0 [ 300.665293][T12005] ? genl_rcv+0xd/0x40 [ 300.665322][T12005] genl_rcv+0x28/0x40 [ 300.665349][T12005] netlink_unicast+0x7bb/0x940 [ 300.665394][T12005] netlink_sendmsg+0x813/0xb40 [ 300.665428][T12005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.665455][T12005] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.665488][T12005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.665515][T12005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.665540][T12005] ____sys_sendmsg+0x9b9/0xa20 [ 300.665564][T12005] ? __might_fault+0xaf/0x130 [ 300.665598][T12005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.665638][T12005] ? import_iovec+0x73/0xa0 [ 300.665667][T12005] ___sys_sendmsg+0x2a5/0x360 [ 300.665688][T12005] ? __lock_acquire+0x683/0x2cd0 [ 300.665715][T12005] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.665776][T12005] ? __fget_files+0x2a/0x420 [ 300.665803][T12005] ? __fget_files+0x3a2/0x420 [ 300.665840][T12005] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.665867][T12005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.665898][T12005] ? __pfx_ksys_write+0x10/0x10 [ 300.665938][T12005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.665962][T12005] do_syscall_64+0x174/0x580 [ 300.665989][T12005] ? trace_irq_disable+0x3b/0x140 [ 300.666021][T12005] ? clear_bhb_loop+0x40/0x90 [ 300.666047][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.666069][T12005] RIP: 0033:0x7f6d59d9ce59 [ 300.666089][T12005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.666107][T12005] RSP: 002b:00007f6d5abeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.666129][T12005] RAX: ffffffffffffffda RBX: 00007f6d5a015fa0 RCX: 00007f6d59d9ce59 [ 300.666144][T12005] RDX: 0000000024004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 300.666158][T12005] RBP: 00007f6d5abeb090 R08: 0000000000000000 R09: 0000000000000000 [ 300.666171][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.666183][T12005] R13: 00007f6d5a016038 R14: 00007f6d5a015fa0 R15: 00007ffe8b03fca8 [ 300.666217][T12005] [ 300.740620][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.043583][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.067188][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.074462][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.104010][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.111320][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.191531][ T5647] Bluetooth: hci5: command tx timeout [ 302.389697][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.403998][T12055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2166'. [ 302.540936][T12066] FAULT_INJECTION: forcing a failure. [ 302.540936][T12066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.596332][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.2.2167 Not tainted syzkaller #0 PREEMPT(full) [ 302.596363][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.596377][T12066] Call Trace: [ 302.596385][T12066] [ 302.596393][T12066] dump_stack_lvl+0xe8/0x150 [ 302.596424][T12066] should_fail_ex+0x40c/0x560 [ 302.596477][T12066] _copy_from_user+0x2d/0xb0 [ 302.596502][T12066] ___sys_sendmsg+0x1c6/0x360 [ 302.596525][T12066] ? __lock_acquire+0x683/0x2cd0 [ 302.596553][T12066] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.596613][T12066] ? __fget_files+0x2a/0x420 [ 302.596638][T12066] ? __fget_files+0x3a2/0x420 [ 302.596675][T12066] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.596701][T12066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.596735][T12066] ? __pfx_ksys_write+0x10/0x10 [ 302.596777][T12066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.596800][T12066] do_syscall_64+0x174/0x580 [ 302.596872][T12066] ? trace_irq_disable+0x3b/0x140 [ 302.596904][T12066] ? clear_bhb_loop+0x40/0x90 [ 302.596932][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.596954][T12066] RIP: 0033:0x7f9923d9ce59 [ 302.596974][T12066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.596993][T12066] RSP: 002b:00007f9924d3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.597016][T12066] RAX: ffffffffffffffda RBX: 00007f9924015fa0 RCX: 00007f9923d9ce59 [ 302.597032][T12066] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000008 [ 302.597045][T12066] RBP: 00007f9924d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 302.597058][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.597071][T12066] R13: 00007f9924016038 R14: 00007f9924015fa0 R15: 00007ffff4a19398 [ 302.597110][T12066] [ 303.261759][ T5647] Bluetooth: hci5: command tx timeout [ 303.587374][T11963] veth0_vlan: entered promiscuous mode [ 303.636590][T11963] veth1_vlan: entered promiscuous mode [ 303.709631][T11963] veth0_macvtap: entered promiscuous mode [ 303.757267][T11963] veth1_macvtap: entered promiscuous mode [ 303.807814][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.833528][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.895163][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.912597][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.945519][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.988406][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.337419][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.371023][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.425130][T12103] syzkaller0: entered promiscuous mode [ 304.442937][T12103] syzkaller0: entered allmulticast mode [ 304.511714][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.519283][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.525730][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.532146][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.538513][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.544947][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.551385][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.556219][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.557743][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.573619][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.580024][T12103] tc action pedit 'at' offset 2047 out of bounds [ 304.581151][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.586629][T12103] TC_ACT_REPEAT abuse ? [ 305.343815][ T5647] Bluetooth: hci5: command tx timeout [ 305.929687][T12138] ip6gretap1: entered promiscuous mode [ 306.176585][T12148] FAULT_INJECTION: forcing a failure. [ 306.176585][T12148] name failslab, interval 1, probability 0, space 0, times 0 [ 306.206403][T12148] CPU: 1 UID: 0 PID: 12148 Comm: syz.5.2192 Not tainted syzkaller #0 PREEMPT(full) [ 306.206433][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.206446][T12148] Call Trace: [ 306.206455][T12148] [ 306.206464][T12148] dump_stack_lvl+0xe8/0x150 [ 306.206494][T12148] should_fail_ex+0x40c/0x560 [ 306.206534][T12148] should_failslab+0xa8/0x100 [ 306.206570][T12148] __kmalloc_noprof+0xe8/0x750 [ 306.206602][T12148] ? __pfx___mutex_trylock_common+0x10/0x10 [ 306.206632][T12148] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 306.206671][T12148] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 306.206712][T12148] genl_family_rcv_msg_doit+0xda/0x340 [ 306.206750][T12148] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.206797][T12148] ? apparmor_capable+0x126/0x170 [ 306.206823][T12148] ? bpf_lsm_capable+0x9/0x20 [ 306.206843][T12148] ? security_capable+0x7e/0x2c0 [ 306.206877][T12148] genl_rcv_msg+0x614/0x7a0 [ 306.206912][T12148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.206940][T12148] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 306.206983][T12148] netlink_rcv_skb+0x226/0x4a0 [ 306.207006][T12148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.207035][T12148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.207072][T12148] ? down_read+0x270/0x2e0 [ 306.207102][T12148] ? genl_rcv+0xd/0x40 [ 306.207132][T12148] genl_rcv+0x28/0x40 [ 306.207159][T12148] netlink_unicast+0x7bb/0x940 [ 306.207204][T12148] netlink_sendmsg+0x813/0xb40 [ 306.207238][T12148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.207265][T12148] ? aa_sock_msg_perm+0xf1/0x1b0 [ 306.207298][T12148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.207325][T12148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.207349][T12148] ____sys_sendmsg+0x9b9/0xa20 [ 306.207373][T12148] ? __might_fault+0xaf/0x130 [ 306.207408][T12148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.207442][T12148] ? import_iovec+0x73/0xa0 [ 306.207471][T12148] ___sys_sendmsg+0x2a5/0x360 [ 306.207493][T12148] ? __lock_acquire+0x683/0x2cd0 [ 306.207521][T12148] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.207584][T12148] ? __fget_files+0x2a/0x420 [ 306.207610][T12148] ? __fget_files+0x3a2/0x420 [ 306.207649][T12148] __x64_sys_sendmsg+0x1bd/0x2a0 [ 306.207676][T12148] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.207709][T12148] ? __pfx_ksys_write+0x10/0x10 [ 306.207748][T12148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.207780][T12148] do_syscall_64+0x174/0x580 [ 306.207804][T12148] ? trace_irq_disable+0x3b/0x140 [ 306.207836][T12148] ? clear_bhb_loop+0x40/0x90 [ 306.207864][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.207885][T12148] RIP: 0033:0x7f708a99ce59 [ 306.207906][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.207925][T12148] RSP: 002b:00007f708b826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.207949][T12148] RAX: ffffffffffffffda RBX: 00007f708ac15fa0 RCX: 00007f708a99ce59 [ 306.207965][T12148] RDX: 0000000024004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 306.207979][T12148] RBP: 00007f708b826090 R08: 0000000000000000 R09: 0000000000000000 [ 306.207992][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.208003][T12148] R13: 00007f708ac16038 R14: 00007f708ac15fa0 R15: 00007ffca4dcdf48 [ 306.208038][T12148] [ 306.936712][T12153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.364939][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 307.430067][T12177] netlink: 'syz.2.2201': attribute type 30 has an invalid length. [ 307.896902][T12191] FAULT_INJECTION: forcing a failure. [ 307.896902][T12191] name failslab, interval 1, probability 0, space 0, times 0 [ 307.939919][ T4946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.951981][T12191] CPU: 1 UID: 0 PID: 12191 Comm: syz.5.2208 Not tainted syzkaller #0 PREEMPT(full) [ 307.952012][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.952027][T12191] Call Trace: [ 307.952036][T12191] [ 307.952047][T12191] dump_stack_lvl+0xe8/0x150 [ 307.952080][T12191] should_fail_ex+0x40c/0x560 [ 307.952126][T12191] should_failslab+0xa8/0x100 [ 307.952168][T12191] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 307.952208][T12191] ? __alloc_skb+0x189/0x7a0 [ 307.952244][T12191] ? __alloc_skb+0x1d7/0x7a0 [ 307.952278][T12191] ? __local_bh_enable_ip+0xd0/0x130 [ 307.952309][T12191] __alloc_skb+0x1d7/0x7a0 [ 307.952351][T12191] netlink_sendmsg+0x5d4/0xb40 [ 307.952389][T12191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.952421][T12191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 307.952459][T12191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.952491][T12191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.952520][T12191] ____sys_sendmsg+0x9b9/0xa20 [ 307.952553][T12191] ? irqentry_exit+0x218/0x8e0 [ 307.952579][T12191] ? trace_irq_disable+0x3b/0x140 [ 307.952623][T12191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.952654][T12191] ? ___sys_sendmsg+0x28a/0x360 [ 307.952681][T12191] ? ____sys_sendmsg+0x10/0xa20 [ 307.952712][T12191] ___sys_sendmsg+0x2a5/0x360 [ 307.952737][T12191] ? __lock_acquire+0x683/0x2cd0 [ 307.952768][T12191] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.952836][T12191] ? __fget_files+0x2a/0x420 [ 307.952865][T12191] ? __fget_files+0x3a2/0x420 [ 307.952907][T12191] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.952936][T12191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.952975][T12191] ? __pfx_ksys_write+0x10/0x10 [ 307.953020][T12191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.953047][T12191] do_syscall_64+0x174/0x580 [ 307.953076][T12191] ? clear_bhb_loop+0x40/0x90 [ 307.953107][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.953132][T12191] RIP: 0033:0x7f708a99ce59 [ 307.953154][T12191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.953175][T12191] RSP: 002b:00007f708b826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.953200][T12191] RAX: ffffffffffffffda RBX: 00007f708ac15fa0 RCX: 00007f708a99ce59 [ 307.953218][T12191] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000008 [ 307.953232][T12191] RBP: 00007f708b826090 R08: 0000000000000000 R09: 0000000000000000 [ 307.953248][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.953261][T12191] R13: 00007f708ac16038 R14: 00007f708ac15fa0 R15: 00007ffca4dcdf48 [ 307.953299][T12191] [ 308.220802][ T4946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.238779][ T4946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.319851][ T4946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.329332][ T4946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.699917][T12209] syzkaller1: entered promiscuous mode [ 308.720007][T12209] syzkaller1: entered allmulticast mode [ 308.783841][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 309.384919][T12233] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 309.413606][T12233] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2219'. [ 309.427093][T12233] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 309.666355][T12243] FAULT_INJECTION: forcing a failure. [ 309.666355][T12243] name failslab, interval 1, probability 0, space 0, times 0 [ 309.707751][T12243] CPU: 1 UID: 0 PID: 12243 Comm: syz.3.2221 Not tainted syzkaller #0 PREEMPT(full) [ 309.707780][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.707794][T12243] Call Trace: [ 309.707802][T12243] [ 309.707812][T12243] dump_stack_lvl+0xe8/0x150 [ 309.707842][T12243] should_fail_ex+0x40c/0x560 [ 309.707882][T12243] should_failslab+0xa8/0x100 [ 309.707913][T12243] __kmalloc_cache_noprof+0x88/0x660 [ 309.707940][T12243] ? __xdp_reg_mem_model+0x1e2/0x5a0 [ 309.707960][T12243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.707986][T12243] __xdp_reg_mem_model+0x1e2/0x5a0 [ 309.708022][T12243] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 309.708051][T12243] xdp_reg_mem_model+0x22/0x40 [ 309.708074][T12243] bpf_test_run_xdp_live+0x292/0x1c20 [ 309.708104][T12243] ? handle_mm_fault+0xec/0x3080 [ 309.708135][T12243] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 309.708157][T12243] ? __up_read+0x28f/0x6b0 [ 309.708197][T12243] ? do_user_addr_fault+0xc4a/0x1340 [ 309.708220][T12243] ? irqentry_exit+0x218/0x8e0 [ 309.708240][T12243] ? lockdep_hardirqs_on+0x7a/0x110 [ 309.708260][T12243] ? irqentry_exit+0x218/0x8e0 [ 309.708278][T12243] ? trace_irq_disable+0x3b/0x140 [ 309.708313][T12243] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 309.708340][T12243] ? rep_movs_alternative+0x4a/0x90 [ 309.708366][T12243] ? _copy_from_user+0x94/0xb0 [ 309.708387][T12243] ? bpf_test_init+0x113/0x150 [ 309.708403][T12243] ? xdp_convert_md_to_buff+0x5b/0x330 [ 309.708426][T12243] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 309.708459][T12243] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 309.708483][T12243] ? __fget_files+0x2a/0x420 [ 309.708511][T12243] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 309.708532][T12243] bpf_prog_test_run+0x2c5/0x340 [ 309.708552][T12243] __sys_bpf+0x643/0x950 [ 309.708581][T12243] ? __pfx___sys_bpf+0x10/0x10 [ 309.708625][T12243] ? ksys_write+0x242/0x270 [ 309.708655][T12243] ? __pfx_ksys_write+0x10/0x10 [ 309.708685][T12243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.708704][T12243] __x64_sys_bpf+0x7c/0x90 [ 309.708729][T12243] do_syscall_64+0x174/0x580 [ 309.708763][T12243] ? clear_bhb_loop+0x40/0x90 [ 309.708784][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.708801][T12243] RIP: 0033:0x7f6d59d9ce59 [ 309.708817][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.708832][T12243] RSP: 002b:00007f6d5abeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.708850][T12243] RAX: ffffffffffffffda RBX: 00007f6d5a015fa0 RCX: 00007f6d59d9ce59 [ 309.708863][T12243] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 309.708876][T12243] RBP: 00007f6d5abeb090 R08: 0000000000000000 R09: 0000000000000000 [ 309.708887][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.708897][T12243] R13: 00007f6d5a016038 R14: 00007f6d5a015fa0 R15: 00007ffe8b03fca8 [ 309.708923][T12243] [ 310.200590][T12247] sctp: [Deprecated]: syz.3.2223 (pid 12247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.200590][T12247] Use struct sctp_sack_info instead [ 310.355601][T12249] macsec2: entered allmulticast mode [ 310.374466][T12249] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 310.386098][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2226'. [ 310.403240][T12255] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 310.461644][ T4946] Bluetooth: hci6: command tx timeout [ 310.745975][T12247] syzkaller0: entered promiscuous mode [ 310.758292][T12247] syzkaller0: entered allmulticast mode [ 311.587114][T12277] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 311.738890][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2229'. [ 312.554844][ T4946] Bluetooth: hci6: command tx timeout [ 313.524939][T12277] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 313.827094][T12192] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.843428][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.851122][T12192] bridge_slave_0: entered allmulticast mode [ 313.859620][T12192] bridge_slave_0: entered promiscuous mode [ 313.870727][T12192] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.878587][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.886052][T12192] bridge_slave_1: entered allmulticast mode [ 313.894969][T12192] bridge_slave_1: entered promiscuous mode [ 313.944273][T12192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.968209][T12192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.078411][T12192] team0: Port device team_slave_0 added [ 314.098592][T12192] team0: Port device team_slave_1 added [ 314.178285][T12192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.201309][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.261450][T12192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.277301][T12192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.301360][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.349471][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 314.373007][T12192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.487728][T12192] hsr_slave_0: entered promiscuous mode [ 314.494764][T12192] hsr_slave_1: entered promiscuous mode [ 314.503912][T12192] debugfs: 'hsr0' already exists in 'hsr' [ 314.509777][T12192] Cannot create hsr debugfs directory [ 314.631543][ T4946] Bluetooth: hci6: command tx timeout [ 314.820637][T12192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.838959][T12192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.850872][T12192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.879515][T12192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.897208][T12192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.921185][T12192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.945397][T12192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.967999][T12192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.089890][T12192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.120420][T12192] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.143341][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.150558][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.175532][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.182757][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.094652][T12192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.701423][ T4946] Bluetooth: hci6: command tx timeout [ 316.808698][T12192] veth0_vlan: entered promiscuous mode [ 316.842811][T12192] veth1_vlan: entered promiscuous mode [ 316.932790][T12192] veth0_macvtap: entered promiscuous mode [ 316.957589][T12192] veth1_macvtap: entered promiscuous mode [ 317.035334][T12192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.105441][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.113828][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.122826][T12192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.164961][ T152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.181798][ T152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.305717][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.321507][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.601472][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.634993][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.727970][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.754043][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.893150][T12372] veth0_vlan: left promiscuous mode [ 317.910228][T12372] veth0_vlan: entered promiscuous mode [ 318.031262][T12372] bridge0: port 3(vlan2) entered blocking state [ 318.037719][T12372] bridge0: port 3(vlan2) entered forwarding state [ 318.065440][T12372] bond1: left promiscuous mode [ 318.076523][T12372] erspan1: left promiscuous mode [ 318.093798][T12372] bond2: left promiscuous mode [ 318.103592][T12372] gre1: left promiscuous mode [ 318.124019][T12372] bond3: left promiscuous mode [ 318.133899][T12372] bond4: left promiscuous mode [ 318.157375][T12372] bond5: left promiscuous mode [ 318.178172][T12372] bond6: left promiscuous mode [ 318.192878][T12372] geneve2: left promiscuous mode [ 318.220250][T12372] ip6gretap1: left