last executing test programs: 6.936227807s ago: executing program 3 (id=1694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fb5ec1", 'if\\Y', "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 6.769928449s ago: executing program 3 (id=1696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000200)={0x0, 0xffffffc9, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b0700000000000000155037", 0x55}], 0x1}, 0x40000) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg(r7, &(0x7f0000000200)={0x0, 0xffffffc9, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b0700000000000000155037", 0x55}], 0x1}, 0x40000) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, 0x50) (async) 5.429518646s ago: executing program 3 (id=1698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x931766f6319eed44) unshare(0x6a040000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000024c0)}], 0x1, 0x0, 0x0, 0x4008011}, 0x4040004) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getgid() sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r6, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 2.198360161s ago: executing program 0 (id=1709): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r3, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xb}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x400ff80) 1.874195246s ago: executing program 2 (id=1712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x24004000) socket(0x10, 0x80005, 0x0) 1.799882375s ago: executing program 3 (id=1713): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000800141002000400000001048411b24c00022341b7537e4cba46a378c834ac494ffa45ede1f0f2f88f987dbafe1b2743430781427bec465b7bcc91fd681d32f87360cd4d9136b8bbf5efd2f29d986bff457faee104c6abfdb6fb33f198f702bde278d857a49f28d4ae138f05bc7e20d0d6c38192e362b93de9a98bac25029fc4aa4c", @ANYRES16=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) sendmsg(r10, &(0x7f00000050c0)={0x0, 0x0, 0x0}, 0x20008840) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f61640034000280080004400000009e080005400000000008000340000000570800024000000003080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}}, 0x80) (async) socket$xdp(0x2c, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r14) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 1.705096759s ago: executing program 2 (id=1715): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001800)={{0xffffffffffffffff, &(0x7f0000000000)=':}-$.\x00', 0x0, &(0x7f0000000040)={@align=0x5, {0x8dd, 0xb}}, 0x8000, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, 0x7, &(0x7f0000001700)=[{0x2, 0x2, &(0x7f0000000100)='&}!C]\x00', &(0x7f0000000140)="84b7c4", 0x3, 0x10}, {0x2, 0x101, &(0x7f0000000180)='*\x00', &(0x7f00000001c0)="ac9ac57ce1f32dc1a94082021e994993d512e3d18b004e51e8450b54dc7847a854b74e1d4ae5b1dcc8a41b9a0fda9e4ed25beca42598e578a7f85e1702785d51c83056b9f57c43d3d9109c6a8f9cde9315a83ed79b4c74b2fb720a044632388a01558dbaea5b60a7955809a8d20ea803fbf9d9028463", 0x76, 0xa}, {0x2, 0x6, &(0x7f0000000240)='\x00', &(0x7f0000000280)="503cf72749b926fe9a201ad8e26b75028a6c3156198dedcc97927068761e791351e403961dca7c579950822ebe91a6764f9924eaa6ceb001fc732b86617d6df4a49726ba08e59f7670413d4107bc9d4538bfef40b542050ae30794cae030a864bbdeb210b9969553870b7948e7222096b4f185053164ff389d375497e7032c2b6baf9436b5afe937", 0x88}, {0x3, 0x9db, &(0x7f0000000340)='\xc0%[-\x00', &(0x7f0000000380)="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", 0x1000, 0x20}, {0x3, 