last executing test programs: 3.123815045s ago: executing program 3 (id=2939): socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000002000000000000000aa87"], 0x0) 2.976341165s ago: executing program 2 (id=2941): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x652b, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40004000) socket$nl_route(0x10, 0x3, 0x0) 2.903684673s ago: executing program 3 (id=2942): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x5e) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f000000a080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}]}, 0x34}}, 0x4000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000200), 0xd) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xe, 0xffffffff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680), 0x10, 0x800}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%pK \x00'}, 0x20) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0xfffffffc, 0x1, 0x9, 0x1c001, r10, 0x7, '\x00', r8, r11, 0x1, 0x3, 0x4}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x4000854) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r12, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x4000810) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000036b46ff0300000000000000000000000000c0be76d3b7ed449a2f19476284a9edc8808d075c95736a99712a28c15ec63e2c4fe97aeca232c00b328ed0d7574dcca64ccd6b31fffe0e3cf732", @ANYRES32=0x0, @ANYBLOB="05b00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000000000008000500", @ANYRES32=r8], 0x50}, 0x1, 0xba01}, 0x0) 2.849133577s ago: executing program 1 (id=2943): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = accept$ax25(r1, 0x0, &(0x7f0000000400)) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000480)) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r3, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x1}}, [0x6, 0x77c, 0x8, 0x1, 0x9, 0x3, 0xffff, 0x0, 0xfffffffffffffff7, 0x100000000, 0x3, 0x5, 0x5dd1, 0x3, 0x7]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r5, 0x5e}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x10c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xffffd0d5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1ff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb47}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x42) 2.703794232s ago: executing program 3 (id=2944): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x99}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000015}, 0x4020) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newsa={0x100, 0x10, 0x200, 0x70bd28, 0x25dfdbff, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e21, 0x400, 0x2, 0x20, 0x20, 0x3c, r1, 0xee01}, {@in=@rand_addr=0x64010100, 0x4d3, 0x32}, @in=@loopback, {0x1, 0x6, 0x9, 0x7, 0x100000001, 0xa, 0x7, 0x3}, {0x5, 0x4, 0x2, 0xb}, {0x0, 0xfff, 0x6}, 0x70bd25, 0x34ff, 0x2, 0x0, 0x8, 0x20}, [@replay_val={0x10, 0xa, {0x70bd27, 0x70bd25, 0x547d}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000001}, 0xc090) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x124, 0x24, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xb, 0x4}, {0xffff, 0xffff}, {0x5, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xfffffff6, 0x81, 0xe, 0x4, 0x40, 0x7, 0xc567, 0x1}}}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xcc, 0x1, 0x1477, 0x2, 0x9, 0xffffff00, 0x4}}, {0xc, 0x2, [0xd, 0x1, 0x5, 0x9]}}, {{0x1c, 0x1, {0xfd, 0x2, 0x7, 0x3, 0x0, 0xc04, 0xe, 0x9}}, {0x16, 0x2, [0x7, 0x2, 0x1000, 0x7, 0x2, 0x3ff, 0x80, 0x3, 0xfc00]}}, {{0x1c, 0x1, {0x3, 0xe, 0xfffe, 0xffffffff, 0x2, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0x4, 0x4, 0x7, 0xd494, 0x3, 0x8, 0x7, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x4, 0x7, 0x3, 0xd31, 0x0, 0xc, 0x0, 0x2}}, {0x8, 0x2, [0xb15d, 0xd3]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r8 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) readv(r8, &(0x7f0000000800)=[{&(0x7f0000000400)}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000640)=""/133, 0x85}, {&(0x7f0000000700)=""/121, 0x79}], 0x6) 2.633314228s ago: executing program 1 (id=2945): r0 = epoll_create(0x10000e9) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f00000000c0)=0xffffffdf) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x9}], 0x2, 0x40, 0x0) sendto$inet6(r9, 0x0, 0x62, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0001000000000000000000000000000000001400010000000000000000000000ffffe0000001000000020c"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a801800016e9900"], 0x38}}, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$int_in(r9, 0x5421, &(0x7f0000000180)=0x101) setsockopt$SO_J1939_PROMISC(r12, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) 2.632924331s ago: executing program 3 (id=2946): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="9f0910", 0x3) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x0, 0x1f8, 0x0, 0x370, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe9, @rand_addr=0x64010101, 0x4e24}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x11, 0x3, 'bm\x00', "28d1ff2b7de3c2ef4a06e942893d3aba774da91f379a41dd55621a527e10a8ad1cb552bd03d23383d4724160d815f3e204b7462b4a2779fbcc5780a62b5dd4dfb2b2c4f019ea7e917eda15dda3fe034b5857ba2867d8f1673f98a9f4aa428c14af208e11c4a9906b40100d8a86773833b567c33abe8b561116fe866c34853e73", 0x6b, 0x1, {0x9}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x80}}}, {{@ip={@broadcast, @empty, 0xffffff00, 0x0, 'pim6reg1\x00', 'lo\x00', {0xff}, {}, 0x62, 0x3}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x18}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 2.004304411s ago: executing program 2 (id=2949): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[], 0xcc}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfe, {0x80, 0x80, 0x10, 0x6, 0xff, 0x3, 0xff, 0xa, 0x1d00}, [""]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.847089802s ago: executing program 3 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8084) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000044}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000069117600277a96212d8222aa02040000850000000000000095000000000000009500a50500000000a87850fb3a6129a62382f22deeaba21538567dce927c82576d7bdbe678f113a676ebf6b187f9c59429b4c1b131d473e04b1ef0d26bf6ffb279168cf84ca60b7c19b6f0d513ddc6de5a0c45fa44dd7c08d7d58e44589903da5ec79f552ae16aa02efccb1da685ad4f8ca7832e477bbc52d160edc829b89722abba4d60a73c002524c44806687b54a61ebf102e8dce1b21eb44a52fca2e09979923e0d3636224b09b870e1be1bedf3f94d78e24687e19f9b04cca2c211bc9e12c5416764b30f196fcc7d927"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@flushsa={0x24, 0x1c, 0x2, 0x70bd27, 0x25dfdbfc, {0xff}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 1.662791274s ago: executing program 3 (id=2953): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d89479f0e1ffe80b43e8531e73949246afb7aa676caca71ac8782d5be684b4f6c10efcb9049e36f94b776ac633e6081674a0f404132191df2e91c764c71c3d5c9da5", 0x53}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000100)=@gcm_256={{0x606}, "8e8ec1a92ef6388a", "c6b59fdb2d3944bd93a80b93e21014a6815353ebecee869eb68a4d38a3868486", "109d912e", "87a8893df51bf1b9"}, 0x38) 1.450327967s ago: executing program 1 (id=2955): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9}]}]}, 0x28}}, 0x4) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r6, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8, 0x6, r9}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.4491446s ago: executing program 2 (id=2956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x1c8, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xae, 0x6, "c3730f8311978fddc269bc5d12f560b210b495ce3cd6fee028a81deb2deb52df2295dcd575d98a0bac3348d08ab1fc73cf94f2ad98d159f152ee517b67a189400bff463d4bf754c055925fffcb6bddc1a6263518deb65d6c1a9447c4087f327f4d05f6a1415b5be6ea8fbb0511a43db59573812ea1aea77faf928c8a56d6d11ed35ddbde4f8691d7fd0fbc1f842d016e4d9db8e195174305b9f71c4367b3e71295a61f7d599ddf6644fd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "d166836eb6eaac0652c2976a78f2aae0f3e3b661a7353abdbc24d3f52d1415674e3457f43d476e896cbc7f30ebd173329efd0fd66331d7bfc0f61e1853fb02f4655c57e9f96164de8826cd1b70488dc7ac72f59f689cf834517f6dff962349baf96f27d22693108936c4403b93351d6b23835242ac23be0311d0922fb650607acf83f364374f179c1802f6137addd482e01159da2cf054f5b891bd0d8105e107f3833c22939033020a3a86381df1860ba1e40b0c62597132bc389bbc02b7078d872703e9bfcb1bf84050b251d30f478da3dc4a5b854fa7bef3d671cdc931f3580dbda057893a0a960af3e522cf8b"}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2374, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1884, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "c6b787f4e98adc3e3edbe8cdd9d98263e24e489485413ee778ba700c161ca58a91fbd5e8552a1a14b69f980344f832228081be2643c078299c7aeb73cdde9bcd7f029197f6f0956a72bbcd165e74eecf03e2b8f1bc895178f991715bab2826b4236fd0a8a07eba80e6ed651e660408266efe2ad62179d59cbb18bc6ee791cc1af25d50528dea"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x87a6}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "65007d468d5e58fa6311851e827524829ba9718b005873999bf90b160cc93d0aeb8ffd066bef1f96cc7485f34d9db261e35b770c091ba81feb63b9ea41daf42bf3c066a3a4f077eff834be77ce79f95915de0debd2b4d571dda546f7c6e03163e7c44687a7cfc88e0e6058421aafe61dbb66691041e9b15fb18ad5df280dac6d189ab26905c725e10535d9c947aba2a4b7966b13b879bed9f781aaa97211b28beb93a0f8d84fe78ae6c4e86db7282a93825a8a9786a4bab446abe51684f74bd6d3115e8b547f66156b8da89c660dbf0ec5b628da1dd79c3e43c61aacf8b538938a7afc6c7f8d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x170, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "5ffb819d94d98666ae44afd0ae2a2798809fce242d2aea2ca3d8f41dcd1c79535184cf276050a6117408f9c59e9ca582e67a08d5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "15dcf29dbba65670ae33ab8c613301ec141094ada4d697e49afb7fc5de3c428f8ea08ac606335d486480689f6772be4718781e57ac960d4285d2577df09bc4add4090682ecfa7f93af6d424de3237a332bd29b315b18da53b56b9d4671942975c8c9a74e88d2abff291bf9bb7659dfc71156d1fae33210951fc34d046495a39880a83936b55a77596344ca7be04adf1ead19c23113c668c1b2f658a1f27454fab103d1b1d7ad6e4ecbe640691629bc803d3f50ef1fa4fca1eb8e3c24904613255fa9a37251ed77e3fb863f2439"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x5b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1c0000000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9517}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x432c79e6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "670fa74a22760e166abb59a6e91a36919abf4d21d798ee5f4b770de18cfff46225aab7de9834cd9447efc991e74586c346a3f7a2b5f3781acfe745ca1ab89c3c33407701cc54aaf13282662723c3c97f2a4d0ad7c5eac933587b83200bae8ddf9e7d3dd21ca696d0b039a45ebe885bd61cc22b2f1300b600ba07ad73a7a187cd6826d860e14b56051b6f5aefe4658c71a68e963c3db9383cf5dcc52c6097b6fd727d204d74d53277556b069adf416620e5024075a33cc3419acd13c39a85f41c6df6a0efd902f4ac928c4dd4fb8911a5d8040bbc0216d64f1b520d8fabdb9f37780d1943ba89c640dc03303637d1565f"}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb5}]}}}, {0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x288, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "2dac866639c6484ef52b85ed44c56ae5ce15184eb85d9892fdd1f545e896"}, @NFTA_DATA_VALUE={0xae, 0x1, "774abd9870f875ab04b22ec38b119eb71fcfd4ec76dfeb794673c398e18a4da280279544f49a39949280797b586165107bd42bea399ff16c3030f489fb82c3a56d78e9f589eab09684569c959009d4d024b7be820909aeb40608d78cd5b4a4b3c9696c6ce69d1e469beeaeb4e8bd959d880a7d72806172ace4f38c92b8945b782650222ed861a34bd2a119ce8ded6002a85002e9039579fa46e2cbf75abd8322293c7269fe9867040bb1"}, @NFTA_DATA_VALUE={0x1f, 0x1, "fd91650c0cd79a09924e6e7fbae5e45c6ad73b32d321fe75526b49"}, @NFTA_DATA_VALUE={0xf9, 0x1, "14d2858d292a0df647275518cd78456d1b1b4d82c279cd267e6bac7d3dad5f2f659e8a77db0d8be3abbd79552d4cf6c902fbcd7066dd8333da86822d79f73056c394159bf1f98ddb3f930264fdcf8315d09be47f6f62b052e557819c51901edbb5cdfe87397d6a86aa89d95f6505d9cfa7c355955d117978a9148b55bcded7d16c2a94485c567466fb6aa052bb28ae43eb83e68fea1b53e357fa984790ef4585c7ba1003c53c26a5475fca4fde80cd8c4004a562203df9af3a6ca72e3a3e0ae2f18c0106aafa2fb30fb69e82526389e18cdccec59bf4eb01217edb3e4ffe91b87a60e55832329fb2049256f92e5507cb07ecee1ed6"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x3c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x214, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "39c1278aa3fa109b8db37bc66655228f059b8dbd075b2794bff5b1f072477d17d7fac57b6462c6a6efdb229532706c1b0caeab3d59cfa61ec3b72bb4effca2b72a3e44538d6d29a4c4682af2dfac83cce615ecb7407f854fa447a7562387419f0ee6d87350faf4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "fa673c2c0d096cf8aa5f95c1913dd4579edc2a0ee0bd2d90919cc27edf8a0a5a16"}, @NFTA_DATA_VALUE={0x1d, 0x1, "382034f11ab2dc0eda87add0b1feb5ba50943c6c1379e9c854"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "bd19b6a4a08d864be39abb9724f38174881819fb576a282bb6471e288c2cb3b30d263a1993e828a8df7a2ff7221d318ebea4660dbf9b56cd05173d2f192408cab018ae612e72422ba67beff0f602d0046672c4869dd1f3c73351ee71f5e47f28888fb635ea0cbf9c1d15ee2c085a955d581e17eddc8d8d8a329098c3ca8a7c51aabe853128a4626cdf1dbf0b7bfdc31fa31d19a31c39d01510013b08cee19a543659ebefb3493f469ba1aa70314e89f9e5b9c8fdf95e1e0740074d633ce3e215206c0bceed856d75ac20f93a50821189f1f61be599e468005dedf77be9c7b20c51f9c9cf0e7cb775c30aedbf037f77262bb5aa5ae3230a"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x148, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "7ae7650cc0e0c3205d5ba08fec00c037eeebdc978d16b40a2e7c9079edafb89f4ba257afe47d98312afd43a00eead8d00a87e79ad2efc526dd27344a3f50dea1a5f1abe08b5eec401d4aeeec7a9e523b3ae5a1e77418827e4abf4b1935568dda41ca938a16ef95a39b65e028658e433cd8a657bd4992ff10485532301afbb4d65400eebc6a28d576a49a1ddfe5e1f22fc106b3d1204a60432b007b9089ca09e9af8f98b2e462505b40317229c10dd5fc5a2685c01a680c2e33354d8be174335ca29da082abaf0d508d06352ab27b7e1919a499e644a3c6c64db9c2c3f348bd8a7d8917ab4591975b54e0dbb464548d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x12, 0x1, "230950aff85b874f3858152675bf"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xead5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x6fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x310, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x60, 0x1, "06e7c0e0696af392d9034af9934c6bb2007beb824a07291afafff5384d755b7dee7fe4cb368a9027bb1510a20269c06275d07b4391e3bce5c794e04d8f5abf218b1c3f7d48a21392c7e82eb9d8cb219ba6a28e90e0e9425b132da1a0"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "f105b1ad852da4e53b01a01cd56ce1134f5b3b48658cf3b5b254523b78db469efd44d9bd06576856f1eff6ca499324b3dfee53e86c1eca27c4602a869fb9932068bfc0c18016a4c0f45ea600f984d28d938646ea85334cf82a9c3f09257e07f9aea277e218bf48e99ad698a6a5d8585909e11b66eb29ce9c1aa531b4bf12bf8c3eec030d2eeb5acb359ab792bb4fcb699d8eb3b466de461416b914c133ef2e42a37defe98b9101cb6716bbb24e781ef90191e90d28c86af8b00f96246bed7a7e90acafa2d96a46"}]}, @NFTA_SET_ELEM_KEY={0x360, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe2, 0x1, "cec162a313c56968b0f07b60644aed0a1e0e832b0b89c425ad247f4ce0f5a894f843065e0cce8b146fcffddd766b89c5817c01f812f22a9bb119c0a39fa215a25b2408e3fb6aa5c200fee56c34a3b4cdf6944d6d710898b91a38d3d69e34cd884c49ce93c2daaa94b0fee644fda5d3aa9b716c3b971968a238f471f985a24afa046a8e9244445584d730c253caaaf3552ead15711431f3a8f922f61f0833f7feb6c8b94473051a85fd68a3f5372b8f7fc71615032b52b18d411f2772526278abff862e373521d9a4fbfd40b441f4a9a1530597f415517a1d949935df321e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "38e3ec40eeb927ba183dd9e1c031ecc3ec2f589c9302b56b34158c2f63414e857073d76c8f9f047d18a01baaf110da8d43c48b1895d0428f8b98c21ca881d46c0d06e8bdf42604a0d7753585c4831e93b13131b8ddecfc21fdf13a02276d666330a133f584e0b8f6a9bacd712b59c98513ccb346e9b6672b5117e9447e40fcfdcb4d0d690a578d239acfca4fe1a7bfcbef9356dba640e42cc9ab64a9ed617d3ec8956bdb8fc59f7b57f0a2c2f02fbb7e7808003e9ca2bf62c75005d51a031fb06c949d1c4246f58718d1481be6fcc3ec01ac11c0819f7eb648"}, @NFTA_DATA_VALUE={0x1f, 0x1, "8a50e2fc46faa50f368cf96d7bc1b555d56fcbf99493ebd185da5e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "4d14dfe8e8db1dd92170d0df77f9a50860357221916a58616c401caf2b5863899cc688fad0bf2cef6b029455f09609c579e565bd90ce8243cc8d6cbdfb866c61225862db89c03a800993"}]}, @NFTA_SET_ELEM_USERDATA={0x86, 0x6, 0x1, 0x0, "a348b954237360eac0b40b9e838aa24442e79a8414beda3e8ab13346f6c7ccf6bdf23585cf31b7648370bcd172881fac773fd4167d165e84e8c7ef31405a872579c5b66dca40e80228cab47a0c0bb56f1a80dfc937704ce99dd841090df87d147d5329a584f07710b52c59f76c3544b9ea805f077ba8d1cc2ebf4ab9182da4802f1d"}]}, {0x3b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xa6, 0x6, 0x1, 0x0, "e89ad606d85eaf3d2e89605d4450034c0baf66c364c83cd9a972159a25cc5bd95a9627e9a29c3318c7a3c5298271d967200a835aff185e8c43b58c79650eb198e7822624cdc27033dcbda365e56284509686a1085d49d4bf4f4d63461c0243d87759eb53207b339d355a50829d7d0f7ccfe053d7a23946257e75ef1a4249c0ff3aa0beb0ea1817f5f8d10e5c9d384c7dcd47ecd93839f07dc3ba307d45b118164a4c"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x2b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "c2a7a8cd6755698cfb55ad028f962710299996a89ba6b223ec0ebd53e1347ca9a5408ec96fb80cb3f8a604d63f9b470d1a2ed1cb89798cfaafdd0ff3d3e4645ce6f489f4e23c4105f73b927aec17b5f2767a1087164a75bcae53e2c16a8ef997d6d2ed6ff00af80e1cd1cca6a2a43ad71c1e54ca4dbf28b43e85bb33973aa483a476cc21b5aebd2683fac4e9bfcf92a865608d85450f55edce57"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x83, 0x1, "044647e9069894bcadea5c70b423b7c6bb4b60d6e8e1223c5ac3647fa6365106880710608c2499df98c625967b7f736e56b35fb3c657eda8ee6ca6e57ddd624d235816ff37ee1c162a86a9408345a0cf512528835475b97c26cd4c383bf9afec0b75514fa3c0e2d57b03172095eed5949222ff53188ad17ab421d1cd66fe32"}, @NFTA_DATA_VALUE={0xe7, 0x1, "ed6ff67a6c6afc1b6187e1854dbe63f89c995c32926202d512b5fd9912431c2e71bb5116ec6311f2aa7ff49f0362380e4ade62f30b315c0d7f2fded77b929c3deb39abcf39f2abf16e2ff3a06efa928f927dfc35fc085bff3d4ddf3af1332782eba37f76614a7e66e3a68c3f9bac6934d0f1666f9a2011f3edb89d8fe8700c39e86dc3717e9bc76097024c2d06d5dd1117c22d5356860323d70fc6840f2d9453918762ca24321c8c5a2ef80b5f46aca79a3fc8b163509e22762e517d49864418223ee131e24ee22783d59ddf9d442eb529649626b19df4b640f3f3b2128fb67ceb4b8c"}]}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1c, 0x1, "f5897bdc00294551d6484a2d5b4fc5ba39f79b2e4846d5d7"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x930, 0x3, 0x0, 0x1, [{0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1fc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "48a4eda6a4135b22bbcc3cf5a68f3ff0389e58e5930542e83a6a0faadd2019bdbd72bd20923e7beeda2a0b20"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x21, 