promiscuous mode [ 318.551609][T12376] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2203'. [ 319.408278][T12397] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 319.996926][T12405] netlink: 'syz.6.2265': attribute type 1 has an invalid length. [ 320.077782][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2265'. [ 321.278875][T12421] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 322.112216][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2280'. [ 322.566125][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2283'. [ 322.727583][T12460] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 324.724634][T12467] FAULT_INJECTION: forcing a failure. [ 324.724634][T12467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.752908][T12467] CPU: 1 UID: 0 PID: 12467 Comm: syz.2.2286 Not tainted syzkaller #0 PREEMPT(full) [ 324.752939][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.752952][T12467] Call Trace: [ 324.752961][T12467] [ 324.752970][T12467] dump_stack_lvl+0xe8/0x150 [ 324.753001][T12467] should_fail_ex+0x40c/0x560 [ 324.753043][T12467] _copy_from_user+0x2d/0xb0 [ 324.753069][T12467] kstrtouint_from_user+0xd6/0x180 [ 324.753106][T12467] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 324.753158][T12467] proc_fail_nth_write+0x8e/0x210 [ 324.753187][T12467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.753224][T12467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.753252][T12467] vfs_write+0x296/0xba0 [ 324.753293][T12467] ? __pfx_vfs_write+0x10/0x10 [ 324.753327][T12467] ? __fget_files+0x2a/0x420 [ 324.753365][T12467] ? __fget_files+0x3a2/0x420 [ 324.753390][T12467] ? __fget_files+0x2a/0x420 [ 324.753426][T12467] ksys_write+0x150/0x270 [ 324.753450][T12467] ? __pfx_ksys_write+0x10/0x10 [ 324.753478][T12467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.753494][T12467] do_syscall_64+0x174/0x580 [ 324.753512][T12467] ? trace_irq_disable+0x3b/0x140 [ 324.753534][T12467] ? clear_bhb_loop+0x40/0x90 [ 324.753552][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.753567][T12467] RIP: 0033:0x7f9923d5d68e [ 324.753582][T12467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.753594][T12467] RSP: 002b:00007f9924d3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.753610][T12467] RAX: ffffffffffffffda RBX: 00007f9924d3c6c0 RCX: 00007f9923d5d68e [ 324.753621][T12467] RDX: 0000000000000001 RSI: 00007f9924d3c0a0 RDI: 0000000000000003 [ 324.753630][T12467] RBP: 00007f9924d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 324.753640][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.753648][T12467] R13: 00007f9924016038 R14: 00007f9924015fa0 R15: 00007ffff4a19398 [ 324.753672][T12467] [ 325.382307][ T5647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.390888][ T5647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.404235][ T5647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.416127][ T5647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.437453][ T5647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.899056][T12494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.364562][ T4946] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 326.380272][ T4946] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 326.388868][ T4946] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 326.400647][ T4946] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 326.408743][ T4946] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 326.641159][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.661441][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.676863][T12479] bridge_slave_0: entered allmulticast mode [ 326.694832][T12479] bridge_slave_0: entered promiscuous mode [ 326.716826][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.733504][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.754170][T12479] bridge_slave_1: entered allmulticast mode [ 326.773024][T12479] bridge_slave_1: entered promiscuous mode [ 326.863563][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.890018][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.983868][T12479] team0: Port device team_slave_0 added [ 327.013148][T12479] team0: Port device team_slave_1 added [ 327.090346][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.097924][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.129029][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.157768][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.165229][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.191995][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.248920][T12523] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 327.318999][T12523] 8021q: adding VLAN 0 to HW filter on device bond14 [ 327.365940][T12523] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 327.384717][T12523] bond14: (slave batadv1): making interface the new active one [ 327.394253][T12523] bond14: (slave batadv1): Enslaving as an active interface with an up link [ 327.442385][T12525] bond14: (slave veth3): Enslaving as an active interface with a down link [ 327.461959][T12479] hsr_slave_0: entered promiscuous mode [ 327.468735][T12479] hsr_slave_1: entered promiscuous mode [ 327.475423][T12479] debugfs: 'hsr0' already exists in 'hsr' [ 327.482072][T12479] Cannot create hsr debugfs directory [ 327.504182][ T4946] Bluetooth: hci7: command tx timeout [ 327.532194][T12523] bond14 (unregistering): (slave batadv1): Releasing active interface [ 327.583849][T12523] bond14 (unregistering): (slave veth3): Releasing active interface [ 327.623598][T12523] bond14 (unregistering): Released all slaves [ 328.235478][T12479] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 328.248310][T12479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.298091][T12479] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 328.310043][T12479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.319226][T12479] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 328.330235][T12479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.376639][T12479] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 328.389948][T12479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.443412][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.451109][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.461822][ T4946] Bluetooth: hci8: command tx timeout [ 328.463582][T12506] bridge_slave_0: entered allmulticast mode [ 328.476380][T12506] bridge_slave_0: entered promiscuous mode [ 328.498295][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.506594][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.515063][T12506] bridge_slave_1: entered allmulticast mode [ 328.523820][T12506] bridge_slave_1: entered promiscuous mode [ 328.618645][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.653483][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.735931][T12506] team0: Port device team_slave_0 added [ 328.746912][T12506] team0: Port device team_slave_1 added [ 328.802400][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.809983][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.837951][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.872779][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.887172][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.946739][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.029134][T12506] hsr_slave_0: entered promiscuous mode [ 329.036468][T12506] hsr_slave_1: entered promiscuous mode [ 329.054319][T12506] debugfs: 'hsr0' already exists in 'hsr' [ 329.060133][T12506] Cannot create hsr debugfs directory [ 329.188703][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.321678][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 329.400841][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.445931][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.453161][ T8339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.500891][T12556] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2304'. [ 329.530750][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.538001][ T8339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.581366][ T4946] Bluetooth: hci7: command tx timeout [ 329.616804][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2304'. [ 329.665055][T12556] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 329.693116][T12556] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 329.728797][T12556] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 329.760321][T12506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.788587][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.817934][T12506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.857476][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.908461][T12506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.965101][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.053827][T12506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.080393][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.464995][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.544482][ T4946] Bluetooth: hci8: command tx timeout [ 330.646994][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.667713][T12568] sctp: [Deprecated]: syz.2.2305 (pid 12568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.667713][T12568] Use struct sctp_sack_info instead [ 330.760918][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.768235][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.013356][T12568] syzkaller0: entered promiscuous mode [ 331.035725][T12568] syzkaller0: entered allmulticast mode [ 331.464199][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.471465][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.662156][ T4946] Bluetooth: hci7: command tx timeout [ 331.758379][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.879613][T12595] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2313'. [ 332.003515][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2313'. [ 332.030624][T12600] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 332.063609][T12600] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 332.084139][T12600] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 332.113967][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2314'. [ 332.159495][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.377068][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.573322][T11855] syz_tun (unregistering): left allmulticast mode [ 332.631452][ T4946] Bluetooth: hci8: command tx timeout [ 332.742814][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.066955][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.248125][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2318'. [ 333.457772][ T59] bridge_slave_1: left allmulticast mode [ 333.496058][ T59] bridge_slave_1: left promiscuous mode [ 333.533058][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.579488][ T59] bridge_slave_0: left allmulticast mode [ 333.609254][ T59] bridge_slave_0: left promiscuous mode [ 333.628067][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.742264][ T4946] Bluetooth: hci7: command tx timeout [ 333.871508][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2323'. [ 333.905285][T12650] netlink: 'syz.6.2323': attribute type 30 has an invalid length. [ 334.194187][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.208289][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.228483][ T59] bond0 (unregistering): Released all slaves [ 334.246412][ T59] bond1 (unregistering): Released all slaves [ 334.701978][ T4946] Bluetooth: hci8: command tx timeout [ 334.741958][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 334.751763][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 335.044461][T12689] x_tables: duplicate underflow at hook 1 [ 335.310666][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.529894][ T59] hsr_slave_0: left promiscuous mode [ 335.559298][ T59] hsr_slave_1: left promiscuous mode [ 335.583651][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.610377][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.644139][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.665746][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.771558][ T59] veth1_macvtap: left promiscuous mode [ 335.793063][ T59] veth0_macvtap: left promiscuous mode [ 335.803176][ T59] veth1_vlan: left promiscuous mode [ 335.826600][ T59] veth0_vlan: left promiscuous mode [ 336.470156][ T59] team0 (unregistering): Port device team_slave_1 removed [ 336.490043][ T59] team0 (unregistering): Port device team_slave_0 removed [ 336.640413][T12699] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 336.675051][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 336.704869][T11724] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 336.805467][T12479] veth0_vlan: entered promiscuous mode [ 336.862557][T12479] veth1_vlan: entered promiscuous mode [ 337.076661][T12479] veth0_macvtap: entered promiscuous mode [ 337.291046][T12479] veth1_macvtap: entered promiscuous mode [ 337.349060][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.416085][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.486865][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.545427][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.619429][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.638226][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.794526][T12506] veth0_vlan: entered promiscuous mode [ 337.956697][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.978543][T12759] FAULT_INJECTION: forcing a failure. [ 337.978543][T12759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.002002][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.013450][T12759] CPU: 1 UID: 0 PID: 12759 Comm: syz.3.2339 Not tainted syzkaller #0 PREEMPT(full) [ 338.013485][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.013498][T12759] Call Trace: [ 338.013506][T12759] [ 338.013515][T12759] dump_stack_lvl+0xe8/0x150 [ 338.013546][T12759] should_fail_ex+0x40c/0x560 [ 338.013587][T12759] _copy_to_user+0x31/0xb0 [ 338.013615][T12759] simple_read_from_buffer+0xe1/0x170 [ 338.013655][T12759] proc_fail_nth_read+0x1bb/0x230 [ 338.013688][T12759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.013720][T12759] ? rw_verify_area+0x24a/0x4c0 [ 338.013753][T12759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.013781][T12759] vfs_read+0x213/0xa80 [ 338.013818][T12759] ? __pfx___mutex_lock+0x10/0x10 [ 338.013850][T12759] ? __pfx_vfs_read+0x10/0x10 [ 338.013883][T12759] ? __fget_files+0x2a/0x420 [ 338.013914][T12759] ? __fget_files+0x3a2/0x420 [ 338.013938][T12759] ? __fget_files+0x2a/0x420 [ 338.013975][T12759] ksys_read+0x150/0x270 [ 338.014008][T12759] ? __pfx_ksys_read+0x10/0x10 [ 338.014048][T12759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.014071][T12759] do_syscall_64+0x174/0x580 [ 338.014096][T12759] ? trace_irq_disable+0x3b/0x140 [ 338.014129][T12759] ? clear_bhb_loop+0x40/0x90 [ 338.014156][T12759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.014178][T12759] RIP: 0033:0x7f6d59d5d68e [ 338.014198][T12759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.014217][T12759] RSP: 002b:00007f6d5aba8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.014239][T12759] RAX: ffffffffffffffda RBX: 00007f6d5aba96c0 RCX: 00007f6d59d5d68e [ 338.014255][T12759] RDX: 000000000000000f RSI: 00007f6d5aba90a0 RDI: 000000000000000c [ 338.014268][T12759] RBP: 00007f6d5aba9090 R08: 0000000000000000 R09: 0000000000000000 [ 338.014282][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.014295][T12759] R13: 00007f6d5a016218 R14: 00007f6d5a016180 R15: 00007ffe8b03fca8 [ 338.014329][T12759] [ 338.015026][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.317772][T12506] veth1_vlan: entered promiscuous mode [ 338.466770][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.495945][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.517737][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.544399][T12768] xt_hashlimit: size too large, truncated to 1048576 [ 338.599593][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 338.608476][ T8337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.644531][ T8337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.747066][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.758858][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.769816][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.791894][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 338.854766][T12506] veth0_macvtap: entered promiscuous mode [ 338.883763][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.917329][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.983268][ T59] netdevsim netdevsim0 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.015171][ T59] netdevsim netdevsim0 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.025489][ T59] netdevsim netdevsim0 €Â (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 339.059957][T12506] veth1_macvtap: entered promiscuous mode [ 339.215741][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.324241][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.458086][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.475166][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.516918][T12793] syzkaller0: entered promiscuous mode [ 339.534063][T12793] syzkaller0: entered allmulticast mode [ 339.576932][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'. [ 339.589918][T12793] tipc: Started in network mode [ 339.610579][T12793] tipc: Node identity 0ef2583cc537, cluster identity 4711 [ 339.631000][T12793] tipc: Enabled bearer , priority 0 [ 339.656085][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.690177][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.801176][T12792] tipc: Resetting bearer [ 339.854490][T12792] tipc: Disabling bearer [ 340.144094][ T59] bridge_slave_1: left allmulticast mode [ 340.168587][T12821] xt_hashlimit: size too large, truncated to 1048576 [ 340.180922][ T59] bridge_slave_1: left promiscuous mode [ 340.207620][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.274483][ T59] bridge_slave_0: left allmulticast mode [ 340.293259][ T59] bridge_slave_0: left promiscuous mode [ 340.312942][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.363561][ T46] IPVS: starting estimator thread 0... [ 340.472438][T12828] IPVS: using max 28 ests per chain, 67200 per kthread [ 340.811880][ T59] bond2 (unregistering): (slave erspan1): Releasing active interface [ 340.820040][ T59] erspan1 (unregistering): left promiscuous mode [ 340.827184][T12843] FAULT_INJECTION: forcing a failure. [ 340.827184][T12843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.840780][T12843] CPU: 1 UID: 0 PID: 12843 Comm: syz.3.2362 Not tainted syzkaller #0 PREEMPT(full) [ 340.840810][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.840823][T12843] Call Trace: [ 340.840833][T12843] [ 340.840842][T12843] dump_stack_lvl+0xe8/0x150 [ 340.840871][T12843] should_fail_ex+0x40c/0x560 [ 340.840910][T12843] _copy_from_iter+0x1d3/0x1660 [ 340.840936][T12843] ? rcu_is_watching+0x15/0xb0 [ 340.840964][T12843] ? __pfx__copy_from_iter+0x10/0x10 [ 340.840979][T12843] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 340.841012][T12843] ? netlink_sendmsg+0x650/0xb40 [ 340.841032][T12843] ? skb_put+0x112/0x210 [ 340.841051][T12843] netlink_sendmsg+0x6c0/0xb40 [ 340.841078][T12843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.841100][T12843] ? aa_sock_msg_perm+0xf1/0x1b0 [ 340.841128][T12843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.841151][T12843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.841173][T12843] ____sys_sendmsg+0x9b9/0xa20 [ 340.841209][T12843] ? __might_fault+0xaf/0x130 [ 340.841244][T12843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.841276][T12843] ? import_iovec+0x73/0xa0 [ 340.841300][T12843] ___sys_sendmsg+0x2a5/0x360 [ 340.841318][T12843] ? __lock_acquire+0x683/0x2cd0 [ 340.841340][T12843] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.841386][T12843] ? __fget_files+0x2a/0x420 [ 340.841408][T12843] ? __fget_files+0x3a2/0x420 [ 340.841438][T12843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 340.841459][T12843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.841485][T12843] ? __pfx_ksys_write+0x10/0x10 [ 340.841519][T12843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.841538][T12843] do_syscall_64+0x174/0x580 [ 340.841558][T12843] ? trace_irq_disable+0x3b/0x140 [ 340.841585][T12843] ? clear_bhb_loop+0x40/0x90 [ 340.841607][T12843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.841625][T12843] RIP: 0033:0x7f6d59d9ce59 [ 340.841642][T12843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.841657][T12843] RSP: 002b:00007f6d5abca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.841676][T12843] RAX: ffffffffffffffda RBX: 00007f6d5a016090 RCX: 00007f6d59d9ce59 [ 340.841691][T12843] RDX: 0000000024004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 340.841703][T12843] RBP: 00007f6d5abca090 R08: 0000000000000000 R09: 0000000000000000 [ 340.841714][T12843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.841724][T12843] R13: 00007f6d5a016128 R14: 00007f6d5a016090 R15: 00007ffe8b03fca8 [ 340.841751][T12843] [ 341.132655][ T59] bond3 (unregistering): (slave geneve2): Releasing active interface [ 341.197984][ T59] bond1 (unregistering): (slave bond0): Removing an active aggregator [ 341.210845][ T59] bond1 (unregistering): (slave bond0): Releasing backup interface [ 341.228476][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.243957][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.254735][ T59] bond0 (unregistering): Released all slaves [ 341.266878][ T59] bond1 (unregistering): Released all slaves [ 