0xf, &(0x7f0000001380)='/{\x00', &(0x7f00000013c0)="93ecd49da88195dc5fed45d2e71478c5e9ecdca4ff703fb35d9b0c4dd8d554e351d0248f8793ccae9cc53edde0965e91bd553d15d1562bfb2b274ff317f2f8104eb0439616e7d4ef98971baac9a535279adb301339a3df7d86293cc652a7fb967e5a857f828f29d60c7b4c39375e7908fcb274bb0dbf9a7173c46c23502fd0ef93e8372078c8f06767cdb1b2a975294ea5c5c2abca439f4ef0fc46c1062d58a71fdeaf4c262ab285981f3502504def2f58682349bdc8acfc4deb9e8964ed9e6b427f71441b31eaf14c47534437ed0f97208c5a3d947c9a66f2", 0xd9, 0x2}, {0x1, 0x8, &(0x7f00000014c0)='&\x00', &(0x7f0000001500)="a854ac964562a1ace9c3494450f8e96a0268435af05f65a98869aa804079830e71f60586142662cf6482c5cb186d049b12467f76cf1589d3e3eaa1fcc34e588c54f0cba968c1f3a4500adb430b3b6a5899aee35abc5cdae9684a7014659189f7b6cab60cebbb5bc1ce9606fee9f3a87763898c3ec8839df74b0e40550e2d199a4ff73259a32654ae9d31dddf0c4e573cdb07f3", 0x93, 0xa}, {0x2, 0xb, &(0x7f00000015c0)='\xa2\x00', &(0x7f0000001600)="ab4990aa3adc7c9ec7acc3978749e94a840237800ed91f14de6dd12d54d5040f632062bc4161dd4b1a7c420353c733a36c6f5826a8eb12acb38da3932fef7581429babc482590c379d46cf2b98bc0d3cd7634ea34523a116e4c27d8c3be1c6224dd7d5547ab0382a8c610bdc345a2a7c436269989482133fe23d66ee648a6f0bc3b1581b6e7b69adb05ac97affbc3cffa0994bdb4c26d61493f8705e574c4106974be1ba72a39e77f839b0c3fc4eb5134689d96aeee16e4f400dbf32d4f1172eace16ad04ab78ba9943df19e2d834cd1d008213c4c", 0xd5, 0x2}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={0x1, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}}, 0x240080c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x92, '\x00', r2, r0, 0x1, 0x0, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000001c00)) syz_emit_ethernet(0xc7, &(0x7f0000001c40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@x25={0x805, {0x0, 0x6, 0x1b, "f3188d46de04f310d00d87245c3487297f1552e05a2cbefb3ae0b31415b4084482de902eceb59a8174beb2c9377bf500580c85f3450cc78519dc6f95849da15e11171a16fe6b975a1f65bf1b56c0ba9ba81399872a1eddafbbd24c70bc61ffd6e6e6e264c5786d6705df87d17b85cacfe238b25b0d3cc9d82a6b7aead55708658a2eeefe2a5961cf5dc365243958a9c0edc0a8e4fea75647b02e2050ed744349483273ec11578deb7b83f5d35bd8df83400d"}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002480)=@broute={'broute\x00', 0x20, 0x5, 0x6de, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001d80], 0x0, &(0x7f0000001d40), &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0xa740b8d8e07d0ed4, 0x17, 'pimreg0\x00', 'vlan0\x00', 'sit0\x00', 'bridge0\x00', @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9e, 0x116, 0x14e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x2, 0x9000, 0x1, 0x5}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x1, 0x8000, 0xb, 0x0, 0x0, "4cef06971decb57bb3cf4984332f81cf20f2b67699f968b33c844011fd3b2287c815dfd17903b5b7016482123ae31fe523620aa253e8d759d815e7de8b640035"}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}}, {0x5, 0x2, 0x88be, 'syz_tun\x00', 'bond_slave_0\x00', 'dummy0\x00', 'macsec0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, [0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0x3c32f3bd}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x40, 0x8809, 'pim6reg\x00', 'caif0\x00', 'virt_wifi0\x00', 'wg0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0x4e3231fe9d10b28b], @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0x116, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x601, 0x0, 0x4, 0x1, 0x0, "dfc2d00dc21e1eba4d7ca70f423fba5d253447163a15bec4714764fbcd3f967801751c42805a217d3b088958a6d0a641da7ec7adec05e0b680a81f4625d1fa09"}}}}, {0x11, 0x10, 0x6004, 'bridge_slave_1\x00', 'dvmrp0\x00', 'ip6gretap0\x00', 'veth1_to_team\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x9e, 0x166, 0x1de, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x9, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x9}}}}, @common=@nflog={'nflog\x00', 