last executing test programs: 3m18.796528784s ago: executing program 2 (id=18992): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x4000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) ioctl$int_in(r6, 0x5421, &(0x7f0000000280)=0x7) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r7], 0x7c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 3m18.623256704s ago: executing program 2 (id=19000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7, 0x8, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x20, 0x1, 0x8, 0x6}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, &(0x7f0000000100), 0x7}}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc8, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x4ed}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44002}, 0x20004000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@isdn={0x22, 0x11, 0x0, 0x3, 0x5}, {&(0x7f0000000240)=""/201, 0xc9}, &(0x7f0000000340), 0x54}, 0xa0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="000000ffe7000400"], 0x48}}, 0x0) 3m18.533160874s ago: executing program 2 (id=19002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES64=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x44000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000400)={r8, 0x75, 0x3, 0x6e7, 0x3ff, 0x7599}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r0, 0xa8c0, &(0x7f00000001c0)) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="ffc439d210d7870500"/20, @ANYRES32=0x0, @ANYBLOB="f5b10200000000002400128008000100677265001800028004001200080004000600000008000700e0000002"], 0x44}}, 0x800) 3m18.407772376s ago: executing program 2 (id=19011): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x12}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote, 0x3}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000500)=0x1c) getsockname$inet6(r8, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000140)={0x6f}, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet(r10, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="fb43d3958653c4", 0x7}], 0x1}}], 0x2, 0x4044805) splice(r9, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r10, 0x0, 0x8000000000025a5, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r12, &(0x7f0000000340), 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x12, 0x1, 0xfffffffd, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0}, 0x40) write$cgroup_type(r12, &(0x7f0000000200), 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="1800"/12, @ANYRES32=r12, @ANYBLOB="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", @ANYRES64=r13], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r4, r5, 0x2c, 0x2004, 0x0, @value=r5, @void, @void, @void, r13}, 0x20) 3m18.057108699s ago: executing program 2 (id=19020): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7b, 0x301}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 3m17.949057884s ago: executing program 2 (id=19025): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7031800000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d90820b44eb5023813ae9a54a3288980c7b56a0f45948414d9eb18a37ba568706fc154e0b2325224a2ad0eccdbfe984b83d67265b57bda6e7555737ec75db7d706911d40e56856f3a4d233459e676885df71b5363e79547003ea8cc289d388deeb698c0d57d1b8172f1e4d25075fc0d6ae8c7450c7adb5ee50fd6a5eba24b21d8f0e92cefeeae5634136aa0ff10cae27653e08"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m2.942693765s ago: executing program 32 (id=19025): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7031800000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d90820b44eb5023813ae9a54a3288980c7b56a0f45948414d9eb18a37ba568706fc154e0b2325224a2ad0eccdbfe984b83d67265b57bda6e7555737ec75db7d706911d40e56856f3a4d233459e676885df71b5363e79547003ea8cc289d388deeb698c0d57d1b8172f1e4d25075fc0d6ae8c7450c7adb5ee50fd6a5eba24b21d8f0e92cefeeae5634136aa0ff10cae27653e08"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m28.989959627s ago: executing program 5 (id=20248): r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) 2m28.972082041s ago: executing program 5 (id=20252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffd467}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x4}]}, 0x4c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="7f1ac3eb84daed3323007d58cf9290f6510a0990e98e36cf930765d341cfe0a25284a92a7f65138fb7404ff16aade17aea2673b2f612022d844dd60140da1380506d899e202c2c1df6073e425948847eac3abbc03ca02180203a5fe277e782d7e9ad098b1de75bcd8d92fa1d3c8382f3cc730a1607ccd9ee77ccb68c4df42dda7996a5e263533419ea865613dc4c994fb06d37", 0x93, 0x4000, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x2, {0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x5}}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r3, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8080) 2m28.86517296s ago: executing program 5 (id=20253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x0, 0x0}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1c000000, 0x0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x3, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r8, r7}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x3}, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0x8}, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r12}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, @fallback=0xd, r5, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0x0, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r7, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f00000004c0)=[{0x3, 0x3, 0xa, 0xb}, {0x5, 0x5, 0x2, 0x3}], 0x10, 0xe302}, 0x94) 2m28.049724719s ago: executing program 5 (id=20266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xaf}, 0x1c) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14040a001000010000000000e90db4aaa391802c1623cb929d0000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010071756575650000000c000280080030efdb0616f86a340440000000130900010073797a30000000000900020073d0234e127f797a32000000110001000000000000000000"], 0x74}}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='P9\f\x00\x00\x00\x00\x00\x00\x00&\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082dbd7000fedbdf25060000092800070073797374656d5f753a6f626a6563745f723a73756c6f67696e5f657865635f743a733000140006006d6163766c616e310000000000000000"], 0x50}, 0x2, 0x34005, 0x0, 0x90}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000010005b89de81c10504fcfffffffcdbdf", @ANYRES32=0x0, @ANYBLOB="0255040004000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="14000300"/20], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) 2m27.994747782s ago: executing program 5 (id=20269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x300, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 2m27.899806866s ago: executing program 5 (id=20276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040041}, 0x24004014) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4201}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x8c}}, 0x5) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r5, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x80) 2m12.838739582s ago: executing program 33 (id=20276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040041}, 0x24004014) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4201}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x8c}}, 0x5) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r5, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x80) 1m50.53217567s ago: executing program 3 (id=21044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x60c1) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xa1, 0x8, "bdade6c8bba39aaabbf4ef2de05cb2a29c2d6ee43f2769b784d27805c05d1c2cec9463a85722ddbeb0e4a46fd02f518e0fc301f0f2de79e73302a4274117f87ffaa73bfdd760ec9341fd5011b8c508dab1499a774a2dd61f1bb4d4e0567a6ee557b8d185ba0775e2a4b0da62725f53488bf65508fcc879bc42b5713e43af500768ec82a93dff95d1e8a7b673b1de4a1d80dfce779ed122db714a464838"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x41) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'net_prio'}, {0x2d, 'net'}]}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x3ff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6bee7274}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40d5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000b00)) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x128, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0x1, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'pim6reg1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)={0x0, @private, @local}, &(0x7f0000000fc0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001080)={'dvmrp1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000010c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000001100)={'gretap0\x00', 0x0, 0x7, 0x80, 0x0, 0x3, {{0x27, 0x4, 0x3, 0x0, 0x9c, 0x68, 0x0, 0x34, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x13, 0x6f, [@empty, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x34, 0xf2, 0x3, 0xf, [{@broadcast, 0x5}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8e}, {@multicast2, 0xfa76}, {@multicast2, 0x4}, {@empty, 0x3ff}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x8, [0x5, 0x0, 0x9]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x2}, {0x5, 0x7, "b15156bdc1"}, {0x0, 0x8, "617b0170e851"}, {0x1, 0x8, "3dfbf8be122d"}, {0x2, 0xd, "e54c08554ac7680c8d848a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'sit0\x00', &(0x7f0000001200)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x7, 0x4, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x64, 0x0, 0xc6, 0x29, 0x0, @empty, @local, {[@noop, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001280)={@mcast2, 0x0}, &(0x7f00000012c0)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000001b40)={&(0x7f0000000e00), 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x210, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000}, 0x20040090) 1m50.311379671s ago: executing program 3 (id=21052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtclass={0x3c, 0x28, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xfff2}, {0x9, 0xe}, {0xa, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8c, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5e, 0x7}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff84}, {0x8001, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611588000000000061138f0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbff, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x14) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000740)="82a2", 0x2}], 0x1}, 0x5) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x8, 0x0, 0x6, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) 1m50.108778599s ago: executing program 3 (id=21060): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="37efc2fa4427d5550860e039e8eb8d2c520dcf269ffdcd42b28612523a4be1c0ce48db482e3270f931a7e795b0eac991e469bd83c09d86c4e7e4d69752d6059ad236f631d94695021f3190f39ab1936aa078058745b423d660242f8cbc44f27493c2f63021e27518aef05b02c18b047a2b002f7b6781f25000b0e330a792c05afdc7e264926fe666c975d09804c2d83f6823e0b457f0d3ba02f1dda6d76a"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r6, &(0x7f0000000180)={0xa, 0xe1d, 0x7fffffff, @loopback, 0x5f}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000030000000000000085000000b29e10000000000000000000f3f15f434923ab017db62f1b478740fa26c96f08c7693ea11bc857b086c3f5133ae0757006b61ab2e16690594ba5d33982e7aef5f2d9638c37d7be4fa559b57064dcced9cce1716b3d42c98aedff74075125de6317a019173b869d8104602fe699331ae65faa2d39"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x24008084) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000001140)) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) listen(r10, 0x3) accept4(r10, 0x0, 0x0, 0x0) (async, rerun: 32) shutdown(r10, 0x1) (async, rerun: 32) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0xffffffffffffff73}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m49.941491356s ago: executing program 3 (id=21063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x80000001, 0x22, @mcast2, @private1, 0x40, 0x8000, 0x6}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@enum={0xa, 0x7, 0x0, 0x6, 0x4, [{0x8, 0x2}, {0x10, 0x6}, {0x4, 0x1}, {0xc, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x2, 0x10}]}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x2}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @const={0xe}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x0, 0x61, 0x0]}}, &(0x7f0000000700)=""/196, 0x8c, 0xc4, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x5, 0x3, 0x7, 0xa}, @exit, @call={0x85, 0x0, 0x0, 0xb5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0xad2e, 0x0, &(0x7f0000000540), 0x41100, 0x11, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000840)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r0, r0, r0], &(0x7f00000008c0)=[{0x0, 0x2, 0x7, 0x9}, {0x1, 0x2, 0x8, 0x7}, {0x1, 0x5, 0x1}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 1m49.93967694s ago: executing program 3 (id=21064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x100, 0x0) 1m49.888933258s ago: executing program 3 (id=21068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x200}, {r0, 0x421}], 0x2, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f0000000080)='}[\x00', 0x900, &(0x7f0000000240)={@align=0x8, {0x6, 0x7, 0xb1, 0x1}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0xffffff72}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x280, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x5, 0xffff, 0x7ff, 0x4, 0x9, 0xf0d, 0xf92c]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x5, 0x2, 0x7], 0x2}, {0x3, [0x4, 0x4, 0x6, 0x0, 0x7, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xab07, 0x5], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x2, 0x0, 0x0, 0x2], 0x0, 0x3}, {0x4, [0x5, 0x4, 0x3, 0x0, 0x6, 0x5], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x280, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x5, 0xffff, 0x7ff, 0x4, 0x9, 0xf0d, 0xf92c]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x5, 0x2, 0x7], 0x2}, {0x3, [0x4, 0x4, 0x6, 0x0, 0x7, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xab07, 0x5], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x2, 0x0, 0x0, 0x2], 0x0, 0x3}, {0x4, [0x5, 0x4, 0x3, 0x0, 0x6, 0x5], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200820300001c0012800b00010067656e65766500000c000280050009000000000048fff30f22bf21fb"], 0x3c}, 0x1, 0xba01}, 0x810) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200820300001c0012800b00010067656e65766500000c000280050009000000000048fff30f22bf21fb"], 0x3c}, 0x1, 0xba01}, 0x810) 1m34.853459422s ago: executing program 34 (id=21068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x200}, {r0, 0x421}], 0x2, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f0000000080)='}[\x00', 0x900, &(0x7f0000000240)={@align=0x8, {0x6, 0x7, 0xb1, 0x1}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0xffffff72}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x280, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x5, 0xffff, 0x7ff, 0x4, 0x9, 0xf0d, 0xf92c]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x5, 0x2, 0x7], 0x2}, {0x3, [0x4, 0x4, 0x6, 0x0, 0x7, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xab07, 0x5], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x2, 0x0, 0x0, 0x2], 0x0, 0x3}, {0x4, [0x5, 0x4, 0x3, 0x0, 0x6, 0x5], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x280, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x5, 0xffff, 0x7ff, 0x4, 0x9, 0xf0d, 0xf92c]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x5, 0x2, 0x7], 0x2}, {0x3, [0x4, 0x4, 0x6, 0x0, 0x7, 0x4], 0x6, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xab07, 0x5], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x2, 0x0, 0x0, 0x2], 0x0, 0x3}, {0x4, [0x5, 0x4, 0x3, 0x0, 0x6, 0x5], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200820300001c0012800b00010067656e65766500000c000280050009000000000048fff30f22bf21fb"], 0x3c}, 0x1, 0xba01}, 0x810) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200820300001c0012800b00010067656e65766500000c000280050009000000000048fff30f22bf21fb"], 0x3c}, 0x1, 0xba01}, 0x810) 1.64115262s ago: executing program 7 (id=23776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 1.638604189s ago: executing program 0 (id=23778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00f586dd0203050009000a004000683739ed002833fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1.581953545s ago: executing program 7 (id=23781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130428bd700040000000ac1414bb000000000000000000000000e00000010000000000000000000000004e2000074e2300000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffff7fff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000067000000000000000400000000000000f6000000040000000800000000000000ff340000020001be33000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}}, 0x4000804) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000060000da3506640426ba7a030500000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.499505641s ago: executing program 7 (id=23783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480)=0x6, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="616405765f9f4bf4e665c364e23a8fd5d86d001677e0864e5b0beac9ff68cc3a292239c3620bf64ddcac421af90789c8ccb791432a1450fe2a4f3d3dad", 0x3d}], 0x1, &(0x7f0000000340)=[{0xd8, 0x84, 0xf5, "3d8315d73fc4b902e2987b955b3e71fbb4aeeaf3d3af5ce799ca21f24add1a98485ba3492fba500a3a5387cd03ed57eb529f2bddfd1f6e3a723c79fef367c5d9aea871cd8304e1a06bfbfd2ea12724d8e4f80ae35b90d67c2e655217e20c5b485a4f71212f122d695d85fbd854506e2338a7a7c47184b3e4ee4abc967b9722d14067c35378e54d83649ee36bc3fbfa5ba232bf75a2436bbd351af039403acc8509c32f875b62744fccf1bb1db9d2e25666ab6c3437ca73d9bb2d62454fccb0255a6967843e93df"}], 0xd8}, 0x4004800) (async) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="616405765f9f4bf4e665c364e23a8fd5d86d001677e0864e5b0beac9ff68cc3a292239c3620bf64ddcac421af90789c8ccb791432a1450fe2a4f3d3dad", 0x3d}], 0x1, &(0x7f0000000340)=[{0xd8, 0x84, 0xf5, "3d8315d73fc4b902e2987b955b3e71fbb4aeeaf3d3af5ce799ca21f24add1a98485ba3492fba500a3a5387cd03ed57eb529f2bddfd1f6e3a723c79fef367c5d9aea871cd8304e1a06bfbfd2ea12724d8e4f80ae35b90d67c2e655217e20c5b485a4f71212f122d695d85fbd854506e2338a7a7c47184b3e4ee4abc967b9722d14067c35378e54d83649ee36bc3fbfa5ba232bf75a2436bbd351af039403acc8509c32f875b62744fccf1bb1db9d2e25666ab6c3437ca73d9bb2d62454fccb0255a6967843e93df"}], 0xd8}, 0x4004800) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4804) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.473700933s ago: executing program 4 (id=23785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc, 0x8, {0x14}}}}]}]}, 0x64}}, 0x0) 1.406254251s ago: executing program 4 (id=23787): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5ebf3992c7282b2b4352bd945bae203af1dccfa672e97f10edf74232bc0036d9c564f2d4ab9800f042b635402e22da5aaf26f122f56c39f33fb541196ff12de52c56c1411b9e5abb484421b77cce4d51", 0x50}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000280), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000000500)=""/109, 0x6d}], 0x4}, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x35, 0x8205, 0xc42a, 0xd, 0x9b45, 0x4, 0xfffffff8}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc010000000000000000005d000000010600034000010000080007400000000104000680"], 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d4, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x3, 0x0, 0x4, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000ac0)={r7, &(0x7f0000000a00), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac00001e8069baf201a86900000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800700028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010800074000000000180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001800000000000000000000000700000007038b0100000000"], 0x38}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) 1.405941851s ago: executing program 0 (id=23788): syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) r0 = socket(0x1e, 0x805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) 1.345290739s ago: executing program 0 (id=23792): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x1c8}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x24, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x260) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x54}}, 0x0) (async) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) 1.272846588s ago: executing program 4 (id=23794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@private1, 0x13}) 1.262971011s ago: executing program 7 (id=23795): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socket$kcm(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000180)}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001f00)=ANY=[@ANYRESHEX=r4, @ANYRESOCT, @ANYRESOCT=r4], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xb6, 