341.284428][ T59] bond2 (unregistering): Released all slaves [ 341.300517][ T59] bond3 (unregistering): Released all slaves [ 341.330419][ T59] bond4 (unregistering): Released all slaves [ 341.353378][ T59] bond5 (unregistering): Released all slaves [ 341.369743][ T59] bond6 (unregistering): Released all slaves [ 341.401747][ T59] bond7 (unregistering): (slave batadv0): Releasing active interface [ 341.409912][ T59] batadv0: left promiscuous mode [ 341.415186][ T59] batadv0: left allmulticast mode [ 341.422936][ T59] bond7 (unregistering): Released all slaves [ 341.447239][ T59] bond8 (unregistering): Released all slaves [ 341.509478][T12829] vlan2: entered promiscuous mode [ 341.521999][T12829] bridge0: entered promiscuous mode [ 341.593298][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 341.684320][ T59] tipc: Left network mode [ 341.748354][T12849] FAULT_INJECTION: forcing a failure. [ 341.748354][T12849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.779933][T12849] CPU: 0 UID: 0 PID: 12849 Comm: syz.3.2364 Not tainted syzkaller #0 PREEMPT(full) [ 341.779965][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.779978][T12849] Call Trace: [ 341.779987][T12849] [ 341.779996][T12849] dump_stack_lvl+0xe8/0x150 [ 341.780026][T12849] should_fail_ex+0x40c/0x560 [ 341.780067][T12849] _copy_from_user+0x2d/0xb0 [ 341.780093][T12849] ___sys_sendmsg+0x1c6/0x360 [ 341.780116][T12849] ? __lock_acquire+0x683/0x2cd0 [ 341.780144][T12849] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.780207][T12849] ? __fget_files+0x2a/0x420 [ 341.780233][T12849] ? __fget_files+0x3a2/0x420 [ 341.780270][T12849] __x64_sys_sendmsg+0x1bd/0x2a0 [ 341.780298][T12849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.780332][T12849] ? __pfx_ksys_write+0x10/0x10 [ 341.780374][T12849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.780399][T12849] do_syscall_64+0x174/0x580 [ 341.780422][T12849] ? trace_irq_disable+0x3b/0x140 [ 341.780454][T12849] ? clear_bhb_loop+0x40/0x90 [ 341.780482][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.780503][T12849] RIP: 0033:0x7f6d59d9ce59 [ 341.780544][T12849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.780571][T12849] RSP: 002b:00007f6d5abca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.780595][T12849] RAX: ffffffffffffffda RBX: 00007f6d5a016090 RCX: 00007f6d59d9ce59 [ 341.780612][T12849] RDX: 0000000024004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 341.780626][T12849] RBP: 00007f6d5abca090 R08: 0000000000000000 R09: 0000000000000000 [ 341.780639][T12849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.780652][T12849] R13: 00007f6d5a016128 R14: 00007f6d5a016090 R15: 00007ffe8b03fca8 [ 341.780686][T12849] [ 342.262462][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2368'. [ 342.324029][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.353442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.650047][T12099] block nbd64: NBD_DISCONNECT [ 342.887470][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.917841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.371716][ T59] hsr_slave_0: left promiscuous mode [ 343.394368][ T59] hsr_slave_1: left promiscuous mode [ 343.405340][ T59] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 343.415969][ T59] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 343.443462][ T59] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 343.460693][ T59] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 344.145017][ T59] team0 (unregistering): Port device team_slave_1 removed [ 344.218665][ T59] team0 (unregistering): Port device team_slave_0 removed [ 344.649565][T12904] tipc: Enabling of bearer rejected, failed to enable media [ 344.728485][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 345.020631][T12945] netlink: 160 bytes leftover after parsing attributes in process `syz.8.2385'. [ 345.180020][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2385'. [ 345.275292][T12945] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 345.319985][T12945] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 345.379476][T12945] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 345.773259][T12973] xt_hashlimit: size too large, truncated to 1048576 [ 345.807860][ T59] IPVS: stop unused estimator thread 0... [ 346.764717][T13005] vlan3: entered promiscuous mode [ 346.888630][T13011] tap0: tun_chr_ioctl cmd 2148553947 [ 347.082779][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 347.276952][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2408'. [ 347.639903][T13034] syzkaller0: entered promiscuous mode [ 347.676209][T13034] syzkaller0: entered allmulticast mode [ 347.767652][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2415'. [ 348.063996][T13057] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 348.087811][T11725] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 348.207774][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2423'. [ 348.410160][T13066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.734741][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 349.543189][T13127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input9 [ 349.805476][T13139] netlink: 'syz.8.2442': attribute type 2 has an invalid length. [ 349.893558][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2443'. [ 349.928979][T13144] sch_tbf: burst 88 is lower than device macsec0 mtu (1482) ! [ 350.081799][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2446'. [ 350.092640][T13143] netlink: 860 bytes leftover after parsing attributes in process `syz.6.2444'. [ 350.399087][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 350.897639][T13187] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2458'. [ 350.921909][ T5291] 8021q: adding VLAN 0 to HW filter on device eth8 [ 351.326505][T13203] netlink: 'syz.7.2463': attribute type 5 has an invalid length. [ 351.366928][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2463'. [ 351.502679][T13209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.943325][T13227] netlink: 'syz.7.2471': attribute type 2 has an invalid length. [ 352.149172][T13231] tipc: Enabled bearer , priority 0 [ 352.175220][T13231] syzkaller0: entered promiscuous mode [ 352.190419][T13235] FAULT_INJECTION: forcing a failure. [ 352.190419][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.192568][T13231] syzkaller0: entered allmulticast mode [ 352.222826][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.6.2473 Not tainted syzkaller #0 PREEMPT(full) [ 352.222864][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.222879][T13235] Call Trace: [ 352.222964][T13235] [ 352.223030][T13235] dump_stack_lvl+0xe8/0x150 [ 352.223180][T13235] should_fail_ex+0x40c/0x560 [ 352.223277][T13235] _copy_from_user+0x2d/0xb0 [ 352.223333][T13235] ___sys_sendmsg+0x1c6/0x360 [ 352.223425][T13235] ? __lock_acquire+0x683/0x2cd0 [ 352.223503][T13235] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.223532][T13235] ? kstrtouint+0x6e/0xe0 [ 352.223615][T13235] ? __fget_files+0x2a/0x420 [ 352.223670][T13235] ? __fget_files+0x3a2/0x420 [ 352.223708][T13235] __sys_sendmmsg+0x27c/0x4e0 [ 352.223738][T13235] ? __pfx___sys_sendmmsg+0x10/0x10 [ 352.223759][T13235] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 352.223882][T13235] ? ksys_write+0x242/0x270 [ 352.223921][T13235] ? __pfx_ksys_write+0x10/0x10 [ 352.223959][T13235] __x64_sys_sendmmsg+0xa0/0xc0 [ 352.223983][T13235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.224052][T13235] do_syscall_64+0x174/0x580 [ 352.224120][T13235] ? trace_irq_disable+0x3b/0x140 [ 352.224172][T13235] ? clear_bhb_loop+0x40/0x90 [ 352.224199][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.224221][T13235] RIP: 0033:0x7fb7d239ce59 [ 352.224329][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.224373][T13235] RSP: 002b:00007fb7d3318028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.224422][T13235] RAX: ffffffffffffffda RBX: 00007fb7d2615fa0 RCX: 00007fb7d239ce59 [ 352.224439][T13235] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 352.224454][T13235] RBP: 00007fb7d3318090 R08: 0000000000000000 R09: 0000000000000000 [ 352.224467][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.224480][T13235] R13: 00007fb7d2616038 R14: 00007fb7d2615fa0 R15: 00007ffd9c5b6d78 [ 352.224514][T13235] [ 352.506260][T13243] netlink: 'syz.6.2476': attribute type 16 has an invalid length. [ 352.531822][T13243] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2476'. [ 352.585192][T13246] tipc: Resetting bearer [ 352.640131][T13230] tipc: Resetting bearer [ 352.756127][T13230] tipc: Disabling bearer [ 353.067919][T13265] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2483'. [ 353.256453][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2486'. [ 353.308734][T13275] syzkaller0: entered promiscuous mode [ 353.338760][T13275] syzkaller0: entered allmulticast mode [ 353.379921][T13275] tipc: Enabled bearer , priority 0 [ 353.422186][T13274] tipc: Resetting bearer [ 353.483167][T13284] FAULT_INJECTION: forcing a failure. [ 353.483167][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 353.507581][T13274] tipc: Disabling bearer [ 353.533953][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.7.2491 Not tainted syzkaller #0 PREEMPT(full) [ 353.533983][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.533997][T13284] Call Trace: [ 353.534005][T13284] [ 353.534014][T13284] dump_stack_lvl+0xe8/0x150 [ 353.534047][T13284] should_fail_ex+0x40c/0x560 [ 353.534090][T13284] should_failslab+0xa8/0x100 [ 353.534159][T13284] __kmalloc_noprof+0xe8/0x750 [ 353.534192][T13284] ? __pfx___mutex_trylock_common+0x10/0x10 [ 353.534228][T13284] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 353.534352][T13284] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 353.534392][T13284] genl_family_rcv_msg_doit+0xda/0x340 [ 353.534431][T13284] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.534470][T13284] ? apparmor_capable+0x126/0x170 [ 353.534581][T13284] ? bpf_lsm_capable+0x9/0x20 [ 353.534613][T13284] ? security_capable+0x7e/0x2c0 [ 353.534706][T13284] genl_rcv_msg+0x614/0x7a0 [ 353.534744][T13284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.534773][T13284] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 353.534879][T13284] netlink_rcv_skb+0x226/0x4a0 [ 353.534905][T13284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.534953][T13284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.534998][T13284] ? down_read+0x270/0x2e0 [ 353.535025][T13284] ? genl_rcv+0xd/0x40 [ 353.535056][T13284] genl_rcv+0x28/0x40 [ 353.535083][T13284] netlink_unicast+0x7bb/0x940 [ 353.535129][T13284] netlink_sendmsg+0x813/0xb40 [ 353.535163][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.535191][T13284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.535350][T13284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.535396][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.535424][T13284] ____sys_sendmsg+0x9b9/0xa20 [ 353.535449][T13284] ? __might_fault+0xaf/0x130 [ 353.535504][T13284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.535539][T13284] ? import_iovec+0x73/0xa0 [ 353.535619][T13284] ___sys_sendmsg+0x2a5/0x360 [ 353.535642][T13284] ? __lock_acquire+0x683/0x2cd0 [ 353.535671][T13284] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.535733][T13284] ? __fget_files+0x2a/0x420 [ 353.535789][T13284] ? __fget_files+0x3a2/0x420 [ 353.535829][T13284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.535857][T13284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.535893][T13284] ? __pfx_ksys_write+0x10/0x10 [ 353.535932][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.535957][T13284] do_syscall_64+0x174/0x580 [ 353.535982][T13284] ? trace_irq_disable+0x3b/0x140 [ 353.536013][T13284] ? clear_bhb_loop+0x40/0x90 [ 353.536046][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.536069][T13284] RIP: 0033:0x7f7dca79ce59 [ 353.536090][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.536110][T13284] RSP: 002b:00007f7dcb6c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.536133][T13284] RAX: ffffffffffffffda RBX: 00007f7dcaa15fa0 RCX: 00007f7dca79ce59 [ 353.536149][T13284] RDX: 0000000024004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 353.536164][T13284] RBP: 00007f7dcb6c5090 R08: 0000000000000000 R09: 0000000000000000 [ 353.536177][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.536190][T13284] R13: 00007f7dcaa16038 R14: 00007f7dcaa15fa0 R15: 00007ffd29eadd98 [ 353.536226][T13284] [ 353.956507][T13293] netlink: 'syz.8.2493': attribute type 1 has an invalid length. [ 353.985456][T13293] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2493'. [ 354.237245][T13302] netlink: 160 bytes leftover after parsing attributes in process `syz.8.2498'. [ 354.271446][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2498'. [ 354.284148][T13302] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 354.292669][T13302] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 354.304526][T13302] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 354.827851][T13330] vlan3: entered promiscuous mode [ 355.016206][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2508'. [ 355.047189][T13337] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2508'. [ 355.117391][T13337] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 355.564935][T13361] FAULT_INJECTION: forcing a failure. [ 355.564935][T13361] name failslab, interval 1, probability 0, space 0, times 0 [ 355.614248][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.8.2516 Not tainted syzkaller #0 PREEMPT(full) [ 355.614280][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.614293][T13361] Call Trace: [ 355.614302][T13361] [ 355.614312][T13361] dump_stack_lvl+0xe8/0x150 [ 355.614343][T13361] should_fail_ex+0x40c/0x560 [ 355.614385][T13361] should_failslab+0xa8/0x100 [ 355.614422][T13361] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 355.614453][T13361] ? __alloc_skb+0x189/0x7a0 [ 355.614557][T13361] ? __alloc_skb+0x1d7/0x7a0 [ 355.614588][T13361] ? __local_bh_enable_ip+0xd0/0x130 [ 355.614631][T13361] __alloc_skb+0x1d7/0x7a0 [ 355.614669][T13361] netlink_sendmsg+0x5d4/0xb40 [ 355.614705][T13361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.614734][T13361] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.614768][T13361] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.614796][T13361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.614823][T13361] ____sys_sendmsg+0x9b9/0xa20 [ 355.614847][T13361] ? __might_fault+0xaf/0x130 [ 355.614881][T13361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.614914][T13361] ? import_iovec+0x73/0xa0 [ 355.614944][T13361] ___sys_sendmsg+0x2a5/0x360 [ 355.614966][T13361] ? __lock_acquire+0x683/0x2cd0 [ 355.614993][T13361] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.615033][T13361] ? kstrtouint+0x6e/0xe0 [ 355.615092][T13361] ? __fget_files+0x2a/0x420 [ 355.615119][T13361] ? __fget_files+0x3a2/0x420 [ 355.615158][T13361] __sys_sendmmsg+0x27c/0x4e0 [ 355.615187][T13361] ? __pfx___sys_sendmmsg+0x10/0x10 [ 355.615209][T13361] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 355.615264][T13361] ? ksys_write+0x242/0x270 [ 355.615299][T13361] ? __pfx_ksys_write+0x10/0x10 [ 355.615338][T13361] __x64_sys_sendmmsg+0xa0/0xc0 [ 355.615361][T13361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.615385][T13361] do_syscall_64+0x174/0x580 [ 355.615409][T13361] ? trace_irq_disable+0x3b/0x140 [ 355.615441][T13361] ? clear_bhb_loop+0x40/0x90 [ 355.615469][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.615491][T13361] RIP: 0033:0x7f25af39ce59 [ 355.615511][T13361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.615531][T13361] RSP: 002b:00007f25ad5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.615555][T13361] RAX: ffffffffffffffda RBX: 00007f25af615fa0 RCX: 00007f25af39ce59 [ 355.615571][T13361] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 355.615585][T13361] RBP: 00007f25ad5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 355.615599][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.615612][T13361] R13: 00007f25af616038 R14: 00007f25af615fa0 R15: 00007ffcd7afb1c8 [ 355.615646][T13361] [ 356.077382][T13368] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2518'. [ 356.726091][T13383] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2523'. [ 356.792483][T13386] geneve2: entered promiscuous mode [ 356.982948][T13395] vlan0: entered promiscuous mode [ 357.739643][T13416] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 357.779722][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.862510][T13427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.985279][T13431] syzkaller0: entered promiscuous mode [ 358.043095][T13431] syzkaller0: entered allmulticast mode [ 358.084729][T13435] tipc: Enabled bearer , priority 0 [ 358.138115][T13429] tipc: Resetting bearer [ 358.265477][T13429] tipc: Disabling bearer [ 358.724339][T13477] __nla_validate_parse: 4 callbacks suppressed [ 358.724435][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2543'. [ 361.075646][T13497] netlink: 'syz.8.2553': attribute type 1 has an invalid length. [ 361.083846][T13496] netlink: 'syz.2.2552': attribute type 3 has an invalid length. [ 361.083890][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 361.115663][T13496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2552'. [ 361.164830][T13499] vlan3: entered promiscuous mode [ 361.270028][T13497] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 361.593270][T13524] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 361.766710][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 361.807568][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2560'. [ 362.018806][T13541] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2565'. [ 362.095525][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2565'. [ 362.141146][T13541] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 362.178332][T13541] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 362.190494][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 362.205276][T13541] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 362.216547][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2567'. [ 362.610236][T13562] netlink: 'syz.3.2572': attribute type 10 has an invalid length. [ 362.619882][T13562] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2572'. [ 364.758523][T13636] vlan3: entered promiscuous mode [ 364.963290][T13620] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2586'. [ 364.984930][T13644] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2599'. [ 365.065208][T13649] FAULT_INJECTION: forcing a failure. [ 365.065208][T13649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.100182][T13649] CPU: 1 UID: 0 PID: 13649 Comm: syz.6.2600 Not tainted syzkaller #0 PREEMPT(full) [ 365.100226][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.100250][T13649] Call Trace: [ 365.100258][T13649] [ 365.100277][T13649] dump_stack_lvl+0xe8/0x150 [ 365.100309][T13649] should_fail_ex+0x40c/0x560 [ 365.100357][T13649] _copy_to_user+0x31/0xb0 [ 365.100385][T13649] simple_read_from_buffer+0xe1/0x170 [ 365.100419][T13649] proc_fail_nth_read+0x1bb/0x230 [ 365.100480][T13649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.100512][T13649] ? rw_verify_area+0x24a/0x4c0 [ 365.100546][T13649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.100574][T13649] vfs_read+0x213/0xa80 [ 365.100610][T13649] ? __pfx___mutex_lock+0x10/0x10 [ 365.100638][T13649] ? __pfx_vfs_read+0x10/0x10 [ 365.100672][T13649] ? __fget_files+0x2a/0x420 [ 365.100703][T13649] ? __fget_files+0x3a2/0x420 [ 365.100728][T13649] ? __fget_files+0x2a/0x420 [ 365.100763][T13649] ksys_read+0x150/0x270 [ 365.100795][T13649] ? __pfx_ksys_read+0x10/0x10 [ 365.100833][T13649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.100857][T13649] do_syscall_64+0x174/0x580 [ 365.100881][T13649] ? trace_irq_disable+0x3b/0x140 [ 365.100912][T13649] ? clear_bhb_loop+0x40/0x90 [ 365.100938][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.100959][T13649] RIP: 0033:0x7fb7d235d68e [ 365.100979][T13649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 365.100997][T13649] RSP: 002b:00007fb7d3317fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.101019][T13649] RAX: ffffffffffffffda RBX: 00007fb7d33186c0 RCX: 00007fb7d235d68e [ 365.101035][T13649] RDX: 000000000000000f RSI: 00007fb7d33180a0 RDI: 0000000000000003 [ 365.101053][T13649] RBP: 00007fb7d3318090 R08: 0000000000000000 R09: 0000000000000000 [ 365.101066][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.101078][T13649] R13: 00007fb7d2616038 R14: 00007fb7d2615fa0 R15: 00007ffd9c5b6d78 [ 365.101112][T13649] [ 365.306398][T13650] team0: Device xfrm0 is of different type [ 365.392986][T13653] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2601'. [ 365.448383][ T5827] IPVS: starting estimator thread 0... [ 365.460827][T13652] IPVS: nq: FWM 3 0x00000003 - no destination available [ 365.537989][T13652] tipc: Started in network mode [ 365.592965][T13656] IPVS: using max 24 ests per chain, 57600 per kthread [ 365.633339][T13665] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 365.641871][T13652] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 365.670607][T13665] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 365.675300][T13652] tipc: Enabled bearer , priority 0 [ 365.705111][T13665] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 365.786895][T13666] tap0: tun_chr_ioctl cmd 2148553947 [ 365.904285][T13672] tap0: tun_chr_ioctl cmd 2148553947 [ 366.191694][T13688] syzkaller0: entered promiscuous mode [ 366.217047][T13688] syzkaller0: entered allmulticast mode [ 366.257053][T13688] tipc: Started in