0x50, {{0x101, 0x7fff, 0x401, 0x0, 0x0, "06406c54f09da7dba413defd7fb163a067de70d75377668f9bf7b00561ce57228254b7674c82a11f78f48bb77378dc6740be4a8a0f242ca0210cf7245cec8ba9"}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0xfffa, 0x1, 0x0, "01645d832d7c29eb8b058e51ff0b297b0e1d69a0a98dba4bedfd021cd907703525f64bfebef230755a7ef4df32da8460eb10dca29b2e8a6778f9d1a85b247ba4"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0xc, 0x11, 0x6007, 'wg2\x00', 'wg0\x00', 'geneve0\x00', 'ip6erspan0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xee, [@state={{'state\x00', 0x0, 0x8}, {{0x2}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x9a7, {0x800}}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x756) r5 = accept4$vsock_stream(r0, &(0x7f0000002500)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000002540)=0x2, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000002580)={0x4, {{0xa, 0x4e24, 0x6, @remote, 0x81}}}, 0x88) connect(r5, &(0x7f0000002640)=@caif=@util={0x25, "ade009a7c594718b1f1772128ca4e25f"}, 0x80) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000026c0)={0x0, 0x40}, &(0x7f0000002700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002740)={r6, @in6={{0xa, 0x4e22, 0xabf, @empty, 0x1}}, 0x4, 0x5}, &(0x7f0000002800)=0x90) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa4, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x28044011}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000002b80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x7c, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2008c0d1}, 0x80) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002bc0), 0x4000, 0x0) ioctl$PPPIOCGIDLE32(r10, 0x8008743f, &(0x7f0000002c00)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002cc0)={{r0}, &(0x7f0000002c40), &(0x7f0000002c80)='%pK \x00'}, 0x20) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000033c0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003380)={&(0x7f0000002d40)={0x628, r8, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x5}, {0x3, 0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x4, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x5}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x3, 0x1}, {0x6, 0x8}, {0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x6}, {0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x4, 0x9}, {0x3, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x5}, {0x5, 0xa}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x3}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x4}, {0x6, 0x2}, {0x6}, {0x0, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x40, 0x2, 0x8, 0xa8a, 0xa]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0x2, 0x3, 0x7fff, 0xa, 0x3, 0x9]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x1, 0x7}, {0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x1}, {0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x1, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x9}, {0x2, 0xa}, {0x5, 0x2}, {0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x9}, {0x6, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x4}, {0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x6, 0x7}, {0x7, 0xa}, {0x3, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x5, 0x8}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x7, 0x3}, {0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {}, {0x1}, {0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x8, 0x3, 0x6, 0x9, 0x5, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xaf, 0x8fb, 0x6, 0x4dd0, 0xde, 0x22, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc, 