0x1, "891561d4ee34ebf015a3d959e91d02d9e427874bc649e5128183225117"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x12, 0x1, "af798091e4431cb4edbb545deedb"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x30, 0x1, "4035bff2d880044752c09954094e5eeecbaaa6247f9f4042f408c094cdb95dbcf34e04e1715cb05820671b02"}, @NFTA_DATA_VALUE={0x41, 0x1, "faa9179befdcf4d1931309d68f26c957572e70c53ef70150812c61757a9c6ce5bc921eb3cf008eeb914e9092da3d3bfecabe00d44a0a95b6fe4d815c1c"}, @NFTA_DATA_VALUE={0x7e, 0x1, "42603f2ae63602c0a78cd126283201c862ee2710dd3ad8d0e1fc8e1f3de9a9e97be3cf35dcb75e84365e1f8fb808ebe21f34d59816ce782b2d722ef2a6b1973c3105f9219bbc5bf75d6eb06b39f0eb6930e0b9059963887738680786462827348abe6da73c081f01f3ca82eba2bfba7c5bfece74b93f5aec0bd8"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x170, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "f320f675b2e68a9393fecface5e073e41d44fcf5bca5375159387d849d95f7ffae933c98313dc1226a9118034a4a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x45, 0x1, "a01b5f860d8f94aa1c9cddaabd0408e949e179505d0f58350041e3cfa73664935348db944b59a19a9cc6e46525cc7af3717f69a5ffc2e74ee6cef992257b73c8c7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc5, 0x1, "0b4b0c39fd5d0366a6eda1efc81a334d5e61693fcdc43d328b7bdb880735378a6fd99f9996421c7ce9bfae44ebb193aed6d8a5743e0eb26c96ae2e61606c0f89fdfda6b3e1506819d09918396141c91cd6031ca731f89e53a48be0ccfb7efd31faed8cdbcc9ee5a1964c2e69e2c68ec0db19d85bb900da0c70e2cb16b9c7c9c7154b514438647c62259d7c0b966dd48b3042f982d17f455b2d0063fe52a1df125c46db7be8f850b44b709bea23fd4666feddac25f964a6235c892e2b91d4ff623a"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x1a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff8001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "418bfba159fc741c3ead8eebeb7533dbbe6c058681e0632d8cf4c3bb6501ad8ffc2bf06166277bac0f4668c8912dda0eec12f3c29ba6d4b5179bd25add3937d089acab3042f68acac25d6aa888b386947989670e126543d90502137e73f084dcfbe90046a661dfb17c5fc58f3ff642597fa409b7cbdb169f75398e48fc26f1996b47ed8b0f6ba8bc7051bfe02abbefe4429ed71fb31832d777ec7b"}, @NFTA_DATA_VALUE={0x47, 0x1, "29687f462b0fb78f0d13edae026ecd861932d814a1cb62ed19fb483c92c51a41a0f1e1d09f90970e240d2460e335619aee4f663a64022b2dd2fe180443c27676a9dfc3"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x38c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x348, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VALUE={0x1d, 0x1, "503164e5446783b1b8abdd6254bab52b40796f84b206e42b5a"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "636d9a14f1afe28dddc47eb3e42e236d75fc68763f5449606f48b34ee7fc777a5d5ad9a22aaa9129c135d0280e8ada14417d57b7e38e36fd0f300389169a063be374e53e3070c0e2facbd5d8cb1c7c5e37e35c6cc7732e22864218900bff9af5297146cbb92c1d71a81ffa9c401574684042f0da166d9a61b5ed7511ce794ccca3f4d880f0102b06dd74ec9d9c9f165c6f6a8265d38d21b990e92e24"}, @NFTA_DATA_VALUE={0x14, 0x1, "39dd0d71713eeae09146a5c27ff575c5"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x160, 0x3, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "fe0550f74fe1e11c9982905cd42169bc8bb914663df776ba93b8f6d2dbd9846e657f80fb38b38d804214e0381ba7757cdb06eece03fba0d7ed331d7f6a830d4a9f5965e84cac83fdf464385e1a7f38cc051b723b7af6a94f04093faf7fabe334c0217f3238ef1f000d1a1f599b103d85f9fa6ae1acd18a9b9202d90892a53733ccbbff2c64d8bf7624d8e9b0b415c3692c6d2566e2254688fe8b8f71872906d226ae5535e41da8c3d6"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x80, 0x6, 0x1, 0x0, "c666ba0dce6477210576f6c423c43dcfc35f30eb58d041f96d6f2e8ae23ad3ee682c3d2cd78bf5f879cdc158132a3b564d7804ceebbddfe010228fe29c551d088c71c1ae7c00472f1afaac13c9af9c4528560adce601c772ac3bbbbfc42c228595563ae49944ee7b7e75ce7176472dcfeb0987f87c1a86371b2872be"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, @NFT_MSG_NEWSET={0x33c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xd3, 0xd, 0x1, 0x0, "81fd2a4b6079842a23969a803d1b3b0d00668ffac1228f65573b9827fd5be8f95431495bee9ef655b0d130a55c57ebb3e1332ac8494b547bac872123c130ac0d17bdeca66b72eb9facd41dd678b7975f40694e925389d48fd75c56e09c8e5b3bd6c5c431cf367d470ad09e3f993d17ce9a960faf7e46471a31fa5d3f3c043f3878312cef6aa8899b2c9128567b9e4d54fd7a2b4b0e25f80710d67c190aa2fd9180ffd3c6706b03f6dc4b1886d97f815f244d11637c5da7efdd24e229fcc1cd2a161ddd910d8a526214cebfc73b2ce9"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x1ec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf655}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc218}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x956a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4bc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a7f}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_USERDATA={0x37, 0xd, 0x1, 0x0, "eda1bd5289a55a68e9ba7eff04202b5b47901f31693aba88eed779171488c44fae6b713ec4701be503b1c233cc7846c2816b0a"}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc68e}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x293c}, 0x1, 0x0, 0x0, 0x8050}, 0x8000) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x2, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @dev, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@mark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.349824525s ago: executing program 0 (id=2957): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.28909569s ago: executing program 1 (id=2958): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x500) 1.216321091s ago: executing program 2 (id=2959): socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.179784673s ago: executing program 4 (id=2960): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x2, 0x5, 0x4}, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 1.084801587s ago: executing program 2 (id=2961): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0xfe33) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}]}}]}, 0xac}}, 0x48004) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x4}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40484c5) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r11, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r12}, 0x10, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x4885) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6011a8bc0014060000000000000000000000ffffac141400fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51470c0058f73d674679b529145300554c0000"], 0x0) 1.014977438s ago: executing program 0 (id=2962): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x10) 964.314447ms ago: executing program 4 (id=2963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0003000000000000000000682259d258ccac96940d9ef64892476fa09387c72c39eb568ae6bc12124766b0c63c8fc09b4d3cd042cd2e6c30e40d756be3965e77dc05b8d4d8d411ddcb55bf18bb34215375ecf1c42b4d59d9788be4f94a5de77056b91872f0af1a447755f735b0297394b8cc4ba198b26e9ee8e6eef7b26de3966f15516fcf61c78979894349686ab7476d5ad7fc21611d5dbef02f05d773652f10ccd32962"], 0x20}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000080)="8084372d0e72b5560131d96166e59e47b62c9082ef6eefbd3e000a36b57399378586251183a197ca2a5dd09c0cf65ffb4e20574e1fe8a71505c7f5a51322ff89d1fadcb52dd78aa9566b45e6d470f83e395b80a235802695788a37f19f2824c00a3c4c429badafa2f2c9311494c899b4953bde5de18685bdf17a11a375a1b65f13f726052763ff041a4f329b9df3c8") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) 917.516404ms ago: executing program 0 (id=2964): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2d8, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x2c0, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1f0, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1c1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xa0, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x75, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 880.641045ms ago: executing program 4 (id=2965): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2e4, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x2cc, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x180, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x151, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xd0, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x8d, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053fd7bbe1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 811.279925ms ago: executing program 4 (id=2966): socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\t', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 810.586347ms ago: executing program 0 (id=2967): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x354, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x33c, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1f0, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1c1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xd0, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x8d, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053fd7bbe1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 3) 372.296936ms ago: executing program 4 (id=2969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r4, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x24, 0x12, 0x2fa9ccd93d5c0297, 0x70bd25, 0x2, {0x7}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f0000000100)) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000700)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x30}}, 0x20000000) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000002c0)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfb0}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb1c3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 354.036283ms ago: executing program 0 (id=2970): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x354, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x33c, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6, 0xfffffffd}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1f0, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1c1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xd0, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x8d, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053fd7bbe1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r5, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 285.947552ms ago: executing program 1 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000580)='GPL\x00'}, 0x94) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r4, r2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) close(r0) 216.362155ms ago: executing program 4 (id=2972): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 126.631478ms ago: executing program 0 (id=2973): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x24c, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x234, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x110, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0xe3, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xa8, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x65, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b91932"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 64.10767ms ago: executing program 1 (id=2974): unshare(0x26020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x8c, 0x1, [@m_tunnel_key={0x88, 0x3, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x8, 0x8, 0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800, 0xa, 0x10000000, 0x8, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa0}}, 0x0) 0s ago: executing program 2 (id=2975): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x7c, 0x2, [@TCA_CGROUP_ACT={0x78, 0x1, [@m_ct={0x74, 0x4, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x36, 0x6, "a856162c0170696cc8a418f591ae0926f332a850500b39cb5b523a26038e2710fa4e8abd5e9c82c76d97c3902cd932692d52"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xac}}, 0x1) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050226bd7000ffdbdf2503000000290007007379627465a96d5f753a6f626a6563745f763a766d776172655f6465766963655f743a7330000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040085}, 0x80) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x3c, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf252600000078470447d3447f0800ebff", @ANYRES32=r10, @ANYBLOB="0a0034000202020202020000"], 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) kernel console output (not intermixed with test programs): ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.204889][ T9955] RSP: 002b:00007fbfa29b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.204908][ T9955] RAX: ffffffffffffffda RBX: 00007fbfa4db6160 RCX: 00007fbfa4b8e929 [ 207.204922][ T9955] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 207.204934][ T9955] RBP: 00007fbfa29b4090 R08: 0000000000000000 R09: 0000000000000000 [ 207.204946][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.204957][ T9955] R13: 0000000000000001 R14: 00007fbfa4db6160 R15: 00007ffe30ad8c88 [ 207.204987][ T9955] [ 207.654265][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1424'. [ 207.747269][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1424'. [ 207.889495][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 208.324496][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 208.381851][ T9999] FAULT_INJECTION: forcing a failure. [ 208.381851][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 208.397720][ T9999] CPU: 1 UID: 0 PID: 9999 Comm: syz.0.1438 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 208.397749][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.397762][ T9999] Call Trace: [ 208.397769][ T9999] [ 208.397778][ T9999] dump_stack_lvl+0x189/0x250 [ 208.397815][ T9999] ? __pfx____ratelimit+0x10/0x10 [ 208.397847][ T9999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.397871][ T9999] ? __pfx__printk+0x10/0x10 [ 208.397904][ T9999] ? __pfx___might_resched+0x10/0x10 [ 208.397926][ T9999] ? fs_reclaim_acquire+0x7d/0x100 [ 208.397960][ T9999] should_fail_ex+0x414/0x560 [ 208.397995][ T9999] should_failslab+0xa8/0x100 [ 208.398023][ T9999] __kmalloc_cache_noprof+0x70/0x3d0 [ 208.398047][ T9999] ? fl_tmplt_create+0x198/0x430 [ 208.398081][ T9999] fl_tmplt_create+0x198/0x430 [ 208.398116][ T9999] ? __pfx_fl_tmplt_create+0x10/0x10 [ 208.398156][ T9999] ? do_raw_read_unlock+0x3d/0x80 [ 208.398183][ T9999] ? _raw_read_unlock+0x28/0x50 [ 208.398210][ T9999] ? tcf_proto_lookup_ops+0xcc/0x280 [ 208.398238][ T9999] ? __pfx_fl_tmplt_create+0x10/0x10 [ 208.398268][ T9999] tc_ctl_chain+0x1043/0x1670 [ 208.398304][ T9999] ? rcu_is_watching+0x15/0xb0 [ 208.398337][ T9999] ? __pfx_tc_ctl_chain+0x10/0x10 [ 208.398396][ T9999] ? __pfx_tc_ctl_chain+0x10/0x10 [ 208.398423][ T9999] rtnetlink_rcv_msg+0x77c/0xb70 [ 208.398450][ T9999] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 208.398470][ T9999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.398490][ T9999] ? ref_tracker_free+0x63a/0x7d0 [ 208.398506][ T9999] ? __copy_skb_header+0xa7/0x550 [ 208.398535][ T9999] ? __pfx_ref_tracker_free+0x10/0x10 [ 208.398565][ T9999] netlink_rcv_skb+0x205/0x470 [ 208.398589][ T9999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.398613][ T9999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.398651][ T9999] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.398674][ T9999] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.398704][ T9999] netlink_unicast+0x758/0x8d0 [ 208.398737][ T9999] netlink_sendmsg+0x805/0xb30 [ 208.398772][ T9999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.398808][ T9999] ? aa_sock_msg_perm+0x94/0x160 [ 208.398839][ T9999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.398857][ T9999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.398883][ T9999] __sock_sendmsg+0x219/0x270 [ 208.398906][ T9999] ____sys_sendmsg+0x505/0x830 [ 208.398939][ T9999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.398974][ T9999] ? import_iovec+0x74/0xa0 [ 208.399002][ T9999] ___sys_sendmsg+0x21f/0x2a0 [ 208.399030][ T9999] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.399096][ T9999] ? __fget_files+0x2a/0x420 [ 208.399122][ T9999] ? __fget_files+0x3a0/0x420 [ 208.399161][ T9999] __x64_sys_sendmsg+0x19b/0x260 [ 208.399189][ T9999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.399226][ T9999] ? __pfx_ksys_write+0x10/0x10 [ 208.399247][ T9999] ? rcu_is_watching+0x15/0xb0 [ 208.399276][ T9999] ? do_syscall_64+0xbe/0x3b0 [ 208.399300][ T9999] do_syscall_64+0xfa/0x3b0 [ 208.399318][ T9999] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.399347][ T9999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.399367][ T9999] ? clear_bhb_loop+0x60/0xb0 [ 208.399391][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.399410][ T9999] RIP: 0033:0x7f9e6d18e929 [ 208.399427][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.399444][ T9999] RSP: 002b:00007f9e6dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.399465][ T9999] RAX: ffffffffffffffda RBX: 00007f9e6d3b5fa0 RCX: 00007f9e6d18e929 [ 208.399479][ T9999] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 208.399492][ T9999] RBP: 00007f9e6dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 208.399523][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.399534][ T9999] R13: 0000000000000000 R14: 00007f9e6d3b5fa0 R15: 00007ffd6e0bc2f8 [ 208.399586][ T9999] [ 208.879036][T10008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1440'. [ 208.888302][T10008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1440'. [ 209.384998][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 209.413169][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 209.900353][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 210.313728][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 210.322967][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 210.343192][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1468'. [ 210.352369][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1468'. [ 210.754493][T10095] tipc: Started in network mode [ 210.799479][T10095] tipc: Node identity ac14140f, cluster identity 4711 [ 210.838242][T10095] tipc: New replicast peer: 255.255.255.255 [ 210.844989][T10095] tipc: Enabled bearer , priority 10 [ 211.066985][T10106] FAULT_INJECTION: forcing a failure. [ 211.066985][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 211.081528][T10106] CPU: 1 UID: 0 PID: 10106 Comm: syz.0.1482 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 211.081555][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.081567][T10106] Call Trace: [ 211.081574][T10106] [ 211.081582][T10106] dump_stack_lvl+0x189/0x250 [ 211.081616][T10106] ? __pfx____ratelimit+0x10/0x10 [ 211.081646][T10106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.081668][T10106] ? __pfx__printk+0x10/0x10 [ 211.081700][T10106] ? __pfx___might_resched+0x10/0x10 [ 211.081722][T10106] ? fs_reclaim_acquire+0x7d/0x100 [ 211.081754][T10106] should_fail_ex+0x414/0x560 [ 211.081786][T10106] should_failslab+0xa8/0x100 [ 211.081813][T10106] __kmalloc_noprof+0xcb/0x4f0 [ 211.081835][T10106] ? kfree+0x4d/0x440 [ 211.081853][T10106] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 211.081878][T10106] tomoyo_realpath_from_path+0xe3/0x5d0 [ 211.081900][T10106] ? tomoyo_domain+0xd9/0x130 [ 211.081924][T10106] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 211.081950][T10106] tomoyo_path_number_perm+0x1e8/0x5a0 [ 211.081980][T10106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.082023][T10106] ? __lock_acquire+0xab9/0xd20 [ 211.082063][T10106] ? __fget_files+0x2a/0x420 [ 211.082092][T10106] ? __fget_files+0x2a/0x420 [ 211.082116][T10106] ? __fget_files+0x3a0/0x420 [ 211.082139][T10106] ? __fget_files+0x2a/0x420 [ 211.082168][T10106] security_file_ioctl+0xcb/0x2d0 [ 211.082194][T10106] __se_sys_ioctl+0x47/0x170 [ 211.082218][T10106] do_syscall_64+0xfa/0x3b0 [ 211.082235][T10106] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.082263][T10106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.082280][T10106] ? clear_bhb_loop+0x60/0xb0 [ 211.082303][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.082320][T10106] RIP: 0033:0x7f9e6d18e929 [ 211.082337][T10106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.082352][T10106] RSP: 002b:00007f9e6dfeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.082372][T10106] RAX: ffffffffffffffda RBX: 00007f9e6d3b5fa0 RCX: 00007f9e6d18e929 [ 211.082386][T10106] RDX: 0000200000000540 RSI: 000000000000890c RDI: 0000000000000004 [ 211.082398][T10106] RBP: 00007f9e6dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 211.082408][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.082419][T10106] R13: 0000000000000000 R14: 00007f9e6d3b5fa0 R15: 00007ffd6e0bc2f8 [ 211.082449][T10106] [ 211.082657][T10106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.655556][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 211.662246][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 211.668363][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 211.850692][T10123] FAULT_INJECTION: forcing a failure. [ 211.850692][T10123] name failslab, interval 1, probability 0, space 0, times 0 [ 211.890925][T10123] CPU: 1 UID: 0 PID: 10123 Comm: syz.1.1493 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 211.890956][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.890969][T10123] Call Trace: [ 211.890977][T10123] [ 211.890986][T10123] dump_stack_lvl+0x189/0x250 [ 211.891015][T10123] ? __pfx____ratelimit+0x10/0x10 [ 211.891048][T10123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.891074][T10123] ? __pfx__printk+0x10/0x10 [ 211.891118][T10123] should_fail_ex+0x414/0x560 [ 211.891154][T10123] should_failslab+0xa8/0x100 [ 211.891184][T10123] kmem_cache_alloc_noprof+0x73/0x3c0 [ 211.891208][T10123] ? skb_clone+0x212/0x3a0 [ 211.891242][T10123] skb_clone+0x212/0x3a0 [ 211.891274][T10123] __netlink_deliver_tap+0x404/0x850 [ 211.891313][T10123] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.891341][T10123] netlink_deliver_tap+0x19c/0x1b0 [ 211.891368][T10123] netlink_sendskb+0x68/0x140 [ 211.891393][T10123] netlink_rcv_skb+0x28c/0x470 [ 211.891430][T10123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.891455][T10123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.891494][T10123] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.891518][T10123] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.891565][T10123] netlink_unicast+0x758/0x8d0 [ 211.891597][T10123] netlink_sendmsg+0x805/0xb30 [ 211.891629][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.891656][T10123] ? aa_sock_msg_perm+0x94/0x160 [ 211.891704][T10123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.891722][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.891748][T10123] __sock_sendmsg+0x219/0x270 [ 211.891771][T10123] ____sys_sendmsg+0x505/0x830 [ 211.891804][T10123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.891839][T10123] ? import_iovec+0x74/0xa0 [ 211.891868][T10123] ___sys_sendmsg+0x21f/0x2a0 [ 211.891897][T10123] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.891962][T10123] ? __fget_files+0x2a/0x420 [ 211.891989][T10123] ? __fget_files+0x3a0/0x420 [ 211.892028][T10123] __x64_sys_sendmsg+0x19b/0x260 [ 211.892057][T10123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.892094][T10123] ? __pfx_ksys_write+0x10/0x10 [ 211.892115][T10123] ? rcu_is_watching+0x15/0xb0 [ 211.892145][T10123] ? do_syscall_64+0xbe/0x3b0 [ 211.892168][T10123] do_syscall_64+0xfa/0x3b0 [ 211.892186][T10123] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.892216][T10123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.892246][T10123] ? clear_bhb_loop+0x60/0xb0 [ 211.892269][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.892287][T10123] RIP: 0033:0x7f0b4218e929 [ 211.892304][T10123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.892320][T10123] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.892339][T10123] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 211.892352][T10123] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 211.892364][T10123] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 211.892376][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.892387][T10123] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 211.892416][T10123] [ 212.211512][ T5960] tipc: Node number set to 2886997007 [ 212.230771][T10133] dvmrp1: entered allmulticast mode [ 212.499065][T10140] dummy0: entered promiscuous mode [ 212.535211][T10140] dummy0: left promiscuous mode [ 212.715060][T10150] FAULT_INJECTION: forcing a failure. [ 212.715060][T10150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.775051][T10150] CPU: 1 UID: 0 PID: 10150 Comm: syz.2.1503 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 212.775079][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.775090][T10150] Call Trace: [ 212.775097][T10150] [ 212.775105][T10150] dump_stack_lvl+0x189/0x250 [ 212.775133][T10150] ? __pfx____ratelimit+0x10/0x10 [ 212.775162][T10150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.775183][T10150] ? __pfx__printk+0x10/0x10 [ 212.775208][T10150] ? __might_fault+0xb0/0x130 [ 212.775241][T10150] should_fail_ex+0x414/0x560 [ 212.775274][T10150] _copy_from_user+0x2d/0xb0 [ 212.775297][T10150] ax25_setsockopt+0x16c/0xc20 [ 212.775328][T10150] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.775352][T10150] ? __pfx_ax25_setsockopt+0x10/0x10 [ 212.775374][T10150] ? aa_sock_opt_perm+0x74/0x110 [ 212.775404][T10150] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 212.775420][T10150] ? __pfx_ax25_setsockopt+0x10/0x10 [ 212.775442][T10150] do_sock_setsockopt+0x25a/0x3e0 [ 212.775475][T10150] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.775512][T10150] ? __fget_files+0x2a/0x420 [ 212.775543][T10150] __x64_sys_setsockopt+0x18b/0x220 [ 212.775571][T10150] do_syscall_64+0xfa/0x3b0 [ 212.775604][T10150] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.775632][T10150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.775650][T10150] ? clear_bhb_loop+0x60/0xb0 [ 212.775673][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.775690][T10150] RIP: 0033:0x7feb9978e929 [ 212.775707][T10150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.775722][T10150] RSP: 002b:00007feb9a601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.775742][T10150] RAX: ffffffffffffffda RBX: 00007feb999b5fa0 RCX: 00007feb9978e929 [ 212.775755][T10150] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 212.775767][T10150] RBP: 00007feb9a601090 R08: 0000000000000010 R09: 0000000000000000 [ 212.775778][T10150] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 212.775790][T10150] R13: 0000000000000000 R14: 00007feb999b5fa0 R15: 00007ffdcd4e0ae8 [ 212.775819][T10150] [ 213.029461][T10153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.547877][T10177] IPv6: Can't replace route, no match found [ 213.556652][T10175] FAULT_INJECTION: forcing a failure. [ 213.556652][T10175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.564715][T10178] IPv6: Can't replace route, no match found [ 213.600091][T10175] CPU: 0 UID: 0 PID: 10175 Comm: syz.3.1515 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 213.600121][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.600134][T10175] Call Trace: [ 213.600143][T10175] [ 213.600152][T10175] dump_stack_lvl+0x189/0x250 [ 213.600181][T10175] ? __pfx____ratelimit+0x10/0x10 [ 213.600215][T10175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.600240][T10175] ? __pfx__printk+0x10/0x10 [ 213.600268][T10175] ? __might_fault+0xb0/0x130 [ 213.600306][T10175] should_fail_ex+0x414/0x560 [ 213.600342][T10175] _copy_from_user+0x2d/0xb0 [ 213.600368][T10175] ax25_rt_ioctl+0x14a/0x1270 [ 213.600397][T10175] ? aa_get_newest_label+0xf7/0x5d0 [ 213.600431][T10175] ? __pfx_ax25_rt_ioctl+0x10/0x10 [ 213.600475][T10175] ? bpf_lsm_capable+0x9/0x20 [ 213.600499][T10175] ? security_capable+0x7e/0x2e0 [ 213.600543][T10175] ax25_ioctl+0x86b/0xca0 [ 213.600568][T10175] ? __pfx_ax25_ioctl+0x10/0x10 [ 213.600590][T10175] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 213.600620][T10175] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 213.600649][T10175] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 213.600676][T10175] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 213.600705][T10175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.600746][T10175] sock_do_ioctl+0xd9/0x300 [ 213.600781][T10175] ? __pfx_sock_do_ioctl+0x10/0x10 [ 213.600809][T10175] ? __lock_acquire+0xab9/0xd20 [ 213.600848][T10175] sock_ioctl+0x576/0x790 [ 213.600882][T10175] ? __pfx_sock_ioctl+0x10/0x10 [ 213.600912][T10175] ? __fget_files+0x2a/0x420 [ 213.600939][T10175] ? __fget_files+0x3a0/0x420 [ 213.600965][T10175] ? __fget_files+0x2a/0x420 [ 213.600997][T10175] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.601019][T10175] ? __pfx_sock_ioctl+0x10/0x10 [ 213.601048][T10175] __se_sys_ioctl+0xf9/0x170 [ 213.601079][T10175] do_syscall_64+0xfa/0x3b0 [ 213.601098][T10175] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.601129][T10175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.601149][T10175] ? clear_bhb_loop+0x60/0xb0 [ 213.601174][T10175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.601193][T10175] RIP: 0033:0x7fabbd38e929 [ 213.601211][T10175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.601228][T10175] RSP: 002b:00007fabbe206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.601249][T10175] RAX: ffffffffffffffda RBX: 00007fabbd5b5fa0 RCX: 00007fabbd38e929 [ 213.601264][T10175] RDX: 0000200000000540 RSI: 000000000000890c RDI: 0000000000000004 [ 213.601277][T10175] RBP: 00007fabbe206090 R08: 0000000000000000 R09: 0000000000000000 [ 213.601290][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.601302][T10175] R13: 0000000000000000 R14: 00007fabbd5b5fa0 R15: 00007ffc51f194a8 [ 213.601334][T10175] [ 213.956688][T10182] __nla_validate_parse: 13 callbacks suppressed [ 213.956706][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 214.135886][T10182] FAULT_INJECTION: forcing a failure. [ 214.135886][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.169759][T10182] CPU: 1 UID: 0 PID: 10182 Comm: syz.3.1519 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 214.169793][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.169805][T10182] Call Trace: [ 214.169814][T10182] [ 214.169823][T10182] dump_stack_lvl+0x189/0x250 [ 214.169853][T10182] ? __pfx____ratelimit+0x10/0x10 [ 214.169886][T10182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.169911][T10182] ? __pfx__printk+0x10/0x10 [ 214.169952][T10182] should_fail_ex+0x414/0x560 [ 214.169989][T10182] _copy_to_user+0x31/0xb0 [ 214.170016][T10182] simple_read_from_buffer+0xe1/0x170 [ 214.170050][T10182] proc_fail_nth_read+0x1df/0x250 [ 214.170084][T10182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.170117][T10182] ? rw_verify_area+0x258/0x650 [ 214.170140][T10182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.170172][T10182] vfs_read+0x200/0x980 [ 214.170206][T10182] ? __pfx___mutex_lock+0x10/0x10 [ 214.170228][T10182] ? __pfx_vfs_read+0x10/0x10 [ 214.170260][T10182] ? __fget_files+0x2a/0x420 [ 214.170292][T10182] ? __fget_files+0x3a0/0x420 [ 214.170319][T10182] ? __fget_files+0x2a/0x420 [ 214.170356][T10182] ksys_read+0x145/0x250 [ 214.170383][T10182] ? __pfx_ksys_read+0x10/0x10 [ 214.170404][T10182] ? rcu_is_watching+0x15/0xb0 [ 214.170435][T10182] ? do_syscall_64+0xbe/0x3b0 [ 214.170459][T10182] do_syscall_64+0xfa/0x3b0 [ 214.170478][T10182] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.170509][T10182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.170529][T10182] ? clear_bhb_loop+0x60/0xb0 [ 214.170554][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.170573][T10182] RIP: 0033:0x7fabbd38d33c [ 214.170592][T10182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.170610][T10182] RSP: 002b:00007fabbe206030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.170632][T10182] RAX: ffffffffffffffda RBX: 00007fabbd5b5fa0 RCX: 00007fabbd38d33c [ 214.170646][T10182] RDX: 000000000000000f RSI: 00007fabbe2060a0 RDI: 0000000000000006 [ 214.170659][T10182] RBP: 00007fabbe206090 R08: 0000000000000000 R09: 0000000000000000 [ 214.170672][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.170684][T10182] R13: 0000000000000000 R14: 00007fabbd5b5fa0 R15: 00007ffc51f194a8 [ 214.170716][T10182] [ 214.572393][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1528'. [ 214.963955][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 214.978102][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1537'. [ 215.062781][T10232] FAULT_INJECTION: forcing a failure. [ 215.062781][T10232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.086240][T10232] CPU: 0 UID: 0 PID: 10232 Comm: syz.0.1539 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 215.086266][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.086277][T10232] Call Trace: [ 215.086284][T10232] [ 215.086291][T10232] dump_stack_lvl+0x189/0x250 [ 215.086319][T10232] ? __pfx____ratelimit+0x10/0x10 [ 215.086348][T10232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.086369][T10232] ? __pfx__printk+0x10/0x10 [ 215.086406][T10232] should_fail_ex+0x414/0x560 [ 215.086437][T10232] _copy_to_user+0x31/0xb0 [ 215.086462][T10232] simple_read_from_buffer+0xe1/0x170 [ 215.086491][T10232] proc_fail_nth_read+0x1df/0x250 [ 215.086521][T10232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.086549][T10232] ? rw_verify_area+0x258/0x650 [ 215.086568][T10232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.086595][T10232] vfs_read+0x200/0x980 [ 215.086636][T10232] ? __pfx___mutex_lock+0x10/0x10 [ 215.086669][T10232] ? __pfx_vfs_read+0x10/0x10 [ 215.086690][T10232] ? __fget_files+0x2a/0x420 [ 215.086718][T10232] ? __fget_files+0x3a0/0x420 [ 215.086739][T10232] ? __fget_files+0x2a/0x420 [ 215.086773][T10232] ksys_read+0x145/0x250 [ 215.086794][T10232] ? __fget_files+0x3a0/0x420 [ 215.086820][T10232] ? __pfx_ksys_read+0x10/0x10 [ 215.086847][T10232] ? do_syscall_64+0xbe/0x3b0 [ 215.086869][T10232] do_syscall_64+0xfa/0x3b0 [ 215.086885][T10232] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.086913][T10232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.086930][T10232] ? clear_bhb_loop+0x60/0xb0 [ 215.086952][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.086969][T10232] RIP: 0033:0x7f9e6d18d33c [ 215.086985][T10232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.087002][T10232] RSP: 002b:00007f9e6dfeb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.087021][T10232] RAX: ffffffffffffffda RBX: 00007f9e6d3b5fa0 RCX: 00007f9e6d18d33c [ 215.087034][T10232] RDX: 000000000000000f RSI: 00007f9e6dfeb0a0 RDI: 0000000000000003 [ 215.087045][T10232] RBP: 00007f9e6dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 215.087056][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.087066][T10232] R13: 0000000000000000 R14: 00007f9e6d3b5fa0 R15: 00007ffd6e0bc2f8 [ 215.087104][T10232] [ 215.316036][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'. [ 215.399077][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 215.621274][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1548'. [ 215.631910][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1548'. [ 215.656316][T10248] dummy0: entered promiscuous mode [ 215.674350][T10248] dummy0: left promiscuous mode [ 216.086580][T10272] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1557'. [ 216.340012][T10285] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 216.394742][T10285] netlink: 'syz.1.1562': attribute type 11 has an invalid length. [ 216.440178][T10285] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1562'. [ 216.808735][T10300] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 217.386624][T10327] IPVS: Unknown mcast interface: vcan0 [ 217.719963][T10343] FAULT_INJECTION: forcing a failure. [ 217.719963][T10343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.749696][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.1.1585 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 217.749724][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.749736][T10343] Call Trace: [ 217.749744][T10343] [ 217.749752][T10343] dump_stack_lvl+0x189/0x250 [ 217.749780][T10343] ? __pfx____ratelimit+0x10/0x10 [ 217.749809][T10343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.749832][T10343] ? __pfx__printk+0x10/0x10 [ 217.749857][T10343] ? __might_fault+0xb0/0x130 [ 217.749891][T10343] should_fail_ex+0x414/0x560 [ 217.749925][T10343] _copy_from_user+0x2d/0xb0 [ 217.749949][T10343] ___sys_sendmsg+0x158/0x2a0 [ 217.749976][T10343] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.750037][T10343] ? __fget_files+0x2a/0x420 [ 217.750062][T10343] ? __fget_files+0x3a0/0x420 [ 217.750097][T10343] __x64_sys_sendmsg+0x19b/0x260 [ 217.750125][T10343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.750167][T10343] ? __pfx_ksys_write+0x10/0x10 [ 217.750195][T10343] ? do_syscall_64+0xbe/0x3b0 [ 217.750217][T10343] do_syscall_64+0xfa/0x3b0 [ 217.750234][T10343] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.750283][T10343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.750303][T10343] ? clear_bhb_loop+0x60/0xb0 [ 217.750329][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.750352][T10343] RIP: 0033:0x7f0b4218e929 [ 217.750370][T10343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.750387][T10343] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.750408][T10343] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 217.750423][T10343] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 217.750436][T10343] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 217.750449][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.750461][T10343] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 217.750493][T10343] [ 218.582808][T10370] tipc: Started in network mode [ 218.588581][T10370] tipc: Node identity 7ef1f128d784, cluster identity 4711 [ 218.597132][T10370] tipc: Enabled bearer , priority 0 [ 218.800905][T10370] syzkaller0: entered promiscuous mode [ 218.817158][T10370] syzkaller0: entered allmulticast mode [ 218.824337][T10370] tipc: Resetting bearer [ 218.881430][T10367] tipc: Resetting bearer [ 219.026206][T10393] xt_socket: unknown flags 0x3c [ 219.476559][T10408] __nla_validate_parse: 13 callbacks suppressed [ 219.476580][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1609'. [ 219.492989][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1609'. [ 219.606141][ T5968] tipc: Node number set to 2843078952 [ 220.468918][T10367] tipc: Disabling bearer [ 220.485773][T10408] bond0: entered promiscuous mode [ 220.490987][T10408] bond_slave_0: entered promiscuous mode [ 220.496990][T10408] bond_slave_1: entered promiscuous mode [ 220.503037][T10408] batadv0: entered promiscuous mode [ 220.514586][T10408] bond0: left promiscuous mode [ 220.528781][T10408] bond_slave_0: left promiscuous mode [ 220.541060][T10408] bond_slave_1: left promiscuous mode [ 220.552564][T10408] batadv0: left promiscuous mode [ 220.759672][T10424] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 220.776568][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 220.795914][T10424] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 220.892630][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 221.038191][T10432] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1618'. [ 221.106965][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1621'. [ 221.123782][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1621'. [ 221.299397][T10446] FAULT_INJECTION: forcing a failure. [ 221.299397][T10446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.351816][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.1.1623 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 221.351846][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.351860][T10446] Call Trace: [ 221.351868][T10446] [ 221.351877][T10446] dump_stack_lvl+0x189/0x250 [ 221.351915][T10446] ? __pfx____ratelimit+0x10/0x10 [ 221.351948][T10446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.351972][T10446] ? __pfx__printk+0x10/0x10 [ 221.352001][T10446] ? __might_fault+0xb0/0x130 [ 221.352038][T10446] should_fail_ex+0x414/0x560 [ 221.352074][T10446] _copy_from_iter+0x1db/0x16f0 [ 221.352101][T10446] ? rcu_is_watching+0x15/0xb0 [ 221.352127][T10446] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 221.352155][T10446] ? __pfx__copy_from_iter+0x10/0x10 [ 221.352178][T10446] ? __build_skb_around+0x257/0x3e0 [ 221.352207][T10446] ? netlink_sendmsg+0x642/0xb30 [ 221.352231][T10446] ? skb_put+0x11b/0x210 [ 221.352271][T10446] netlink_sendmsg+0x6b2/0xb30 [ 221.352305][T10446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.352333][T10446] ? aa_sock_msg_perm+0x94/0x160 [ 221.352364][T10446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.352382][T10446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.352408][T10446] __sock_sendmsg+0x219/0x270 [ 221.352431][T10446] ____sys_sendmsg+0x505/0x830 [ 221.352462][T10446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.352498][T10446] ? import_iovec+0x74/0xa0 [ 221.352525][T10446] ___sys_sendmsg+0x21f/0x2a0 [ 221.352554][T10446] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.352619][T10446] ? __fget_files+0x2a/0x420 [ 221.352644][T10446] ? __fget_files+0x3a0/0x420 [ 221.352682][T10446] __x64_sys_sendmsg+0x19b/0x260 [ 221.352711][T10446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.352748][T10446] ? __pfx_ksys_write+0x10/0x10 [ 221.352777][T10446] ? do_syscall_64+0xbe/0x3b0 [ 221.352801][T10446] do_syscall_64+0xfa/0x3b0 [ 221.352819][T10446] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.352849][T10446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.352870][T10446] ? clear_bhb_loop+0x60/0xb0 [ 221.352893][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.352919][T10446] RIP: 0033:0x7f0b4218e929 [ 221.352937][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.352954][T10446] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.352975][T10446] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 221.352990][T10446] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 221.353002][T10446] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 221.353014][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.353025][T10446] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 221.353055][T10446] [ 221.561693][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 221.665383][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 221.787643][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 221.860598][T10459] team0: Device vti1 is of different type [ 221.974356][T10465] team0: Device vti1 is of different type [ 222.728199][T10494] FAULT_INJECTION: forcing a failure. [ 222.728199][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 222.747900][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.1.1642 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 222.747927][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.747939][T10494] Call Trace: [ 222.747946][T10494] [ 222.747954][T10494] dump_stack_lvl+0x189/0x250 [ 222.747981][T10494] ? __pfx____ratelimit+0x10/0x10 [ 222.748010][T10494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.748033][T10494] ? __pfx__printk+0x10/0x10 [ 222.748065][T10494] ? ref_tracker_alloc+0x318/0x460 [ 222.748086][T10494] should_fail_ex+0x414/0x560 [ 222.748118][T10494] should_failslab+0xa8/0x100 [ 222.748145][T10494] kmem_cache_alloc_noprof+0x73/0x3c0 [ 222.748167][T10494] ? skb_clone+0x212/0x3a0 [ 222.748197][T10494] skb_clone+0x212/0x3a0 [ 222.748227][T10494] __netlink_deliver_tap+0x404/0x850 [ 222.748263][T10494] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.748287][T10494] netlink_deliver_tap+0x19c/0x1b0 [ 222.748311][T10494] netlink_unicast+0x72f/0x8d0 [ 222.748344][T10494] netlink_sendmsg+0x805/0xb30 [ 222.748377][T10494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.748403][T10494] ? aa_sock_msg_perm+0x94/0x160 [ 222.748433][T10494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.748451][T10494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.748474][T10494] __sock_sendmsg+0x219/0x270 [ 222.748496][T10494] ____sys_sendmsg+0x505/0x830 [ 222.748525][T10494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.748559][T10494] ? import_iovec+0x74/0xa0 [ 222.748586][T10494] ___sys_sendmsg+0x21f/0x2a0 [ 222.748612][T10494] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.748674][T10494] ? __fget_files+0x2a/0x420 [ 222.748697][T10494] ? __fget_files+0x3a0/0x420 [ 222.748734][T10494] __x64_sys_sendmsg+0x19b/0x260 [ 222.748760][T10494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.748795][T10494] ? __pfx_ksys_write+0x10/0x10 [ 222.748821][T10494] ? rcu_is_watching+0x15/0xb0 [ 222.748852][T10494] ? do_syscall_64+0xbe/0x3b0 [ 222.748874][T10494] do_syscall_64+0xfa/0x3b0 [ 222.748891][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.748919][T10494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.748937][T10494] ? clear_bhb_loop+0x60/0xb0 [ 222.748959][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.748976][T10494] RIP: 0033:0x7f0b4218e929 [ 222.748992][T10494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.749008][T10494] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.749028][T10494] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 222.749041][T10494] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 222.749052][T10494] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 222.749063][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.749074][T10494] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 222.749104][T10494] [ 223.183410][T10501] FAULT_INJECTION: forcing a failure. [ 223.183410][T10501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.197871][T10501] CPU: 1 UID: 0 PID: 10501 Comm: syz.0.1646 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 223.197896][T10501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.197908][T10501] Call Trace: [ 223.197915][T10501] [ 223.197922][T10501] dump_stack_lvl+0x189/0x250 [ 223.197948][T10501] ? __pfx____ratelimit+0x10/0x10 [ 223.197975][T10501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.197996][T10501] ? __pfx__printk+0x10/0x10 [ 223.198019][T10501] ? __might_fault+0xb0/0x130 [ 223.198050][T10501] should_fail_ex+0x414/0x560 [ 223.198081][T10501] _copy_from_iter+0x1db/0x16f0 [ 223.198104][T10501] ? rcu_is_watching+0x15/0xb0 [ 223.198125][T10501] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 223.198146][T10501] ? __pfx__copy_from_iter+0x10/0x10 [ 223.198166][T10501] ? __build_skb_around+0x257/0x3e0 [ 223.198189][T10501] ? netlink_sendmsg+0x642/0xb30 [ 223.198208][T10501] ? skb_put+0x11b/0x210 [ 223.198232][T10501] netlink_sendmsg+0x6b2/0xb30 [ 223.198262][T10501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.198286][T10501] ? aa_sock_msg_perm+0x94/0x160 [ 223.198313][T10501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.198329][T10501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.198352][T10501] __sock_sendmsg+0x219/0x270 [ 223.198371][T10501] ____sys_sendmsg+0x505/0x830 [ 223.198399][T10501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.198431][T10501] ? import_iovec+0x74/0xa0 [ 223.198455][T10501] ___sys_sendmsg+0x21f/0x2a0 [ 223.198480][T10501] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.198559][T10501] ? __fget_files+0x2a/0x420 [ 223.198599][T10501] ? __fget_files+0x3a0/0x420 [ 223.198638][T10501] __x64_sys_sendmsg+0x19b/0x260 [ 223.198668][T10501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.198705][T10501] ? __pfx_ksys_write+0x10/0x10 [ 223.198726][T10501] ? rcu_is_watching+0x15/0xb0 [ 223.198755][T10501] ? do_syscall_64+0xbe/0x3b0 [ 223.198780][T10501] do_syscall_64+0xfa/0x3b0 [ 223.198799][T10501] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.198829][T10501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.198849][T10501] ? clear_bhb_loop+0x60/0xb0 [ 223.198873][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.198893][T10501] RIP: 0033:0x7f9e6d18e929 [ 223.198910][T10501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.198927][T10501] RSP: 002b:00007f9e6dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.198943][T10501] RAX: ffffffffffffffda RBX: 00007f9e6d3b5fa0 RCX: 00007f9e6d18e929 [ 223.198955][T10501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 223.198965][T10501] RBP: 00007f9e6dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 223.198975][T10501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.198984][T10501] R13: 0000000000000000 R14: 00007f9e6d3b5fa0 R15: 00007ffd6e0bc2f8 [ 223.199009][T10501] [ 224.421813][T10545] FAULT_INJECTION: forcing a failure. [ 224.421813][T10545] name failslab, interval 1, probability 0, space 0, times 0 [ 224.442617][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.2.1661 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 224.442645][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.442656][T10545] Call Trace: [ 224.442664][T10545] [ 224.442672][T10545] dump_stack_lvl+0x189/0x250 [ 224.442704][T10545] ? __pfx____ratelimit+0x10/0x10 [ 224.442733][T10545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.442761][T10545] ? __pfx__printk+0x10/0x10 [ 224.442793][T10545] ? __pfx___might_resched+0x10/0x10 [ 224.442819][T10545] should_fail_ex+0x414/0x560 [ 224.442852][T10545] should_failslab+0xa8/0x100 [ 224.442879][T10545] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 224.442904][T10545] ? __alloc_skb+0x112/0x2d0 [ 224.442929][T10545] __alloc_skb+0x112/0x2d0 [ 224.442955][T10545] netlink_sendmsg+0x5c6/0xb30 [ 224.442986][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.443011][T10545] ? aa_sock_msg_perm+0x94/0x160 [ 224.443039][T10545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.443055][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.443079][T10545] __sock_sendmsg+0x219/0x270 [ 224.443099][T10545] ____sys_sendmsg+0x505/0x830 [ 224.443129][T10545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.443161][T10545] ? import_iovec+0x74/0xa0 [ 224.443186][T10545] ___sys_sendmsg+0x21f/0x2a0 [ 224.443211][T10545] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.443268][T10545] ? __fget_files+0x2a/0x420 [ 224.443291][T10545] ? __fget_files+0x3a0/0x420 [ 224.443324][T10545] __x64_sys_sendmsg+0x19b/0x260 [ 224.443349][T10545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.443382][T10545] ? __pfx_ksys_write+0x10/0x10 [ 224.443400][T10545] ? rcu_is_watching+0x15/0xb0 [ 224.443425][T10545] ? do_syscall_64+0xbe/0x3b0 [ 224.443446][T10545] do_syscall_64+0xfa/0x3b0 [ 224.443461][T10545] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.443487][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.443503][T10545] ? clear_bhb_loop+0x60/0xb0 [ 224.443525][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.443542][T10545] RIP: 0033:0x7feb9978e929 [ 224.443558][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.443575][T10545] RSP: 002b:00007feb9a601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.443594][T10545] RAX: ffffffffffffffda RBX: 00007feb999b5fa0 RCX: 00007feb9978e929 [ 224.443607][T10545] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 224.443618][T10545] RBP: 00007feb9a601090 R08: 0000000000000000 R09: 0000000000000000 [ 224.443629][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.443639][T10545] R13: 0000000000000000 R14: 00007feb999b5fa0 R15: 00007ffdcd4e0ae8 [ 224.443668][T10545] [ 224.800998][T10549] FAULT_INJECTION: forcing a failure. [ 224.800998][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 224.916372][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.1.1663 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 224.916411][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.916422][T10549] Call Trace: [ 224.916429][T10549] [ 224.916437][T10549] dump_stack_lvl+0x189/0x250 [ 224.916462][T10549] ? __pfx____ratelimit+0x10/0x10 [ 224.916490][T10549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.916511][T10549] ? __pfx__printk+0x10/0x10 [ 224.916541][T10549] ? ref_tracker_alloc+0x318/0x460 [ 224.916560][T10549] should_fail_ex+0x414/0x560 [ 224.916590][T10549] should_failslab+0xa8/0x100 [ 224.916615][T10549] kmem_cache_alloc_noprof+0x73/0x3c0 [ 224.916636][T10549] ? skb_clone+0x212/0x3a0 [ 224.916665][T10549] skb_clone+0x212/0x3a0 [ 224.916691][T10549] __netlink_deliver_tap+0x404/0x850 [ 224.916730][T10549] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.916753][T10549] netlink_deliver_tap+0x19c/0x1b0 [ 224.916775][T10549] netlink_unicast+0x72f/0x8d0 [ 224.916822][T10549] netlink_sendmsg+0x805/0xb30 [ 224.916854][T10549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.916880][T10549] ? aa_sock_msg_perm+0x94/0x160 [ 224.916909][T10549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.916927][T10549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.916951][T10549] __sock_sendmsg+0x219/0x270 [ 224.916972][T10549] ____sys_sendmsg+0x505/0x830 [ 224.917002][T10549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.917036][T10549] ? import_iovec+0x74/0xa0 [ 224.917062][T10549] ___sys_sendmsg+0x21f/0x2a0 [ 224.917088][T10549] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.917149][T10549] ? __fget_files+0x2a/0x420 [ 224.917173][T10549] ? __fget_files+0x3a0/0x420 [ 224.917209][T10549] __x64_sys_sendmsg+0x19b/0x260 [ 224.917236][T10549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.917270][T10549] ? __pfx_ksys_write+0x10/0x10 [ 224.917289][T10549] ? rcu_is_watching+0x15/0xb0 [ 224.917316][T10549] ? do_syscall_64+0xbe/0x3b0 [ 224.917338][T10549] do_syscall_64+0xfa/0x3b0 [ 224.917355][T10549] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.917382][T10549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.917405][T10549] ? clear_bhb_loop+0x60/0xb0 [ 224.917427][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.917445][T10549] RIP: 0033:0x7f0b4218e929 [ 224.917461][T10549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.917476][T10549] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.917497][T10549] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 224.917510][T10549] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 224.917522][T10549] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.917533][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.917544][T10549] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 224.917573][T10549] [ 225.263602][T10557] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 225.279495][T10557] netlink: 'syz.3.1666': attribute type 3 has an invalid length. [ 225.280400][T10551] __nla_validate_parse: 9 callbacks suppressed [ 225.280419][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'. [ 225.292572][T10557] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1666'. [ 225.316226][T10557] NCSI netlink: No device for ifindex 813332851 [ 225.426534][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 225.534757][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 226.039611][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1682'. [ 226.217546][T10606] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1686'. [ 226.550347][T10621] FAULT_INJECTION: forcing a failure. [ 226.550347][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.568321][T10621] CPU: 0 UID: 0 PID: 10621 Comm: syz.1.1691 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 226.568350][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.568362][T10621] Call Trace: [ 226.568370][T10621] [ 226.568379][T10621] dump_stack_lvl+0x189/0x250 [ 226.568408][T10621] ? __pfx____ratelimit+0x10/0x10 [ 226.568446][T10621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.568470][T10621] ? __pfx__printk+0x10/0x10 [ 226.568497][T10621] ? __might_fault+0xb0/0x130 [ 226.568534][T10621] should_fail_ex+0x414/0x560 [ 226.568574][T10621] _copy_from_iter+0x1db/0x16f0 [ 226.568600][T10621] ? rcu_is_watching+0x15/0xb0 [ 226.568625][T10621] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 226.568651][T10621] ? __pfx__copy_from_iter+0x10/0x10 [ 226.568675][T10621] ? __build_skb_around+0x257/0x3e0 [ 226.568702][T10621] ? netlink_sendmsg+0x642/0xb30 [ 226.568725][T10621] ? skb_put+0x11b/0x210 [ 226.568752][T10621] netlink_sendmsg+0x6b2/0xb30 [ 226.568787][T10621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.568815][T10621] ? aa_sock_msg_perm+0x94/0x160 [ 226.568846][T10621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.568864][T10621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.568890][T10621] __sock_sendmsg+0x219/0x270 [ 226.568913][T10621] ____sys_sendmsg+0x505/0x830 [ 226.568944][T10621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.568980][T10621] ? import_iovec+0x74/0xa0 [ 226.569008][T10621] ___sys_sendmsg+0x21f/0x2a0 [ 226.569036][T10621] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.569100][T10621] ? __fget_files+0x2a/0x420 [ 226.569126][T10621] ? __fget_files+0x3a0/0x420 [ 226.569164][T10621] __x64_sys_sendmsg+0x19b/0x260 [ 226.569192][T10621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.569229][T10621] ? __pfx_ksys_write+0x10/0x10 [ 226.569250][T10621] ? rcu_is_watching+0x15/0xb0 [ 226.569278][T10621] ? do_syscall_64+0xbe/0x3b0 [ 226.569302][T10621] do_syscall_64+0xfa/0x3b0 [ 226.569320][T10621] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.569349][T10621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.569370][T10621] ? clear_bhb_loop+0x60/0xb0 [ 226.569393][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.569412][T10621] RIP: 0033:0x7f0b4218e929 [ 226.569430][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.569447][T10621] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.569468][T10621] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 226.569482][T10621] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 226.569494][T10621] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.569507][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.569518][T10621] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 226.569555][T10621] [ 227.150481][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1696'. [ 227.397542][T10647] syzkaller1: entered promiscuous mode [ 227.434307][T10647] syzkaller1: entered allmulticast mode [ 227.611734][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 227.646067][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 227.691082][T10662] ip6gretap0: entered promiscuous mode [ 227.727770][T10662] syz_tun: entered promiscuous mode [ 227.811006][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1707'. [ 228.259060][T10689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.785708][ T979] IPVS: starting estimator thread 0... [ 229.905577][T10734] IPVS: using max 29 ests per chain, 69600 per kthread [ 230.146502][T10744] FAULT_INJECTION: forcing a failure. [ 230.146502][T10744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.192046][T10744] CPU: 1 UID: 0 PID: 10744 Comm: syz.2.1738 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 230.192076][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.192088][T10744] Call Trace: [ 230.192096][T10744] [ 230.192104][T10744] dump_stack_lvl+0x189/0x250 [ 230.192133][T10744] ? __pfx____ratelimit+0x10/0x10 [ 230.192164][T10744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.192188][T10744] ? __pfx__printk+0x10/0x10 [ 230.192215][T10744] ? __might_fault+0xb0/0x130 [ 230.192250][T10744] should_fail_ex+0x414/0x560 [ 230.192286][T10744] _copy_from_user+0x2d/0xb0 [ 230.192322][T10744] kstrtouint_from_user+0xc4/0x170 [ 230.192345][T10744] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 230.192384][T10744] proc_fail_nth_write+0x88/0x240 [ 230.192413][T10744] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 230.192448][T10744] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 230.192479][T10744] vfs_write+0x27e/0xa90 [ 230.192512][T10744] ? __pfx_vfs_write+0x10/0x10 [ 230.192538][T10744] ? __fget_files+0x2a/0x420 [ 230.192569][T10744] ? __fget_files+0x3a0/0x420 [ 230.192595][T10744] ? __fget_files+0x2a/0x420 [ 230.192631][T10744] ksys_write+0x145/0x250 [ 230.192658][T10744] ? __pfx_ksys_write+0x10/0x10 [ 230.192709][T10744] ? do_syscall_64+0xbe/0x3b0 [ 230.192735][T10744] do_syscall_64+0xfa/0x3b0 [ 230.192753][T10744] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.192785][T10744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.192823][T10744] ? clear_bhb_loop+0x60/0xb0 [ 230.192846][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.192865][T10744] RIP: 0033:0x7feb9978d3df [ 230.192882][T10744] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 230.192899][T10744] RSP: 002b:00007feb9a5e0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 230.192920][T10744] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb9978d3df [ 230.192934][T10744] RDX: 0000000000000001 RSI: 00007feb9a5e00a0 RDI: 0000000000000007 [ 230.192946][T10744] RBP: 00007feb9a5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 230.192958][T10744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 230.192970][T10744] R13: 0000000000000001 R14: 00007feb999b6080 R15: 00007ffdcd4e0ae8 [ 230.193001][T10744] [ 230.924036][T10766] __nla_validate_parse: 6 callbacks suppressed [ 230.924057][T10766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1745'. [ 230.940576][T10766] openvswitch: netlink: Flow key attr not present in new flow. [ 231.157822][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 231.173775][T10774] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1748'. [ 231.272474][T10777] sctp: [Deprecated]: syz.0.1749 (pid 10777) Use of int in max_burst socket option deprecated. [ 231.272474][T10777] Use struct sctp_assoc_value instead [ 231.351417][T10777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.423303][T10780] sctp: [Deprecated]: syz.0.1749 (pid 10780) Use of int in max_burst socket option deprecated. [ 231.423303][T10780] Use struct sctp_assoc_value instead [ 231.888743][T10791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1754'. [ 231.996511][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 233.126100][T10834] FAULT_INJECTION: forcing a failure. [ 233.126100][T10834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.182453][T10834] CPU: 0 UID: 0 PID: 10834 Comm: syz.2.1770 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 233.182485][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.182498][T10834] Call Trace: [ 233.182506][T10834] [ 233.182515][T10834] dump_stack_lvl+0x189/0x250 [ 233.182545][T10834] ? __pfx____ratelimit+0x10/0x10 [ 233.182585][T10834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.182609][T10834] ? __pfx__printk+0x10/0x10 [ 233.182636][T10834] ? __might_fault+0xb0/0x130 [ 233.182672][T10834] should_fail_ex+0x414/0x560 [ 233.182708][T10834] _copy_from_user+0x2d/0xb0 [ 233.182733][T10834] ___sys_sendmsg+0x158/0x2a0 [ 233.182764][T10834] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.182826][T10834] ? __fget_files+0x2a/0x420 [ 233.182863][T10834] ? __fget_files+0x3a0/0x420 [ 233.182902][T10834] __x64_sys_sendmsg+0x19b/0x260 [ 233.182931][T10834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.182968][T10834] ? __pfx_ksys_write+0x10/0x10 [ 233.182990][T10834] ? rcu_is_watching+0x15/0xb0 [ 233.183019][T10834] ? do_syscall_64+0xbe/0x3b0 [ 233.183044][T10834] do_syscall_64+0xfa/0x3b0 [ 233.183063][T10834] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.183094][T10834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.183114][T10834] ? clear_bhb_loop+0x60/0xb0 [ 233.183138][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.183158][T10834] RIP: 0033:0x7feb9978e929 [ 233.183175][T10834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.183192][T10834] RSP: 002b:00007feb9a601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.183215][T10834] RAX: ffffffffffffffda RBX: 00007feb999b5fa0 RCX: 00007feb9978e929 [ 233.183229][T10834] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 233.183243][T10834] RBP: 00007feb9a601090 R08: 0000000000000000 R09: 0000000000000000 [ 233.183255][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.183267][T10834] R13: 0000000000000000 R14: 00007feb999b5fa0 R15: 00007ffdcd4e0ae8 [ 233.183298][T10834] [ 233.421070][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 233.455615][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 233.557036][T10842] syz_tun: entered promiscuous mode [ 233.584013][T10842] syz_tun: left promiscuous mode [ 233.631742][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'. [ 234.168451][T10872] FAULT_INJECTION: forcing a failure. [ 234.168451][T10872] name failslab, interval 1, probability 0, space 0, times 0 [ 234.218547][T10872] CPU: 0 UID: 0 PID: 10872 Comm: syz.1.1784 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 234.218578][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.218590][T10872] Call Trace: [ 234.218598][T10872] [ 234.218607][T10872] dump_stack_lvl+0x189/0x250 [ 234.218636][T10872] ? __pfx____ratelimit+0x10/0x10 [ 234.218668][T10872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.218691][T10872] ? __pfx__printk+0x10/0x10 [ 234.218726][T10872] ? ref_tracker_alloc+0x318/0x460 [ 234.218749][T10872] should_fail_ex+0x414/0x560 [ 234.218782][T10872] should_failslab+0xa8/0x100 [ 234.218811][T10872] kmem_cache_alloc_noprof+0x73/0x3c0 [ 234.218835][T10872] ? skb_clone+0x212/0x3a0 [ 234.218866][T10872] skb_clone+0x212/0x3a0 [ 234.218898][T10872] __netlink_deliver_tap+0x404/0x850 [ 234.218937][T10872] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.218964][T10872] netlink_deliver_tap+0x19c/0x1b0 [ 234.218990][T10872] netlink_unicast+0x72f/0x8d0 [ 234.219024][T10872] netlink_sendmsg+0x805/0xb30 [ 234.219068][T10872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.219097][T10872] ? aa_sock_msg_perm+0x94/0x160 [ 234.219130][T10872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.219148][T10872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.219174][T10872] __sock_sendmsg+0x219/0x270 [ 234.219198][T10872] ____sys_sendmsg+0x505/0x830 [ 234.219231][T10872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.219269][T10872] ? import_iovec+0x74/0xa0 [ 234.219298][T10872] ___sys_sendmsg+0x21f/0x2a0 [ 234.219328][T10872] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.219396][T10872] ? __fget_files+0x2a/0x420 [ 234.219424][T10872] ? __fget_files+0x3a0/0x420 [ 234.219463][T10872] __x64_sys_sendmsg+0x19b/0x260 [ 234.219494][T10872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.219532][T10872] ? __pfx_ksys_write+0x10/0x10 [ 234.219553][T10872] ? rcu_is_watching+0x15/0xb0 [ 234.219583][T10872] ? do_syscall_64+0xbe/0x3b0 [ 234.219608][T10872] do_syscall_64+0xfa/0x3b0 [ 234.219629][T10872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.219648][T10872] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.219669][T10872] ? clear_bhb_loop+0x60/0xb0 [ 234.219694][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.219713][T10872] RIP: 0033:0x7f0b4218e929 [ 234.219731][T10872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.219748][T10872] RSP: 002b:00007f0b4300a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.219768][T10872] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218e929 [ 234.219782][T10872] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000011 [ 234.219795][T10872] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 234.219808][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.219820][T10872] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 234.219854][T10872] [ 235.109250][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1790'. [ 235.422103][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 236.122017][T10921] __nla_validate_parse: 1 callbacks suppressed [ 236.122037][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'. [ 237.016822][T10960] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 237.053253][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1820'. [ 237.083488][T10960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1820'. [ 237.240438][T10972] FAULT_INJECTION: forcing a failure. [ 237.240438][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 237.317787][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.0.1825 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 237.317819][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.317832][T10972] Call Trace: [ 237.317840][T10972] [ 237.317849][T10972] dump_stack_lvl+0x189/0x250 [ 237.317880][T10972] ? __pfx____ratelimit+0x10/0x10 [ 237.317912][T10972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.317937][T10972] ? __pfx__printk+0x10/0x10 [ 237.317972][T10972] ? ref_tracker_alloc+0x318/0x460 [ 237.317996][T10972] should_fail_ex+0x414/0x560 [ 237.318032][T10972] should_failslab+0xa8/0x100 [ 237.318063][T10972] kmem_cache_alloc_noprof+0x73/0x3c0 [ 237.318086][T10972] ? skb_clone+0x212/0x3a0 [ 237.318120][T10972] skb_clone+0x212/0x3a0 [ 237.318152][T10972] __netlink_deliver_tap+0x404/0x850 [ 237.318192][T10972] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.318219][T10972] netlink_deliver_tap+0x19c/0x1b0 [ 237.318246][T10972] netlink_unicast+0x72f/0x8d0 [ 237.318280][T10972] netlink_sendmsg+0x805/0xb30 [ 237.318316][T10972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.318345][T10972] ? aa_sock_msg_perm+0x94/0x160 [ 237.318379][T10972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.318398][T10972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.318425][T10972] __sock_sendmsg+0x219/0x270 [ 237.318449][T10972] ____sys_sendmsg+0x505/0x830 [ 237.318483][T10972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.318520][T10972] ? import_iovec+0x74/0xa0 [ 237.318550][T10972] ___sys_sendmsg+0x21f/0x2a0 [ 237.318580][T10972] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.318655][T10972] ? __fget_files+0x2a/0x420 [ 237.318682][T10972] ? __fget_files+0x3a0/0x420 [ 237.318723][T10972] __x64_sys_sendmsg+0x19b/0x260 [ 237.318764][T10972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.318813][T10972] ? __pfx_ksys_write+0x10/0x10 [ 237.318831][T10972] ? rcu_is_watching+0x15/0xb0 [ 237.318858][T10972] ? do_syscall_64+0xbe/0x3b0 [ 237.318890][T10972] do_syscall_64+0xfa/0x3b0 [ 237.318906][T10972] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.318932][T10972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.318949][T10972] ? clear_bhb_loop+0x60/0xb0 [ 237.318969][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.319002][T10972] RIP: 0033:0x7f9e6d18e929 [ 237.319018][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.319034][T10972] RSP: 002b:00007f9e6dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.319052][T10972] RAX: ffffffffffffffda RBX: 00007f9e6d3b5fa0 RCX: 00007f9e6d18e929 [ 237.319066][T10972] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 237.319077][T10972] RBP: 00007f9e6dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 237.319089][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.319099][T10972] R13: 0000000000000000 R14: 00007f9e6d3b5fa0 R15: 00007ffd6e0bc2f8 [ 237.319126][T10972] [ 237.785665][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 237.937865][T10990] netlink: 'syz.0.1830': attribute type 6 has an invalid length. [ 238.012815][T10996] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 238.021661][T10996] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1835'. [ 239.577298][T11041] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1851'. [ 239.648169][T11039] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1850'. [ 239.954733][T11058] lo: entered allmulticast mode [ 240.014385][T11062] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.023592][T11062] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.032612][T11062] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.041766][T11062] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.153048][T11065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.242516][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'. [ 240.258266][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'. [ 240.270768][T11065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.384047][T11065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.464119][T11072] syzkaller1: entered promiscuous mode [ 240.470204][T11072] syzkaller1: entered allmulticast mode [ 240.508535][T11065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.753799][T11065] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.908518][T11065] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.993972][T11065] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.092404][T11065] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.144961][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1868'. [ 241.185391][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1868'. [ 241.251381][T11096] FAULT_INJECTION: forcing a failure. [ 241.251381][T11096] name failslab, interval 1, probability 0, space 0, times 0 [ 241.324845][T11098] netlink: 'syz.3.1871': attribute type 4 has an invalid length. [ 241.334291][T11096] CPU: 0 UID: 0 PID: 11096 Comm: syz.2.1870 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 241.334317][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.334328][T11096] Call Trace: [ 241.334335][T11096] [ 241.334343][T11096] dump_stack_lvl+0x189/0x250 [ 241.334370][T11096] ? __pfx____ratelimit+0x10/0x10 [ 241.334399][T11096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.334421][T11096] ? __pfx__printk+0x10/0x10 [ 241.334451][T11096] ? __pfx___might_resched+0x10/0x10 [ 241.334477][T11096] should_fail_ex+0x414/0x560 [ 241.334508][T11096] should_failslab+0xa8/0x100 [ 241.334535][T11096] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.334566][T11096] ? __alloc_skb+0x112/0x2d0 [ 241.334592][T11096] __alloc_skb+0x112/0x2d0 [ 241.334618][T11096] netlink_sendmsg+0x5c6/0xb30 [ 241.334650][T11096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.334677][T11096] ? aa_sock_msg_perm+0x94/0x160 [ 241.334732][T11096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.334749][T11096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.334787][T11096] __sock_sendmsg+0x219/0x270 [ 241.334807][T11096] ____sys_sendmsg+0x505/0x830 [ 