network mode [ 366.279582][T13688] tipc: Node identity 429093f2667c, cluster identity 4711 [ 366.305367][T13688] tipc: Enabled bearer , priority 0 [ 366.366117][T13686] tipc: Resetting bearer [ 366.430992][T13686] tipc: Disabling bearer [ 366.582934][T13710] netlink: 'syz.6.2614': attribute type 12 has an invalid length. [ 366.631707][T13710] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2614'. [ 366.791385][ T46] tipc: Node number set to 11578026 [ 367.030828][T13730] syzkaller1: entered promiscuous mode [ 367.058203][T13730] syzkaller1: entered allmulticast mode [ 367.138237][T13733] tap0: tun_chr_ioctl cmd 2148553947 [ 367.245502][T13742] netlink: 'syz.7.2623': attribute type 21 has an invalid length. [ 367.261513][T13742] netlink: 'syz.7.2623': attribute type 21 has an invalid length. [ 367.299563][T13730] syzkaller0: entered promiscuous mode [ 367.309407][T13730] syzkaller0: entered allmulticast mode [ 367.365223][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2623'. [ 367.382450][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2623'. [ 367.718819][T13760] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2625'. [ 367.753143][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2623'. [ 367.767331][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2623'. [ 370.138079][ T152] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.147600][ T152] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.192753][T13773] ip6gre1: entered promiscuous mode [ 370.226514][T13773] ip6gre1: entered allmulticast mode [ 370.297563][ T152] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.337890][ T152] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.430725][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2629'. [ 370.870097][T13799] tap0: tun_chr_ioctl cmd 2148553947 [ 371.191936][T13811] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 371.543582][T13827] netlink: 'syz.6.2643': attribute type 1 has an invalid length. [ 371.591741][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2643'. [ 371.740605][T13828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2645'. [ 371.819496][T13831] bridge_slave_0: left allmulticast mode [ 371.871024][T13831] bridge_slave_0: left promiscuous mode [ 371.930925][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.019548][T13831] bridge_slave_1: left allmulticast mode [ 372.128506][T13831] bridge_slave_1: left promiscuous mode [ 372.175850][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.316214][T13831] bond0: (slave bond_slave_0): Releasing backup interface [ 372.399578][T13831] bond0: (slave bond_slave_1): Releasing backup interface [ 372.624849][T13831] team0: Port device team_slave_0 removed [ 372.717119][T13831] team0: Port device team_slave_1 removed [ 372.746381][T13831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.775992][T13831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.827173][T13831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.995194][T13831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.053324][T13831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.463273][T13859] tap0: tun_chr_ioctl cmd 2148553947 [ 375.249929][T13913] netlink: 'syz.2.2664': attribute type 1 has an invalid length. [ 375.679264][T13912] netlink: 'syz.2.2664': attribute type 2 has an invalid length. [ 376.487801][T13933] sctp: [Deprecated]: syz.3.2669 (pid 13933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.487801][T13933] Use struct sctp_sack_info instead [ 376.584149][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2670'. [ 376.597765][T13913] 8021q: adding VLAN 0 to HW filter on device bond14 [ 376.796011][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2670'. [ 376.877966][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2672'. [ 377.248517][T13983] netlink: 'syz.7.2672': attribute type 3 has an invalid length. [ 377.610449][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2672'. [ 378.127943][T13995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.548339][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559693][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.817456][T14023] netlink: 'syz.7.2679': attribute type 1 has an invalid length. [ 380.568333][T14040] tap0: tun_chr_ioctl cmd 2148553947 [ 380.609285][T14045] syzkaller0: entered promiscuous mode [ 380.648290][T14045] syzkaller0: entered allmulticast mode [ 380.726426][T14045] tipc: Enabled bearer , priority 0 [ 380.980922][T14043] tipc: Resetting bearer [ 381.333342][T14043] tipc: Disabling bearer [ 382.447776][T14070] sctp: [Deprecated]: syz.8.2692 (pid 14070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.447776][T14070] Use struct sctp_sack_info instead [ 382.700505][T14070] syzkaller0: entered promiscuous mode [ 382.750105][T14070] syzkaller0: entered allmulticast mode [ 391.230632][ C0] sched: DL replenish lagged too much [ 432.190675][ T5647] Bluetooth: hci6: command 0x0406 tx timeout [ 443.558931][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.581968][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.764916][ T5638] Bluetooth: hci7: command 0x0406 tx timeout [ 484.365904][ T5632] Bluetooth: hci8: command 0x0406 tx timeout [ 501.887669][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.910268][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 545.151137][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 545.158139][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14095/1:b..l [ 545.166629][ C0] rcu: (detected by 0, t=10503 jiffies, g=76765, q=1046778 ncpus=2) [ 545.174740][ C0] task:syz.6.2701 state:R running task stack:25344 pid:14095 tgid:14093 ppid:12192 task_flags:0x400140 flags:0x00080002 [ 545.189335][ C0] Call Trace: [ 545.192666][ C0] [ 545.195650][ C0] __schedule+0x1840/0x57a0 [ 545.200197][ C0] ? __lock_acquire+0x683/0x2cd0 [ 545.205197][ C0] ? __lock_acquire+0x683/0x2cd0 [ 545.210203][ C0] ? __lock_acquire+0x683/0x2cd0 [ 545.215214][ C0] ? __pfx___schedule+0x10/0x10 [ 545.220109][ C0] ? __lock_acquire+0x683/0x2cd0 [ 545.225097][ C0] preempt_schedule_irq+0x4d/0xa0 [ 545.230167][ C0] irqentry_exit+0x14f/0x8e0 [ 545.234791][ C0] ? trace_irq_disable+0x3b/0x140 [ 545.239867][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.245883][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 545.251201][ C0] Code: ff ff ff e8 b1 50 04 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ab eb 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 4c 07 0a cc 48 8d 3d 38 59 92 [ 545.270844][ C0] RSP: 0018:ffffc900041972a0 EFLAGS: 00000286 [ 545.276961][ C0] RAX: 12e520eaa7282f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 545.285000][ C0] RDX: 00000000d9196744 RSI: ffffffff8e221322 RDI: ffffffff8c288620 [ 545.293014][ C0] RBP: ffffffff81769f7f R08: ffffffff81769f7f R09: 0000000000000000 [ 545.301036][ C0] R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000002 [ 545.309042][ C0] R13: ffffffff8e95c780 R14: 0000000000000000 R15: 0000000000000246 [ 545.317096][ C0] ? unwind_next_frame+0x8f/0x2550 [ 545.322294][ C0] ? unwind_next_frame+0x8f/0x2550 [ 545.327457][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.333560][ C0] ? unwind_next_frame+0x8f/0x2550 [ 545.338747][ C0] unwind_next_frame+0xac/0x2550 [ 545.343727][ C0] ? unwind_next_frame+0x8f/0x2550 [ 545.348887][ C0] ? do_syscall_64+0x174/0x580 [ 545.353699][ C0] ? unwind_next_frame+0x8f/0x2550 [ 545.358853][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.365089][ C0] arch_stack_walk+0x11b/0x150 [ 545.369932][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.376040][ C0] stack_trace_save+0xa9/0x100 [ 545.380849][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 545.386291][ C0] save_stack+0x122/0x230 [ 545.390682][ C0] ? __pfx_save_stack+0x10/0x10 [ 545.395575][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 545.400919][ C0] ? __slab_free+0x274/0x2c0 [ 545.405559][ C0] ? qlist_free_all+0x99/0x100 [ 545.410370][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 545.416067][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 545.421144][ C0] ? __kvmalloc_node_noprof+0x4cf/0x890 [ 545.426737][ C0] ? sort_subprogs_topo+0xe9/0xf40 [ 545.431908][ C0] ? bpf_check+0x415b/0x4c30 [ 545.436559][ C0] ? bpf_prog_load+0x1419/0x1a10 [ 545.441554][ C0] ? __sys_bpf+0x618/0x950 [ 545.446028][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 545.450671][ C0] ? do_syscall_64+0x174/0x580 [ 545.455483][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.461614][ C0] ? page_ext_put+0x97/0xc0 [ 545.466180][ C0] __reset_page_owner+0x71/0x1f0 [ 545.471173][ C0] __free_frozen_pages+0xc0d/0xd20 [ 545.476355][ C0] __slab_free+0x274/0x2c0 [ 545.480857][ C0] qlist_free_all+0x99/0x100 [ 545.485510][ C0] kasan_quarantine_reduce+0x148/0x160 [ 545.491032][ C0] __kasan_slab_alloc+0x22/0x80 [ 545.496037][ C0] __kvmalloc_node_noprof+0x4cf/0x890 [ 545.501470][ C0] ? sort_subprogs_topo+0xe9/0xf40 [ 545.506639][ C0] ? __kvmalloc_node_noprof+0x38b/0x890 [ 545.512253][ C0] sort_subprogs_topo+0xe9/0xf40 [ 545.517246][ C0] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 545.523009][ C0] bpf_check+0x415b/0x4c30 [ 545.527563][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 545.533109][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 545.538553][ C0] ? __pfx_bpf_check+0x10/0x10 [ 545.543381][ C0] ? __asan_memset+0x22/0x50 [ 545.548037][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 545.553280][ C0] ? security_bpf_prog_load+0x125/0x3c0 [ 545.559029][ C0] bpf_prog_load+0x1419/0x1a10 [ 545.563891][ C0] ? try_to_wake_up+0x7fb/0x1330 [ 545.568910][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 545.574090][ C0] ? __might_fault+0xaf/0x130 [ 545.578849][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 545.583220][ C0] ? security_bpf+0x7e/0x2d0 [ 545.587874][ C0] __sys_bpf+0x618/0x950 [ 545.592186][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 545.597033][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.601854][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.607974][ C0] __x64_sys_bpf+0x7c/0x90 [ 545.612447][ C0] do_syscall_64+0x174/0x580 [ 545.617087][ C0] ? trace_irq_disable+0x3b/0x140 [ 545.622174][ C0] ? clear_bhb_loop+0x40/0x90 [ 545.626904][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.632845][ C0] RIP: 0033:0x7fb7d239ce59 [ 545.637300][ C0] RSP: 002b:00007fb7d3318028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.645761][ C0] RAX: ffffffffffffffda RBX: 00007fb7d2615fa0 RCX: 00007fb7d239ce59 [ 545.653791][ C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 545.661795][ C0] RBP: 00007fb7d2432d6f R08: 0000000000000000 R09: 0000000000000000 [ 545.669802][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.677811][ C0] R13: 00007fb7d2616038 R14: 00007fb7d2615fa0 R15: 00007ffd9c5b6d78 [ 545.685850][ C0] [ 545.688917][ C0] rcu: rcu_preempt kthread starved for 869 jiffies! g76765 