0xff80, 0x71, 0x2b, 0xd, 0x6]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x4, 0x18, 0x36, 0x2, 0x16, 0x6, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x9}, {0x2, 0x5}, {0x6, 0x7}, {0x1}, {0x0, 0x9}, {0x4, 0x5}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x3}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x4}, {0x7, 0x5}, {0x2, 0x4}, {0x0, 0x7}, {0x3, 0xa}, {0x2}, {0x2}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x3}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x5}, {0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x2, 0x5}, {0x6, 0x6}, {0x6, 0x1}, {0x4}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x1b, 0x5, 0x18, 0x36, 0x3, 0x0, 0x4, 0x6, 0xc, 0x6, 0x2, 0x5, 0x5, 0x36, 0x2, 0x1, 0x18, 0xc, 0x1e]}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ae, 0xfd42, 0x9, 0x0, 0x9, 0x3, 0xfff8, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xc, 0x7, 0x10, 0x615]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x5, 0x5, 0x6, 0x1, 0x9, 0x1, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x60, 0x6, 0x4, 0x6, 0x30, 0x1b, 0xb, 0x1b, 0x3a, 0x12, 0x12, 0x18, 0x16, 0xb, 0x1, 0x9, 0x1, 0x75, 0x9, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0xf2, 0x10, 0x5, 0x7752, 0x10e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x0, 0x3, 0xbf, 0x2000, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x7}, {0x6, 0x6}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xd}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0x9}, {0x3, 0xa}, {0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0xa}, {0x4, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0xec5245eb848ab813}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x1, 0x7fff, 0xa, 0xa299, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x7, 0x6, 0x5, 0x4, 0xfe6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x36, 0x16, 0x60, 0xc, 0x24, 0x3, 0x48, 0x60, 0x60, 0x12, 0xb, 0x3b, 0x1, 0x2]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x0, 0x10, 0xb, 0x2, 0x1, 0x48, 0x16, 0x4, 0x1, 0x48, 0x3, 0x1, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x12, 0x5, 0x1, 0x48, 0x60, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x16, 0x60, 0x75, 0xb, 0x48, 0x1, 0x9, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x7}, {0x0, 0x1}, {0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0xa}, {}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x61, 0x101, 0x5, 0x6, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x24, 0x24, 0x60, 0x2b, 0x3, 0x65, 0x4, 0x36, 0x18, 0x6c, 0x48, 0x6, 0xb, 0x48, 0x1, 0x5, 0x5]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0xa}, {0x2}, {0x2, 0x4}, {0x2, 0x9}, {}, {0x5, 0x2}, {0x2, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x4}, {0x4, 0x6}, {0x2, 0xa}, {0x2, 0xa}, {0x3, 0x2}, {0x6}, {0x3, 0xa}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x3}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf9, 0x5, 0x7, 0xb6e, 0x6, 0x618, 0xa3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x7, 0xff, 0x1, 0x400, 0xfff9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x6c, 0x36, 0x1, 0x4, 0x1, 0x16, 0x41, 0x1b, 0x4, 0x12, 0x18, 0x48, 0x3d, 0x48, 0xc, 0x3, 0xb, 0x6f67678c762e4da4, 0x12, 0x18, 0xbba51f17d97fd517, 0xc, 0x3, 0x6c, 0x12, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x6c, 0x1, 0x16, 0xb, 0x6c, 0x44, 0x2, 0x9, 0x6, 0xc, 0x0, 0x14, 0xb, 0xb, 0x30, 0x3, 0x2, 0x9, 0x1b, 0x12, 0x36, 0x4, 0x9, 0x6c, 0x5, 0x1b, 0x48, 0x36, 0x1c, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x2}, {0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x6}, {0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0x6}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x7}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x5}, {}, {0x1, 