241.334855][T11096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.334891][T11096] ? import_iovec+0x74/0xa0 [ 241.334918][T11096] ___sys_sendmsg+0x21f/0x2a0 [ 241.334946][T11096] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.335010][T11096] ? __fget_files+0x2a/0x420 [ 241.335036][T11096] ? __fget_files+0x3a0/0x420 [ 241.335074][T11096] __x64_sys_sendmsg+0x19b/0x260 [ 241.335103][T11096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.335140][T11096] ? __pfx_ksys_write+0x10/0x10 [ 241.335160][T11096] ? rcu_is_watching+0x15/0xb0 [ 241.335189][T11096] ? do_syscall_64+0xbe/0x3b0 [ 241.335212][T11096] do_syscall_64+0xfa/0x3b0 [ 241.335230][T11096] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.335260][T11096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.335279][T11096] ? clear_bhb_loop+0x60/0xb0 [ 241.335302][T11096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.335322][T11096] RIP: 0033:0x7feb9978e929 [ 241.335340][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.335357][T11096] RSP: 002b:00007feb9a601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.335378][T11096] RAX: ffffffffffffffda RBX: 00007feb999b5fa0 RCX: 00007feb9978e929 [ 241.335392][T11096] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 241.335405][T11096] RBP: 00007feb9a601090 R08: 0000000000000000 R09: 0000000000000000 [ 241.335417][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.335428][T11096] R13: 0000000000000000 R14: 00007feb999b5fa0 R15: 00007ffdcd4e0ae8 [ 241.335459][T11096] [ 241.636400][T11099] netlink: 'syz.3.1871': attribute type 11 has an invalid length. [ 241.644274][T11099] netlink: 'syz.3.1871': attribute type 11 has an invalid length. [ 241.665411][T11099] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1871'. [ 242.620488][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1883'. [ 242.639944][T11136] netlink: 'syz.1.1884': attribute type 11 has an invalid length. [ 242.655914][T11136] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1884'. [ 242.667157][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1883'. [ 243.000929][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1886'. [ 243.045818][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1886'. [ 243.074741][T11150] netlink: 'syz.4.1889': attribute type 11 has an invalid length. [ 243.094809][T11150] netlink: 'syz.4.1889': attribute type 11 has an invalid length. [ 243.111440][T11147] syz_tun: entered promiscuous mode [ 243.118434][T11150] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1889'. [ 243.163618][T11147] syz_tun: left promiscuous mode [ 243.436262][T11162] veth1_macvtap: left promiscuous mode [ 243.448568][T11162] macsec0: entered promiscuous mode [ 243.450674][T11157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1892'. [ 243.462121][T11162] macsec0: entered allmulticast mode [ 243.503764][T11165] veth1_macvtap: entered promiscuous mode [ 243.530622][T11165] veth1_macvtap: entered allmulticast mode [ 243.556583][T11165] macsec0: left promiscuous mode [ 243.562951][T11165] macsec0: left allmulticast mode [ 243.571067][T11165] veth1_macvtap: left allmulticast mode [ 244.701182][T11213] veth0: entered promiscuous mode [ 244.988229][T11212] veth0: left promiscuous mode [ 245.511148][T11241] ipt_ECN: cannot use operation on non-tcp rule [ 245.707142][T11250] netlink: 'syz.0.1922': attribute type 29 has an invalid length. [ 245.908735][T11256] gtp0: entered promiscuous mode [ 245.925109][T11256] gtp0: entered allmulticast mode [ 246.279148][T11270] gtp0: entered promiscuous mode [ 246.299149][T11270] gtp0: entered allmulticast mode [ 246.417172][T11272] __nla_validate_parse: 14 callbacks suppressed [ 246.417193][T11272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1931'. [ 246.437011][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 246.447587][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 246.458807][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 246.486805][T11275] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1932'. [ 246.537039][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 246.707108][T11293] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 246.868827][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'. [ 246.873968][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'. [ 247.031104][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 247.068291][T11312] bridge_slave_1: default FDB implementation only supports local addresses [ 247.091727][T11314] FAULT_INJECTION: forcing a failure. [ 247.091727][T11314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.162433][T11314] CPU: 1 UID: 0 PID: 11314 Comm: syz.1.1944 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 247.162463][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.162490][T11314] Call Trace: [ 247.162498][T11314] [ 247.162507][T11314] dump_stack_lvl+0x189/0x250 [ 247.162536][T11314] ? __pfx____ratelimit+0x10/0x10 [ 247.162568][T11314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.162590][T11314] ? __pfx__printk+0x10/0x10 [ 247.162630][T11314] should_fail_ex+0x414/0x560 [ 247.162664][T11314] _copy_to_user+0x31/0xb0 [ 247.162691][T11314] simple_read_from_buffer+0xe1/0x170 [ 247.162722][T11314] proc_fail_nth_read+0x1df/0x250 [ 247.162756][T11314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.162787][T11314] ? rw_verify_area+0x258/0x650 [ 247.162810][T11314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.162840][T11314] vfs_read+0x200/0x980 [ 247.162869][T11314] ? __pfx___mutex_lock+0x10/0x10 [ 247.162890][T11314] ? __pfx_vfs_read+0x10/0x10 [ 247.162914][T11314] ? __fget_files+0x2a/0x420 [ 247.162956][T11314] ? __fget_files+0x3a0/0x420 [ 247.162982][T11314] ? __fget_files+0x2a/0x420 [ 247.163017][T11314] ksys_read+0x145/0x250 [ 247.163043][T11314] ? __pfx_ksys_read+0x10/0x10 [ 247.163063][T11314] ? rcu_is_watching+0x15/0xb0 [ 247.163092][T11314] ? do_syscall_64+0xbe/0x3b0 [ 247.163116][T11314] do_syscall_64+0xfa/0x3b0 [ 247.163134][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.163164][T11314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.163183][T11314] ? clear_bhb_loop+0x60/0xb0 [ 247.163207][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.163226][T11314] RIP: 0033:0x7f0b4218d33c [ 247.163245][T11314] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.163263][T11314] RSP: 002b:00007f0b4300a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.163283][T11314] RAX: ffffffffffffffda RBX: 00007f0b423b5fa0 RCX: 00007f0b4218d33c [ 247.163298][T11314] RDX: 000000000000000f RSI: 00007f0b4300a0a0 RDI: 0000000000000004 [ 247.163310][T11314] RBP: 00007f0b4300a090 R08: 0000000000000000 R09: 0000000000000000 [ 247.163322][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.163333][T11314] R13: 0000000000000000 R14: 00007f0b423b5fa0 R15: 00007ffc8afa5468 [ 247.163358][T11314] [ 247.437570][T11326] xt_TCPMSS: Only works on TCP SYN packets [ 247.445271][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'. [ 248.098922][T11359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.194852][T11368] vlan2: entered allmulticast mode [ 248.217519][T11368] bond2: entered allmulticast mode [ 248.383349][T11379] vlan2: entered promiscuous mode [ 248.401157][T11379] vlan2: entered allmulticast mode [ 248.419346][T11379] hsr_slave_1: entered allmulticast mode [ 248.498912][T11386] netlink: 'syz.0.1968': attribute type 21 has an invalid length. [ 248.508612][T11386] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.670468][T11393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.732022][T11399] xt_limit: Overflow, try lower: 0/0 [ 248.753711][T11393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.771337][T11394] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 248.910060][T11394] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 248.920973][T11394] gretap1: entered promiscuous mode [ 248.931594][T11405] netlink: 'syz.0.1976': attribute type 3 has an invalid length. [ 248.945244][T11394] gretap1: entered allmulticast mode [ 248.953867][T11405] netlink: 'syz.0.1976': attribute type 2 has an invalid length. [ 248.984902][T11408] sctp: [Deprecated]: syz.4.1975 (pid 11408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.984902][T11408] Use struct sctp_sack_info instead [ 250.175919][T11467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.415813][T11474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.428660][T11474] bond0: (slave bond2): Enslaving as an active interface with an up link [ 250.681887][T11493] netlink: 'syz.0.2007': attribute type 7 has an invalid length. [ 250.692717][T11493] netlink: 'syz.0.2007': attribute type 8 has an invalid length. [ 251.180282][T11516] netlink: 'syz.4.2017': attribute type 10 has an invalid length. [ 251.182238][T11509] syzkaller0: entered promiscuous mode [ 251.196283][T11509] syzkaller0: entered allmulticast mode [ 251.548979][T11528] __nla_validate_parse: 28 callbacks suppressed [ 251.548998][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 251.564823][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 252.599664][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 252.851241][T11547] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2028'. [ 253.045379][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2031'. [ 253.166439][T11565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2035'. [ 253.175638][T11565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2035'. [ 253.206651][T11562] team0: Device vti0 is of different type [ 253.323138][T11570] netlink: 'syz.1.2037': attribute type 4 has an invalid length. [ 253.335196][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 253.358968][T11570] netlink: 'syz.1.2037': attribute type 4 has an invalid length. [ 253.366920][T11569] sctp: [Deprecated]: syz.2.2036 (pid 11569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.366920][T11569] Use struct sctp_sack_info instead [ 253.406301][T11572] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 253.414245][T11572] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2038'. [ 253.435695][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 253.523383][ T979] IPVS: starting estimator thread 0... [ 253.534912][T11572] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 253.650018][T11579] IPVS: using max 26 ests per chain, 62400 per kthread [ 255.651989][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.716214][T11651] syz.4.2057 (11651) used greatest stack depth: 17992 bytes left [ 256.155687][T11677] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 256.239783][T11677] bond3: entered promiscuous mode [ 256.257572][T11677] bond3: entered allmulticast mode [ 256.266091][T11677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.934206][T11701] __nla_validate_parse: 9 callbacks suppressed [ 256.934225][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2077'. [ 256.953067][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2077'. [ 257.082791][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2078'. [ 257.250696][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2082'. [ 257.278791][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 257.346772][T11714] bond0: Device is already in use. [ 257.433617][T11716] bridge_slave_0: left allmulticast mode [ 257.439461][T11716] bridge_slave_0: left promiscuous mode [ 257.445380][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.507937][T11716] bridge_slave_1: left allmulticast mode [ 257.564433][T11716] bridge_slave_1: left promiscuous mode [ 257.605199][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.684936][T11716] bond0: (slave bond_slave_0): Releasing backup interface [ 257.695201][T11716] bond_slave_0: left promiscuous mode [ 257.711741][T11716] bond0: (slave bond_slave_1): Releasing backup interface [ 257.724903][T11716] bond_slave_1: left promiscuous mode [ 257.734177][T11716] team_slave_0: left promiscuous mode [ 257.766547][T11716] team0: Port device team_slave_0 removed [ 257.777879][T11716] team_slave_1: left promiscuous mode [ 257.793707][T11716] team0: Port device team_slave_1 removed [ 257.800793][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.820380][T11716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.831334][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.842619][T11716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.874761][T11716] bond4: (slave bridge3): Releasing active interface [ 258.103800][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 258.113637][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 258.123419][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 258.284644][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2092'. [ 258.471093][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2094'. [ 258.511875][T11753] netlink: 'syz.4.2096': attribute type 7 has an invalid length. [ 258.565249][T11753] : entered promiscuous mode [ 260.719461][T11841] netlink: 'syz.1.2124': attribute type 28 has an invalid length. [ 260.785685][T11841] netlink: 'syz.1.2124': attribute type 3 has an invalid length. [ 261.429420][T11871] bridge_slave_1: left allmulticast mode [ 261.435348][T11871] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.522303][T11871] bridge_slave_0: left allmulticast mode [ 261.529060][T11871] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.017049][T11903] __nla_validate_parse: 23 callbacks suppressed [ 262.017069][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 262.062785][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2147'. [ 262.079583][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2147'. [ 262.215175][T11914] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 262.240249][T11914] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2149'. [ 262.328078][T11911] team0 (unregistering): left promiscuous mode [ 262.460816][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2152'. [ 262.487588][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 262.687416][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2156'. [ 262.725619][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2156'. [ 262.993415][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'. [ 263.033662][T11950] netlink: 'syz.2.2159': attribute type 11 has an invalid length. [ 263.052036][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'. [ 263.065550][T11945] netlink: 'syz.2.2159': attribute type 11 has an invalid length. [ 263.095809][T11955] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 264.020923][T11999] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 264.440941][T11999] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 264.667749][T12019] xt_policy: too many policy elements [ 264.929788][T12030] sit1: entered promiscuous mode [ 264.934796][T12030] sit1: entered allmulticast mode [ 266.290696][T12108] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 266.462604][T12108] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 266.547058][T12115] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 266.608967][T12115] bond3 (unregistering): Released all slaves [ 266.909345][T12138] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 266.936413][T12138] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 266.945108][T12142] netlink: 'syz.4.2229': attribute type 2 has an invalid length. [ 267.126439][T12152] __nla_validate_parse: 30 callbacks suppressed [ 267.126459][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 267.200914][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'. [ 267.211345][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'. [ 267.638660][T12170] x_tables: duplicate underflow at hook 3 [ 267.933108][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2247'. [ 267.973011][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2247'. [ 268.052060][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2249'. [ 268.097955][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2249'. [ 268.327657][T12206] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.368042][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 268.392843][T12206] bridge_slave_1: default FDB implementation only supports local addresses [ 268.777068][T12226] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.930529][T12233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2264'. [ 268.958951][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 269.517497][T12266] veth0: entered promiscuous mode [ 269.525946][T12262] veth0: left promiscuous mode [ 269.541120][T12268] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.487648][T12314] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.703710][T12322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.965317][T12338] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.794468][T12369] Bluetooth: MGMT ver 1.23 [ 271.800181][T12368] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 272.370052][T12395] netlink: 'syz.3.2318': attribute type 29 has an invalid length. [ 272.381705][T12395] netlink: 'syz.3.2318': attribute type 29 has an invalid length. [ 272.397873][T12395] netlink: 'syz.3.2318': attribute type 29 has an invalid length. [ 272.414062][T12395] netlink: 'syz.3.2318': attribute type 29 has an invalid length. [ 272.447036][T12397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.533219][T12403] xt_l2tp: unknown flags: 18 [ 272.553348][T12404] tipc: MTU too low for tipc bearer [ 272.584305][T12404] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 272.592451][T12404] __nla_validate_parse: 7 callbacks suppressed [ 272.592465][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2320'. [ 272.723443][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 272.756704][T12409] vlan3: entered allmulticast mode [ 272.762036][T12409] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 272.786047][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2325'. [ 272.920520][T12417] netlink: 'syz.0.2326': attribute type 2 has an invalid length. [ 273.110211][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2331'. [ 273.602209][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 273.885839][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 273.890253][ T5871] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 273.963311][T12468] pimreg3: entered allmulticast mode [ 274.117824][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2349'. [ 274.460575][T12486] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 274.484578][T12486] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 