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 545.699969][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 545.709978][ C0] rcu: RCU grace-period kthread stack dump: [ 545.715909][ C0] task:rcu_preempt state:R running task stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 545.729569][ C0] Call Trace: [ 545.732896][ C0] [ 545.735875][ C0] __schedule+0x1840/0x57a0 [ 545.740423][ C0] ? __lock_acquire+0x683/0x2cd0 [ 545.745483][ C0] ? __pfx___schedule+0x10/0x10 [ 545.750420][ C0] ? schedule+0x90/0x360 [ 545.754728][ C0] schedule+0x164/0x360 [ 545.758937][ C0] schedule_timeout+0x152/0x2c0 [ 545.763920][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 545.769352][ C0] ? __pfx_process_timeout+0x10/0x10 [ 545.774707][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.780556][ C0] ? prepare_to_swait_event+0x322/0x350 [ 545.786163][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 545.791078][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 545.797290][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 545.802623][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 545.807879][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 545.812514][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 545.817759][ C0] ? __kthread_parkme+0x71/0x1f0 [ 545.822777][ C0] ? __kthread_parkme+0x196/0x1f0 [ 545.827857][ C0] kthread+0x389/0x470 [ 545.831986][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 545.837226][ C0] ? __pfx_kthread+0x10/0x10 [ 545.841867][ C0] ret_from_fork+0x514/0xb70 [ 545.846513][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 545.851667][ C0] ? __switch_to+0xc89/0x1420 [ 545.856416][ C0] ? __pfx_kthread+0x10/0x10 [ 545.861056][ C0] ret_from_fork_asm+0x1a/0x30 [ 545.865887][ C0] [ 545.868941][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 545.875306][ C0] Sending NMI from CPU 0 to CPUs 1: [ 545.880575][ C1] NMI backtrace for cpu 1 [ 545.880596][ C1] CPU: 1 UID: 0 PID: 13964 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 545.880629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.880648][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 545.880770][ C1] RIP: 0010:match_held_lock+0x3/0xb0 [ 545.880797][ C1] Code: b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 8b [ 545.880814][ C1] RSP: 0018:ffffc90000a07800 EFLAGS: 00000012 [ 545.880830][ C1] RAX: 0000000000000008 RBX: 0000000000000023 RCX: 0000000080000101 [ 545.880843][ C1] RDX: ffffffff90c5313e RSI: ffffffff8e95c780 RDI: ffff88802c422ba8 [ 545.880858][ C1] RBP: ffff88802c422ba8 R08: ffffc9000578f0c8 R09: 0000000000000000 [ 545.880872][ C1] R10: ffffc90000a07978 R11: fffff52000140f31 R12: 0000000000000007 [ 545.880893][ C1] R13: 0000000000000007 R14: ffffffff8e95c780 R15: ffff88802c421f00 [ 545.880907][ C1] FS: 0000000000000000(0000) GS:ffff88812539d000(0000) knlGS:0000000000000000 [ 545.880924][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.880937][ C1] CR2: 00007f8e8ae00218 CR3: 0000000077d80000 CR4: 00000000003526f0 [ 545.880954][ C1] Call Trace: [ 545.880962][ C1] [ 545.880971][ C1] lock_release+0x10c/0x3c0 [ 545.880993][ C1] ? unwind_next_frame+0x8f/0x2550 [ 545.881018][ C1] ? unwind_next_frame+0x8f/0x2550 [ 545.881042][ C1] unwind_next_frame+0x1baa/0x2550 [ 545.881067][ C1] ? do_softirq+0x76/0xd0 [ 545.881085][ C1] ? unwind_next_frame+0x8f/0x2550 [ 545.881112][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.881142][ C1] arch_stack_walk+0x11b/0x150 [ 545.881169][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 545.881190][ C1] stack_trace_save+0xa9/0x100 [ 545.881218][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 545.881247][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 545.881272][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 545.881296][ C1] kasan_save_track+0x3e/0x80 [ 545.881323][ C1] ? kasan_save_track+0x3e/0x80 [ 545.881348][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 545.881374][ C1] ? __kmalloc_cache_noprof+0x318/0x660 [ 545.881402][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 545.881468][ C1] ? dst_init+0xbe/0x470 [ 545.881550][ C1] ? dst_alloc+0x12a/0x170 [ 545.881572][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 545.881662][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 545.881690][ C1] ? ip_route_output_flow+0x2a/0x150 [ 545.881715][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 545.881804][ C1] ? synproxy_send_tcp+0x347/0x670 [ 545.881884][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 545.881909][ C1] ? nft_synproxy_eval_v4+0x37b/0x530 [ 545.881958][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 545.881984][ C1] ? nft_do_chain+0x48d/0x1ad0 [ 545.882010][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 545.882078][ C1] ? nf_hook_slow+0xc5/0x220 [ 545.882123][ C1] ? NF_HOOK+0x21f/0x3c0 [ 545.882144][ C1] ? NF_HOOK+0x336/0x3c0 [ 545.882163][ C1] ? process_backlog+0xa34/0x1860 [ 545.882217][ C1] ? __napi_poll+0xaa/0x330 [ 545.882241][ C1] ? net_rx_action+0x61d/0xf50 [ 545.882268][ C1] ? handle_softirqs+0x225/0x840 [ 545.882286][ C1] ? do_softirq+0x76/0xd0 [ 545.882322][ C1] __kasan_kmalloc+0x93/0xb0 [ 545.882351][ C1] __kmalloc_cache_noprof+0x318/0x660 [ 545.882378][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 545.882398][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 545.882417][ C1] ? __kmalloc_cache_noprof+0x157/0x660 [ 545.882447][ C1] ref_tracker_alloc+0x15b/0x4b0 [ 545.882468][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 545.882494][ C1] ? rcu_is_watching+0x15/0xb0 [ 545.882516][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 545.882546][ C1] dst_init+0xbe/0x470 [ 545.882567][ C1] ? dst_alloc+0x112/0x170 [ 545.882592][ C1] dst_alloc+0x12a/0x170 [ 545.882618][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 545.882651][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 545.882681][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 545.882712][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 545.882742][ C1] ? lock_acquire+0x106/0x350 [ 545.882767][ C1] ip_route_output_flow+0x2a/0x150 [ 545.882792][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 545.882820][ C1] ip_route_me_harder+0x762/0xfe0 [ 545.882846][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 545.882880][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 545.882916][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 545.882941][ C1] synproxy_send_tcp+0x347/0x670 [ 545.882969][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 545.883002][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 545.883028][ C1] ? nft_masq_dump+0x88/0x240 [ 545.883048][ C1] ? synproxy_pernet+0x45/0x270 [ 545.883078][ C1] nft_synproxy_eval_v4+0x37b/0x530 [ 545.883108][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 545.883136][ C1] ? nf_ip_checksum+0x13c/0x510 [ 545.883191][ C1] nft_synproxy_do_eval+0x335/0x550 [ 545.883220][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 545.883247][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 545.883324][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 545.883356][ C1] nft_do_chain+0x48d/0x1ad0 [ 545.883392][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 545.883424][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 545.883461][ C1] nft_do_chain_inet+0x360/0x4b0 [ 545.883490][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 545.883523][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 545.883546][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 545.883574][ C1] nf_hook_slow+0xc5/0x220 [ 545.883600][ C1] NF_HOOK+0x21f/0x3c0 [ 545.883622][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 545.883644][ C1] ? NF_HOOK+0x9e/0x3c0 [ 545.883664][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 545.883686][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 545.883711][ C1] ? ip_local_deliver+0x113/0x190 [ 545.883734][ C1] NF_HOOK+0x336/0x3c0 [ 545.883756][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 545.883777][ C1] ? NF_HOOK+0x9e/0x3c0 [ 545.883796][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 545.883819][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 545.883839][ C1] ? ip_rcv_core+0x88d/0xd50 [ 545.883863][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 545.883889][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 545.883910][ C1] process_backlog+0xa34/0x1860 [ 545.883941][ C1] ? process_backlog+0x3c3/0x1860 [ 545.883977][ C1] __napi_poll+0xaa/0x330 [ 545.884004][ C1] net_rx_action+0x61d/0xf50 [ 545.884039][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 545.884082][ C1] handle_softirqs+0x225/0x840 [ 545.884103][ C1] ? do_softirq+0x76/0xd0 [ 545.884123][ C1] ? kernel_fpu_end+0x62/0x80 [ 545.884149][ C1] do_softirq+0x76/0xd0 [ 545.884167][ C1] [ 545.884173][ C1] [ 545.884179][ C1] __local_bh_enable_ip+0xf8/0x130 [ 545.884199][ C1] blake2s_compress+0xfa/0x1c00 [ 545.884225][ C1] ? __asan_memset+0x22/0x50 [ 545.884249][ C1] ? encode_point+0x8346/0x84b0 [ 545.884281][ C1] ? __pfx_encode_point+0x10/0x10 [ 545.884306][ C1] ? kernel_fpu_begin_mask+0x2b8/0x380 [ 545.884337][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 545.884361][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.884384][ C1] ? kernel_fpu_end+0x62/0x80 [ 545.884421][ C1] blake2s_final+0x10f/0x260 [ 545.884446][ C1] hmac+0x2dc/0x3b0 [ 545.884500][ C1] ? __pfx_hmac+0x10/0x10 [ 545.884548][ C1] kdf+0xff/0x290 [ 545.884578][ C1] ? __pfx_kdf+0x10/0x10 [ 545.884618][ C1] wg_noise_handshake_create_initiation+0x29e/0x810 [ 545.884652][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 545.884684][ C1] ? __lock_acquire+0x683/0x2cd0 [ 545.884716][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 545.884751][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 545.884785][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.884805][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 545.884837][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 545.884870][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 545.884901][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 545.884923][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.884961][ C1] ? rcu_is_watching+0x15/0xb0 [ 545.884984][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 545.885002][ C1] process_scheduled_works+0xa8e/0x14e0 [ 545.885036][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.885058][ C1] ? assign_work+0x3cf/0x5d0 [ 545.885078][ C1] worker_thread+0xa47/0xfb0 [ 545.885112][ C1] kthread+0x389/0x470 [ 545.885137][ C1] ? __pfx_worker_thread+0x10/0x10 [ 545.885155][ C1] ? __pfx_kthread+0x10/0x10 [ 545.885180][ C1] ret_from_fork+0x514/0xb70 [ 545.885201][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 545.885220][ C1] ? __switch_to+0xc89/0x1420 [ 545.885250][ C1] ? __pfx_kthread+0x10/0x10 [ 545.885275][ C1] ret_from_fork_asm+0x1a/0x30 [ 545.885306][ C1]