0x1}, {0x1, 0xa}, {0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x5, 0x9, 0x3ff, 0x1, 0x100, 0xa]}}]}]}]}, 0x628}}, 0x20000850) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)=@getaddr={0x14, 0x16, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40844) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003800)={&(0x7f0000003500)="c3ca80ac421ac2e64f5cc0174503139b6cafc4ac15c74a29741af2ba2c9031ddb420b705be1026747c3705c98a8e5d753b2e53d7e3fa84e1efc659aa05436b6dcabcb0b9035921bbce031c6e565f6f956d172feb1e2de7b07c6d4168e1c86bc8fc7c66be43cb55512ced4744cd9afe11bf2f52f67d21f16ee17877069cf90ec3ce4b63c0183464990859e8e20ae46ef60daa323cd834be574266d92d4566f67adb", &(0x7f00000035c0)=""/179, &(0x7f0000003680)="3c8e23bb74cd66b0ab32e787271080cb15fd533b6a554737629f3e8908e46972c1bd28695c5ac0091190d9faea8d9aebf9ce935b317f21253027548ddc05bcea34872fe256f711a1a13af841f6a4ef7838369ef0fec1b443afeacb20125f898b81effdef3a8ce804c2cba0dfcc34b34f96baf637e7fa1e8474dd7134e980bf4f5bf463c44e64841976f95f3416a8684a54641f16d619847ce498c029f8a88994d339bbccd9aac4db3927ebcb6b2bcaa6c3439a306a65a09bb1308fd0e4695924fc4efa6e29", &(0x7f0000003780)="3bc19719cf48772d56eab4510d3597ac54544d71de7ee36428a9e52c724c296ed0bce174032b42d22252ed10fa48dbe397d3ee5042d0452a41cacbf989068f733ca5a192cbc880b1b50e39ae6f161de59d8fdf4f396685d12d1f99f4eb62d84e1029c3a8fa6add16e425da9d33", 0x7f, r0}, 0x38) 1.691112919s ago: executing program 0 (id=1716): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010100000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 1.628099899s ago: executing program 4 (id=1717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000140), 0x3, r1}, 0x38) 1.569181884s ago: executing program 3 (id=1718): r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x41, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', r1, 0x29, 0x40, 0x3, 0x5, 0x12, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0x4, 0xe}}) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) 1.508292231s ago: executing program 2 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000032c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125ce882cbf400930bf4533f00", 0x21}, {&(0x7f00000022c0)="d6cabafacd7b58feddd21dea1b799902b71d2f595e70e255a4133c5c4d52a0b85515d5fa5f44c04674e8331b03d2261aa7bd653a65c0b74124ba728a16a9c43aacd74a79cff43a4b51a3bf5de438f3eb2fe5e28b7b23f873dc4b02330cec90ad289fa89ac074f64027ca95367bb1badf257e03ae8be44fb5d482ef390ab3b99dad2d90661cbf4c6dbe43dafb8ae7cb7cab250887ccfe4e770cd1ea0500000000000000c2f05ec80219bbbadcf450d5a4df88151600c2ea84e2dec5022eca39c124f3ff4c0ccf88eb0abbd22a2af642f9deb6db5a0b344eb1f580f3d0813e66b6982ecd6e58a8ce2f9487b56d964419ccbfc7a05be02b48ed068a31f01f112ab2cfe7d4107dd99ca241f6561ef7f7a6e54a1a3b14b9c92220b17f5ce399aac25edc5a7eddcba926aee075c6ca25608c998745e8330bdfee502a98e8a3ceaa89484ffb729cef3e6a92b5856d0e3321db3ff7d989a0e312c8908c792b9861ae1275bd8df9235abdc8fd8c2cd673a110a43ec639a46835630601705e4589c569a2a47d2d4b7544b5d30566437feb356abdbdd74a9af057b7b5813f7ef507fee4d86545d4680f468c00505add06f5ee24c322e35a9476d33f1cb5c99e2ca1cb52119e811e8e2ae1b4a89c5abed90ac6b42a1974111e98c427027302d23a88e72bd95ba980d65e7fbdec3ee0222d08b98d7de20ea97236025a1985dc2da7ef8b3af0cbfdc0dbce443da0bcb635be13734b781c3235655959b0a24a276265363b1dfd526ed680dd19f1b4f45cfb0380fe8f915aa740147709a97337e1c7d8f8bb84470ff98178951628dbe92c6ffb9124f7e564c62bb77b4cf6dc6f437a0c0e6dda97b20ab1d3571c3b10a562aa634711fbb1c992ede758943c126d11c98924c641c8f9539c3403adf5a97be9a479485cec844a61e268b136fcf6f8c0d9cd9695f9a5699521c36ae491030724ffdbda3ff1cf084b2760e3333e00dc9c5d1113e17ed2ecc28cf454eaca80447f5fd4a7528532361d85cc190e31697d1e49f8e3bd8051d74704783b571094c0b7dccec570b2a88481b208a35ccd35f810cabf611c0722812d256c6394cb5d334097099c3f61ded05413d6dc912ec2829a7b38edddac0c9d0f32827229e29cad06fa8d902c7d17dc0949318c1268a2a97450cb84be65462a8874ae6c20d8d807bf97356e3cd55107d69adc58c15e15e1735d5f1aa24ea9b54b9a3c3555e9991e659a98030613bfe1cc46c68d203e5bc225be8efcf1d35a8d2411cab201bbebf3e3d794ae8452dbc497c17f7a74bb46d414d24848f3e534d346d37f58efa08eac7e2de800b770399d421ec1a67cad21908050983d8852668c96454bbba0fb3c8c0973d1b22386bd992666f52ab7f1cbf1a2c5e89a11f529b06468fb11cee236d0c09e352d4e7a3d2822e1f5cff30d92d43eace4cca94818ed59e9c14e305d1e90d617c0ad86e02906dbc29c40a3b18027d16d38d4ef50ff60eee23db89139ca1c417385ffa108c580ae2eca46992b559e7f418375bb06d9c15de0a8b04afea682cba25885113b4755d4fbaab0c73a5db4346686c0a82da04fc8b2682196611bcc173271d2651b6bdceab1f395e5f834c081cbd0d42104652eb84d23e07fd433b8bd283e8d8c832e01ce3889d35b74f2ccbabbcf4f33cc61d5450f5795a34fa472430f636c3fd849fafffd4fcb4fcc10d1268a3c55da4e22434e1675dde18d53843ae497a9383a1cf9797d9de0f7b3684d56929797f4ec8011355a6aa31f616cb5951c0e448695408b92cd19310dc5dbf6aa8d34ca27f3e4d249e54cd960f614b7d31a8724bd78516415bacdf48d3039baede72aa12c58ccec93cf16860a23f50086a6148b5a21871ce5bafc4ceafab6e9663957427ff3e00c85266922572eeb0d7b4e06f327648a5a736583047e7ff7b74c8a03758c33bd757a405e3f7b246d9e4b3e02c62187fdf5629e8efa5058e3b547501f4f7e72b87b0f6c231c7782a53aba0e5bfd5238e06f78e9d93648227ea7097ca4a9ab347cb263f0290c2484d4386f226818f4b93118cfa22905bae98e95953b33a5b5e8ea766bbe8e42682fef8914a4961c3d4f7843c9e1887d92c7400b442f9f9ce2a64b25ea411be9cfb017d3b5d5df5e66358187dd64012aba69865f122509d29b715924928deb3b609027f10b8bc986818795076b570f762405e7a960756ef0cabd422dbf994d28e9f1f25288face77d61597c66f41258184d2eb85e0ccca2f20cb76879c66a5bdbd1b02ee7af65c2fe90229ba5f1aaf3c4051e44435b4b4629c0fcdce0d388a56b63a9837178001f1fc4c3f0b8413f21721e7ecd7a0571f331b742529cd4fc05743f267a9d9b3bc47cd20257b3d8317032bf93d4f209a2335efa44a4a610ebf39392882b1202d6ce309e8b018eab0d239c5d49cebd743fe7a0f85494a41758f2126c6794689d0189ee9a96b423c93af46cec8e73dadf5246b4ff60da182566e0cac93957994178b148faf6107f53a74e74ba4f5272a4a782f03d87991ea49a3da74b56884afde75d6e26d98e360e7683a5ea3df3e67e86d57da06c2799f159049931d7f6447416d22581813d5c4568d39a8fb274dbd2b1a2fe48baab3d4b4c7bbc10f65b89f12d9900a177603bc678d99a29065e73a54565343a1d6444183d8288da4669e122941e49b56fdb4f8af65e323a2cd684d9d8b24e7fcd2e5200f6d139e3ecda6d3ed411aea04db5e800fcfb33750788e12fb0beb33db9c748131ab7b8e866da2d32519a32ca6f1d54dd79bf3f6afa3c2105fa89051a834ef1bb0d25a37ba363b79d193565ec4cc996990f301d9a1d5e56aa5489b4423647a9d3ae5e8273d41d117e33d46eaf6ff964f7f4841b96208121e3ec3bf9041135230015ef9bb8413188f433e31601ba81cbaf0048c690a4aa3b754935dc159d95772a350026a4e2df4e3fe04aba652498b5a28932211d429c394e7dd50c9a43dfe16e0405deac0cedc229d8a806566128817d6de8224476f77dea9e47502633c0891a7a3ed2aca82707304dbd8dad9a8429c51fafc2d754ec71380190ca2de84bc4e46d74f5416f555631c1561397ec241274590f2e68ac4ae739e1c62e6608c77c526cd8ccf393ef2846f2bf4ed5d95fc8e316debcd72cba2568787b5b2f975fe0ed82d522d8fe6ba431151a4dc90b4b8020dc8f4422392d7929905aecb83ee99e92ae837f4414aaf9927ed16bb6a9fa1feb53e10e2648d616c3a182dea344161a50eb882693b14283f8a21cda84159fd02033b24cd586feb5c8dbd4db6aa66ea914a112b53e251d374d0f27c072d9b16ea21ea1fcb528bdae9086954a1b3f4cbe1c8343fb6a74dbedb1ffb6cff2bab32388ac88c01e0e7f8279bcc8d59def7fdd2bbb153388ccb1e55537fc6e39a479df0f9e101910a09ea59e05bb5de9c5248582c9a8e1aadd9950981a27224b6b34913dc80804afc63b3817d4bfaede43297f6ee0152