274.506507][T12486] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 274.514978][T12486] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 274.536617][T12486] geneve2: entered promiscuous mode [ 274.542152][T12486] geneve2: entered allmulticast mode [ 274.847692][T12496] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.2358'. [ 275.572749][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 275.600635][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 275.652120][T12542] netlink: 'syz.1.2372': attribute type 14 has an invalid length. [ 275.934321][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2380'. [ 276.322425][T12583] netlink: 'syz.0.2388': attribute type 1 has an invalid length. [ 276.944731][T12612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.081921][T12677] __nla_validate_parse: 8 callbacks suppressed [ 278.081941][T12677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2414'. [ 278.103157][T12677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2414'. [ 278.231954][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.269571][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.316213][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.344205][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.362306][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.387040][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.409068][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.430458][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 278.720433][T12708] FAULT_INJECTION: forcing a failure. [ 278.720433][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 278.733571][T12708] CPU: 1 UID: 0 PID: 12708 Comm: syz.0.2424 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 278.733599][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.733612][T12708] Call Trace: [ 278.733620][T12708] [ 278.733629][T12708] dump_stack_lvl+0x189/0x250 [ 278.733659][T12708] ? __pfx____ratelimit+0x10/0x10 [ 278.733690][T12708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.733715][T12708] ? __pfx__printk+0x10/0x10 [ 278.733745][T12708] ? __pfx___might_resched+0x10/0x10 [ 278.733769][T12708] ? fs_reclaim_acquire+0x7d/0x100 [ 278.733805][T12708] should_fail_ex+0x414/0x560 [ 278.733849][T12708] should_failslab+0xa8/0x100 [ 278.733878][T12708] __kmalloc_noprof+0xcb/0x4f0 [ 278.733902][T12708] ? tomoyo_encode+0x28b/0x550 [ 278.733927][T12708] tomoyo_encode+0x28b/0x550 [ 278.733954][T12708] tomoyo_realpath_from_path+0x58d/0x5d0 [ 278.733977][T12708] ? tomoyo_domain+0xd9/0x130 [ 278.734004][T12708] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 278.734033][T12708] tomoyo_path_number_perm+0x1e8/0x5a0 [ 278.734064][T12708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.734113][T12708] ? __lock_acquire+0xab9/0xd20 [ 278.734157][T12708] ? __fget_files+0x2a/0x420 [ 278.734188][T12708] ? __fget_files+0x2a/0x420 [ 278.734214][T12708] ? __fget_files+0x3a0/0x420 [ 278.734240][T12708] ? __fget_files+0x2a/0x420 [ 278.734272][T12708] security_file_ioctl+0xcb/0x2d0 [ 278.734301][T12708] __se_sys_ioctl+0x47/0x170 [ 278.734327][T12708] do_syscall_64+0xfa/0x3b0 [ 278.734346][T12708] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.734376][T12708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.734400][T12708] ? clear_bhb_loop+0x60/0xb0 [ 278.734425][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.734444][T12708] RIP: 0033:0x7f9e6d18e929 [ 278.734462][T12708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.734480][T12708] RSP: 002b:00007f9e6dfca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.734501][T12708] RAX: ffffffffffffffda RBX: 00007f9e6d3b6080 RCX: 00007f9e6d18e929 [ 278.734515][T12708] RDX: 0000000000000000 RSI: 000000000000b702 RDI: 0000000000000004 [ 278.734528][T12708] RBP: 00007f9e6dfca090 R08: 0000000000000000 R09: 0000000000000000 [ 278.734540][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.734552][T12708] R13: 0000000000000000 R14: 00007f9e6d3b6080 R15: 00007ffd6e0bc2f8 [ 278.734584][T12708] [ 278.734703][T12708] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.130990][T12716] xt_CT: No such helper "pptp" [ 279.189811][T12723] netlink: 'syz.2.2431': attribute type 7 has an invalid length. [ 279.210415][T12723] : entered promiscuous mode [ 279.839439][T12753] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 280.031002][T12762] FAULT_INJECTION: forcing a failure. [ 280.031002][T12762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.076254][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.1.2440 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 280.076282][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.076293][T12762] Call Trace: [ 280.076300][T12762] [ 280.076307][T12762] dump_stack_lvl+0x189/0x250 [ 280.076333][T12762] ? __pfx____ratelimit+0x10/0x10 [ 280.076361][T12762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.076382][T12762] ? __pfx__printk+0x10/0x10 [ 280.076417][T12762] should_fail_ex+0x414/0x560 [ 280.076448][T12762] _copy_to_user+0x31/0xb0 [ 280.076472][T12762] simple_read_from_buffer+0xe1/0x170 [ 280.076501][T12762] proc_fail_nth_read+0x1df/0x250 [ 280.076529][T12762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.076558][T12762] ? rw_verify_area+0x258/0x650 [ 280.076578][T12762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.076604][T12762] vfs_read+0x200/0x980 [ 280.076629][T12762] ? __pfx___mutex_lock+0x10/0x10 [ 280.076648][T12762] ? __pfx_vfs_read+0x10/0x10 [ 280.076670][T12762] ? __fget_files+0x2a/0x420 [ 280.076697][T12762] ? __fget_files+0x3a0/0x420 [ 280.076720][T12762] ? __fget_files+0x2a/0x420 [ 280.076752][T12762] ksys_read+0x145/0x250 [ 280.076771][T12762] ? __fget_files+0x3a0/0x420 [ 280.076795][T12762] ? __pfx_ksys_read+0x10/0x10 [ 280.076820][T12762] ? do_syscall_64+0xbe/0x3b0 [ 280.076841][T12762] do_syscall_64+0xfa/0x3b0 [ 280.076857][T12762] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.076883][T12762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.076900][T12762] ? clear_bhb_loop+0x60/0xb0 [ 280.076921][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.076937][T12762] RIP: 0033:0x7f0b4218d33c [ 280.076953][T12762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 280.076968][T12762] RSP: 002b:00007f0b42fe9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.076986][T12762] RAX: ffffffffffffffda RBX: 00007f0b423b6080 RCX: 00007f0b4218d33c [ 280.076998][T12762] RDX: 000000000000000f RSI: 00007f0b42fe90a0 RDI: 0000000000000006 [ 280.077009][T12762] RBP: 00007f0b42fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 280.077020][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.077030][T12762] R13: 0000000000000000 R14: 00007f0b423b6080 R15: 00007ffc8afa5468 [ 280.077058][T12762] [ 282.460790][T12849] bridge_slave_1: left allmulticast mode [ 282.484984][T12849] bridge_slave_1: left promiscuous mode [ 282.501248][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.566991][T12849] bridge_slave_0: left allmulticast mode [ 282.579754][T12849] bridge_slave_0: left promiscuous mode [ 282.597069][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.188617][ T5933] IPVS: starting estimator thread 0... [ 283.284027][T12892] IPVS: using max 34 ests per chain, 81600 per kthread [ 283.322792][ T5933] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 5/7 [ 283.333642][ T5933] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22 [ 283.357894][T12901] __nla_validate_parse: 69 callbacks suppressed [ 283.357929][T12901] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2482'. [ 283.613143][T12910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.716067][T12910] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.215402][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 284.260236][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 284.309771][T12954] netlink: 'syz.3.2496': attribute type 20 has an invalid length. [ 285.241089][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 285.270102][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 285.293502][T13018] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2509'. [ 285.435849][T13027] netlink: 'syz.4.2508': attribute type 5 has an invalid length. [ 285.769776][T13053] netlink: 'syz.4.2515': attribute type 11 has an invalid length. [ 285.779462][T13053] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2515'. [ 286.751317][T13038] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2514'. [ 286.763272][T13060] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 286.786850][T13052] tipc: Resetting bearer [ 286.975108][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2520'. [ 287.264065][T13092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2527'. [ 287.272797][T13091] netlink: 'syz.3.2528': attribute type 13 has an invalid length. [ 287.495956][T13105] pimreg: entered allmulticast mode [ 287.516950][T13105] pimreg: left allmulticast mode [ 287.692449][T13111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 287.818227][T13118] netlink: 'syz.2.2538': attribute type 1 has an invalid length. [ 288.185799][T13145] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 288.518507][T13161] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 288.698041][T13171] __nla_validate_parse: 9 callbacks suppressed [ 288.698059][T13171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2560'. [ 288.789570][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2559'. [ 288.876840][T13180] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 288.901076][T13180] netlink: 'syz.2.2561': attribute type 4 has an invalid length. [ 288.989972][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2564'. [ 288.999363][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2564'. [ 289.057557][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'. [ 289.066629][T13185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2563'. [ 289.090831][T13185] gretap1: entered promiscuous mode [ 289.116001][T13185] gretap1: entered allmulticast mode [ 289.145823][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 289.346559][T13205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.398877][T13205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.563659][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 289.749311][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2574'. [ 289.938277][T13241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 291.013424][T13293] netlink: 'syz.0.2598': attribute type 1 has an invalid length. [ 291.247125][T13305] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.838505][T13335] tipc: Started in network mode [ 291.846772][T13335] tipc: Node identity ac14142f, cluster identity 4711 [ 291.853959][T13335] tipc: New replicast peer: 0.0.0.0 [ 291.860828][T13335] tipc: Enabled bearer , priority 10 [ 291.916093][T13335] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 292.193077][T13351] sctp: [Deprecated]: syz.0.2620 (pid 13351) Use of int in max_burst socket option deprecated. [ 292.193077][T13351] Use struct sctp_assoc_value instead [ 292.317316][T13356] netlink: 'syz.3.2622': attribute type 2 has an invalid length. [ 292.976771][ T5960] tipc: Node number set to 2886997039 [ 293.323809][T13413] x_tables: ip_tables: udp match: only valid for protocol 17 [ 293.431438][T13417] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 293.582607][T13424] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 293.629170][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.665006][T13428] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 293.733318][T13435] __nla_validate_parse: 18 callbacks suppressed [ 293.733337][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 293.771584][T13435] gtp1: entered promiscuous mode [ 293.785745][T13435] gtp1: entered allmulticast mode [ 293.816478][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 293.867184][T13440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2651'. [ 294.066036][T13444] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 294.096888][T13451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2654'. [ 294.316111][T13460] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2660'. [ 294.424420][T13464] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2662'. [ 294.502938][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2663'. [ 294.628034][T13472] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 294.635985][T13472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.643239][T13472] IPv6: NLM_F_CREATE should be set when creating new route [ 294.652001][T13472] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 294.660117][T13473] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 294.668138][T13473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.675573][T13472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.684261][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2664'. [ 295.003259][T13492] netlink: 'syz.4.2671': attribute type 1 has an invalid length. [ 295.022201][T13492] netlink: 'syz.4.2671': attribute type 1 has an invalid length. [ 295.116423][T13498] netlink: 'syz.0.2673': attribute type 3 has an invalid length. [ 295.133352][T13498] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 295.220410][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 295.245793][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2674'. [ 295.486153][T13525] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.493650][T13525] tipc: Enabled bearer , priority 10 [ 295.626179][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.720047][T13539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.872127][T13548] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 295.896019][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.919152][T13539] macvtap1: entered promiscuous mode [ 295.924656][T13539] macvtap1: entered allmulticast mode [ 295.933569][T13539] vlan0: entered allmulticast mode [ 295.942322][T13539] veth0_vlan: entered allmulticast mode [ 296.130285][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 296.425580][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.780568][T13593] netlink: 'syz.2.2704': attribute type 1 has an invalid length. [ 296.848703][T13591] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 297.014580][T13615] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.027362][T13615] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 297.061848][T13617] netlink: 'syz.1.2710': attribute type 10 has an invalid length. [ 297.111571][T13617] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 297.133866][T13615] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.145918][T13615] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 297.232169][T13615] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.242562][T13615] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 297.289533][T13615] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.299409][T13615] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 297.400207][T13615] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 297.409151][T13615] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 297.427729][T13615] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 297.436853][T13615] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 297.454754][T13615] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 297.463169][T13615] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 297.480071][T13615] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 297.488409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.496140][T13615] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.002321][T13644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 298.498024][T13673] netlink: 'syz.1.2730': attribute type 83 has an invalid length. [ 298.524454][T13675] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.531676][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.856219][T13694] netlink: 'syz.3.2736': attribute type 1 has an invalid length. [ 298.865128][T13694] __nla_validate_parse: 17 callbacks suppressed [ 298.865145][T13694] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2736'. [ 299.576173][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.285483][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 300.477259][T13732] tap0: tun_chr_ioctl cmd 1074025672 [ 300.482775][T13732] tap0: ignored: set checksum disabled [ 300.495862][T13732] tap0: tun_chr_ioctl cmd 1074025673 [ 300.605774][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.648030][T13741] netlink: 'syz.2.2749': attribute type 20 has an invalid length. [ 300.665893][T13744] pim6reg1: entered promiscuous mode [ 300.680455][T13744] pim6reg1: entered allmulticast mode [ 300.858961][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 300.987230][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2753'. [ 301.023843][T13761] netlink: 'syz.4.2755': attribute type 4 has an invalid length. [ 301.034330][T13761] netlink: 'syz.4.2755': attribute type 4 has an invalid length. [ 301.058459][T13762] xt_nfacct: accounting object `syz1' does not exists [ 301.192514][T13769] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2757'. [ 301.339275][T13779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2758'. [ 301.645936][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.656613][T13791] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2762'. [ 302.685994][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.709939][T13816] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 303.735526][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.902954][T13823] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 304.135286][T13834] sit0: entered promiscuous mode [ 304.171168][T13834] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 304.223797][T13834] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2776'. [ 304.389716][T13841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2777'. [ 304.429905][T13845] tipc: Enabled bearer , priority 10 [ 304.554425][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'. [ 304.579892][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2782'. [ 304.609538][T13853] netlink: 'syz.1.2782': attribute type 83 has an invalid length. [ 304.777430][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.920088][T13858] IPVS: Scheduler module ip_vs_sip not found [ 305.326039][T13878] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 305.427834][T13870] infiniband syz2: set active [ 