0x8e, &(0x7f0000000180)="4ecc67ac0af1e4bb63ac202f17b1533887dee1c7caa8212f598be7636405b7373655be9838df8a73160168898ee1ec0fdfdb0e7b3da43de75098618a800124d3960ef6059fdb9c94514fcc6b02ab7746e9317ce85bd90fc27c0b14e189de7e823cd6952635e166fbd7e4325c76566be6a8b54924478517368b7bfbd6ef6554bd2ccfbdf9b5ec832613dec60d40081645804ae61cd8002bee96d86d0420d9f4806d891448269702066d03f5696a889dca565e689a736e", &(0x7f0000000300)=""/142, 0xfff, 0x0, 0x6, 0xdb, &(0x7f00000003c0)="4a993ae5167b", &(0x7f0000000400)="353c552762076336035450765bdb3a1b01b908fe6e5b761bbe6898d8698279623487c6ad9d2a0ed1a9ca71960621252c99ef0583960cfceee304f0a031556d445773d252242e81eb07692a5a0c83c231ac3cac7ea8618b770e40bc5d06ea4970602257c0c0028781fa1c45bedd0b3332cd4e06d52116b4645876ff819d6f5770c46daac3e82e16e2c7b25e0ab08c26d6c1cce4ce0b9915d80ba255ee9424ca80c462a95f71cdbbf5481d6da325e9ff1aabfa466c30de4d0ed4612b37422026a3a6876ed55a9b9390021dd2ea0daa575215e5fb2a9834ef847648ce", 0x5, 0x0, 0x3}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007c, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b2c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="14b926514c799f1288da81b024a8ab426b68919830deba673c5c77c355c15d4214c9b1d7df505890baeb56add6448372d30d4f68284ee5ae3c8187851fda86e3235c30659a7b36df6f52d571b8543fa0a03c21e99e02344dcfdaf59bdfd98745272219", @ANYRES16=r10, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r9) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) 1.194342514s ago: executing program 4 (id=23796): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x24, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x90) 1.111460147s ago: executing program 6 (id=23799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0000000d0203050009000a004000683739ed002833fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1.005619527s ago: executing program 4 (id=23801): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89b1, &(0x7f0000000040)={'wlan1\x00', 0x8000003}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 945.580108ms ago: executing program 7 (id=23804): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0x2, 0x5, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 660.921713ms ago: executing program 7 (id=23806): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r13) sendmmsg$unix(r13, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000001c00)="11b8e2e95f", 0x5}, {&(0x7f0000001c40)="b65ede783a15f51188f244407b54032c8de25afb0afe506046e064644f2466c938a010a17fcb02b152f6fafc6a07c80e1748758b76ab0c765cc835d6bc3143018f56accc7455f32a5ded552d125de404258cf9a07cb2bb9df4cfc7a4878fae90f0f2add904f5f9fd5e2f0943af860ab4f794d3e60998d45fb240e3618e98cb897c73aef2860f4a3854cf598c9d", 0x8d}, {&(0x7f0000001d40)="be5173b5faac7a921e735f22e37b4c89c5b395256ef33d740561b860ac4d892da8c4f613ad50893212b37a34", 0x2c}, {0x0}, {&(0x7f0000003040)="898e025a12647f7a83932efc4015d5c42c0df1f41a26decd0ab74f066e652fedf10ccef98972b7fa4b4fb8c5a2e52b815167cd8bb7aa07eb9c4970a9badb37b91d6ed2e228571abbf5b2ecc370710143ad0432f365cf119e082f689df5137f8faf75d86b4a2ad092ae3669df73ae65734870f6a0ce6033cf5954e6d874cde209043566b9659f586abca6eeb414edd719655e50271e2362422d3138129955cf4499774d69503614427f7a6b45c9b9d80c6706afda3ef6699961e7dcc09908a0cccbda811c8454fa06b243177dc4269a8119e29230b8e80da66bbbc6c0d20a1093709e6249f0705b88c8a7133ffe7615830d53ae30815c8d602c7872c17e03acaceb07174063067b017bf27db1ecb42aeacd0f9e4d926633d80721b7f46a15a7111a0a3276b1eba48efcbe2cfd0aadb5084a44864f4b587f01d420e7405c8b34815f404c739eed371efaa85ee5a7c6bfec8d589c91349c0c15676f440a36cf94e4bef98df8a7faf5809145a36effad742cdc39a3802f403d7ee238687b93ede2238b9f09cf8e9aa71978f38a2b628abc70c87d05646ef9510545dac4e7e9ef9c584df41e6a83085e8517c2ac9348ea81b01c2b7076b901d3b6b3a8d029d34e4cc770025e5e906a34069c2f190bffa9eef4954d390fbc0b2840ada9934ef5ff13bdbd4bef2da0b6d5c3897a278eacbca87de28a8e527dcf8b85cea7a79477fa3b9c67e4e053a31fc20a3624046218d5430f83fa150f7135e202e6b4b614f4c20199270a9d296de3a4dd42e2ef9b7804e5c9c1a85dae01710fc4138d2db21fdfe104c281c884aea24149ed8beaf35735913200cc45a0afbb079c03df0b969ce3a1487b8fb2aff5b3168fa9966c851f0c94c0f2b0eea81f85c8ff37e14b11d42f9b6538aa322cf3e73a89ce9afe0b60be6e348a592bc17995864363e99c44069944d9df9a5f2dbc89b447b7319e3459ea33495c80e8843a95a667b48060a1a6c87a3126f496baa08a9382ec1c8843d739c1943767a32dbec4398d5b83078dd8e1b3f329fc069eae1475e5e69c5da83ccc18781b0d730d5102f902f5c18cc0e37c0041f42ff3df8991120aff39ec714d5006a2a217bf1e4a0db924f213e49e6ab8a10fe9041699646c3b9545fe317a3a8e441a7cb93a55127a8a0f9809a2c2a58898566724f24d1f5cf9d76b26cd2c283463ef5771b149e13c026ec25f4d68f603e17c39170ca9a72bbd828e8091f84ac7ce6f5819dd4516288c1eb1608ad79bc61daecb24269f93c414c4be64de56bf8a38e5aabffa7d8573e80ea9b6da5b979540ce74d6cdc9aeb1b481ecc1ce440ac586d1327c2b94c9c89e1cb7fc3cd404edcff243ea798f7f2f1538ad58ee5f4f1bf4566ac975c6fbde0975bb55971b31ba5c4d34413631c765deb180e5ae6a1894527b702e6174980019babfab834797d824666c3a78f616af8810c4a155d5ab652d1d6c65a5ade05c48c5b2d063bfbf9a1776a5017550887e1356530b1ee34759ad365c2314d2a48cace93ed94d27794e4c01666be7db0be73e1489c0984f7e4d067be0f677701caae2c87e13bb452664d0cbd437c45569a3463892c6c1653e3a1365774e277ede892da336449485bb4c60f579f5434a29ba06ce00a0fb03db8190df5728d32811a3882752ec16fd35a18efa677244a820c6bcd59a94a9329028c7419ab9777c85b54db761f8576a27ac0e0261e42b2148e05847b223815be198aec2a231929815472f4c1af86ac38fea812d019cf568ad3567d710b960f8daa0eee7a65f02b0c74ea9419a1d29b4045d6e3116cf5b1dfd4c47d1ec5de0dc31cb2281e654beb28bbd163c902543fb9d25965312021f463874de34e23a143bf9802e4fdd482e3414c10c6ed95b99f6c5fb4cd63363c2c2e71a7193869c8189f392c6670fd97938de05e934d516807ccb7f8efaaad3d600012fb5e2026b8409952d0773e393560f6322c7384b76642b1edf49fd698de78bea1a1f72a268bfcf14ff66ddaeb44a56c5b3ca9ed8a362a08c74d7f8034a75f2850b7af44e1f193f329991e66c19bc25e422347e34e7fda03572a40059a7621ea74237dc38f2f1a232f51b661b3f2a414ad4fe09a83dfa1d22fe4779e7c9d1265c2a0ceeb1f84e2a4dc7d02becfc1a7bdb9644108eea14f78e1b6e62be7329b1617ccf96026961347a8a2fa1ad426425e59c69ffcd2832e4ca01bd666b5fe43de2a1f6c3957f859216917c001c87c81a2441e99a89795545f556ce6390147af69af2738c5387c5b18b1776bc0594d75ac201d4313f09e3186218f833a287cf8fe86615aed52beb2ce1f89cfa5f5081b65c49f467b2662a43a3ada3ac7459e3de8d76781b446959ac84cb16a5207e608c1897035e4bef8f381d6000cc48968f563d04c7545f70f3e1ed92efb7ef7aba929d67d4f9070a653fa30364651e316e25c82b5ac745f64d3bda49d71c4f802641a8d4e66e21cc77acee93eb955b5f8a53fc50a3ffaaa340d69eb2dd9fa1baf1e2c9e5515edac8f684cbdbc1379e31a43a41986bdfa5381da420555c091c35f0ae66af34308f5ad489e1888c9185d963ac053ee41b234f84137d78c36098fef8f98511ee10bcff42147c98bf7e9d12f076508b19fa53ea7230e5e43d74c293c4424443340eaa7d3cc90ffa498d8c61b1d5a70ad2c18f1fe615e48599df87603a5b4cffa3a6d419268952784caefd7f96b92b3b7ed6a2c7a124c4d2fd81f5a38df8a099e55276de5f1fa7d0a24908e34047a68a2b89facc7983cbe4c80fa5c2ce6d5c27389d6bdfecbf617c8d9a8bc57bbbc1524ad6648b13fa6daa7748f97440d1489064a63da9216c1a234641a9360c115bc74688d7e09c8cab54709949a6b55006c6ef7ba20d43cd4b75abe1e917ac77ee44d9a07ef307291e5dc22e505a56895c7616a0c6a2d85216c556b5b07f5497f19e8b6c2280fc067ffdeea8d0af1aad8003478c591d6ca612c4f2aa296924552391ff9f080b298fdb4dc3ab7ab78dcb0c949ba7e467e2004b5446fce8ec4426bf13da36780bb2b6543e9bf7cff086977110099fe9c104b117a1eb053f6c9e1cfd43c3382659ab3d1bce786836c699bafb14d50750f80c977a92358d96709927ea142639da3c8feb361d8da7dde03e03487bbb6b93dee5db9bc4176a977551b7d471d60ec8570cceb8fe76edea0c7cd805b6bafd3c8fcfb6a81057eca1dd53cd48c1aba9109755a63730c967bf0ac225a95f2692786719baecab21b92fd9fdf354ce1b4eec96ee315f3b2d9a5ca3aa49dfc23ee0aae333aa2c83c3e05fbf801fb5b73e5c9614ddb29beee1a636d7c0fc6cd70cad399a2dea9a6a924a075b0316fe2302f12f9af40a59f06494651b4cee3a75f0da67ff90f56b9d8561dd1ff1cf64787441df010c0256a75d6332d99aabd5f3446a914c95943fe0d021d0339c8bd5552c2cee6dd58129da0183033765242eeb538037686d28d5da4d157a263cea45140e29f1c328f27cb707f8215ab3dd6b1f23d0b716069fe580aa19088fb5e60d1a3c4a8a7af3c96034a39fcbd1d19eb77718aa27efe05e4604ad746c81c6a714838d5cc4deb39489a5924d8f2ed5f4672e1421876fb6fd77d979d24aff5169afd4e8205ff1eae59eb5bbc77bfe47591a8d6b862ed95550adedd6b85fd75f6c9c2999a36cbedea055a3cbbc559f91c8af195e7b05b880f8d6e22f8bdd42e81bc4b260e38ed526d93f0a04dbf1bcab0added9fa5ff7367408004d14dab11923a3213156fcd6f28af522dcbd5bb34a84e467b183be3b85423c7ad5c0ee286708b49615f67ea8d5314912e89a0d1eae11c8e1de1854a5a14e7461c852bec278d89b52e8b5c8c61f849769986c7cc07f2487fe1bcf391d3c37347c3b4f0e4668072f146569bdc6acd5add80777a098e2627f716ba250c8e2b0b6b4b3ae30b6aedcee17aaf3e03d32dfb2dbf6ce33a063bc1bbea8bdd55d1762d27be3328be2855c0088d67ee5e175bed1a048157b289029ae46b3f7cff44cc85a9b51f523ccdb61bcbf09b34dd3aa70d4e24dac1c5dbaf65235626d6323c7587b1ad906c9aa86dda8a5ac36e135b5eb8289f49ee95a068917aea45d84ba78f138460c434b5efb0ffd8f93b8b3beda5c77bad9e2df0565b71fd70f4c053011a5432150d2a953b535e0684d7af4fc16af011a95493e5a283dc63550e99011877ed7e237990fcd401df40910f111f3f656dd7aab0ea463915c7fea608f25b1c5663e6fbfa63e6bed757c0f3229cf59ed61a1ba526e6c97f11566535b0e7e771fe0d3bada147ada519fc7d2343a893e21055e56dcf3d1b708e1cba35fbe7a770fc03d57ad4e60a77f081d5ca137da07ec3f2e52fb754837105c1df2b5e1f0464b6406ec51d89e6686f0fb520b5caf7f30e2dba4d55eb230e6c6d93e39ac323be99ee11fb9947428b82c4e9b0b3eab4e6d1fe2c44fa1f9a6f9cd4089e7c4adeca58d592a27194ede7091766630ba4c9358d2ec940284032fc48ca8c44806964913e52b45266fe0550c3f79a9614607f32a16ff8fdd263ca270403776400dd67d0b940d2413431d6cebe478fc3399c6f28f1b7f883ff6a4da7dedfccdf370e84867fe671a9f75cfcd97448db1416d66283cca891b1d1b6978f0d1dd2d92e06544ac19dc878b3096c3a0b5ab7c59c9b743a86903bc44e72328ec2a8195fa98e03a7ca56716b98bc65a8fa444a459187489fba729c5b42a1eefdc06f6392bea45164f20bb59a1f9bbb04e4f70735c73a89d2be94c0e54027180c9066266f46c25922fe7979f430605511dd4de843229e9751b9c6ad7edfd34e7e4d3eae748d09bb2b14f8bd606cb847f02fa562708cda6139b873da13f9241df081ed82a6e00ae896bb36e4e892650de91814bb28795ea40b9e8c778f132cd9b5b5e64ec16c469df4b9531d886a6c0b37018f5e3ad21338c588e2e01c2fc9d13e603832d59c8444fe3c7618bcb7b459fda7b7d9076a73fc294efb9410d7e8b2584a71b9cfd569d77cd8febe9fdc66f2eaed13a1a9887dc7bf3ad3471c0b99abf0176fb0c55e9eb3ec2805b4b4554a46346e023a2970c9cd6914a1012156", 0xe0f}], 0x5}}], 0x1, 0x20000800) sendmsg$nl_xfrm(r11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 594.365677ms ago: executing program 6 (id=23807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) close(r2) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 469.090684ms ago: executing program 1 (id=23808): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x40008}], 0x1, 0x10062, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x54c, 0x36, 0x400, 0x70bd27, 0x25dfdbfe, {0x8}, [@nested={0x18c, 0x135, 0x0, 0x1, [@generic="277807c7a14d2b9def930be05663aaa13aeb378ca0d8f00877ed83b83ba4020926f87dba388aa9221af4a2778f499d1eff27a4d86253b5127f9d5aaea98e345c64a8c1e27a0c69fd041c8cb4b41e81bc6c5e66e668b616b164207e0a50bb1ee9a03cf27a439e29d4865ca3a04b85bfa2bb0ab2122094a82d183e6270b923f05cee71132215f9201b96ba2b25802efd06f33a272304910e14d592173c0d6aaf2d0accacc6ef23b033a20ca0b4142e802ec06b", @generic="3d5c6baa86a3c4d5f8f09a9613c3d68dc637707c8775a4f199a8a1be0df39a6937d936519b131ec676b8cce119ad42ff044ffa2ffdcd6862eaf1d441deb772b9cbb653e7550818471017508bc5326348d7be40a6e45fc958671890857f71e54f6d588bf5311ef8686928badd248698247b5ff21e5a8df413a6387651259f6caedb314bdce02610844e573a2b955b7f43bf45627f87305416080ebaee31128a97096603c382c14232954818f8379947ca2556aea1c92af195ef2797fd7ab30b3783f2698e741a8013699d11145666916163f9feffbbb5"]}, @generic="b6052694d3ab2eecccc9846d3d04898ca8db6da69468f4a5185a871501b3076d64de92e3f4fead9b680663cde8a777b9adf13a8c0260a4fdd6659522daf3f512a78764f8e73d2067f67dd3c96888e23ef40eb007fac7106c5c3bb561921e29f566f4ee334ef3e8b088cafedeacb3e24ce52af0e8c58100d45e74ec467cb2de25764a16c60b74020600989bbccfa064cc0f5ed4fc39a9c7bed06d4b73856879925a93113a97e914fe68376d98c4a2d758c72daac5b0c433d92814af7f6b3391f97f3ae491", @generic="1417b133f658bb3632f5f9b4d7c2a65596cf6317a5dc36820430c4391fbb2dce9b2581669697f84e8f7a35eb96e0a60d5e30ebaacab0889c38b82fc8e41675799c59695efec6072ac985998033fed1b04b79817ea3effa70e7f38f4423bc45cd142323ab4334eb534360de21300dc9840a3f0852e88d8a62816cbf11ce352f78e35f461fb91337e16625ca9d5d1903d4da931bfe02c76f7c1d65171342160e9da28498", @nested={0x1da, 0xbb, 0x0, 0x1, [@typed={0x4, 0x58}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @nested={0x4, 0x112}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@private2}, @generic="e4b6103ae7757c03ab88e2415bc097bcbf562be382bb5042d48874e10a9b0fe941b5a4da4821304d9b87b5c7cc81ce9714a78ac9e9b57fad4b28281a940dce0e4a732fe6e3c7c72c82ed854170f821ebb332943772882a78f400ccae7f670c81f55cdb103089990294330cbbb313eb07f3a8813a59697a6ae7963f15b89b6acbe8cef66b16a5227757f925bf1cbc859e9eb9e7fe2174c833", @generic="cfd9c97f34fc986c4c5f700947efa0a417893b0750fc24f9d3bda7ab0ab3b6fd0bae4bd2182c8ed43310d811911dfffbb30ac6d3d594213fc69a028de92e01ec0d4524d72c2af0794e46bf1a1ee3e7074f6ef2bd48ae538070b1c2d3e6dd569d8751c6e05547af872fd0e1097242a1dccaae460c6ce5c9e00023acf77cd809fcce87d87275e135a141a98e305248d521109ed93c73b55013", @generic="caf70c6cf5003b51e947296e3a9c03809e93acb46096b259b0a66711a1daac938bfa05ab0234c1db2cb2e4336d78c875b6cd8d0bb200a5d72243b4ea558fe7f22fef996396246190496e0b236dbb5a149648050c17a5ab5093b85b6304e101f74b30d588e5cf8acd4422d757e8b0e238ea41d0899df7cda0d1aafe8231ec7f5d41ba"]}, @nested={0x10, 0x136, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x14d}, @generic]}, @typed={0x4, 0x19}, @generic="35623965146b93b3c8d0718961efe7a662850a4ce9dc6a41b4639f6793dfbaf60d2080ba71d7e12e68dd22034f2c46b2bef0bc67ca82781ea70921dbc47aab45034a9be675fadb84adf3c559de5b2ac267a4"]}, 0x54c}, 0x1, 0x0, 0x0, 0xc044}, 0x2400c001) 438.237364ms ago: executing program 0 (id=23809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x16b5b6a3ba16946}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8110) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(nhpoly1305-generic)\x00'}, 0x58) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000844) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x35}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x16b5b6a3ba16946}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8110) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(nhpoly1305-generic)\x00'}, 0x58) (async) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000844) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x35}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048081) (async) 392.60636ms ago: executing program 1 (id=23810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc, 0x8, {0xe4}}}}]}]}, 0x64}}, 0x0) 386.86812ms ago: executing program 6 (id=23811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x8000000, 0x20048810}, 0x40010) 265.314808ms ago: executing program 1 (id=23812): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f1ffffffff0b5386920d999ab300000000000000"], 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) 265.087408ms ago: executing program 6 (id=23813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000c04000000bd7000fcdbdf250800030002000000e930f2f90f5aaffbdf35080001000100"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x14) socketpair(0x28, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4045}, 0x800) 231.24245ms ago: executing program 0 (id=23814): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x8) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xa958, 0x0, 0x9, 0xfb, 0x4]}, &(0x7f0000000380)=0x54) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000003000000060000000000400050000000", @ANYRES32=r0, @ANYBLOB="0400010500000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001000000030000000300"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00008d00"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) 210.746911ms ago: executing program 6 (id=23815): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4004891) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x40}}, 0x20004801) r5 = socket$netlink(0x10, 0x3, 0x13) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x40010) recvmsg(r5, &(0x7f0000001740)={&(0x7f0000000480)=@nfc_llcp, 0x80, &(0x7f0000001600)=[{&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000580)=""/29, 0x1d}, {&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4, &(0x7f0000001640)=""/246, 0xf6}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r5) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r6, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44014) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f00000018c0)={@multicast1, @local, 0x0, "74ee3789e3c0156fbb374e53d24e706ec00d196aa287dd91cb93a81e0cffa29e", 0x6, 0x3, 0x3, 0x5}, 0x3c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r10, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8804) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x5c, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10da}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x89e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x26e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001cc0)={'gretap0\x00', 0x0}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d40), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001d80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r10, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x70, r12, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f00)) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001f80), r8) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={0x134, r15, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4af62320}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a2a10ad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bc0ebe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4682171}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c509ffe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b08646b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57bb5f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52dd70a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe085a95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44974be0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x597e9ef3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cc62197}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd314ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18bdc1ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6121550d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x288e18ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x134}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', r11, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) 157.125506ms ago: executing program 1 (id=23816): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="0500000b0000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 143.640385ms ago: executing program 1 (id=23817): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xce26, 0x200000, @loopback, 0x800}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xce26, 0x200000, @loopback, 0x800}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003bb82bbd70000007000000800000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100736974000c00028008000300e000000108000a00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 38.058643ms ago: executing program 4 (id=23818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @private}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async, rerun: 64) recvmmsg(r10, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) (rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) (rerun: 64) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 32) pipe(0x0) (rerun: 32) 12.608857ms ago: executing program 0 (id=23819): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x2404c810) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000d23180000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000070000000030a0500000000000000000002000002080005"], 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r8, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 689.65µs ago: executing program 6 (id=23820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c000000040000701fefffffffcdbdf25017c000004004880300001802c001b800c0062001b000000000000000c006e0001000000000000800800fc00", @ANYRES32, @ANYBLOB="a85e85aa", @ANYRES32, @ANYBLOB="770002"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x2}}, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "4aa0657fb30df24b"}}}}, 0x0) 0s ago: executing program 1 (id=23821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x12141) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x12141) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0xc0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) kernel console output (not intermixed with test programs): [ 779.325707][T28150] ? import_iovec+0x73/0xa0 [ 779.325727][T28150] ___sys_sendmsg+0x2a5/0x360 [ 779.325747][T28150] ? rcu_is_watching+0x15/0xb0 [ 779.325761][T28150] ? get_pid_task+0x20/0x1f0 [ 779.325777][T28150] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.325797][T28150] ? rcu_is_watching+0x15/0xb0 [ 779.325824][T28150] ? __fget_files+0x2a/0x420 [ 779.325840][T28150] ? __fget_files+0x3a2/0x420 [ 779.325860][T28150] __x64_sys_sendmsg+0x1b1/0x290 [ 779.325883][T28150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.325910][T28150] ? rcu_is_watching+0x15/0xb0 [ 779.325927][T28150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.325945][T28150] do_syscall_64+0x174/0x580 [ 779.325965][T28150] ? trace_irq_disable+0x3b/0x140 [ 779.325985][T28150] ? clear_bhb_loop+0x40/0x90 [ 779.326011][T28150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.326027][T28150] RIP: 0033:0x7f8980f9ce59 [ 779.326042][T28150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.326056][T28150] RSP: 002b:00007f8981ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.326074][T28150] RAX: ffffffffffffffda RBX: 00007f8981215fa0 RCX: 00007f8980f9ce59 [ 779.326085][T28150] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 779.326095][T28150] RBP: 00007f8981ede090 R08: 0000000000000000 R09: 0000000000000000 [ 779.326105][T28150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.326115][T28150] R13: 00007f8981216038 R14: 00007f8981215fa0 R15: 00007ffc06d43d18 [ 779.326134][T28150] [ 779.601745][T28147] xfrm0 speed is unknown, defaulting to 1000 [ 779.656707][T28153] ±ÿª¨úrBº“: renamed from lo [ 779.700968][T28155] ip6t_srh: unknown srh match flags 4000 [ 779.711022][T28157] __nla_validate_parse: 17 callbacks suppressed [ 779.711037][T28157] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22410'. [ 779.729360][T28147] lo speed is unknown, defaulting to 1000 [ 779.736176][T28147] lo speed is unknown, defaulting to 1000 [ 779.741726][T20923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.750046][T20923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.834220][T28153] tipc: Resetting bearer [ 779.890689][T28153] tipc: Resetting bearer [ 779.904227][T28167] netlink: 24 bytes leftover after parsing attributes in process `syz.7.22417'. [ 780.022940][T28175] openvswitch: netlink: Key type 262 is out of range max 32 [ 780.031370][T28174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.136526][T28180] validate_nla: 3 callbacks suppressed [ 780.136543][T28180] netlink: 'syz.7.22423': attribute type 1 has an invalid length. [ 780.181157][T28180] netlink: 184 bytes leftover after parsing attributes in process `syz.7.22423'. [ 780.195935][T28180] netlink: 'syz.7.22423': attribute type 1 has an invalid length. [ 780.210739][T28189] FAULT_INJECTION: forcing a failure. [ 780.210739][T28189] name failslab, interval 1, probability 0, space 0, times 0 [ 780.218783][T28184] syzkaller0: entered promiscuous mode [ 780.236649][T28189] CPU: 1 UID: 0 PID: 28189 Comm: syz.4.22426 Not tainted syzkaller #0 PREEMPT(full) [ 780.236670][T28189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.236680][T28189] Call Trace: [ 780.236688][T28189] [ 780.236695][T28189] dump_stack_lvl+0xe8/0x150 [ 780.236718][T28189] should_fail_ex+0x40c/0x560 [ 780.236738][T28189] should_failslab+0xa8/0x100 [ 780.236761][T28189] __kmalloc_cache_noprof+0x88/0x660 [ 780.236782][T28189] ? rtnl_newlink+0x136/0x1bd0 [ 780.236802][T28189] ? unwind_next_frame+0x8f/0x2550 [ 780.236822][T28189] rtnl_newlink+0x136/0x1bd0 [ 780.236842][T28189] ? unwind_next_frame+0x8f/0x2550 [ 780.236859][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.236879][T28189] ? __pfx_rtnl_newlink+0x10/0x10 [ 780.236897][T28189] ? unwind_next_frame+0x8f/0x2550 [ 780.236913][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.236932][T28189] ? is_bpf_text_address+0x26/0x2b0 [ 780.236953][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.236970][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.236985][T28189] ? lock_release+0x4b/0x3c0 [ 780.237005][T28189] ? lock_release+0x4b/0x3c0 [ 780.237027][T28189] ? is_bpf_text_address+0x292/0x2b0 [ 780.237048][T28189] ? is_bpf_text_address+0x26/0x2b0 [ 780.237068][T28189] ? unwind_next_frame+0x8f/0x2550 [ 780.237085][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.237102][T28189] ? is_bpf_text_address+0x26/0x2b0 [ 780.237120][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.237136][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.237152][T28189] ? lock_release+0x4b/0x3c0 [ 780.237171][T28189] ? lock_release+0x4b/0x3c0 [ 780.237195][T28189] ? is_bpf_text_address+0x292/0x2b0 [ 780.237213][T28189] ? is_bpf_text_address+0x26/0x2b0 [ 780.237234][T28189] ? kernel_text_address+0xa5/0xe0 [ 780.237251][T28189] ? __kernel_text_address+0xd/0x30 [ 780.237267][T28189] ? unwind_get_return_address+0x4d/0x90 [ 780.237284][T28189] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 780.237305][T28189] ? arch_stack_walk+0xfb/0x150 [ 780.237327][T28189] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 780.237346][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.237362][T28189] ? __pfx_rtnl_newlink+0x10/0x10 [ 780.237381][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.237396][T28189] ? __pfx_rtnl_newlink+0x10/0x10 [ 780.237413][T28189] ? lock_release+0x4b/0x3c0 [ 780.237432][T28189] ? bpf_lsm_capable+0x9/0x20 [ 780.237455][T28189] ? security_capable+0x7e/0x2c0 [ 780.237484][T28189] ? __pfx_rtnl_newlink+0x10/0x10 [ 780.237504][T28189] rtnetlink_rcv_msg+0x802/0xc00 [ 780.237524][T28189] ? kasan_save_track+0x3e/0x80 [ 780.237546][T28189] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 780.237565][T28189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 780.237587][T28189] ? __netlink_lookup+0xc6/0x8b0 [ 780.237603][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.237622][T28189] netlink_rcv_skb+0x226/0x4a0 [ 780.237644][T28189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 780.237665][T28189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 780.237691][T28189] ? net_generic+0x1e/0x240 [ 780.237709][T28189] ? net_generic+0x1e/0x240 [ 780.237728][T28189] ? netlink_deliver_tap+0x2e/0x1b0 [ 780.237752][T28189] netlink_unicast+0x7bb/0x940 [ 780.237776][T28189] netlink_sendmsg+0x813/0xb40 [ 780.237801][T28189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.237824][T28189] ? aa_sock_msg_perm+0xf1/0x1b0 [ 780.237841][T28189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 780.237860][T28189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.237882][T28189] ____sys_sendmsg+0x9b9/0xa20 [ 780.237907][T28189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.237929][T28189] ? lock_release+0x4b/0x3c0 [ 780.237951][T28189] ? import_iovec+0x73/0xa0 [ 780.237973][T28189] ___sys_sendmsg+0x2a5/0x360 [ 780.237993][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.238007][T28189] ? get_pid_task+0x20/0x1f0 [ 780.238023][T28189] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.238044][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.238071][T28189] ? __fget_files+0x2a/0x420 [ 780.238092][T28189] ? __fget_files+0x3a2/0x420 [ 780.238115][T28189] __x64_sys_sendmsg+0x1b1/0x290 [ 780.238138][T28189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 780.238167][T28189] ? rcu_is_watching+0x15/0xb0 [ 780.238184][T28189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.238201][T28189] do_syscall_64+0x174/0x580 [ 780.238221][T28189] ? trace_irq_disable+0x3b/0x140 [ 780.238241][T28189] ? clear_bhb_loop+0x40/0x90 [ 780.238259][T28189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.238275][T28189] RIP: 0033:0x7ff3a279ce59 [ 780.238291][T28189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.238306][T28189] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.238324][T28189] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 780.238337][T28189] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 780.238349][T28189] RBP: 00007ff3a3703090 R08: 0000000000000000 R09: 0000000000000000 [ 780.238361][T28189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.238372][T28189] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 780.238393][T28189] [ 780.253851][T28184] syzkaller0: entered allmulticast mode [ 780.269110][T28180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22423'. [ 780.315961][T28193] netlink: 'syz.4.22427': attribute type 9 has an invalid length. [ 780.765307][T28193] netlink: 'syz.4.22427': attribute type 6 has an invalid length. [ 780.980784][T28212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22432'. [ 781.114920][T28223] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 781.150880][T28229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22439'. [ 781.179831][T28229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.22439'. [ 781.243756][T28240] netlink: 'syz.1.22444': attribute type 21 has an invalid length. [ 781.254201][T28242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22445'. [ 781.506036][T28257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22451'. [ 781.567293][T28267] netlink: 44 bytes leftover after parsing attributes in process `syz.6.22455'. [ 781.658590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.086602][T28309] netlink: 'syz.1.22471': attribute type 3 has an invalid length. [ 782.115995][T28309] netlink: 'syz.1.22471': attribute type 3 has an invalid length. [ 782.227979][T28323] netlink: 'syz.7.22478': attribute type 4 has an invalid length. [ 782.634831][T28372] netlink: 'syz.1.22494': attribute type 10 has an invalid length. [ 782.834632][T28396] netlink: 'syz.7.22502': attribute type 1 has an invalid length. [ 782.899302][T28406] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 782.941365][T28406] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 782.975024][T28406] bond1: (slave ip6gre2): making interface the new active one [ 782.977155][T28415] ipt_ECN: cannot use operation on non-tcp rule [ 782.989592][T28406] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 783.042686][T28421] syzkaller1: entered promiscuous mode [ 783.061932][T28421] syzkaller1: entered allmulticast mode [ 783.071781][T28418] syzkaller0: entered promiscuous mode [ 783.081237][T28418] syzkaller0: entered allmulticast mode [ 783.094637][T28402] team0: entered promiscuous mode [ 783.101972][T28402] team_slave_0: entered promiscuous mode [ 783.107763][T28402] team_slave_1: entered promiscuous mode [ 783.115955][T28402] team0: left promiscuous mode [ 783.121250][T28402] team_slave_0: left promiscuous mode [ 783.129491][T28402] team_slave_1: left promiscuous mode [ 783.154592][T28424] IPv6: sit1: Disabled Multicast RS [ 783.162306][T28412] tipc: Enabled bearer , priority 0 [ 783.171073][T28403] tipc: Resetting bearer [ 783.234543][T28403] tipc: Disabling bearer [ 783.277493][T28428] bond0: entered promiscuous mode [ 783.286182][T28430] C: Caught tx_queue_len zero misconfig [ 783.307244][T28438] macvlan2: entered promiscuous mode [ 783.323797][T28438] macvlan2: entered allmulticast mode [ 783.332408][T28438] bond0: (slave macvlan2): Opening slave failed [ 783.424520][T28451] net_ratelimit: 14 callbacks suppressed [ 783.424539][T28451] openvswitch: netlink: Flow actions attr not present in new flow. [ 783.868047][T28493] openvswitch: netlink: Flow actions attr not present in new flow. [ 784.054114][T28514] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 784.297340][T28534] openvswitch: netlink: Key type 262 is out of range max 32 [ 784.800871][T28578] __nla_validate_parse: 20 callbacks suppressed [ 784.800890][T28578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22562'. [ 784.836541][T28582] xt_hashlimit: size too large, truncated to 1048576 [ 784.862758][T20930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.870931][T20930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.059301][T28601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.067868][T28601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.077525][T28601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.087687][T28601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.091742][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.107180][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.107848][T28601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.116537][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.141343][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.151213][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.163922][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.175334][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.185667][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.194931][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 785.315348][T28616] syzkaller0: entered promiscuous mode [ 785.326647][T28616] syzkaller0: entered allmulticast mode [ 785.524194][T28629] syzkaller0: entered promiscuous mode [ 785.553156][T28629] syzkaller0: entered allmulticast mode [ 785.626468][T28641] xt_hashlimit: size too large, truncated to 1048576 [ 786.213355][T28696] xt_hashlimit: size too large, truncated to 1048576 [ 786.447102][T28718] warn_alloc: 1 callbacks suppressed [ 786.447120][T28718] syz.1.22608: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 786.473275][T28718] CPU: 1 UID: 0 PID: 28718 Comm: syz.1.22608 Not tainted syzkaller #0 PREEMPT(full) [ 786.473298][T28718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 786.473309][T28718] Call Trace: [ 786.473315][T28718] [ 786.473322][T28718] dump_stack_lvl+0xe8/0x150 [ 786.473347][T28718] warn_alloc+0x249/0x340 [ 786.473371][T28718] ? __pfx_stack_trace_save+0x10/0x10 [ 786.473395][T28718] ? __pfx_warn_alloc+0x10/0x10 [ 786.473414][T28718] ? __resched_curr+0x23e/0x530 [ 786.473441][T28718] ? __kasan_kmalloc+0x93/0xb0 [ 786.473461][T28718] ? __kmalloc_cache_noprof+0x318/0x660 [ 786.473479][T28718] ? xskq_create+0x56/0x170 [ 786.473498][T28718] ? xsk_init_queue+0x8a/0xe0 [ 786.473515][T28718] ? xsk_setsockopt+0x52a/0x960 [ 786.473532][T28718] ? do_sock_setsockopt+0x17c/0x1b0 [ 786.473554][T28718] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 786.473575][T28718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.473594][T28718] __vmalloc_node_range_noprof+0x12c/0x1730 [ 786.473625][T28718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 786.473649][T28718] ? __kasan_kmalloc+0x93/0xb0 [ 786.473674][T28718] vmalloc_user_noprof+0xad/0xe0 [ 786.473694][T28718] ? xskq_create+0xbf/0x170 [ 786.473714][T28718] xskq_create+0xbf/0x170 [ 786.473734][T28718] xsk_init_queue+0x8a/0xe0 [ 786.473754][T28718] xsk_setsockopt+0x52a/0x960 [ 786.473773][T28718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 786.473791][T28718] ? __pfx_aa_sk_perm+0x10/0x10 [ 786.473814][T28718] ? lock_release+0x4b/0x3c0 [ 786.473837][T28718] ? aa_sock_opt_perm+0xff/0x1a0 [ 786.473855][T28718] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 786.473875][T28718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 786.473894][T28718] do_sock_setsockopt+0x17c/0x1b0 [ 786.473917][T28718] __x64_sys_setsockopt+0x13d/0x1b0 [ 786.473938][T28718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.473954][T28718] do_syscall_64+0x174/0x580 [ 786.473987][T28718] ? trace_irq_disable+0x3b/0x140 [ 786.474010][T28718] ? clear_bhb_loop+0x40/0x90 [ 786.474030][T28718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.474047][T28718] RIP: 0033:0x7fd75ab9ce59 [ 786.474064][T28718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.474078][T28718] RSP: 002b:00007fd75ba66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 786.474098][T28718] RAX: ffffffffffffffda RBX: 00007fd75ae15fa0 RCX: 00007fd75ab9ce59 [ 786.474111][T28718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 786.474122][T28718] RBP: 00007fd75ac32e6f R08: 0000000000000004 R09: 0000000000000000 [ 786.474133][T28718] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.474144][T28718] R13: 00007fd75ae16038 R14: 00007fd75ae15fa0 R15: 00007ffec38eccf8 [ 786.474165][T28718] [ 786.474173][T28718] Mem-Info: [ 786.709906][T28728] netlink: 'syz.7.22613': attribute type 11 has an invalid length. [ 786.738721][T28718] active_anon:7724 inactive_anon:7 isolated_anon:0 [ 786.738721][T28718] active_file:3326 inactive_file:40559 isolated_file:0 [ 786.738721][T28718] unevictable:768 dirty:203 writeback:0 [ 786.738721][T28718] slab_reclaimable:16110 slab_unreclaimable:151580 [ 786.738721][T28718] mapped:45358 shmem:1301 pagetables:3959 [ 786.738721][T28718] sec_pagetables:0 bounce:0 [ 786.738721][T28718] kernel_misc_reclaimable:0 [ 786.738721][T28718] free:1206487 free_pcp:25285 free_cma:0 [ 786.786374][T28728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.823037][T28718] Node 0 active_anon:30896kB inactive_anon:28kB active_file:13304kB inactive_file:162032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165048kB dirty:812kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20952kB pagetables:15728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 786.841846][T28728] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.871456][T28718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 786.928680][T28718] Node 0 DMA free:11212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:24kB free_cma:0kB [ 786.935209][T28728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 786.962076][T28718] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 786.976732][T28718] Node 0 DMA32 free:980760kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31164kB inactive_anon:28kB active_file:13304kB inactive_file:162032kB unevictable:1536kB writepending:820kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:38680kB local_pcp:20444kB free_cma:0kB [ 787.012805][T28728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.038012][T28718] lowmem_reserve[]: 0 0 0 0 0 [ 787.043522][T28718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 787.083703][T28718] lowmem_reserve[]: 0 0 0 0 0 [ 787.091344][T28718] Node 1 Normal free:3834240kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62460kB local_pcp:32440kB free_cma:0kB [ 787.124939][T28718] lowmem_reserve[]: 0 0 0 0 0 [ 787.135614][T28718] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11212kB [ 787.157828][T20930] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.164954][T20930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.174473][T20930] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.181591][T20930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.194422][T28718] Node 0 DMA32: 9742*4kB (UM) 9002*8kB (UME) 5371*16kB (UME) 661*32kB (UM) 251*64kB (UME) 685*128kB (UM) 632*256kB (UME) 199*512kB (UM) 240*1024kB (UME) 73*2048kB (UM) 0*4096kB = 980760kB [ 787.270665][T28741] validate_nla: 1 callbacks suppressed [ 787.270683][T28741] netlink: 'syz.7.22616': attribute type 1 has an invalid length. [ 787.304048][T28718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 787.319917][T28718] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 14*16kB (UM) 9*32kB (UM) 10*64kB (UM) 10*128kB (UM) 8*256kB (UM) 8*512kB (UM) 6*1024kB (UM) 5*2048kB (U) 930*4096kB (UM) = 3834292kB [ 787.346780][T28718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 787.396489][T28718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 787.443215][T28718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 787.472921][T28761] xt_hashlimit: size too large, truncated to 1048576 [ 787.486455][T28718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 787.527556][T28718] 45182 total pagecache pages [ 787.554264][T28718] 0 pages in swap cache [ 787.574463][T28718] Free swap = 124996kB [ 787.585613][T28718] Total swap = 124996kB [ 787.590357][T28718] 2097051 pages RAM [ 787.594178][T28718] 0 pages HighMem/MovableOnly [ 787.599467][T28718] 427124 pages reserved [ 787.604485][T28718] 0 pages cma reserved [ 787.678769][T28772] syzkaller1: entered promiscuous mode [ 787.713938][T28772] syzkaller1: entered allmulticast mode [ 787.750767][T28782] netlink: 'syz.4.22630': attribute type 8 has an invalid length. [ 787.759480][T28782] sch_fq: defrate 0 ignored. [ 787.826722][T28789] netlink: 'syz.1.22633': attribute type 28 has an invalid length. [ 787.844477][T28789] netlink: 'syz.1.22633': attribute type 3 has an invalid length. [ 787.875436][T28795] netlink: 'syz.6.22634': attribute type 23 has an invalid length. [ 787.919012][T28797] tipc: Failed to remove unknown binding: 66,0,0/1:3003296582/3003296584 [ 787.929475][T28797] tipc: Failed to remove unknown binding: 66,0,0/1:3003296582/3003296583 [ 787.958376][T28797] tipc: Failed to remove unknown binding: 66,0,0/1:3003296582/3003296584 [ 788.010111][T28797] tipc: Failed to remove unknown binding: 66,0,0/1:3003296582/3003296583 [ 788.116347][T28813] xt_hashlimit: size too large, truncated to 1048576 [ 788.335745][T28824] bond32 (unregistering): Released all slaves [ 788.342566][ T29] audit: type=1107 audit(1781888829.467:30): pid=28834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ü ñénflècÙÖ;&œ¹<þªsYÔ¹Ä. 5£ðÁL^P¥¬‹TéD–8ÃÒ?®žõH ‡¨Õ ve.NŸscÁ|mæ5Z¥R×DNÛÚÉ5{–Œ?