024b4363c04c2e27795c6448de53c0701d35217947dbc26f96c4a1d77f675afa8f3410ddcc986c230cb0ae6dad73bb50f5faf83457cf3638a1af76d4c8702166320fca66c5d4b4efb3a6e26fa9b8de1f876ccf5daba41220f158de20d3a931cc974f07608785de45d3dc0a8e394001af310cfe2488e81a7275dc3075aed55e72df0493e9bdf0e31c128344cf7a854cebcc28c7bb79bd6b37a06ba73950cf0a115d0c23a2be274e534aa14a444a2a09eea2bfba6bfc9fdf8bad127ddc349784831015f8763c65cc2da901fbb2edd7481a5d83308372e8b14020bcf2b94041fc4c50beffede85e8b02082727ad70eb4fac6243706e7de6d16c1662b4c92953396a4018d986510bfdb160ff6d4a6dd571259971c2220da4c2318ab665f5f08141eb3a9fa6947d22b39d483f063d287a63886fddfc245de6a50e01916cfcb485c29066eb505b506d3170b763f19d1a596207f1f6bd3d04e1369a4f401da8967745ad59c65f54cdd699007e87546d524095fe3f62f25ee80e3b903e48db186767932f3e17c64235d98cf7032995338377c9a09571dc2683c29faea0011d2dfa63bd402c17d761e267d327a13f0da5ee8ee0ec76ea6e90ddd75439888c02ef5203ac7329b6e7f9f51e6c87cd07107fdf6fbc51dc80005403fab383d80feb8cfcff029bfcaf57a4536565b86dbbd2dcdb2b60c79edb99e8f551b22db6fcf30976a42a0554b0024c8d7853d097c195ed54f1df3b4a271100211d99569058fd3f061e28aab2658f18768c6ba6ccd25356eed283d2f54489ff75d9d7923a9a875e69c3097e35497305a50058cac5b5da7fd934050c8cca9ed2d89c681e54eafae78c1bab6553355a7e8a3308b0f7b489fcfb57e763e27a3fa62f90452fc41f5fd4d4ac3b24324f3fbef754324741ecb6888c22b88829374c1e126c122ea679fd5ea3a5defbaf5fd7a1fb37b152548270c6e6d88244adfc748206f488c57f7f60e04f1f5b783c7d4af516bb1c2815921a3c3054b3de7f28db70e11091e163fd7dbf553de19b56706abd44e716c6061cdf661248eacec4c46ad061be9c062315f423ace53cbdd4c17e571043a5fdce00413d337f92cdc40e1cfeeb6c0400e3149dc984d875f051439e4e66ee4b42588b0aea164e39862de2e8020027cd8b62be8b9397eb1ed391f431725e00dbdfba6248f749b8706cc2a6b7f1eb766c6f2c797f04d3139f46256650efddd64dc91ec13468bcfe4145d6155767224c6493665da97a7d3d422202880fbdc8e32d8e6fca5d874e3835ab022e749da49c6333d9ade96b0e4eb21e747a929c8c43dcc991981718b806adcff26d9cdc8331d20193722b073e2b86dc0b0d5041599ff4064dd3ecb320e41e9ada2edc3204514c5b71f1ab82a3c383f2f6466b114a6e07940bf93000361ede770d3296ed80e395b6c7244ad9c9cf8917e59b254d3835e53e4630bbe3b18dd1b3a742525b2f657c2d89d1f09341e0f3bc84ac08111d57f4d108f4937d39402a52715298a1481a712452441807e918e9353584873c6866e03a46359b66bef8b2bcaf2add26c3102e92dcad6bbe9c74bec41cc4f245693f470330c266d3f6b34eea6d3667710d772cdd211b013b86e5a8f3aa662dcdf48df33165b9b3984c010f38668c888496a0756729f629c74b58b66af476341a9efd6628e9b32dc2a0135b3fe9124c6b38f46130b38c7fa433636b00044deb270f8ce2cab61c6e265e258e69574ab37fd29fcfb926aca7c0605c0950e91aedd48736998d47287a37a45b4cad2942657d7d5c9cae0e0958d4a5141a8ed7e4d391253236ea3938eb30b24c1436135a1e2c42c0fb65bda7110a030d050e31f23868174b8e92c0a40d20e8f4be72e55f1de922ae3858cf85b3e9bb1bdb80c2db10dd885fe0784131ab2a50d4e7adf9a055e9fa056d04503b59484cfbb5877e2e82ee6a690efc921deb9f3e2e4283d338c3ddb26e3f2b17ce8bebac6ca3a02d0b84ce5f59ba85692c061789c06bd5d693692ef5c11955eff14d4b836bd5a12d98fee685728030ca71ee737fbbc47811ac671f910b6c93a268b701d63f5980a639022a4186bd80f2e8f43ca275a842165bb40e74741f49276096ec63a04891f266087c63ff2d3e848334f6f995070c7f5eb892708886577ac127bcdff1c159252e47262110da52e40dfc74c156c3f734ca5d643f295b38281f44649c78cb37c74838a95a32ee21a7e03c0d253cb964a7ff846b26b0", 0xfda}], 0x2}, 0x4005) 1.439973011s ago: executing program 0 (id=1720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1188e99001d4d296246b4a53450", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.378717564s ago: executing program 4 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtclass={0x1040, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0xd, 0xfff1}, {0xfff1}}, [@c_cbq={{0x8}, {0x1014, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x3d5, 