305.432873][T13870] infiniband syz2: added veth1_vlan [ 305.495196][T13870] RDS/IB: syz2: added [ 305.501948][T13870] smc: adding ib device syz2 with port count 1 [ 305.508494][T13870] smc: ib device syz2 port 1 has pnetid [ 305.545623][ T9] tipc: Node number set to 3449131869 [ 305.603618][T13891] dvmrp0: entered allmulticast mode [ 305.706079][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 305.747184][T13897] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 305.804118][T13897] policy can only be matched on NF_INET_PRE_ROUTING [ 305.804139][T13897] unable to load match [ 305.810901][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.000580][T13906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'. [ 306.284379][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2802'. [ 306.301609][T13914] netlink: 'syz.2.2801': attribute type 4 has an invalid length. [ 306.311586][T13914] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2801'. [ 306.374970][T13914] bond0: MTU too low for tipc bearer [ 306.385586][T13914] tipc: Disabling bearer [ 306.423291][T13914] : renamed from bond0 [ 306.599866][T13930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2807'. [ 306.845507][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.280060][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2816'. [ 307.485862][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 307.711324][T13971] wg2: left promiscuous mode [ 307.724867][T13971] wg2: entered promiscuous mode [ 307.732350][T13971] wg2: entered allmulticast mode [ 307.885524][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.048033][T13983] bridge0: port 1(veth0_to_bridge) entered blocking state [ 308.085380][T13983] bridge0: port 1(veth0_to_bridge) entered disabled state [ 308.144440][T13983] veth0_to_bridge: entered allmulticast mode [ 308.174580][T13983] veth0_to_bridge: entered promiscuous mode [ 308.209079][T13983] bridge0: port 1(veth0_to_bridge) entered blocking state [ 308.217015][T13983] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 308.319658][T14001] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 308.925582][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.252491][T14059] __nla_validate_parse: 5 callbacks suppressed [ 309.252512][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 309.509856][T14063] xt_hashlimit: max too large, truncated to 1048576 [ 309.773958][T14076] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.807154][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'. [ 309.859679][T14078] macvlan0: left promiscuous mode [ 309.864954][T14078] netlink: 'syz.2.2858': attribute type 1 has an invalid length. [ 309.916108][T14078] netlink: 'syz.2.2858': attribute type 2 has an invalid length. [ 309.965934][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.543291][T14103] xt_connbytes: Forcing CT accounting to be enabled [ 310.576569][T14103] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 310.608293][ T5856] syz_tun (unregistering): left promiscuous mode [ 310.632321][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 310.683686][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.703828][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.716841][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.741293][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.749171][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.803417][T14115] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 310.818255][T14115] IPVS: set_ctl: invalid protocol: 4 172.20.20.23:20001 [ 311.005580][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.462052][T14130] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 311.684908][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2875'. [ 311.773347][T14136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2875'. [ 312.055567][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.201721][T14153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2878'. [ 312.227881][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'. [ 312.245647][T14153] unsupported nlmsg_type 40 [ 312.266128][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'. [ 312.275089][T14154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2880'. [ 312.301608][T14154] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2880'. [ 312.426905][T14110] chnl_net:caif_netlink_parms(): no params data found [ 312.724738][T14110] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.736806][T14110] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.744324][T14110] bridge_slave_0: entered allmulticast mode [ 312.752783][T14110] bridge_slave_0: entered promiscuous mode [ 312.762494][T14110] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.770812][T14110] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.778351][T14110] bridge_slave_1: entered allmulticast mode [ 312.786676][T14110] bridge_slave_1: entered promiscuous mode [ 312.849944][ T5871] Bluetooth: hci2: command tx timeout [ 312.864419][ T51] Bluetooth: hci0: command tx timeout [ 312.962128][T14110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.018224][T14110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.085822][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.123865][T14186] vlan2: entered allmulticast mode [ 313.131675][T14186] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 313.209517][T14110] team0: Port device team_slave_0 added [ 313.290415][T14110] team0: Port device team_slave_1 added [ 313.372234][T14197] netlink: 'syz.3.2894': attribute type 19 has an invalid length. [ 313.414828][T14110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.424687][T14110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.457850][T14110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.475303][T14110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.525610][T14110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.591863][T14110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.819393][T14110] hsr_slave_0: entered promiscuous mode [ 313.844497][T14110] hsr_slave_1: entered promiscuous mode [ 313.866524][T14110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.884422][T14110] Cannot create hsr debugfs directory [ 314.125847][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.494039][T14110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.511113][T14110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.517236][T14249] __nla_validate_parse: 7 callbacks suppressed [ 314.517253][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2911'. [ 314.725917][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 314.764179][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 314.801049][T14264] netlink: 'syz.2.2914': attribute type 10 has an invalid length. [ 314.821983][T14110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.854799][T14110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.882282][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 314.882921][T14270] netlink: 'syz.1.2916': attribute type 11 has an invalid length. [ 314.895990][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 314.909828][T14264] bridge_slave_1: left promiscuous mode [ 314.920390][T14264] bridge_slave_1: entered promiscuous mode [ 314.926407][ T51] Bluetooth: hci2: command tx timeout [ 314.932911][T14270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2916'. [ 314.933352][T14264] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 314.964096][T14268] netlink: 'syz.4.2915': attribute type 11 has an invalid length. [ 314.972359][T14268] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2915'. [ 314.998346][T14110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.016268][T14110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.028662][T14270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2916'. [ 315.165707][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.211612][T14110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.235348][T14110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.284960][T14289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2921'. [ 315.570183][T14110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.598195][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2925'. [ 315.612240][T14110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.667172][T14110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.692300][T14110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.940449][T14110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.029829][T14110] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.107442][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.114690][T12985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.151056][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.158323][T12985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.205749][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 316.330066][T14110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.375011][T14110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.510618][T14356] netlink: 'syz.4.2937': attribute type 62 has an invalid length. [ 316.940229][T14110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.969255][T14376] netlink: 'syz.1.2943': attribute type 83 has an invalid length. [ 317.015724][ T51] Bluetooth: hci2: command tx timeout [ 317.092757][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.123239][T14110] veth0_vlan: entered promiscuous mode [ 317.139613][T14110] veth1_vlan: entered promiscuous mode [ 317.192203][T14110] veth0_macvtap: entered promiscuous mode [ 317.204626][T14110] veth1_macvtap: entered promiscuous mode [ 317.236527][T14110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.245613][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.268468][T14110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.292343][T14110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.313454][T14110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.323598][T14110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.333536][T14110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.534859][T12993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.551024][T12993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.723489][T12989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.753271][T12989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.285886][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.318402][T14414] netlink: 'syz.2.2956': attribute type 11 has an invalid length. [ 318.348410][T14415] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 318.791912][T14429] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 318.912572][T14443] FAULT_INJECTION: forcing a failure. [ 318.912572][T14443] name failslab, interval 1, probability 0, space 0, times 0 [ 318.935643][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.0.2967 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 318.935673][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.935684][T14443] Call Trace: [ 318.935691][T14443] [ 318.935698][T14443] dump_stack_lvl+0x189/0x250 [ 318.935725][T14443] ? __pfx____ratelimit+0x10/0x10 [ 318.935753][T14443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.935774][T14443] ? __pfx__printk+0x10/0x10 [ 318.935818][T14443] ? __pfx___might_resched+0x10/0x10 [ 318.935840][T14443] ? fs_reclaim_acquire+0x7d/0x100 [ 318.935871][T14443] should_fail_ex+0x414/0x560 [ 318.935903][T14443] should_failslab+0xa8/0x100 [ 318.935929][T14443] __kmalloc_noprof+0xcb/0x4f0 [ 318.935951][T14443] ? iovec_from_user+0x87/0x250 [ 318.935978][T14443] iovec_from_user+0x87/0x250 [ 318.936009][T14443] __import_iovec+0x163/0x7f0 [ 318.936041][T14443] import_iovec+0x74/0xa0 [ 318.936067][T14443] ___sys_recvmsg+0x43a/0x510 [ 318.936098][T14443] ? __pfx____sys_recvmsg+0x10/0x10 [ 318.936165][T14443] ? __fget_files+0x3a0/0x420 [ 318.936200][T14443] do_recvmmsg+0x307/0x770 [ 318.936232][T14443] ? __pfx_do_recvmmsg+0x10/0x10 [ 318.936269][T14443] ? _copy_from_user+0x94/0xb0 [ 318.936305][T14443] __x64_sys_recvmmsg+0x1af/0x240 [ 318.936332][T14443] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 318.936354][T14443] ? rcu_is_watching+0x15/0xb0 [ 318.936379][T14443] ? do_syscall_64+0xbe/0x3b0 [ 318.936400][T14443] do_syscall_64+0xfa/0x3b0 [ 318.936415][T14443] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.936441][T14443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.936459][T14443] ? clear_bhb_loop+0x60/0xb0 [ 318.936480][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.936496][T14443] RIP: 0033:0x7fbb11f8e929 [ 318.936512][T14443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.936528][T14443] RSP: 002b:00007fbb12dbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 318.936548][T14443] RAX: ffffffffffffffda RBX: 00007fbb121b5fa0 RCX: 00007fbb11f8e929 [ 318.936561][T14443] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 318.936572][T14443] RBP: 00007fbb12dbb090 R08: 0000200000003700 R09: 0000000000000000 [ 318.936584][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.936594][T14443] R13: 0000000000000000 R14: 00007fbb121b5fa0 R15: 00007ffd00978d88 [ 318.936622][T14443] [ 319.218087][ T51] Bluetooth: hci2: command tx timeout [ 319.325506][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.661809][ T5866] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 319.673773][ T5866] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 319.682209][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 319.694382][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.704450][ T5866] RIP: 0010:klist_remove+0x14a/0x340 [ 319.709754][ T5866] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 88 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 88 be f6 49 8b 44 24 58 48 89 44 24 08 [ 319.729410][ T5866] RSP: 0018:ffffc900040cf600 EFLAGS: 00010202 [ 319.735492][ T5866] RAX: 000000000000000b RBX: ffff888032ea8000 RCX: 0000000000000000 [ 319.743468][ T5866] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 319.751450][ T5866] RBP: ffffc900040cf6e8 R08: ffffffff8f885c03 R09: 1ffffffff1f10b80 [ 319.759443][ T5866] R10: dffffc0000000000 R11: fffffbfff1f10b81 R12: 0000000000000000 [ 319.767420][ T5866] R13: 1ffff1100ae34e0c R14: ffff8880571a7060 R15: dffffc0000000000 [ 319.775393][ T5866] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 319.784325][ T5866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.790919][ T5866] CR2: 00007fbb121b6070 CR3: 000000007e7c8000 CR4: 00000000003526f0 [ 319.798901][ T5866] Call Trace: [ 319.802190][ T5866] [ 319.805140][ T5866] ? __pfx_klist_remove+0x10/0x10 [ 319.810171][ T5866] ? __pfx_kobject_move+0x10/0x10 [ 319.815200][ T5866] ? get_device_parent+0x366/0x3a0 [ 319.820356][ T5866] device_move+0x193/0x700 [ 319.824794][ T5866] hci_conn_del_sysfs+0xb8/0x170 [ 319.829746][ T5866] hci_conn_del+0x8ff/0xcb0 [ 319.834259][ T5866] hci_conn_hash_flush+0x191/0x230 [ 319.839501][ T5866] hci_dev_close_sync+0xaef/0x1330 [ 319.844630][ T5866] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 319.850187][ T5866] ? up_write+0x1c4/0x420 [ 319.854532][ T5866] hci_unregister_dev+0x21a/0x510 [ 319.859565][ T5866] vhci_release+0x80/0xd0 [ 319.863895][ T5866] ? __pfx_vhci_release+0x10/0x10 [ 319.868920][ T5866] __fput+0x449/0xa70 [ 319.872911][ T5866] task_work_run+0x1d1/0x260 [ 319.877515][ T5866] ? __pfx_task_work_run+0x10/0x10 [ 319.882638][ T5866] ? kmem_cache_free+0x18f/0x400 [ 319.887588][ T5866] do_exit+0x6b5/0x22e0 [ 319.891748][ T5866] ? do_raw_spin_lock+0x121/0x290 [ 319.896780][ T5866] ? __pfx_do_exit+0x10/0x10 [ 319.901380][ T5866] ? cgroup_freezing+0x20/0x360 [ 319.906274][ T5866] do_group_exit+0x21c/0x2d0 [ 319.910879][ T5866] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.916111][ T5866] get_signal+0x1286/0x1340 [ 319.920644][ T5866] arch_do_signal_or_restart+0x9a/0x750 [ 319.926204][ T5866] ? fput_close_sync+0x119/0x200 [ 319.931146][ T5866] ? kmem_cache_free+0x309/0x400 [ 319.936098][ T5866] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 319.942267][ T5866] ? exit_to_user_mode_loop+0x40/0x110 [ 319.947739][ T5866] exit_to_user_mode_loop+0x75/0x110 [ 319.953047][ T5866] do_syscall_64+0x2bd/0x3b0 [ 319.957664][ T5866] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.962877][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.969124][ T5866] ? clear_bhb_loop+0x60/0xb0 [ 319.973821][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.979730][ T5866] RIP: 0033:0x7fabbd38d33c [ 319.984153][ T5866] Code: Unable to access opcode bytes at 0x7fabbd38d312. [ 319.991177][ T5866] RSP: 002b:00007ffc51f19800 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.999602][ T5866] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fabbd38d33c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 320.007583][ T5866] RDX: 0000000000000030 RSI: 00007ffc51f198c0 RDI: 00000000000000f9 [ 320.015570][ T5866] RBP: 00007ffc51f1986c R08: 0000000000000000 R09: 0079746972756365 [ 320.023567][ T5866] R10: 00007fabbd5827e0 R11: 0000000000000246 R12: 0000000000000271 [ 320.031562][ T5866] R13: 00000000000927c0 R14: 000000000004dd6d R15: 00007ffc51f198c0 [ 320.039555][ T5866] [ 320.042590][ T5866] Modules linked in: [ 320.047590][ T5866] ---[ end trace 0000000000000000 ]--- [ 320.095219][T14461] __nla_validate_parse: 5 callbacks suppressed [ 320.095255][T14461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2975'. [ 320.177145][ T5866] RIP: 0010:klist_remove+0x14a/0x340 [ 320.182503][ T5866] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 88 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 88 be f6 49 8b 44 24 58 48 89 44 24 08 [ 320.255371][ T5866] RSP: 0018:ffffc900040cf600 EFLAGS: 00010202 [ 320.264029][ T5866] RAX: 000000000000000b RBX: ffff888032ea8000 RCX: 0000000000000000 [ 320.272272][ T5866] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 320.282151][ T5866] RBP: ffffc900040cf6e8 R08: ffffffff8f885c03 R09: 1ffffffff1f10b80 [ 320.293443][ T5866] R10: dffffc0000000000 R11: fffffbfff1f10b81 R12: 0000000000000000 [ 320.303716][ T5866] R13: 1ffff1100ae34e0c R14: ffff8880571a7060 R15: dffffc0000000000 [ 320.312237][ T5866] FS: 0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 320.324588][ T5866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.331377][ T5866] CR2: 000000110c2556cc CR3: 000000000df38000 CR4: 00000000003526f0 [ 320.342034][ T5866] Kernel panic - not syncing: Fatal exception [ 320.348503][ T5866] Kernel Offset: disabled [ 320.352837][ T5866] Rebooting in 86400 seconds..