‹3û>âñÛÙ_z3†|{. òå3ÄúÏÜmBÒ‡µ12i2C÷q0¬(A,ò<{óWi½ÒSm¥ù%Œ¾/ó÷”ÐßÅõÏBí×.OW*þæÆ8©Àd¨kLè@žRv$ÙÛ[·¨~ÿ†Eó}“p\Z¡—Å [ 788.342566][ T29] :•ðŸh]zÿczÄðgTjëÜ' [ 788.550521][T28850] sctp: [Deprecated]: syz.4.22649 (pid 28850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.550521][T28850] Use struct sctp_sack_info instead [ 788.618740][ C1] net_ratelimit: 19 callbacks suppressed [ 788.618760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.764182][T28864] netlink: 'syz.1.22655': attribute type 1 has an invalid length. [ 788.815464][T28864] 8021q: adding VLAN 0 to HW filter on device bond32 [ 788.840068][T28871] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 788.847805][T28871] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 788.868664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.876980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.885401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.012187][T28890] netlink: 'syz.4.22664': attribute type 1 has an invalid length. [ 789.065619][T28895] xt_hashlimit: size too large, truncated to 1048576 [ 789.285249][T28910] openvswitch: netlink: Flow key attr not present in new flow. [ 789.570719][T28944] xt_hashlimit: size too large, truncated to 1048576 [ 789.593044][T28946] tipc: Enabled bearer , priority 0 [ 789.639706][T28940] tipc: Disabling bearer [ 789.722577][T28953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.755208][T28955] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 789.862743][T28962] bond33: entered promiscuous mode [ 789.868069][T28962] bond33: entered allmulticast mode [ 789.883444][T28962] team_slave_1: Caught tx_queue_len zero misconfig [ 789.894107][T28965] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 789.921089][T28967] __nla_validate_parse: 111 callbacks suppressed [ 789.921107][T28967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22689'. [ 789.932571][T28969] openvswitch: netlink: Key type 262 is out of range max 32 [ 790.026615][T28977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22692'. [ 790.150168][T28988] FAULT_INJECTION: forcing a failure. [ 790.150168][T28988] name failslab, interval 1, probability 0, space 0, times 0 [ 790.153694][T28986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22693'. [ 790.164562][T28988] CPU: 0 UID: 0 PID: 28988 Comm: syz.1.22694 Not tainted syzkaller #0 PREEMPT(full) [ 790.164583][T28988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.164593][T28988] Call Trace: [ 790.164600][T28988] [ 790.164608][T28988] dump_stack_lvl+0xe8/0x150 [ 790.164631][T28988] should_fail_ex+0x40c/0x560 [ 790.164650][T28988] should_failslab+0xa8/0x100 [ 790.164672][T28988] __kmalloc_cache_noprof+0x88/0x660 [ 790.164691][T28988] ? trace_contention_end+0x3d/0x140 [ 790.164709][T28988] ? __hw_addr_create+0x62/0x240 [ 790.164733][T28988] __hw_addr_create+0x62/0x240 [ 790.164752][T28988] ? lock_release+0x4b/0x3c0 [ 790.164774][T28988] __hw_addr_add_ex+0x1ce/0x520 [ 790.164797][T28988] dev_addr_init+0x15a/0x240 [ 790.164817][T28988] ? __pfx_dev_addr_init+0x10/0x10 [ 790.164839][T28988] ? alloc_netdev_mqs+0xa9/0x1270 [ 790.164857][T28988] alloc_netdev_mqs+0x2b4/0x1270 [ 790.164872][T28988] ? __pfx_snprintf+0x10/0x10 [ 790.164888][T28988] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 790.164907][T28988] rtnl_create_link+0x321/0xd70 [ 790.164927][T28988] rtnl_newlink_create+0x25f/0xb00 [ 790.164955][T28988] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 790.164976][T28988] ? __pfx___mutex_lock+0x10/0x10 [ 790.165000][T28988] ? ns_capable+0x89/0xe0 [ 790.165020][T28988] rtnl_newlink+0x167f/0x1bd0 [ 790.165045][T28988] ? __pfx_rtnl_newlink+0x10/0x10 [ 790.165062][T28988] ? unwind_next_frame+0x8f/0x2550 [ 790.165078][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165097][T28988] ? is_bpf_text_address+0x26/0x2b0 [ 790.165118][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165134][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165149][T28988] ? lock_release+0x4b/0x3c0 [ 790.165169][T28988] ? lock_release+0x4b/0x3c0 [ 790.165190][T28988] ? is_bpf_text_address+0x292/0x2b0 [ 790.165210][T28988] ? is_bpf_text_address+0x26/0x2b0 [ 790.165230][T28988] ? unwind_next_frame+0x8f/0x2550 [ 790.165246][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165264][T28988] ? is_bpf_text_address+0x26/0x2b0 [ 790.165283][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165300][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165315][T28988] ? lock_release+0x4b/0x3c0 [ 790.165333][T28988] ? lock_release+0x4b/0x3c0 [ 790.165354][T28988] ? is_bpf_text_address+0x292/0x2b0 [ 790.165383][T28988] ? is_bpf_text_address+0x26/0x2b0 [ 790.165404][T28988] ? kernel_text_address+0xa5/0xe0 [ 790.165420][T28988] ? __kernel_text_address+0xd/0x30 [ 790.165435][T28988] ? unwind_get_return_address+0x4d/0x90 [ 790.165451][T28988] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 790.165472][T28988] ? arch_stack_walk+0xfb/0x150 [ 790.165496][T28988] ? __pfx_rtnl_newlink+0x10/0x10 [ 790.165513][T28988] ? lock_release+0x4b/0x3c0 [ 790.165531][T28988] ? bpf_lsm_capable+0x9/0x20 [ 790.165545][T28988] ? security_capable+0x7e/0x2c0 [ 790.165569][T28988] ? __pfx_rtnl_newlink+0x10/0x10 [ 790.165587][T28988] rtnetlink_rcv_msg+0x802/0xc00 [ 790.165605][T28988] ? kasan_save_track+0x3e/0x80 [ 790.165625][T28988] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 790.165643][T28988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 790.165662][T28988] ? __netlink_lookup+0xc6/0x8b0 [ 790.165676][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.165695][T28988] netlink_rcv_skb+0x226/0x4a0 [ 790.165717][T28988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 790.165737][T28988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 790.165762][T28988] ? net_generic+0x1e/0x240 [ 790.165778][T28988] ? net_generic+0x1e/0x240 [ 790.165795][T28988] ? netlink_deliver_tap+0x2e/0x1b0 [ 790.165817][T28988] netlink_unicast+0x7bb/0x940 [ 790.165840][T28988] netlink_sendmsg+0x813/0xb40 [ 790.165864][T28988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.165886][T28988] ? aa_sock_msg_perm+0xf1/0x1b0 [ 790.165903][T28988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 790.165920][T28988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.165941][T28988] ____sys_sendmsg+0x9b9/0xa20 [ 790.165965][T28988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.165986][T28988] ? lock_release+0x4b/0x3c0 [ 790.166007][T28988] ? import_iovec+0x73/0xa0 [ 790.166029][T28988] ___sys_sendmsg+0x2a5/0x360 [ 790.166049][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.166062][T28988] ? get_pid_task+0x20/0x1f0 [ 790.166077][T28988] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.166099][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.166125][T28988] ? __fget_files+0x2a/0x420 [ 790.166142][T28988] ? __fget_files+0x3a2/0x420 [ 790.166162][T28988] __x64_sys_sendmsg+0x1b1/0x290 [ 790.166182][T28988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 790.166209][T28988] ? rcu_is_watching+0x15/0xb0 [ 790.166225][T28988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.166242][T28988] do_syscall_64+0x174/0x580 [ 790.166262][T28988] ? trace_irq_disable+0x3b/0x140 [ 790.166281][T28988] ? clear_bhb_loop+0x40/0x90 [ 790.166297][T28988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.166313][T28988] RIP: 0033:0x7fd75ab9ce59 [ 790.166327][T28988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.166341][T28988] RSP: 002b:00007fd75ba66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.166365][T28988] RAX: ffffffffffffffda RBX: 00007fd75ae15fa0 RCX: 00007fd75ab9ce59 [ 790.166377][T28988] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 790.166387][T28988] RBP: 00007fd75ba66090 R08: 0000000000000000 R09: 0000000000000000 [ 790.166397][T28988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 790.166407][T28988] R13: 00007fd75ae16038 R14: 00007fd75ae15fa0 R15: 00007ffec38eccf8 [ 790.166426][T28988] [ 790.285805][T28992] xt_hashlimit: size too large, truncated to 1048576 [ 790.295288][T28993] netlink: 'syz.0.22693': attribute type 2 has an invalid length. [ 790.621007][T20933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.745149][T20933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.889494][T29004] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.896759][T29004] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.032305][T29004] ipvlan1: left allmulticast mode [ 791.038778][T29004] veth0_vlan: left allmulticast mode [ 791.052765][T29004] bridge1: left promiscuous mode [ 791.057835][T29004] bridge1: left allmulticast mode [ 791.103887][T29009] netlink: 'syz.6.22701': attribute type 1 has an invalid length. [ 791.203600][T29018] openvswitch: netlink: Key type 262 is out of range max 32 [ 791.273671][T29026] FAULT_INJECTION: forcing a failure. [ 791.273671][T29026] name failslab, interval 1, probability 0, space 0, times 0 [ 791.296429][T29026] CPU: 1 UID: 0 PID: 29026 Comm: syz.4.22705 Not tainted syzkaller #0 PREEMPT(full) [ 791.296452][T29026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.296462][T29026] Call Trace: [ 791.296469][T29026] [ 791.296485][T29026] dump_stack_lvl+0xe8/0x150 [ 791.296508][T29026] should_fail_ex+0x40c/0x560 [ 791.296529][T29026] should_failslab+0xa8/0x100 [ 791.296552][T29026] __kvmalloc_node_noprof+0x16e/0x890 [ 791.296574][T29026] ? alloc_netdev_mqs+0xa98/0x1270 [ 791.296594][T29026] alloc_netdev_mqs+0xa98/0x1270 [ 791.296615][T29026] rtnl_create_link+0x321/0xd70 [ 791.296635][T29026] rtnl_newlink_create+0x25f/0xb00 [ 791.296662][T29026] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 791.296684][T29026] ? __pfx___mutex_lock+0x10/0x10 [ 791.296709][T29026] ? ns_capable+0x89/0xe0 [ 791.296730][T29026] rtnl_newlink+0x167f/0x1bd0 [ 791.296754][T29026] ? __pfx_rtnl_newlink+0x10/0x10 [ 791.296771][T29026] ? unwind_next_frame+0x8f/0x2550 [ 791.296788][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.296807][T29026] ? is_bpf_text_address+0x26/0x2b0 [ 791.296828][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.296843][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.296857][T29026] ? lock_release+0x4b/0x3c0 [ 791.296875][T29026] ? lock_release+0x4b/0x3c0 [ 791.296895][T29026] ? is_bpf_text_address+0x292/0x2b0 [ 791.296913][T29026] ? is_bpf_text_address+0x26/0x2b0 [ 791.296931][T29026] ? unwind_next_frame+0x8f/0x2550 [ 791.296945][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.296961][T29026] ? is_bpf_text_address+0x26/0x2b0 [ 791.296978][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.296993][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.297006][T29026] ? lock_release+0x4b/0x3c0 [ 791.297022][T29026] ? lock_release+0x4b/0x3c0 [ 791.297042][T29026] ? is_bpf_text_address+0x292/0x2b0 [ 791.297059][T29026] ? is_bpf_text_address+0x26/0x2b0 [ 791.297078][T29026] ? kernel_text_address+0xa5/0xe0 [ 791.297093][T29026] ? __kernel_text_address+0xd/0x30 [ 791.297107][T29026] ? unwind_get_return_address+0x4d/0x90 [ 791.297121][T29026] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 791.297139][T29026] ? arch_stack_walk+0xfb/0x150 [ 791.297161][T29026] ? __pfx_rtnl_newlink+0x10/0x10 [ 791.297176][T29026] ? lock_release+0x4b/0x3c0 [ 791.297192][T29026] ? bpf_lsm_capable+0x9/0x20 [ 791.297205][T29026] ? security_capable+0x7e/0x2c0 [ 791.297227][T29026] ? __pfx_rtnl_newlink+0x10/0x10 [ 791.297243][T29026] rtnetlink_rcv_msg+0x802/0xc00 [ 791.297259][T29026] ? kasan_save_track+0x3e/0x80 [ 791.297277][T29026] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 791.297294][T29026] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 791.297311][T29026] ? __netlink_lookup+0xc6/0x8b0 [ 791.297324][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.297341][T29026] netlink_rcv_skb+0x226/0x4a0 [ 791.297360][T29026] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 791.297377][T29026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 791.297398][T29026] ? net_generic+0x1e/0x240 [ 791.297413][T29026] ? net_generic+0x1e/0x240 [ 791.297428][T29026] ? netlink_deliver_tap+0x2e/0x1b0 [ 791.297448][T29026] netlink_unicast+0x7bb/0x940 [ 791.297469][T29026] netlink_sendmsg+0x813/0xb40 [ 791.297498][T29026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.297517][T29026] ? aa_sock_msg_perm+0xf1/0x1b0 [ 791.297531][T29026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 791.297547][T29026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.297566][T29026] ____sys_sendmsg+0x9b9/0xa20 [ 791.297589][T29026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 791.297608][T29026] ? lock_release+0x4b/0x3c0 [ 791.297626][T29026] ? import_iovec+0x73/0xa0 [ 791.297645][T29026] ___sys_sendmsg+0x2a5/0x360 [ 791.297662][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.297674][T29026] ? get_pid_task+0x20/0x1f0 [ 791.297689][T29026] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.297710][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.297737][T29026] ? __fget_files+0x2a/0x420 [ 791.297753][T29026] ? __fget_files+0x3a2/0x420 [ 791.297773][T29026] __x64_sys_sendmsg+0x1b1/0x290 [ 791.297793][T29026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 791.297813][T29026] ? rcu_is_watching+0x15/0xb0 [ 791.297822][T29026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.297831][T29026] do_syscall_64+0x174/0x580 [ 791.297845][T29026] ? trace_irq_disable+0x3b/0x140 [ 791.297857][T29026] ? clear_bhb_loop+0x40/0x90 [ 791.297867][T29026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.297876][T29026] RIP: 0033:0x7ff3a279ce59 [ 791.297886][T29026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.297894][T29026] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.297906][T29026] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 791.297913][T29026] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 791.297919][T29026] RBP: 00007ff3a3703090 R08: 0000000000000000 R09: 0000000000000000 [ 791.297924][T29026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 791.297930][T29026] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 791.297941][T29026] [ 791.948784][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22711'. [ 791.958431][T29044] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.22710'. [ 791.973986][T29039] tipc: Enabled bearer , priority 0 [ 791.988408][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22711'. [ 792.005786][T29044] netlink: 140 bytes leftover after parsing attributes in process `syz.7.22710'. [ 792.036211][T29051] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.22714'. [ 792.037317][T29044] tipc: Invalid UDP bearer configuration [ 792.050748][T29044] tipc: Enabling of bearer rejected, failed to enable media [ 792.076935][T29035] tipc: Disabling bearer [ 792.114307][T29052] xt_hashlimit: size too large, truncated to 1048576 [ 792.130397][T29051] netlink: 96 bytes leftover after parsing attributes in process `syz.0.22714'. [ 792.205686][T29063] netlink: 'syz.0.22721': attribute type 1 has an invalid length. [ 792.258133][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22721'. [ 792.327059][T29078] netlink: 'syz.7.22723': attribute type 10 has an invalid length. [ 792.340646][T29078] team0: Port device dummy0 added [ 792.373488][T29081] netlink: 'syz.0.22725': attribute type 1 has an invalid length. [ 792.382031][T29081] netlink: 'syz.0.22725': attribute type 3 has an invalid length. [ 792.391928][T29081] netlink: 'syz.0.22725': attribute type 7 has an invalid length. [ 792.399990][T29081] netlink: 'syz.0.22725': attribute type 8 has an invalid length. [ 792.408167][T29081] NCSI netlink: No device for ifindex 131092 [ 792.545169][T29092] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 792.726465][T29117] xt_hashlimit: size too large, truncated to 1048576 [ 792.965751][T29137] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 792.982412][T29139] pim6reg527: entered allmulticast mode [ 793.220912][T29160] ip6tnl0: left promiscuous mode [ 793.372570][T29175] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 794.319785][T29270] netlink: 'syz.7.22786': attribute type 1 has an invalid length. [ 794.344743][T29271] team0: Port device dummy0 removed [ 794.346299][T29272] netlink: 'syz.7.22786': attribute type 10 has an invalid length. [ 794.373084][T29273] netlink: 'syz.4.22787': attribute type 1 has an invalid length. [ 794.382154][ C0] net_ratelimit: 18 callbacks suppressed [ 794.382173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.410797][T29270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 794.418004][T29272] dummy0: entered promiscuous mode [ 794.446642][T29273] 8021q: adding VLAN 0 to HW filter on device bond47 [ 794.503591][T29273] macvlan0: entered promiscuous mode [ 794.509583][T29273] macvlan0: entered allmulticast mode [ 794.515810][T29273] bond47: entered promiscuous mode [ 794.521508][T29273] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 794.530225][T29273] bond47: left promiscuous mode [ 794.544741][T20930] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.554810][T20924] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.569062][T20924] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.696604][T29296] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 794.775816][T29305] netlink: 'syz.6.22797': attribute type 1 has an invalid length. [ 794.835860][T29305] 8021q: adding VLAN 0 to HW filter on device bond6 [ 794.860171][T29311] bond6: (slave veth0_to_bond): making interface the new active one [ 794.869353][T29311] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 794.904374][T29305] macvlan2: entered promiscuous mode [ 794.912257][T29305] macvlan2: entered allmulticast mode [ 794.918626][T29305] bond6: entered promiscuous mode [ 794.923685][T29305] veth0_to_bond: entered promiscuous mode [ 794.930689][T29305] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 794.938162][T29305] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 794.956049][T29305] bond6: left promiscuous mode [ 794.961078][T29305] veth0_to_bond: left promiscuous mode [ 795.126369][T29323] netlink: 'syz.7.22804': attribute type 1 has an invalid length. [ 795.323723][T29341] __nla_validate_parse: 15 callbacks suppressed [ 795.323742][T29341] netlink: 48 bytes leftover after parsing attributes in process `syz.6.22810'. [ 795.346360][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22812'. [ 795.549260][T29362] bond33: option fail_over_mac: invalid value (16) [ 795.549529][T29371] netlink: 76 bytes leftover after parsing attributes in process `syz.6.22819'. [ 795.566269][T29362] bond33 (unregistering): Released all slaves [ 795.653568][T29374] syzkaller0: entered promiscuous mode [ 795.659418][T29374] syzkaller0: entered allmulticast mode [ 795.760167][T29384] syzkaller1: entered promiscuous mode [ 795.776771][T29384] syzkaller1: entered allmulticast mode [ 795.779698][T29388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22825'. [ 795.804506][T29384] syzkaller1: left promiscuous mode [ 795.818495][T29384] syzkaller1: left allmulticast mode [ 796.206475][T29429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22839'. [ 796.298513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.307244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.315569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.379547][T20925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.387704][T20925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.519037][T29460] netlink: 44 bytes leftover after parsing attributes in process `syz.6.22853'. [ 796.541898][T29457] syzkaller1: entered promiscuous mode [ 796.553502][T29457] syzkaller1: entered allmulticast mode [ 796.567582][T29461] syzkaller1: entered promiscuous mode [ 796.576695][T29461] syzkaller1: entered allmulticast mode [ 796.592349][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22855'. [ 796.605525][T29466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22855'. [ 796.615738][T29461] FAULT_INJECTION: forcing a failure. [ 796.615738][T29461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.629821][T29461] CPU: 1 UID: 0 PID: 29461 Comm: syz.4.22852 Not tainted syzkaller #0 PREEMPT(full) [ 796.629843][T29461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.629853][T29461] Call Trace: [ 796.629860][T29461] [ 796.629867][T29461] dump_stack_lvl+0xe8/0x150 [ 796.629891][T29461] should_fail_ex+0x40c/0x560 [ 796.629912][T29461] _copy_from_user+0x2d/0xb0 [ 796.629933][T29461] ___sys_sendmsg+0x1c6/0x360 [ 796.629957][T29461] ? rcu_is_watching+0x15/0xb0 [ 796.629973][T29461] ? get_pid_task+0x20/0x1f0 [ 796.629989][T29461] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.630012][T29461] ? rcu_is_watching+0x15/0xb0 [ 796.630039][T29461] ? __fget_files+0x2a/0x420 [ 796.630056][T29461] ? __fget_files+0x3a2/0x420 [ 796.630077][T29461] __x64_sys_sendmsg+0x1b1/0x290 [ 796.630099][T29461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.630125][T29461] ? rcu_is_watching+0x15/0xb0 [ 796.630141][T29461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.630158][T29461] do_syscall_64+0x174/0x580 [ 796.630181][T29461] ? trace_irq_disable+0x3b/0x140 [ 796.630202][T29461] ? clear_bhb_loop+0x40/0x90 [ 796.630229][T29461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.630244][T29461] RIP: 0033:0x7ff3a279ce59 [ 796.630259][T29461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.630272][T29461] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.630293][T29461] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 796.630305][T29461] RDX: 0000000008048802 RSI: 00002000000000c0 RDI: 0000000000000006 [ 796.630316][T29461] RBP: 00007ff3a3703090 R08: 0000000000000000 R09: 0000000000000000 [ 796.630326][T29461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.630336][T29461] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 796.630356][T29461] [ 796.634646][T29470] x_tables: unsorted entry at hook 2 [ 796.650934][T29469] x_tables: unsorted entry at hook 2 [ 796.821782][T29477] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 796.893826][T29481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22860'. [ 796.951146][T29483] syzkaller1: entered promiscuous mode [ 796.956732][T29483] syzkaller1: entered allmulticast mode [ 796.966589][T29483] netlink: 80 bytes leftover after parsing attributes in process `syz.7.22861'. [ 797.007280][T29483] block nbd7: not configured, cannot reconfigure [ 797.240423][T29511] syzkaller0: entered promiscuous mode [ 797.246562][T29511] syzkaller0: entered allmulticast mode [ 797.293196][T29513] syzkaller1: entered promiscuous mode [ 797.307362][T29513] syzkaller1: entered allmulticast mode [ 797.386805][T29518] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 797.532102][T29535] openvswitch: netlink: Flow actions attr not present in new flow. [ 797.578432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.732828][T29544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.787672][T29555] syzkaller1: entered promiscuous mode [ 797.797343][T29555] syzkaller1: entered allmulticast mode [ 797.920721][T29569] FAULT_INJECTION: forcing a failure. [ 797.920721][T29569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.956108][T29571] syzkaller1: entered promiscuous mode [ 797.963645][T29571] syzkaller1: entered allmulticast mode [ 797.969022][T29569] CPU: 1 UID: 0 PID: 29569 Comm: syz.6.22899 Not tainted syzkaller #0 PREEMPT(full) [ 797.969044][T29569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.969054][T29569] Call Trace: [ 797.969061][T29569] [ 797.969068][T29569] dump_stack_lvl+0xe8/0x150 [ 797.969098][T29569] should_fail_ex+0x40c/0x560 [ 797.969119][T29569] _copy_from_user+0x2d/0xb0 [ 797.969139][T29569] do_ipv6_setsockopt+0x249/0x3180 [ 797.969254][T29569] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 797.969272][T29569] ? aa_label_sk_perm+0x532/0x6e0 [ 797.969295][T29569] ? rcu_is_watching+0x15/0xb0 [ 797.969314][T29569] ? rcu_is_watching+0x15/0xb0 [ 797.969328][T29569] ? get_pid_task+0x20/0x1f0 [ 797.969342][T29569] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 797.969363][T29569] ? __mutex_trylock_common+0x15f/0x270 [ 797.969381][T29569] ? get_pid_task+0x20/0x1f0 [ 797.969394][T29569] ? get_pid_task+0x20/0x1f0 [ 797.969409][T29569] ? rcu_is_watching+0x15/0xb0 [ 797.969425][T29569] ? lock_release+0x4b/0x3c0 [ 797.969445][T29569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 797.969467][T29569] ? preempt_count_add+0x91/0x190 [ 797.969489][T29569] ? rcu_is_watching+0x15/0xb0 [ 797.969505][T29569] ? lock_release+0x4b/0x3c0 [ 797.969528][T29569] ? aa_sk_perm+0x6d5/0x900 [ 797.969549][T29569] ipv6_setsockopt+0x59/0x170 [ 797.969571][T29569] rawv6_setsockopt+0x276/0x5e0 [ 797.969624][T29569] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 797.969641][T29569] ? aa_sock_opt_perm+0xff/0x1a0 [ 797.969657][T29569] ? sock_common_setsockopt+0x36/0xc0 [ 797.969675][T29569] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 797.969692][T29569] do_sock_setsockopt+0x17c/0x1b0 [ 797.969715][T29569] __x64_sys_setsockopt+0x13d/0x1b0 [ 797.969737][T29569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.969754][T29569] do_syscall_64+0x174/0x580 [ 797.969773][T29569] ? trace_irq_disable+0x3b/0x140 [ 797.969793][T29569] ? clear_bhb_loop+0x40/0x90 [ 797.969811][T29569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.969826][T29569] RIP: 0033:0x7fbd8719ce59 [ 797.969841][T29569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.969855][T29569] RSP: 002b:00007fbd880a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 797.969873][T29569] RAX: ffffffffffffffda RBX: 00007fbd87415fa0 RCX: 00007fbd8719ce59 [ 797.969885][T29569] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 797.969895][T29569] RBP: 00007fbd880a4090 R08: 0000000000000004 R09: 0000000000000000 [ 797.969905][T29569] R10: 00002000000033c0 R11: 0000000000000246 R12: 0000000000000001 [ 797.969916][T29569] R13: 00007fbd87416038 R14: 00007fbd87415fa0 R15: 00007ffd17a48d98 [ 797.969936][T29569] [ 798.320203][T29588] netlink: 'syz.6.22904': attribute type 1 has an invalid length. [ 798.416375][T29593] syzkaller0: entered promiscuous mode [ 798.425788][T29593] syzkaller0: entered allmulticast mode [ 798.471075][T29593] tipc: Enabled bearer , priority 0 [ 798.485103][T29590] tipc: Resetting bearer [ 798.505348][T29590] tipc: Disabling bearer [ 798.532840][T29606] syzkaller1: entered promiscuous mode [ 798.556375][T29606] syzkaller1: entered allmulticast mode [ 799.159095][T29664] tipc: Enabled bearer , priority 0 [ 799.235711][T29673] FAULT_INJECTION: forcing a failure. [ 799.235711][T29673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.291433][T29673] CPU: 1 UID: 0 PID: 29673 Comm: syz.7.22935 Not tainted syzkaller #0 PREEMPT(full) [ 799.291458][T29673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.291468][T29673] Call Trace: [ 799.291475][T29673] [ 799.291482][T29673] dump_stack_lvl+0xe8/0x150 [ 799.291512][T29673] should_fail_ex+0x40c/0x560 [ 799.291532][T29673] _copy_to_user+0x31/0xb0 [ 799.291554][T29673] simple_read_from_buffer+0xe1/0x170 [ 799.291576][T29673] proc_fail_nth_read+0x1bb/0x230 [ 799.291600][T29673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 799.291622][T29673] ? rw_verify_area+0x24a/0x4c0 [ 799.291642][T29673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 799.291662][T29673] vfs_read+0x213/0xa80 [ 799.291683][T29673] ? __pfx___mutex_lock+0x10/0x10 [ 799.291705][T29673] ? __pfx_vfs_read+0x10/0x10 [ 799.291727][T29673] ? __fget_files+0x3a2/0x420 [ 799.291745][T29673] ? __fget_files+0x2a/0x420 [ 799.291766][T29673] ksys_read+0x150/0x270 [ 799.291786][T29673] ? __pfx_ksys_read+0x10/0x10 [ 799.291808][T29673] ? rcu_is_watching+0x15/0xb0 [ 799.291826][T29673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.291843][T29673] do_syscall_64+0x174/0x580 [ 799.291863][T29673] ? trace_irq_disable+0x3b/0x140 [ 799.291884][T29673] ? clear_bhb_loop+0x40/0x90 [ 799.291902][T29673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.291918][T29673] RIP: 0033:0x7f685e55d68e [ 799.291933][T29673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 799.291946][T29673] RSP: 002b:00007f685f408fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 799.291964][T29673] RAX: ffffffffffffffda RBX: 00007f685f4096c0 RCX: 00007f685e55d68e [ 799.291977][T29673] RDX: 000000000000000f RSI: 00007f685f4090a0 RDI: 0000000000000004 [ 799.291988][T29673] RBP: 00007f685f409090 R08: 0000000000000000 R09: 0000000000000000 [ 799.291998][T29673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.292008][T29673] R13: 00007f685e816038 R14: 00007f685e815fa0 R15: 00007ffdc27a9368 [ 799.292028][T29673] [ 799.548572][T29653] tipc: Disabling bearer [ 799.578362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.658388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.666707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.675070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.747113][T29688] dummy0: left promiscuous mode [ 799.775448][T29692] netlink: 'syz.6.22945': attribute type 1 has an invalid length. [ 799.865709][T29701] FAULT_INJECTION: forcing a failure. [ 799.865709][T29701] name failslab, interval 1, probability 0, space 0, times 0 [ 799.895227][T29701] CPU: 1 UID: 0 PID: 29701 Comm: syz.0.22948 Not tainted syzkaller #0 PREEMPT(full) [ 799.895251][T29701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.895261][T29701] Call Trace: [ 799.895268][T29701] [ 799.895275][T29701] dump_stack_lvl+0xe8/0x150 [ 799.895298][T29701] should_fail_ex+0x40c/0x560 [ 799.895317][T29701] should_failslab+0xa8/0x100 [ 799.895339][T29701] ? skb_clone+0x212/0x3a0 [ 799.895355][T29701] kmem_cache_alloc_noprof+0x87/0x650 [ 799.895374][T29701] ? apparmor_capable+0x126/0x170 [ 799.895396][T29701] skb_clone+0x212/0x3a0 [ 799.895410][T29701] ? nfnetlink_rcv+0x4b0/0x28c0 [ 799.895432][T29701] nfnetlink_rcv+0x4de/0x28c0 [ 799.895451][T29701] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.895468][T29701] ? rcu_is_watching+0x15/0xb0 [ 799.895485][T29701] ? trace_irq_enable+0x3b/0x140 [ 799.895504][T29701] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.895519][T29701] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.895533][T29701] ? __local_bh_enable_ip+0xd0/0x130 [ 799.895552][T29701] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.895566][T29701] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 799.895580][T29701] ? ____sys_sendmsg+0x9b9/0xa20 [ 799.895600][T29701] ? ___sys_sendmsg+0x2a5/0x360 [ 799.895625][T29701] ? __dev_queue_xmit+0x29b/0x37f0 [ 799.895640][T29701] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 799.895667][T29701] ? ref_tracker_free+0x689/0x830 [ 799.895687][T29701] ? __pfx_ref_tracker_free+0x10/0x10 [ 799.895708][T29701] ? __skb_clone+0x449/0x6c0 [ 799.895732][T29701] ? skb_clone+0x246/0x3a0 [ 799.895747][T29701] ? __netlink_deliver_tap+0x811/0x860 [ 799.895769][T29701] ? netlink_deliver_tap+0x2e/0x1b0 [ 799.895790][T29701] ? rcu_is_watching+0x15/0xb0 [ 799.895805][T29701] ? netlink_deliver_tap+0x2e/0x1b0 [ 799.895825][T29701] ? lock_release+0x4b/0x3c0 [ 799.895846][T29701] ? netlink_deliver_tap+0x2e/0x1b0 [ 799.895868][T29701] netlink_unicast+0x7bb/0x940 [ 799.895892][T29701] netlink_sendmsg+0x813/0xb40 [ 799.895919][T29701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.895952][T29701] ? aa_sock_msg_perm+0xf1/0x1b0 [ 799.895966][T29701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.895984][T29701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.896004][T29701] ____sys_sendmsg+0x9b9/0xa20 [ 799.896028][T29701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.896048][T29701] ? lock_release+0x4b/0x3c0 [ 799.896069][T29701] ? import_iovec+0x73/0xa0 [ 799.896090][T29701] ___sys_sendmsg+0x2a5/0x360 [ 799.896109][T29701] ? rcu_is_watching+0x15/0xb0 [ 799.896121][T29701] ? get_pid_task+0x20/0x1f0 [ 799.896135][T29701] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.896155][T29701] ? rcu_is_watching+0x15/0xb0 [ 799.896178][T29701] ? __fget_files+0x2a/0x420 [ 799.896194][T29701] ? __fget_files+0x3a2/0x420 [ 799.896214][T29701] __x64_sys_sendmsg+0x1b1/0x290 [ 799.896237][T29701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 799.896263][T29701] ? rcu_is_watching+0x15/0xb0 [ 799.896279][T29701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.896295][T29701] do_syscall_64+0x174/0x580 [ 799.896315][T29701] ? trace_irq_disable+0x3b/0x140 [ 799.896333][T29701] ? clear_bhb_loop+0x40/0x90 [ 799.896352][T29701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.896367][T29701] RIP: 0033:0x7f8980f9ce59 [ 799.896382][T29701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.896395][T29701] RSP: 002b:00007f8981ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.896413][T29701] RAX: ffffffffffffffda RBX: 00007f8981215fa0 RCX: 00007f8980f9ce59 [ 799.896425][T29701] RDX: 0000000004000804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 799.896434][T29701] RBP: 00007f8981ede090 R08: 0000000000000000 R09: 0000000000000000 [ 799.896443][T29701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.896453][T29701] R13: 00007f8981216038 R14: 00007f8981215fa0 R15: 00007ffc06d43d18 [ 799.896472][T29701] [ 799.897738][T29704] xt_hashlimit: size too large, truncated to 1048576 [ 799.938740][T29708] tipc: Enabled bearer , priority 0 [ 800.349438][T29707] tipc: Disabling bearer [ 800.390231][T29727] netlink: 'syz.4.22956': attribute type 2 has an invalid length. [ 800.463767][T29737] syzkaller0: entered promiscuous mode [ 800.469872][T29737] syzkaller0: entered allmulticast mode [ 800.477292][T29727] only policy match revision 0 supported [ 800.477307][T29727] unable to load match [ 800.627800][T29742] __nla_validate_parse: 13 callbacks suppressed [ 800.627819][T29742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22961'. [ 800.654346][T29751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22964'. [ 800.705595][T29757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.806840][T29765] syzkaller0: entered promiscuous mode [ 800.823025][T29765] syzkaller0: entered allmulticast mode [ 801.093681][T29798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22983'. [ 801.145333][T29804] netlink: 576 bytes leftover after parsing attributes in process `syz.6.22983'. [ 801.158007][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22987'. [ 801.304715][T29817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.353309][T29826] FAULT_INJECTION: forcing a failure. [ 801.353309][T29826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.374943][T29826] CPU: 1 UID: 0 PID: 29826 Comm: syz.1.22992 Not tainted syzkaller #0 PREEMPT(full) [ 801.374967][T29826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.374976][T29826] Call Trace: [ 801.374982][T29826] [ 801.374989][T29826] dump_stack_lvl+0xe8/0x150 [ 801.375012][T29826] should_fail_ex+0x40c/0x560 [ 801.375031][T29826] _copy_to_user+0x31/0xb0 [ 801.375052][T29826] simple_read_from_buffer+0xe1/0x170 [ 801.375073][T29826] proc_fail_nth_read+0x1bb/0x230 [ 801.375095][T29826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.375114][T29826] ? rw_verify_area+0x24a/0x4c0 [ 801.375134][T29826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.375152][T29826] vfs_read+0x213/0xa80 [ 801.375171][T29826] ? __pfx___mutex_lock+0x10/0x10 [ 801.375192][T29826] ? __pfx_vfs_read+0x10/0x10 [ 801.375212][T29826] ? __fget_files+0x3a2/0x420 [ 801.375228][T29826] ? __fget_files+0x2a/0x420 [ 801.375247][T29826] ksys_read+0x150/0x270 [ 801.375265][T29826] ? __pfx_ksys_read+0x10/0x10 [ 801.375285][T29826] ? rcu_is_watching+0x15/0xb0 [ 801.375301][T29826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.375317][T29826] do_syscall_64+0x174/0x580 [ 801.375336][T29826] ? trace_irq_disable+0x3b/0x140 [ 801.375356][T29826] ? clear_bhb_loop+0x40/0x90 [ 801.375373][T29826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.375389][T29826] RIP: 0033:0x7fd75ab5d68e [ 801.375402][T29826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.375415][T29826] RSP: 002b:00007fd75ba65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.375433][T29826] RAX: ffffffffffffffda RBX: 00007fd75ba666c0 RCX: 00007fd75ab5d68e [ 801.375444][T29826] RDX: 000000000000000f RSI: 00007fd75ba660a0 RDI: 0000000000000004 [ 801.375454][T29826] RBP: 00007fd75ba66090 R08: 0000000000000000 R09: 0000000000000000 [ 801.375464][T29826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.375474][T29826] R13: 00007fd75ae16038 R14: 00007fd75ae15fa0 R15: 00007ffec38eccf8 [ 801.375494][T29826] [ 801.697587][T29833] openvswitch: netlink: Missing key (keys=40, expected=80) [ 801.720172][T29834] syzkaller1: entered promiscuous mode [ 801.727300][T29834] syzkaller1: entered allmulticast mode [ 801.777211][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22998'. [ 801.797119][T29841] openvswitch: netlink: Flow actions attr not present in new flow. [ 801.840426][T29847] xt_hashlimit: size too large, truncated to 1048576 [ 801.877501][T29841] 8021q: VLANs not supported on ip6_vti0 [ 801.909756][T29853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23003'. [ 801.919602][T29853] netlink: 'syz.1.23003': attribute type 7 has an invalid length. [ 801.934338][T29853] netlink: 'syz.1.23003': attribute type 8 has an invalid length. [ 801.947991][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23003'. [ 802.003358][T29861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23005'. [ 802.059804][T29866] netlink: 'syz.4.23007': attribute type 4 has an invalid length. [ 802.067850][T29866] netlink: 17 bytes leftover after parsing attributes in process `syz.4.23007'. [ 802.144943][T20936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.189875][T29876] netlink: 'syz.1.23011': attribute type 1 has an invalid length. [ 802.293227][T29883] tipc: Enabling of bearer rejected, failed to enable media [ 802.304462][T29878] syzkaller1: entered promiscuous mode [ 802.313898][T29878] syzkaller1: entered allmulticast mode [ 802.322394][T29877] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 802.347201][T29886] tipc: Enabled bearer , priority 0 [ 802.397821][T29886] syzkaller0: entered promiscuous mode [ 802.403841][T29886] syzkaller0: entered allmulticast mode [ 802.414774][T29886] tipc: Resetting bearer [ 802.433664][T29885] tipc: Resetting bearer [ 802.460346][T29885] tipc: Disabling bearer [ 802.675865][T29910] netlink: 'syz.4.23022': attribute type 1 has an invalid length. [ 802.720640][T29913] xt_hashlimit: invalid rate [ 802.780515][T20936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.809184][T29921] pimreg: entered allmulticast mode [ 802.929423][T29936] tipc: Failed to remove unknown binding: 66,0,0/1:2605955469/2605955470 [ 802.945642][T29936] tipc: Failed to remove unknown binding: 66,0,0/1:2605955469/2605955470 [ 802.961917][T29938] netlink: 'syz.1.23035': attribute type 1 has an invalid length. [ 803.161446][T29958] netlink: 'syz.4.23041': attribute type 1 has an invalid length. [ 803.189853][T29958] 8021q: adding VLAN 0 to HW filter on device bond49 [ 803.201733][T29958] ip_vti0: entered promiscuous mode [ 803.222021][T29961] syzkaller1: entered promiscuous mode [ 803.233893][T29961] syzkaller1: entered allmulticast mode [ 803.345622][T29967] syzkaller1: entered promiscuous mode [ 803.360640][T29967] syzkaller1: entered allmulticast mode [ 803.380224][T29973] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 803.413985][T20936] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.452597][T20936] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.509699][T20936] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.623819][T29991] syzkaller0: entered promiscuous mode [ 803.630581][T29991] syzkaller0: entered allmulticast mode [ 803.773863][T30007] syzkaller1: entered promiscuous mode [ 803.786991][T30007] syzkaller1: entered allmulticast mode [ 803.981332][T30031] syzkaller1: entered promiscuous mode [ 803.999115][T30031] syzkaller1: entered allmulticast mode [ 804.293319][T30058] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 804.407986][T30065] netlink: 'syz.6.23078': attribute type 9 has an invalid length. [ 804.562521][T30078] syzkaller1: entered promiscuous mode [ 804.570013][T30078] syzkaller1: entered allmulticast mode [ 804.657754][T30090] : entered promiscuous mode [ 804.683523][T30091] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 804.761794][T30100] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 805.002968][T30120] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 805.023652][T30120] team1: entered promiscuous mode [ 805.029727][T30120] team1: entered allmulticast mode [ 805.126490][T30134] net_ratelimit: 3 callbacks suppressed [ 805.126508][T30134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.151282][T30132] xt_hashlimit: size too large, truncated to 1048576 [ 805.755125][T30196] __nla_validate_parse: 29 callbacks suppressed [ 805.755144][T30196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23127'. [ 805.817930][T30205] netlink: 'syz.6.23130': attribute type 1 has an invalid length. [ 805.827913][T30205] netlink: 244 bytes leftover after parsing attributes in process `syz.6.23130'. [ 805.909819][T30211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23134'. [ 805.993074][T30221] syzkaller1: entered promiscuous mode [ 806.024719][T30221] syzkaller1: entered allmulticast mode [ 806.082015][T30232] netlink: 'syz.0.23139': attribute type 1 has an invalid length. [ 806.116663][T30232] 8021q: adding VLAN 0 to HW filter on device bond33 [ 806.132583][T30232] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 806.152901][T30232] bond33: (slave veth0_to_bond): making interface the new active one [ 806.163636][T30232] bond33: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 806.221828][T30240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23142'. [ 806.328554][T30255] tipc: Enabling of bearer rejected, failed to enable media [ 806.381227][T30260] syzkaller0: entered promiscuous mode [ 806.386792][T30260] syzkaller0: entered allmulticast mode [ 806.411295][T30263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23148'. [ 806.487178][T30270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23155'. [ 806.745387][T30297] xt_hashlimit: size too large, truncated to 1048576 [ 806.778459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.786790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.795085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.827934][T30307] netlink: 'syz.1.23168': attribute type 4 has an invalid length. [ 806.844514][T30300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23166'. [ 806.847857][T30307] netlink: 'syz.1.23168': attribute type 4 has an invalid length. [ 806.871062][T30300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23166'. [ 806.897069][T30300] netlink: 'syz.6.23166': attribute type 14 has an invalid length. [ 806.914793][T30300] netlink: 'syz.6.23166': attribute type 13 has an invalid length. [ 806.969079][T30312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23170'. [ 806.991004][T30312] netlink: 'syz.1.23170': attribute type 1 has an invalid length. [ 807.000299][T30312] netlink: 'syz.1.23170': attribute type 2 has an invalid length. [ 807.080849][T30321] x_tables: unsorted underflow at hook 4 [ 807.121598][T30324] x_tables: duplicate underflow at hook 3 [ 807.138668][T30324] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 807.325087][T30341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23182'. [ 807.401638][T30348] syzkaller0: entered promiscuous mode [ 807.402848][T30341] IPVS: persistence engine module ip_vs_pe_À not found [ 807.407265][T30348] syzkaller0: entered allmulticast mode [ 807.434242][T30348] tipc: Enabled bearer , priority 0 [ 807.460903][T30347] tipc: Resetting bearer [ 807.484578][T30347] tipc: Disabling bearer [ 807.495824][T30356] bond0: (slave bond_slave_0): Releasing backup interface [ 807.555973][T11446] IPVS: starting estimator thread 0... [ 807.658451][T30361] IPVS: using max 51 ests per chain, 122400 per kthread [ 807.910622][T20930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.972675][T30393] syzkaller0: entered promiscuous mode [ 807.978302][T30393] syzkaller0: entered allmulticast mode [ 807.990028][T30393] tipc: Enabled bearer , priority 0 [ 807.998052][T30391] tipc: Resetting bearer [ 808.031530][T30391] tipc: Disabling bearer [ 808.263646][T30412] netlink: 'syz.7.23206': attribute type 1 has an invalid length. [ 808.538604][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 808.540573][T20923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.813567][T30460] tipc: Enabled bearer , priority 0 [ 808.826989][T30460] syzkaller0: entered promiscuous mode [ 808.837750][T30460] syzkaller0: entered allmulticast mode [ 808.854664][T30460] tipc: Resetting bearer [ 808.886123][T30472] xt_cgroup: xt_cgroup: no path or classid specified [ 808.898072][T30461] 8021q: adding VLAN 0 to HW filter on device bond34 [ 808.937662][T30461] 8021q: adding VLAN 0 to HW filter on device bond35 [ 808.974639][T30458] tipc: Resetting bearer [ 809.009977][T30458] tipc: Disabling bearer [ 809.071961][T30461] 8021q: adding VLAN 0 to HW filter on device bond36 [ 809.094381][T30461] 8021q: adding VLAN 0 to HW filter on device bond37 [ 809.143710][T30461] 8021q: adding VLAN 0 to HW filter on device bond38 [ 809.179331][T30494] syzkaller0: entered promiscuous mode [ 809.195695][T30494] syzkaller0: entered allmulticast mode [ 809.290014][T30461] 8021q: adding VLAN 0 to HW filter on device bond39 [ 809.311236][T30485] tipc: Enabled bearer , priority 0 [ 809.357023][T30461] 8021q: adding VLAN 0 to HW filter on device bond40 [ 809.393242][T30461] 8021q: adding VLAN 0 to HW filter on device bond41 [ 809.401145][T30484] tipc: Resetting bearer [ 809.433581][T30484] tipc: Disabling bearer [ 809.462690][T30461] 8021q: adding VLAN 0 to HW filter on device bond42 [ 809.474689][T30461] validate_nla: 14 callbacks suppressed [ 809.474704][T30461] netlink: 'syz.1.23220': attribute type 1 has an invalid length. [ 809.541691][T30528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 809.547023][T30461] 8021q: adding VLAN 0 to HW filter on device bond43 [ 809.552971][T30528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.560966][T30461] netlink: 'syz.1.23220': attribute type 1 has an invalid length. [ 809.607236][T30461] 8021q: adding VLAN 0 to HW filter on device bond44 [ 809.614942][T30461] netlink: 'syz.1.23220': attribute type 1 has an invalid length. [ 809.661199][T30537] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 809.676661][T30461] 8021q: adding VLAN 0 to HW filter on device bond45 [ 809.776760][T30545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.877332][T30551] netlink: 'syz.7.23245': attribute type 4 has an invalid length. [ 810.058696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.195600][T30578] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 810.206967][T30578] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 810.215632][T30578] gretap1: entered promiscuous mode [ 810.222318][T30578] gretap1: entered allmulticast mode [ 810.401546][T30596] geneve0: entered promiscuous mode [ 810.403967][T30594] netlink: 'syz.4.23262': attribute type 7 has an invalid length. [ 810.420775][T30594] netlink: 'syz.4.23262': attribute type 23 has an invalid length. [ 810.475551][T30602] syzkaller1: entered promiscuous mode [ 810.484065][T30602] syzkaller1: entered allmulticast mode [ 810.543721][T30606] netlink: 'syz.7.23267': attribute type 1 has an invalid length. [ 810.543877][T30607] netlink: 'syz.7.23267': attribute type 1 has an invalid length. [ 810.567985][T30606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.738147][T30620] xfrm0 speed is unknown, defaulting to 1000 [ 810.811327][T30627] xt_hashlimit: size too large, truncated to 1048576 [ 810.837018][T30630] netlink: 'syz.0.23274': attribute type 16 has an invalid length. [ 810.855938][T30630] netlink: 'syz.0.23274': attribute type 17 has an invalid length. [ 810.879637][T30626] bridge0: port 2(bridge_slave_0) entered disabled state [ 810.938441][ C1] net_ratelimit: 3 callbacks suppressed [ 810.938459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.036008][T30646] __nla_validate_parse: 23 callbacks suppressed [ 811.036026][T30646] netlink: 276 bytes leftover after parsing attributes in process `syz.4.23280'. [ 811.072879][T30626] bridge0: port 1(vlan3) entered disabled state [ 811.139173][T30630] sit0: left allmulticast mode [ 811.144770][T30630] ip6tnl0: left allmulticast mode [ 811.157268][T30630] ip6gre0: left allmulticast mode [ 811.164619][T30630] syz_tun: left allmulticast mode [ 811.170636][T30630] bridge0: left allmulticast mode [ 811.180072][T30630] bridge0: port 2(bridge_slave_0) entered blocking state [ 811.187167][T30630] bridge0: port 2(bridge_slave_0) entered forwarding state [ 811.203363][T30630] macvlan0: left promiscuous mode [ 811.210100][T30630] geneve0: left promiscuous mode [ 811.219171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.245045][T30630] gretap2: left promiscuous mode [ 811.254677][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.274440][ T809] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 811.283400][ T809] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.291628][ T809] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 811.302743][T30630] bridge0: port 1(vlan3) entered blocking state [ 811.309087][T30630] bridge0: port 1(vlan3) entered forwarding state [ 811.321220][T30630] bond12: left promiscuous mode [ 811.326183][T30630] bond12: left allmulticast mode [ 811.332284][T30630] bond13: left promiscuous mode [ 811.337279][T30630] bridge11: left promiscuous mode [ 811.343452][T30630] bond13: left allmulticast mode [ 811.354871][T30630] bridge11: left allmulticast mode [ 811.361402][T30630] bond14: left promiscuous mode [ 811.367258][T30630] macvtap1: left allmulticast mode [ 811.373563][T30630] macvtap2: left allmulticast mode [ 811.379397][T30630] bond14: left allmulticast mode [ 811.384420][T30630] bridge12: left allmulticast mode [ 811.392892][T30630] bond15: left promiscuous mode [ 811.397754][T30630] bond15: left allmulticast mode [ 811.412608][T30630] bridge14: left promiscuous mode [ 811.417830][T30630] bridge14: left allmulticast mode [ 811.426526][T30630] bond26: left promiscuous mode [ 811.434333][T30630] gtp3: left allmulticast mode [ 811.439666][T30630] bond29: left allmulticast mode [ 811.446778][T30630] bond31: left promiscuous mode [ 811.456192][T30620] lo speed is unknown, defaulting to 1000 [ 811.467639][T30620] lo speed is unknown, defaulting to 1000 [ 811.548894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.576070][T30658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23284'. [ 811.655814][T30665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23287'. [ 811.869148][T28387] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 811.895718][T30676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23291'. [ 811.975731][T30680] veth0_to_bridge: entered promiscuous mode [ 811.978684][T28387] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 811.982572][T30678] veth0_to_bridge: left promiscuous mode [ 812.076471][T28387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.104241][T30676] netlink: 28 bytes leftover after parsing attributes in process `syz.7.23291'. [ 812.186712][T30696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.23295'. [ 812.203876][T30676] netlink: 20 bytes leftover after parsing attributes in process `syz.7.23291'. [ 812.219446][ T5726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 812.266850][T30698] bridge0: port 3(ipvlan2) entered blocking state [ 812.288018][T30698] bridge0: port 3(ipvlan2) entered disabled state [ 812.315299][T30698] ipvlan2: entered allmulticast mode [ 812.342505][T30698] bridge0: entered allmulticast mode [ 812.384855][T30698] ipvlan2: left allmulticast mode [ 812.412353][T30698] bridge0: left allmulticast mode [ 812.453501][T30702] 8021q: adding VLAN 0 to HW filter on device bond46 [ 812.471640][T30707] bond46: (slave geneve2): making interface the new active one [ 812.481853][T30707] bond46: (slave geneve2): Enslaving as an active interface with an up link [ 812.498917][T20940] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 812.511436][T20940] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 812.523438][T20940] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 812.570288][T20940] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 812.616901][T30722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23302'. [ 812.632956][T30727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23302'. [ 812.774762][T30739] bond43: left allmulticast mode [ 812.787672][T30739] bridge25: left allmulticast mode [ 812.804467][T30743] netlink: 244 bytes leftover after parsing attributes in process `syz.7.23311'. [ 812.963247][T30747] can: request_module (can-proto-0) failed. [ 813.037472][T30770] bond0: left promiscuous mode [ 813.061769][T30759] syzkaller0: entered promiscuous mode [ 813.081911][T30759] syzkaller0: entered allmulticast mode [ 813.140214][T30778] openvswitch: : Dropping previously announced user features [ 813.291743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.334748][ T5726] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 813.357705][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.372678][ T5726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 813.381278][ T5726] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 813.418412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.426760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.435121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.454925][T30802] xt_hashlimit: size too large, truncated to 1048576 [ 813.529910][T30790] tipc: Enabled bearer , priority 0 [ 813.674456][T30815] bond50: entered promiscuous mode [ 813.691435][T30815] 8021q: adding VLAN 0 to HW filter on device bond50 [ 813.738170][T30786] tipc: Disabling bearer [ 813.758708][ T809] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 813.758724][ T809] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 813.857452][T30815] 8021q: adding VLAN 0 to HW filter on device bond50 [ 813.869613][T30815] bond50: (slave sit4): The slave device specified does not support setting the MAC address [ 813.890691][T30815] bond50: (slave sit4): Error -95 calling set_mac_address [ 813.939606][ T5726] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 814.114405][T30852] ip6t_srh: unknown srh match flags 4000 [ 814.264549][T30858] bond8: option xmit_hash_policy: invalid value (64) [ 814.276481][T30858] bond8 (unregistering): Released all slaves [ 814.492460][T30881] bond8: entered promiscuous mode [ 814.513437][T30882] tunl0: Caught tx_queue_len zero misconfig [ 814.741625][T30907] FAULT_INJECTION: forcing a failure. [ 814.741625][T30907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.760774][T30907] CPU: 0 UID: 0 PID: 30907 Comm: syz.6.23367 Not tainted syzkaller #0 PREEMPT(full) [ 814.760797][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.760806][T30907] Call Trace: [ 814.760813][T30907] [ 814.760822][T30907] dump_stack_lvl+0xe8/0x150 [ 814.760845][T30907] should_fail_ex+0x40c/0x560 [ 814.760865][T30907] _copy_from_iter+0x1d3/0x1660 [ 814.760898][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.760918][T30907] ? __pfx__copy_from_iter+0x10/0x10 [ 814.760935][T30907] ? is_bpf_text_address+0x26/0x2b0 [ 814.760957][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.760974][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.760992][T30907] tun_get_user+0x269/0x4350 [ 814.761013][T30907] ? is_bpf_text_address+0x292/0x2b0 [ 814.761035][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.761052][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.761066][T30907] ? lock_release+0x4b/0x3c0 [ 814.761085][T30907] ? arch_stack_walk+0xfb/0x150 [ 814.761105][T30907] ? aa_file_perm+0x4ed/0x15f0 [ 814.761123][T30907] ? __pfx_tun_get_user+0x10/0x10 [ 814.761144][T30907] ? kstrtoull+0x12f/0x1d0 [ 814.761164][T30907] ? ref_tracker_alloc+0x341/0x4b0 [ 814.761181][T30907] ? get_pid_task+0x20/0x1f0 [ 814.761196][T30907] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 814.761213][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.761229][T30907] ? tun_get+0x1c/0x2f0 [ 814.761246][T30907] ? tun_get+0x1c/0x2f0 [ 814.761262][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.761276][T30907] ? tun_get+0x1c/0x2f0 [ 814.761291][T30907] ? lock_release+0x4b/0x3c0 [ 814.761311][T30907] ? apparmor_file_permission+0x1f4/0x300 [ 814.761331][T30907] ? tun_get+0x1c/0x2f0 [ 814.761350][T30907] tun_chr_write_iter+0x113/0x200 [ 814.761368][T30907] vfs_write+0x612/0xba0 [ 814.761391][T30907] ? __pfx_vfs_write+0x10/0x10 [ 814.761413][T30907] ? __fget_files+0x2a/0x420 [ 814.761433][T30907] ksys_write+0x150/0x270 [ 814.761453][T30907] ? __pfx_ksys_write+0x10/0x10 [ 814.761474][T30907] ? rcu_is_watching+0x15/0xb0 [ 814.761488][T30907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.761504][T30907] do_syscall_64+0x174/0x580 [ 814.761524][T30907] ? trace_irq_disable+0x3b/0x140 [ 814.761544][T30907] ? clear_bhb_loop+0x40/0x90 [ 814.761561][T30907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.761576][T30907] RIP: 0033:0x7fbd8719ce59 [ 814.761591][T30907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.761606][T30907] RSP: 002b:00007fbd880a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.761623][T30907] RAX: ffffffffffffffda RBX: 00007fbd87415fa0 RCX: 00007fbd8719ce59 [ 814.761635][T30907] RDX: 000000000000fdef RSI: 0000200000000cc0 RDI: 0000000000000003 [ 814.761645][T30907] RBP: 00007fbd880a4090 R08: 0000000000000000 R09: 0000000000000000 [ 814.761656][T30907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.761666][T30907] R13: 00007fbd87416038 R14: 00007fbd87415fa0 R15: 00007ffd17a48d98 [ 814.761683][T30907] [ 814.774285][T30909] validate_nla: 8 callbacks suppressed [ 814.774300][T30909] netlink: 'syz.1.23368': attribute type 1 has an invalid length. [ 815.325574][T30930] netlink: 'syz.7.23375': attribute type 83 has an invalid length. [ 815.399182][T30937] block nbd1: Unsupported socket: should be TCP or UNIX. [ 815.949655][T30996] FAULT_INJECTION: forcing a failure. [ 815.949655][T30996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.964988][T30996] CPU: 0 UID: 0 PID: 30996 Comm: syz.4.23401 Not tainted syzkaller #0 PREEMPT(full) [ 815.965012][T30996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.965023][T30996] Call Trace: [ 815.965030][T30996] [ 815.965037][T30996] dump_stack_lvl+0xe8/0x150 [ 815.965059][T30996] should_fail_ex+0x40c/0x560 [ 815.965080][T30996] _copy_from_user+0x2d/0xb0 [ 815.965103][T30996] ___sys_sendmsg+0x1c6/0x360 [ 815.965127][T30996] ? rcu_is_watching+0x15/0xb0 [ 815.965144][T30996] ? get_pid_task+0x20/0x1f0 [ 815.965161][T30996] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.965186][T30996] ? rcu_is_watching+0x15/0xb0 [ 815.965213][T30996] ? __fget_files+0x2a/0x420 [ 815.965231][T30996] ? __fget_files+0x3a2/0x420 [ 815.965253][T30996] __x64_sys_sendmsg+0x1b1/0x290 [ 815.965276][T30996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.965305][T30996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.965322][T30996] do_syscall_64+0x174/0x580 [ 815.965343][T30996] ? trace_irq_disable+0x3b/0x140 [ 815.965364][T30996] ? clear_bhb_loop+0x40/0x90 [ 815.965382][T30996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.965398][T30996] RIP: 0033:0x7ff3a279ce59 [ 815.965414][T30996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.965429][T30996] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.965447][T30996] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 815.965460][T30996] RDX: 0000000024000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 815.965472][T30996] RBP: 00007ff3a3703090 R08: 0000000000000000 R09: 0000000000000000 [ 815.965483][T30996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.965494][T30996] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 815.965515][T30996] [ 816.276987][T31007] pimreg: entered allmulticast mode [ 816.335055][T31013] __nla_validate_parse: 18 callbacks suppressed [ 816.335071][T31013] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23410'. [ 816.425535][T31021] netlink: 44 bytes leftover after parsing attributes in process `syz.7.23413'. [ 816.463646][T31023] tipc: Enabled bearer , priority 0 [ 816.477378][T31026] vlan0: Caught tx_queue_len zero misconfig [ 816.514313][T31029] FAULT_INJECTION: forcing a failure. [ 816.514313][T31029] name failslab, interval 1, probability 0, space 0, times 0 [ 816.529726][T31026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23412'. [ 816.532525][T31029] CPU: 1 UID: 0 PID: 31029 Comm: syz.7.23417 Not tainted syzkaller #0 PREEMPT(full) [ 816.532547][T31029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.532557][T31029] Call Trace: [ 816.532564][T31029] [ 816.532570][T31029] dump_stack_lvl+0xe8/0x150 [ 816.532592][T31029] should_fail_ex+0x40c/0x560 [ 816.532612][T31029] should_failslab+0xa8/0x100 [ 816.532635][T31029] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 816.532654][T31029] ? rcu_is_watching+0x15/0xb0 [ 816.532671][T31029] ? __alloc_skb+0x1d7/0x7a0 [ 816.532691][T31029] ? trace_irq_enable+0x3b/0x140 [ 816.532712][T31029] __alloc_skb+0x1d7/0x7a0 [ 816.532732][T31029] netlink_sendmsg+0x5d4/0xb40 [ 816.532758][T31029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.532780][T31029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.532797][T31029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.532815][T31029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.532836][T31029] ____sys_sendmsg+0x9b9/0xa20 [ 816.532860][T31029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.532884][T31029] ? lock_release+0x4b/0x3c0 [ 816.532906][T31029] ? import_iovec+0x73/0xa0 [ 816.532927][T31029] ___sys_sendmsg+0x2a5/0x360 [ 816.532947][T31029] ? rcu_is_watching+0x15/0xb0 [ 816.532961][T31029] ? get_pid_task+0x20/0x1f0 [ 816.532976][T31029] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.532999][T31029] ? rcu_is_watching+0x15/0xb0 [ 816.533026][T31029] ? __fget_files+0x2a/0x420 [ 816.533042][T31029] ? __fget_files+0x3a2/0x420 [ 816.533062][T31029] __x64_sys_sendmsg+0x1b1/0x290 [ 816.533084][T31029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.533111][T31029] ? rcu_is_watching+0x15/0xb0 [ 816.533127][T31029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.533143][T31029] do_syscall_64+0x174/0x580 [ 816.533168][T31029] ? trace_irq_disable+0x3b/0x140 [ 816.533188][T31029] ? clear_bhb_loop+0x40/0x90 [ 816.533205][T31029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.533221][T31029] RIP: 0033:0x7f685e59ce59 [ 816.533235][T31029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.533249][T31029] RSP: 002b:00007f685f409028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.533266][T31029] RAX: ffffffffffffffda RBX: 00007f685e815fa0 RCX: 00007f685e59ce59 [ 816.533278][T31029] RDX: 0000000024000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 816.533288][T31029] RBP: 00007f685f409090 R08: 0000000000000000 R09: 0000000000000000 [ 816.533298][T31029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.533308][T31029] R13: 00007f685e816038 R14: 00007f685e815fa0 R15: 00007ffdc27a9368 [ 816.533327][T31029] [ 816.701722][ C0] net_ratelimit: 15 callbacks suppressed [ 816.701740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.701926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.702108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.702259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.890272][T31019] tipc: Disabling bearer [ 817.003741][T31059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23427'. [ 817.101834][T31070] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23430'. [ 817.264477][T31082] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.23435'. [ 817.288182][T31082] netlink: Unknown conntrack attr (type=2304, max=9) [ 817.338485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.433383][T31100] syzkaller0: entered promiscuous mode [ 817.451644][T31100] syzkaller0: entered allmulticast mode [ 817.502258][T31112] netlink: 816 bytes leftover after parsing attributes in process `syz.0.23446'. [ 817.526597][T31113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23443'. [ 817.725772][T31138] netlink: 'syz.7.23452': attribute type 7 has an invalid length. [ 817.760455][T31140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.781081][T20923] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.781144][T31138] netlink: 'syz.7.23452': attribute type 7 has an invalid length. [ 817.809725][T31138] netlink: 244 bytes leftover after parsing attributes in process `syz.7.23452'. [ 817.864439][T31147] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23454'. [ 817.868560][T31149] netlink: 'syz.7.23456': attribute type 9 has an invalid length. [ 817.917722][T20923] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.918452][T31152] netlink: 'syz.6.23454': attribute type 1 has an invalid length. [ 817.937187][T31151] netlink: 'syz.1.23457': attribute type 11 has an invalid length. [ 817.952893][T20930] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.095840][T31156] syzkaller0: entered promiscuous mode [ 818.102226][T31156] syzkaller0: entered allmulticast mode [ 818.119867][T31156] netlink: 'syz.7.23459': attribute type 4 has an invalid length. [ 818.134958][T31156] netlink: 'syz.7.23459': attribute type 4 has an invalid length. [ 818.418721][T31186] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 818.425053][T31188] netlink: 'syz.0.23464': attribute type 1 has an invalid length. [ 819.026899][T31242] netlink: 'syz.1.23489': attribute type 1 has an invalid length. [ 819.100300][T31250] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 819.106943][T31246] syzkaller1: entered allmulticast mode [ 819.343989][T31269] syzkaller0: entered promiscuous mode [ 819.349748][T31269] syzkaller0: entered allmulticast mode [ 819.373132][T31269] tipc: Enabled bearer , priority 0 [ 819.383489][T31268] tipc: Resetting bearer [ 819.427408][T31268] tipc: Disabling bearer [ 819.520584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.572958][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.617521][ T808] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 819.639246][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 819.647854][ T808] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 819.692838][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.771183][T31307] syzkaller0: entered promiscuous mode [ 819.788099][T31307] syzkaller0: entered allmulticast mode [ 819.864238][T31313] lo: entered promiscuous mode [ 819.888460][T31313] tunl0: entered promiscuous mode [ 819.912460][T31313] gre0: entered promiscuous mode [ 819.919137][ T808] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 820.100496][T31313] ip_vti0: entered promiscuous mode [ 820.229217][T31337] syzkaller0: entered promiscuous mode [ 820.238752][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 820.246681][T31337] syzkaller0: entered allmulticast mode [ 820.266299][T31337] tipc: Enabled bearer , priority 0 [ 820.287922][T31336] tipc: Resetting bearer [ 820.312763][T31336] tipc: Disabling bearer [ 820.444944][T31354] syzkaller0: entered allmulticast mode [ 820.585251][T31366] IPVS: length: 171 != 8 [ 820.620755][ T808] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 820.846375][T31399] netlink: 'syz.7.23532': attribute type 20 has an invalid length. [ 821.068891][T31427] netlink: 'syz.1.23543': attribute type 14 has an invalid length. [ 821.088850][T31427] netlink: 'syz.1.23543': attribute type 13 has an invalid length. [ 821.266746][T31442] syzkaller0: entered promiscuous mode [ 821.272534][T31442] syzkaller0: entered allmulticast mode [ 821.401630][T31459] __nla_validate_parse: 22 callbacks suppressed [ 821.401647][T31459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23556'. [ 821.437222][T31463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23557'. [ 821.683985][T31490] netlink: 256 bytes leftover after parsing attributes in process `syz.0.23564'. [ 821.758963][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23565'. [ 821.770435][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23565'. [ 821.772074][T31502] netlink: 'syz.1.23567': attribute type 2 has an invalid length. [ 821.779851][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23565'. [ 821.802360][T31502] netlink: 'syz.1.23567': attribute type 8 has an invalid length. [ 821.820313][T31502] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23567'. [ 821.863823][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23565'. [ 821.880883][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23565'. [ 821.910777][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23565'. [ 822.056383][T31517] syzkaller0: entered promiscuous mode [ 822.118696][T31517] syzkaller0: entered allmulticast mode [ 822.181067][T31535] xt_TCPMSS: Only works on TCP SYN packets [ 822.271426][T31540] FAULT_INJECTION: forcing a failure. [ 822.271426][T31540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.287578][T31540] CPU: 0 UID: 0 PID: 31540 Comm: syz.1.23579 Not tainted syzkaller #0 PREEMPT(full) [ 822.287602][T31540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 822.287612][T31540] Call Trace: [ 822.287619][T31540] [ 822.287625][T31540] dump_stack_lvl+0xe8/0x150 [ 822.287647][T31540] should_fail_ex+0x40c/0x560 [ 822.287667][T31540] _copy_from_iter+0x1d3/0x1660 [ 822.287685][T31540] ? __might_fault+0xaf/0x130 [ 822.287704][T31540] ? __might_fault+0xcb/0x130 [ 822.287723][T31540] ? _copy_from_iter+0x21b/0x1660 [ 822.287741][T31540] ? __pfx__copy_from_iter+0x10/0x10 [ 822.287762][T31540] ? __pfx__copy_from_iter+0x10/0x10 [ 822.287784][T31540] copy_page_from_iter+0x219/0x2d0 [ 822.287804][T31540] skb_copy_datagram_from_iter+0x2f4/0x720 [ 822.287827][T31540] tun_get_user+0xc71/0x4350 [ 822.287846][T31540] ? is_bpf_text_address+0x292/0x2b0 [ 822.287873][T31540] ? lock_release+0x4b/0x3c0 [ 822.287894][T31540] ? arch_stack_walk+0xfb/0x150 [ 822.287915][T31540] ? aa_file_perm+0x4ed/0x15f0 [ 822.287932][T31540] ? __pfx_tun_get_user+0x10/0x10 [ 822.287953][T31540] ? kstrtoull+0x12f/0x1d0 [ 822.287972][T31540] ? ref_tracker_alloc+0x341/0x4b0 [ 822.287989][T31540] ? get_pid_task+0x20/0x1f0 [ 822.288004][T31540] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 822.288021][T31540] ? rcu_is_watching+0x15/0xb0 [ 822.288038][T31540] ? tun_get+0x1c/0x2f0 [ 822.288055][T31540] ? tun_get+0x1c/0x2f0 [ 822.288070][T31540] ? rcu_is_watching+0x15/0xb0 [ 822.288082][T31540] ? tun_get+0x1c/0x2f0 [ 822.288107][T31540] ? lock_release+0x4b/0x3c0 [ 822.288127][T31540] ? apparmor_file_permission+0x1f4/0x300 [ 822.288146][T31540] ? tun_get+0x1c/0x2f0 [ 822.288164][T31540] tun_chr_write_iter+0x113/0x200 [ 822.288187][T31540] vfs_write+0x612/0xba0 [ 822.288209][T31540] ? __pfx_vfs_write+0x10/0x10 [ 822.288232][T31540] ? __fget_files+0x2a/0x420 [ 822.288252][T31540] ksys_write+0x150/0x270 [ 822.288271][T31540] ? __pfx_ksys_write+0x10/0x10 [ 822.288290][T31540] ? rcu_is_watching+0x15/0xb0 [ 822.288307][T31540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.288323][T31540] do_syscall_64+0x174/0x580 [ 822.288342][T31540] ? trace_irq_disable+0x3b/0x140 [ 822.288361][T31540] ? clear_bhb_loop+0x40/0x90 [ 822.288378][T31540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.288393][T31540] RIP: 0033:0x7fd75ab9ce59 [ 822.288408][T31540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.288421][T31540] RSP: 002b:00007fd75ba66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 822.288439][T31540] RAX: ffffffffffffffda RBX: 00007fd75ae15fa0 RCX: 00007fd75ab9ce59 [ 822.288450][T31540] RDX: 000000000000fdef RSI: 0000200000000cc0 RDI: 0000000000000003 [ 822.288460][T31540] RBP: 00007fd75ba66090 R08: 0000000000000000 R09: 0000000000000000 [ 822.288469][T31540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.288477][T31540] R13: 00007fd75ae16038 R14: 00007fd75ae15fa0 R15: 00007ffec38eccf8 [ 822.288495][T31540] [ 823.314116][T31623] xt_hashlimit: size too large, truncated to 1048576 [ 823.602647][T31645] net_ratelimit: 3 callbacks suppressed [ 823.602665][T31645] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 823.617407][T31646] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 823.699860][T31653] netlink: 'syz.4.23616': attribute type 1 has an invalid length. [ 823.765035][T31658] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 823.877767][T31671] Unsupported ieee802154 address type: 0 [ 824.126659][T31692] FAULT_INJECTION: forcing a failure. [ 824.126659][T31692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.141739][T31692] CPU: 1 UID: 0 PID: 31692 Comm: syz.4.23632 Not tainted syzkaller #0 PREEMPT(full) [ 824.141763][T31692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.141773][T31692] Call Trace: [ 824.141780][T31692] [ 824.141787][T31692] dump_stack_lvl+0xe8/0x150 [ 824.141810][T31692] should_fail_ex+0x40c/0x560 [ 824.141831][T31692] _copy_from_iter+0x1d3/0x1660 [ 824.141849][T31692] ? __might_fault+0xaf/0x130 [ 824.141868][T31692] ? __might_fault+0xcb/0x130 [ 824.141887][T31692] ? _copy_from_iter+0x21b/0x1660 [ 824.141906][T31692] ? __pfx__copy_from_iter+0x10/0x10 [ 824.141926][T31692] ? __pfx__copy_from_iter+0x10/0x10 [ 824.141948][T31692] copy_page_from_iter+0x219/0x2d0 [ 824.141968][T31692] skb_copy_datagram_from_iter+0x2f4/0x720 [ 824.141990][T31692] tun_get_user+0xc71/0x4350 [ 824.142009][T31692] ? is_bpf_text_address+0x292/0x2b0 [ 824.142036][T31692] ? lock_release+0x4b/0x3c0 [ 824.142057][T31692] ? arch_stack_walk+0xfb/0x150 [ 824.142077][T31692] ? aa_file_perm+0x4ed/0x15f0 [ 824.142094][T31692] ? __pfx_tun_get_user+0x10/0x10 [ 824.142114][T31692] ? kstrtoull+0x12f/0x1d0 [ 824.142132][T31692] ? ref_tracker_alloc+0x341/0x4b0 [ 824.142148][T31692] ? get_pid_task+0x20/0x1f0 [ 824.142162][T31692] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 824.142179][T31692] ? rcu_is_watching+0x15/0xb0 [ 824.142196][T31692] ? tun_get+0x1c/0x2f0 [ 824.142214][T31692] ? tun_get+0x1c/0x2f0 [ 824.142231][T31692] ? rcu_is_watching+0x15/0xb0 [ 824.142245][T31692] ? tun_get+0x1c/0x2f0 [ 824.142262][T31692] ? lock_release+0x4b/0x3c0 [ 824.142282][T31692] ? apparmor_file_permission+0x1f4/0x300 [ 824.142303][T31692] ? tun_get+0x1c/0x2f0 [ 824.142323][T31692] tun_chr_write_iter+0x113/0x200 [ 824.142342][T31692] vfs_write+0x612/0xba0 [ 824.142366][T31692] ? __pfx_vfs_write+0x10/0x10 [ 824.142388][T31692] ? __fget_files+0x2a/0x420 [ 824.142408][T31692] ksys_write+0x150/0x270 [ 824.142426][T31692] ? __pfx_ksys_write+0x10/0x10 [ 824.142445][T31692] ? rcu_is_watching+0x15/0xb0 [ 824.142459][T31692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.142475][T31692] do_syscall_64+0x174/0x580 [ 824.142495][T31692] ? trace_irq_disable+0x3b/0x140 [ 824.142514][T31692] ? clear_bhb_loop+0x40/0x90 [ 824.142531][T31692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.142545][T31692] RIP: 0033:0x7ff3a279ce59 [ 824.142560][T31692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.142573][T31692] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 824.142601][T31692] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 824.142612][T31692] RDX: 000000000000fdef RSI: 0000200000000cc0 RDI: 0000000000000003 [ 824.142622][T31692] RBP: 00007ff3a3703090 R08: 0000000000000000 R09: 0000000000000000 [ 824.142632][T31692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.142642][T31692] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 824.142660][T31692] [ 824.149872][T31693] xt_hashlimit: size too large, truncated to 1048576 [ 824.505503][T31706] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 824.517225][T31706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.524573][T31706] IPv6: NLM_F_CREATE should be set when creating new route [ 824.531834][T31706] IPv6: NLM_F_CREATE should be set when creating new route [ 824.539085][T31706] IPv6: NLM_F_CREATE should be set when creating new route [ 824.580654][T31706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.753711][T31724] netlink: 'syz.4.23639': attribute type 1 has an invalid length. [ 824.790581][T31724] 8021q: adding VLAN 0 to HW filter on device bond51 [ 825.047280][T31759] syzkaller0: entered promiscuous mode [ 825.065088][T31759] syzkaller0: entered allmulticast mode [ 825.097441][T31759] tipc: Enabled bearer , priority 0 [ 825.124936][T31757] tipc: Resetting bearer [ 825.149510][T31757] tipc: Disabling bearer [ 825.191975][T31771] siw: device registration error -23 [ 825.214978][T31774] xt_hashlimit: size too large, truncated to 1048576 [ 825.272148][T31778] netlink: 'syz.0.23659': attribute type 2 has an invalid length. [ 825.296896][T31778] netlink: 'syz.0.23659': attribute type 1 has an invalid length. [ 825.435400][T31794] ip_vti0: left promiscuous mode [ 825.453821][T31794] ip_vti0: entered allmulticast mode [ 825.461521][T31794] bridge0: entered allmulticast mode [ 825.480921][T31794] .`: entered allmulticast mode [ 825.485875][T31794] bond_slave_0: entered allmulticast mode [ 825.491928][T31794] bond_slave_1: entered allmulticast mode [ 825.497589][T31802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.497724][T31794] bond4: entered allmulticast mode [ 825.513127][T31794] team0: entered allmulticast mode [ 825.519943][T31794] team_slave_0: entered allmulticast mode [ 825.524788][T31803] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 825.525776][T31794] team_slave_1: entered allmulticast mode [ 825.539865][T31794] nlmon0: entered allmulticast mode [ 825.546862][T31794] veth0: entered allmulticast mode [ 825.553226][T31794] veth1: entered allmulticast mode [ 825.559236][T31794] wg0: entered allmulticast mode [ 825.564792][T31794] wg2: entered allmulticast mode [ 825.570517][T31794] veth1_to_bond: entered allmulticast mode [ 825.576598][T31794] veth0_to_team: entered allmulticast mode [ 825.584013][T31794] veth1_to_team: entered allmulticast mode [ 825.594471][T31794] veth1_to_batadv: entered allmulticast mode [ 825.600928][T31794] batadv_slave_1: entered allmulticast mode [ 825.607289][T31794] xfrm0: entered allmulticast mode [ 825.613179][T31794] veth0_to_hsr: entered allmulticast mode [ 825.619433][T31794] veth1_to_hsr: entered allmulticast mode [ 825.784319][T31815] syzkaller0: entered promiscuous mode [ 825.793840][T31815] syzkaller0: entered allmulticast mode [ 826.016564][T31839] syzkaller1: entered promiscuous mode [ 826.028878][T31839] syzkaller1: entered allmulticast mode [ 826.194194][T31851] xt_hashlimit: size too large, truncated to 1048576 [ 826.391313][T31870] bond0: option miimon: invalid value (18446744073508225023) [ 826.426085][T31870] bond0: option miimon: allowed values 0 - 2147483647 [ 826.439382][T31876] __nla_validate_parse: 44 callbacks suppressed [ 826.439398][T31876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23688'. [ 826.456477][T31874] lo: entered allmulticast mode [ 826.461934][T31874] tunl0: entered allmulticast mode [ 826.467225][T31874] gre0: entered allmulticast mode [ 826.472974][T31874] 0ªX¹¦Dö»: entered allmulticast mode [ 826.489462][T31874] erspan0: entered allmulticast mode [ 826.504548][T31874] ip_vti0: left promiscuous mode [ 826.518941][T31874] ip_vti0: entered allmulticast mode [ 826.529783][T31874] ip6_vti0: entered allmulticast mode [ 826.545460][T31874] sit0: entered allmulticast mode [ 826.552392][T31874] ip6tnl0: entered allmulticast mode [ 826.561165][T31874] ip6gre0: entered allmulticast mode [ 826.567324][T31874] syz_tun: entered allmulticast mode [ 827.005005][T31888] netlink: 168 bytes leftover after parsing attributes in process `syz.7.23694'. [ 827.014409][T31890] netlink: 168 bytes leftover after parsing attributes in process `syz.7.23694'. [ 827.069654][T31888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23694'. [ 827.210454][T31905] bond0: option miimon: invalid value (18446744073709551577) [ 827.237645][T31905] bond0: option miimon: allowed values 0 - 2147483647 [ 827.249343][T31911] netlink: 'syz.6.23703': attribute type 32 has an invalid length. [ 827.273892][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23703'. [ 827.307453][T31911] bond9: option coupled_control: invalid value (192) [ 827.315434][T31911] bond9 (unregistering): Released all slaves [ 827.348030][T31913] x_tables: duplicate underflow at hook 1 [ 827.383631][T31920] syzkaller0: entered promiscuous mode [ 827.397930][T31920] syzkaller0: entered allmulticast mode [ 827.401305][T31922] netlink: 'syz.6.23708': attribute type 5 has an invalid length. [ 827.532730][T31931] netlink: 'syz.4.23710': attribute type 11 has an invalid length. [ 827.546827][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23712'. [ 827.549801][T31935] syzkaller1: entered promiscuous mode [ 827.556836][T31931] netlink: 224 bytes leftover after parsing attributes in process `syz.4.23710'. [ 827.574886][T31933] netlink: 96 bytes leftover after parsing attributes in process `syz.7.23712'. [ 827.611299][T31935] syzkaller1: entered allmulticast mode [ 827.628473][T31940] netlink: 48 bytes leftover after parsing attributes in process `syz.6.23713'. [ 827.679281][T31940] netlink: 312 bytes leftover after parsing attributes in process `syz.6.23713'. [ 827.884654][T31956] syzkaller0: entered promiscuous mode [ 827.891628][T31956] syzkaller0: entered allmulticast mode [ 827.906821][T31956] tipc: Enabled bearer , priority 0 [ 827.955918][T31953] tipc: Resetting bearer [ 827.974602][T31953] tipc: Disabling bearer [ 828.320747][T31995] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.329287][T32004] syzkaller0: entered promiscuous mode [ 828.334836][T32004] syzkaller0: entered allmulticast mode [ 828.466941][T32012] syzkaller0: entered promiscuous mode [ 828.548063][T32021] netlink: 'syz.7.23747': attribute type 1 has an invalid length. [ 828.629765][T32031] x_tables: duplicate underflow at hook 1 [ 828.763697][T32039] syzkaller0: entered promiscuous mode [ 828.773938][T32039] syzkaller0: entered allmulticast mode [ 828.891691][T32047] FAULT_INJECTION: forcing a failure. [ 828.891691][T32047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.893502][T32049] syzkaller0: entered promiscuous mode [ 828.906699][T32047] CPU: 0 UID: 0 PID: 32047 Comm: syz.4.23759 Not tainted syzkaller #0 PREEMPT(full) [ 828.906721][T32047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 828.906731][T32047] Call Trace: [ 828.906737][T32047] [ 828.906744][T32047] dump_stack_lvl+0xe8/0x150 [ 828.906767][T32047] should_fail_ex+0x40c/0x560 [ 828.906787][T32047] _copy_from_iter+0x1d3/0x1660 [ 828.906805][T32047] ? __might_fault+0xaf/0x130 [ 828.906823][T32047] ? __might_fault+0xcb/0x130 [ 828.906841][T32047] ? _copy_from_iter+0x21b/0x1660 [ 828.906859][T32047] ? __pfx__copy_from_iter+0x10/0x10 [ 828.906879][T32047] ? __pfx__copy_from_iter+0x10/0x10 [ 828.906900][T32047] copy_page_from_iter+0x219/0x2d0 [ 828.906919][T32047] skb_copy_datagram_from_iter+0x2f4/0x720 [ 828.906944][T32047] tun_get_user+0xc71/0x4350 [ 828.906963][T32047] ? is_bpf_text_address+0x292/0x2b0 [ 828.906997][T32047] ? lock_release+0x4b/0x3c0 [ 828.907018][T32047] ? arch_stack_walk+0xfb/0x150 [ 828.907038][T32047] ? aa_file_perm+0x4ed/0x15f0 [ 828.907055][T32047] ? __pfx_tun_get_user+0x10/0x10 [ 828.907076][T32047] ? kstrtoull+0x12f/0x1d0 [ 828.907094][T32047] ? ref_tracker_alloc+0x341/0x4b0 [ 828.907111][T32047] ? get_pid_task+0x20/0x1f0 [ 828.907125][T32047] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 828.907141][T32047] ? rcu_is_watching+0x15/0xb0 [ 828.907158][T32047] ? tun_get+0x1c/0x2f0 [ 828.907174][T32047] ? tun_get+0x1c/0x2f0 [ 828.907191][T32047] ? rcu_is_watching+0x15/0xb0 [ 828.907205][T32047] ? tun_get+0x1c/0x2f0 [ 828.907221][T32047] ? lock_release+0x4b/0x3c0 [ 828.907241][T32047] ? apparmor_file_permission+0x1f4/0x300 [ 828.907261][T32047] ? tun_get+0x1c/0x2f0 [ 828.907280][T32047] tun_chr_write_iter+0x113/0x200 [ 828.907299][T32047] vfs_write+0x612/0xba0 [ 828.907323][T32047] ? __pfx_vfs_write+0x10/0x10 [ 828.907345][T32047] ? __fget_files+0x2a/0x420 [ 828.907365][T32047] ksys_write+0x150/0x270 [ 828.907385][T32047] ? __pfx_ksys_write+0x10/0x10 [ 828.907406][T32047] ? rcu_is_watching+0x15/0xb0 [ 828.907422][T32047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.907437][T32047] do_syscall_64+0x174/0x580 [ 828.907457][T32047] ? trace_irq_disable+0x3b/0x140 [ 828.907477][T32047] ? clear_bhb_loop+0x40/0x90 [ 828.907492][T32047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.907505][T32047] RIP: 0033:0x7ff3a279ce59 [ 828.907519][T32047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.907533][T32047] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.907550][T32047] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 828.907561][T32047] RDX: 000000000000fdef RSI: 0000200000000cc0 RDI: 0000000000000003 [ 828.907572][T32047] RBP: 00007ff3a3703090 R08: 0000000000000000 R09: 0000000000000000 [ 828.907582][T32047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 828.907592][T32047] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 828.907611][T32047] [ 829.055397][T32064] rdma_op ffff88809e1199f0 conn xmit_rdma 0000000000000000 [ 829.078286][T32049] syzkaller0: entered allmulticast mode [ 829.314814][T32073] FAULT_INJECTION: forcing a failure. [ 829.314814][T32073] name failslab, interval 1, probability 0, space 0, times 0 [ 829.329369][T32073] CPU: 1 UID: 0 PID: 32073 Comm: syz.6.23767 Not tainted syzkaller #0 PREEMPT(full) [ 829.329392][T32073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 829.329402][T32073] Call Trace: [ 829.329410][T32073] [ 829.329416][T32073] dump_stack_lvl+0xe8/0x150 [ 829.329439][T32073] should_fail_ex+0x40c/0x560 [ 829.329458][T32073] should_failslab+0xa8/0x100 [ 829.329479][T32073] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 829.329497][T32073] ? rcu_is_watching+0x15/0xb0 [ 829.329513][T32073] ? __alloc_skb+0x1d7/0x7a0 [ 829.329531][T32073] ? trace_irq_enable+0x3b/0x140 [ 829.329550][T32073] __alloc_skb+0x1d7/0x7a0 [ 829.329577][T32073] netlink_sendmsg+0x5d4/0xb40 [ 829.329603][T32073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.329625][T32073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 829.329641][T32073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 829.329660][T32073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.329680][T32073] ____sys_sendmsg+0x9b9/0xa20 [ 829.329706][T32073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.329728][T32073] ? lock_release+0x4b/0x3c0 [ 829.329749][T32073] ? import_iovec+0x73/0xa0 [ 829.329770][T32073] ___sys_sendmsg+0x2a5/0x360 [ 829.329789][T32073] ? rcu_is_watching+0x15/0xb0 [ 829.329803][T32073] ? get_pid_task+0x20/0x1f0 [ 829.329819][T32073] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.329841][T32073] ? rcu_is_watching+0x15/0xb0 [ 829.329868][T32073] ? __fget_files+0x2a/0x420 [ 829.329885][T32073] ? __fget_files+0x3a2/0x420 [ 829.329906][T32073] __x64_sys_sendmsg+0x1b1/0x290 [ 829.329927][T32073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.329954][T32073] ? rcu_is_watching+0x15/0xb0 [ 829.329971][T32073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.329986][T32073] do_syscall_64+0x174/0x580 [ 829.330010][T32073] ? trace_irq_disable+0x3b/0x140 [ 829.330029][T32073] ? clear_bhb_loop+0x40/0x90 [ 829.330045][T32073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.330059][T32073] RIP: 0033:0x7fbd8719ce59 [ 829.330074][T32073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.330086][T32073] RSP: 002b:00007fbd880a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.330104][T32073] RAX: ffffffffffffffda RBX: 00007fbd87415fa0 RCX: 00007fbd8719ce59 [ 829.330115][T32073] RDX: 0000000000040010 RSI: 00002000000008c0 RDI: 0000000000000004 [ 829.330125][T32073] RBP: 00007fbd880a4090 R08: 0000000000000000 R09: 0000000000000000 [ 829.330134][T32073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.330143][T32073] R13: 00007fbd87416038 R14: 00007fbd87415fa0 R15: 00007ffd17a48d98 [ 829.330161][T32073] [ 829.649418][T32076] bond9: Invalid ad_actor_system MAC address. [ 829.655606][T32076] bond9: option ad_actor_system: invalid value (1) [ 829.663938][T32076] bond9 (unregistering): Released all slaves [ 829.694135][T32083] openvswitch: netlink: Key type 262 is out of range max 32 [ 829.759508][T32086] xt_l2tp: invalid flags combination: 0 [ 829.795222][T32086] ip6tnl0: Caught tx_queue_len zero misconfig [ 829.916660][T32097] syzkaller0: entered promiscuous mode [ 829.928096][T32097] syzkaller0: entered allmulticast mode [ 830.208076][T32120] netlink: 'syz.7.23783': attribute type 21 has an invalid length. [ 830.224949][T32134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 830.293608][T32134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.377041][T32148] netlink: 'syz.7.23795': attribute type 1 has an invalid length. [ 830.506920][T32168] syz.4.23801: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 830.522457][T32168] CPU: 0 UID: 0 PID: 32168 Comm: syz.4.23801 Not tainted syzkaller #0 PREEMPT(full) [ 830.522482][T32168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.522493][T32168] Call Trace: [ 830.522501][T32168] [ 830.522509][T32168] dump_stack_lvl+0xe8/0x150 [ 830.522535][T32168] warn_alloc+0x249/0x340 [ 830.522563][T32168] ? __pfx_stack_trace_save+0x10/0x10 [ 830.522589][T32168] ? __pfx_warn_alloc+0x10/0x10 [ 830.522613][T32168] ? __kasan_kmalloc+0x93/0xb0 [ 830.522634][T32168] ? __kmalloc_cache_noprof+0x318/0x660 [ 830.522656][T32168] ? xskq_create+0x56/0x170 [ 830.522677][T32168] ? xsk_init_queue+0x8a/0xe0 [ 830.522694][T32168] ? xsk_setsockopt+0x52a/0x960 [ 830.522711][T32168] ? do_sock_setsockopt+0x17c/0x1b0 [ 830.522734][T32168] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 830.522756][T32168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.522776][T32168] __vmalloc_node_range_noprof+0x12c/0x1730 [ 830.522808][T32168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 830.522833][T32168] ? __kasan_kmalloc+0x93/0xb0 [ 830.522857][T32168] vmalloc_user_noprof+0xad/0xe0 [ 830.522877][T32168] ? xskq_create+0xbf/0x170 [ 830.522897][T32168] xskq_create+0xbf/0x170 [ 830.522917][T32168] xsk_init_queue+0x8a/0xe0 [ 830.522937][T32168] xsk_setsockopt+0x52a/0x960 [ 830.522957][T32168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 830.522975][T32168] ? __pfx_aa_sk_perm+0x10/0x10 [ 830.522999][T32168] ? lock_release+0x4b/0x3c0 [ 830.523022][T32168] ? aa_sock_opt_perm+0xff/0x1a0 [ 830.523040][T32168] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 830.523062][T32168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 830.523081][T32168] do_sock_setsockopt+0x17c/0x1b0 [ 830.523106][T32168] __x64_sys_setsockopt+0x13d/0x1b0 [ 830.523128][T32168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.523146][T32168] do_syscall_64+0x174/0x580 [ 830.523167][T32168] ? trace_irq_disable+0x3b/0x140 [ 830.523189][T32168] ? clear_bhb_loop+0x40/0x90 [ 830.523208][T32168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.523224][T32168] RIP: 0033:0x7ff3a279ce59 [ 830.523240][T32168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.523256][T32168] RSP: 002b:00007ff3a3703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 830.523275][T32168] RAX: ffffffffffffffda RBX: 00007ff3a2a15fa0 RCX: 00007ff3a279ce59 [ 830.523289][T32168] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 830.523300][T32168] RBP: 00007ff3a2832e6f R08: 0000000000000004 R09: 0000000000000000 [ 830.523311][T32168] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.523322][T32168] R13: 00007ff3a2a16038 R14: 00007ff3a2a15fa0 R15: 00007ffd7db08428 [ 830.523344][T32168] [ 830.523361][T32168] Mem-Info: [ 830.809586][T32168] active_anon:7709 inactive_anon:7 isolated_anon:0 [ 830.809586][T32168] active_file:3326 inactive_file:40577 isolated_file:0 [ 830.809586][T32168] unevictable:768 dirty:196 writeback:0 [ 830.809586][T32168] slab_reclaimable:16436 slab_unreclaimable:154793 [ 830.809586][T32168] mapped:45366 shmem:1301 pagetables:3937 [ 830.809586][T32168] sec_pagetables:0 bounce:0 [ 830.809586][T32168] kernel_misc_reclaimable:0 [ 830.809586][T32168] free:1203823 free_pcp:23969 free_cma:0 [ 830.874874][T32168] Node 0 active_anon:30836kB inactive_anon:28kB active_file:13304kB inactive_file:162104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165180kB dirty:784kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21976kB pagetables:15640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 830.943267][T32168] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 830.979592][T32168] Node 0 DMA free:11212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:24kB free_cma:0kB [ 831.012297][T32168] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 831.023812][T32168] Node 0 DMA32 free:966052kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30836kB inactive_anon:28kB active_file:13304kB inactive_file:162104kB unevictable:1536kB writepending:784kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:37704kB local_pcp:19572kB free_cma:0kB [ 831.058032][T32192] IPVS: Error connecting to the multicast addr [ 831.061392][T32168] lowmem_reserve[]: 0 0 0 0 0 [ 831.074578][T32168] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 831.105079][T32168] lowmem_reserve[]: 0 0 0 0 0 [ 831.111668][T32168] Node 1 Normal free:3837356kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59340kB local_pcp:27744kB free_cma:0kB [ 831.147145][T32168] lowmem_reserve[]: 0 0 0 0 0 [ 831.152220][T32168] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11212kB [ 831.176149][T32168] Node 0 DMA32: 11043*4kB (UM) 9985*8kB (UME) 5965*16kB (UME) 234*32kB (UM) 182*64kB (UM) 708*128kB (UME) 646*256kB (UME) 201*512kB (UM) 244*1024kB (UM) 58*2048kB (UM) 0*4096kB = 966180kB [ 831.209925][T32168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 831.237094][T32168] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 14*16kB (UM) 10*32kB (UM) 12*64kB (UM) 11*128kB (UM) 11*256kB (UM) 10*512kB (UM) 7*1024kB (UM) 9*2048kB (U) 928*4096kB (UM) = 3837408kB [ 831.288052][T32168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 831.309503][T32168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 831.329252][T32168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 831.354598][T32168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 831.379007][T32168] 45200 total pagecache pages [ 831.386522][T32168] 0 pages in swap cache [ 831.395427][T32168] Free swap = 124996kB [ 831.404577][T32168] Total swap = 124996kB [ 831.415146][T32168] 2097051 pages RAM [ 831.423086][T32168] 0 pages HighMem/MovableOnly [ 831.437930][T32168] 427124 pages reserved [ 831.438441][T32224] bond31: entered allmulticast mode [ 831.453905][T32168] 0 pages cma reserved [ 831.459558][T32224] ip6gre4: entered allmulticast mode [ 831.474716][T32222] bond31: left allmulticast mode [ 831.481341][T32222] ip6gre4: left allmulticast mode [ 831.554448][T32229] __nla_validate_parse: 15 callbacks suppressed [ 831.554463][T32229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23819'. [ 831.574106][T32237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 831.589502][ T30] INFO: task syz.5.20276:21634 blocked for more than 143 seconds. [ 831.615733][ T30] Not tainted syzkaller #0 [ 831.631249][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.645136][T32241] IPv6: NLM_F_CREATE should be specified when creating new route [ 831.651808][ T30] task:syz.5.20276 state:D stack:27568 pid:21634 tgid:21633 ppid:19015 task_flags:0x400040 flags:0x00080002 [ 831.697625][ T30] Call Trace: [ 831.706889][ T30] [ 831.710069][ T30] __schedule+0x17d9/0x56c0 [ 831.714653][ T30] ? stack_trace_save+0xa9/0x100 [ 831.720835][ T30] ? kasan_save_track+0x3e/0x80 [ 831.725817][ T30] ? genl_family_rcv_msg_doit+0x233/0x340 [ 831.731976][ T30] ? genl_rcv_msg+0x614/0x7a0 [ 831.736725][ T30] ? __pfx___schedule+0x10/0x10 [ 831.742056][ T30] ? rcu_is_watching+0x15/0xb0 [ 831.753158][ T30] ? rcu_is_watching+0x15/0xb0 [ 831.758054][ T30] ? lock_release+0x4b/0x3c0 [ 831.767885][ T30] ? rcu_is_watching+0x15/0xb0 [ 831.772975][ T30] schedule+0x164/0x360 [ 831.777216][ T30] schedule_preempt_disabled+0x13/0x30 [ 831.783791][ T30] __mutex_lock+0x7bf/0x1550 [ 831.788731][ T30] ? __mutex_lock+0x5d4/0x1550 [ 831.793569][ T30] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 831.799640][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 831.804742][ T30] ? __nlmsg_put+0xef/0x1b0 [ 831.810742][ T30] ? genlmsg_put+0x137/0x2e0 [ 831.815405][ T30] nfsd_nl_listener_get_doit+0x104/0x610 [ 831.821786][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 831.828153][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 831.834830][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 831.841375][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 831.847482][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 831.852686][ T30] genl_rcv_msg+0x614/0x7a0 [ 831.857206][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.862631][ T30] ? ref_tracker_free+0x689/0x830 [ 831.867736][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 831.874543][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 831.880119][ T30] netlink_rcv_skb+0x226/0x4a0 [ 831.884902][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.890586][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.895896][ T30] ? down_read+0x2be/0x330 [ 831.900457][ T30] genl_rcv+0x28/0x40 [ 831.904457][ T30] netlink_unicast+0x7bb/0x940 [ 831.909311][ T30] netlink_sendmsg+0x813/0xb40 [ 831.914107][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.920153][ T30] ? futex_unqueue+0x22/0x240 [ 831.924852][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.929913][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.935210][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.941166][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 831.946054][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.952319][ T30] ? lock_release+0x4b/0x3c0 [ 831.956916][ T30] ? import_iovec+0x73/0xa0 [ 831.961598][ T30] ___sys_sendmsg+0x2a5/0x360 [ 831.966299][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.971685][ T30] ? futex_wait+0x2a2/0x390 [ 831.976227][ T30] ? __fget_files+0x2a/0x420 [ 831.981716][ T30] ? __fget_files+0x3a2/0x420 [ 831.998346][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 832.003326][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.009282][ T30] ? rcu_is_watching+0x15/0xb0 [ 832.014062][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.020857][ T30] do_syscall_64+0x174/0x580 [ 832.025452][ T30] ? trace_irq_disable+0x3b/0x140 [ 832.030944][ T30] ? clear_bhb_loop+0x40/0x90 [ 832.035641][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.041581][ T30] RIP: 0033:0x7fe46979ce59 [ 832.045994][ T30] RSP: 002b:00007fe46a601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.055326][ T30] RAX: ffffffffffffffda RBX: 00007fe469a15fa0 RCX: 00007fe46979ce59 [ 832.064867][ T30] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 832.073030][ T30] RBP: 00007fe469832e6f R08: 0000000000000000 R09: 0000000000000000 [ 832.081643][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.089759][ T30] R13: 00007fe469a16038 R14: 00007fe469a15fa0 R15: 00007fff0a994e48 [ 832.097750][ T30] [ 832.101147][ T30] INFO: lockdep is turned off. [ 832.106205][ T30] NMI backtrace for cpu 0 [ 832.106220][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 832.106238][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.106248][ T30] Call Trace: [ 832.106254][ T30] [ 832.106261][ T30] dump_stack_lvl+0xe8/0x150 [ 832.106285][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 832.106303][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 832.106348][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 832.106367][ T30] sys_info+0x135/0x170 [ 832.106381][ T30] watchdog+0xfd7/0x1030 [ 832.106410][ T30] ? watchdog+0x1c7/0x1030 [ 832.106431][ T30] kthread+0x388/0x470 [ 832.106445][ T30] ? __pfx_watchdog+0x10/0x10 [ 832.106463][ T30] ? __pfx_kthread+0x10/0x10 [ 832.106478][ T30] ret_from_fork+0x514/0xb70 [ 832.106496][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 832.106511][ T30] ? __switch_to+0xc89/0x1420 [ 832.106533][ T30] ? __pfx_kthread+0x10/0x10 [ 832.106549][ T30] ret_from_fork_asm+0x1a/0x30 [ 832.106572][ T30] [ 832.106579][ T30] Sending NMI from CPU 0 to CPUs 1: [ 832.222209][ C1] NMI backtrace for cpu 1 [ 832.222226][ C1] CPU: 1 UID: 0 PID: 20923 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 832.222245][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.222256][ C1] Workqueue: events_unbound toggle_allocation_gate [ 832.222285][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 832.222307][ C1] Code: de 5b e9 33 f8 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d d8 49 74 11 <65> 8b 15 f9 49 74 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 832.222322][ C1] RSP: 0018:ffffc90006007700 EFLAGS: 00000246 [ 832.222335][ C1] RAX: ffffffff8216f5e8 RBX: ffff88813fe78aa8 RCX: ffff88802b3c9f00 [ 832.222347][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.222357][ C1] RBP: 1ffff11027fccaaa R08: ffffea00000896c7 R09: 1ffffd40000112d8 [ 832.222369][ C1] R10: dffffc0000000000 R11: fffff940000112d9 R12: 000ffffffffff000 [ 832.222381][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000013fe78067 [ 832.222392][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 832.222405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.222417][ C1] CR2: 00007f89811e8158 CR3: 000000000e746000 CR4: 00000000003526f0 [ 832.222432][ C1] Call Trace: [ 832.222438][ C1] [ 832.222444][ C1] walk_to_pmd+0x2b8/0x450 [ 832.222469][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x190 [ 832.222493][ C1] get_locked_pte+0x27/0xd0 [ 832.222514][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x190 [ 832.222536][ C1] __text_poke+0x2d5/0x9b0 [ 832.222566][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 832.222585][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 832.222604][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x190 [ 832.222625][ C1] ? __pfx___text_poke+0x10/0x10 [ 832.222645][ C1] ? on_each_cpu_cond_mask+0x75/0x80 [ 832.222667][ C1] ? smp_text_poke_batch_finish+0x7b8/0x1110 [ 832.222689][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x190 [ 832.222712][ C1] smp_text_poke_batch_finish+0x8f2/0x1110 [ 832.222733][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 832.222759][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 832.222783][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 832.222807][ C1] ? __jump_label_update+0x347/0x370 [ 832.222827][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 832.222850][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 832.222868][ C1] static_key_disable+0x1a/0x20 [ 832.222883][ C1] toggle_allocation_gate+0x1fe/0x290 [ 832.222905][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 832.222926][ C1] ? rcu_is_watching+0x15/0xb0 [ 832.222943][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 832.222966][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 832.222987][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 832.223006][ C1] process_scheduled_works+0xa8e/0x14e0 [ 832.223036][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 832.223055][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 832.223077][ C1] ? assign_work+0x3cf/0x5d0 [ 832.223097][ C1] worker_thread+0xa47/0xfb0 [ 832.223128][ C1] kthread+0x388/0x470 [ 832.223143][ C1] ? __pfx_worker_thread+0x10/0x10 [ 832.223161][ C1] ? __pfx_kthread+0x10/0x10 [ 832.223176][ C1] ret_from_fork+0x514/0xb70 [ 832.223192][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 832.223207][ C1] ? __switch_to+0xc89/0x1420 [ 832.223232][ C1] ? __pfx_kthread+0x10/0x10 [ 832.223247][ C1] ret_from_fork_asm+0x1a/0x30 [ 832.223272][ C1] [ 832.589574][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 832.596448][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 832.605557][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.615606][ T30] Call Trace: [ 832.618877][ T30] [ 832.621807][ T30] vpanic+0x56c/0xa60 [ 832.625794][ T30] ? __pfx___schedule+0x10/0x10 [ 832.630744][ T30] ? __pfx_vpanic+0x10/0x10 [ 832.635234][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 832.641372][ T30] panic+0xc5/0xd0 [ 832.645075][ T30] ? __pfx_panic+0x10/0x10 [ 832.649470][ T30] ? preempt_schedule_common+0x82/0xd0 [ 832.654913][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 832.660272][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 832.666421][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 832.672562][ T30] watchdog+0x1030/0x1030 [ 832.676899][ T30] ? watchdog+0x1c7/0x1030 [ 832.681314][ T30] kthread+0x388/0x470 [ 832.685365][ T30] ? __pfx_watchdog+0x10/0x10 [ 832.690023][ T30] ? __pfx_kthread+0x10/0x10 [ 832.694600][ T30] ret_from_fork+0x514/0xb70 [ 832.699177][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 832.704272][ T30] ? __switch_to+0xc89/0x1420 [ 832.708945][ T30] ? __pfx_kthread+0x10/0x10 [ 832.713526][ T30] ret_from_fork_asm+0x1a/0x30 [ 832.718284][ T30] [ 832.721557][ T30] Kernel Offset: disabled [ 832.725861][ T30] Rebooting in 86400 seconds..