0x2, 0x4, 0x6, 0x80, 0x7, 0x3, 0x6, 0x40e, 0x8, 0xbb83025, 0x5, 0x2, 0x0, 0x2, 0xbf, 0x73, 0x2, 0x7, 0x400, 0x8, 0x6, 0xaf2ccc7, 0x1, 0x800, 0x8, 0x1, 0x0, 0x8000, 0x4, 0x4, 0x1, 0xc, 0x6, 0x7b069cfb, 0x4, 0xc, 0x5, 0x711, 0x7, 0x8001, 0x1, 0x2, 0x92f4, 0x7, 0x2, 0xfffffffb, 0xa, 0xfffffffd, 0x9, 0xfffffff8, 0x200, 0x3, 0x9, 0xff, 0x6, 0x2, 0x2, 0x6, 0x400, 0x5000, 0x10, 0x9, 0x0, 0x81, 0xa4, 0x5, 0x9, 0x9, 0x8, 0xb, 0x8, 0x10000, 0xdc, 0x8, 0x8, 0x6, 0x7, 0xe7, 0x9, 0x3, 0x81, 0x7fffffff, 0xf445, 0xffffffff, 0x1, 0x0, 0x4, 0x2, 0xf, 0x8224, 0x0, 0x790, 0x2, 0x1, 0x101, 0x5, 0x6, 0x0, 0x3, 0x4, 0x9, 0x2, 0x800, 0x5, 0x4, 0x10, 0x8, 0xad, 0xfffffffc, 0x1000, 0x9, 0x4, 0x3d, 0x8, 0x2, 0x401, 0x6, 0xf0a2, 0x1, 0x9, 0x7, 0x4, 0x1, 0x9, 0x6, 0x16c, 0x28, 0x2, 0x2, 0x7, 0x9, 0x8, 0xfc0b, 0x6, 0x0, 0x6, 0x1ff, 0x6, 0x9, 0x7, 0xffff70bb, 0x7, 0x400, 0x8, 0x9, 0xfffffff7, 0x100, 0xd399, 0x8, 0x10000, 0x800, 0x7, 0x5, 0x80000000, 0x0, 0x2e, 0x8, 0x1, 0x8, 0x401, 0xfffff001, 0xc, 0xd39, 0x4, 0xffff8000, 0x4, 0x5, 0x0, 0x9, 0x9, 0x2, 0x61, 0x3, 0x0, 0x8, 0x6, 0x0, 0x10, 0x9, 0xc, 0xfffffff8, 0x1, 0x2, 0x9, 0xfffffff6, 0x40, 0x80000000, 0x80, 0xb, 0x5, 0x1, 0x44bb, 0x80000001, 0x78d6, 0x7, 0x7, 0xc51c, 0x7f, 0x1, 0x7, 0x2, 0xf1d4, 0x10, 0x7, 0x0, 0x7fffffff, 0x6, 0x4, 0x9, 0x5, 0xfffffff0, 0x9, 0x4, 0x2, 0x4, 0x6, 0x28f9, 0x7, 0x9, 0x3f6, 0x401, 0x5, 0x5, 0x7, 0x3, 0x8, 0xfffffff6, 0x1, 0x3, 0x9, 0x3, 0x9, 0x2, 0x5, 0x2000, 0x9, 0x7, 0x10001, 0xfffff67d, 0xaa8, 0x400, 0xfffffff7, 0x50000000, 0xff, 0x2, 0x9, 0xffffffff, 0xe10e, 0x472, 0x853, 0x400, 0x0, 0x9, 0x81]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4d10, 0x2, 0x3, 0x40, 0x1000, 0x7, 0xe1, 0x9, 0x0, 0x6, 0x4, 0x9, 0x2, 0x7, 0x6, 0x6, 0x400, 0xffffffff, 0x8, 0x4, 0x6, 0x5, 0x7f, 0x7, 0x2, 0x2, 0x8000, 0x3, 0x0, 0x7fff800, 0x4, 0xfffffffb, 0x7, 0x8, 0x3, 0x5, 0x39, 0xfffffffc, 0x1, 0xffffffff, 0xfffffff9, 0x9, 0x5, 0x6, 0x7ff, 0x8000, 0x5, 0x58, 0x6, 0x3, 0x7, 0x3, 0x1a4f, 0x8000000, 0x8, 0xfd0, 0xf, 0x0, 0x7, 0x8, 0x2, 0x9, 0x40, 0x400, 0x1, 0xfffffffb, 0xf, 0xfffffffa, 0x401, 0x8, 0x4, 0xffff2918, 0xe410, 0x5, 0x6, 0x7, 0x3ff, 0x8, 0x7, 0x9, 0x3ff, 0x7, 0x3, 0x9, 0x1, 0x2b9, 0xc00000, 0x80000001, 0x78, 0x9, 0x3, 0x400, 0x0, 0x8, 0x3, 0x7fffffff, 0xffffff84, 0x1, 0x9, 0x8, 0x3, 0x6, 0x1, 0x3, 0x10001, 0x8, 0xb75, 0xb18, 0x0, 0x4, 0x6df, 0x8001, 0xb, 0x1, 0x5, 0x9, 0x6, 0x10, 0x9, 0x5, 0x3, 0x0, 0x9, 0x5, 0x1, 0xed, 0x0, 0x6, 0xe0000000, 0x7f, 0x4d, 0x1, 0x8000, 0x8, 0x0, 0xef, 0xfffffff8, 0xf05, 0x2, 0x7fffffff, 0x3c, 0x0, 0x80000000, 0x2, 0x6, 0x9, 0x3, 0x975, 0x3, 0x6, 0x0, 0x6, 0x7, 0x7fffffff, 0x9, 0x7, 0x2, 0x4, 0x1, 0x10000, 0x9, 0x8, 0x1, 0x5, 0x40, 0x0, 0x1, 0x3, 0x0, 0x18000000, 0x1, 0x7f, 0x9, 0x80000001, 0x3, 0x3, 0xf, 0x6, 0xe, 0x9, 0xa, 0x8, 0x2, 0x7ff, 0x0, 0x8, 0xc, 0xfffffff7, 0x8, 0x8, 0x0, 0x2, 0x98c, 0xc, 0x9, 0x2, 0x2, 0x3ff, 0x3, 0x4, 0x0, 0x5, 0x67f31243, 0x2, 0x8, 0xffffff80, 0xfffff6cf, 0x683b8c31, 0x7ff, 0x7, 0x40, 0xf8, 0x9, 0x0, 0x4348, 0xa, 0x0, 0x1000, 0x6, 0x8, 0x1, 0xd, 0x33, 0x8, 0x1000, 0x7ff, 0x7d50, 0x9f, 0x9, 0x1ff, 0x5, 0x2, 0xffff0906, 0x1, 0xfffffff5, 0x7, 0x7, 0x7, 0x4, 0xffffffff, 0x9, 0x0, 0x7, 0x7, 0xb13, 0x5, 0xa14a, 0x8, 0x9, 0x2, 0x9, 0x6bf5, 0x8, 0xfffff11e, 0x3ff, 0x429e]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x3, 0x9, 0x363, 0x0, 0x2, 0x161, 0x5, 0xf6c00000, 0x7, 0x6, 0x8, 0x8, 0x2, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, 0xd, 0x3, 0x0, 0x156, 0xfffffff9, 0x8, 0x7110, 0x682, 0x3, 0xee17, 0x9, 0x4, 0x0, 0x7fff, 0x7ff, 0x8001, 0x3, 0x12, 0x1, 0x8, 0x4, 0x2e, 0x1, 0x4, 0x8, 0x9, 0x80000000, 0xb, 0x2, 0x8, 0x7, 0x8, 0xe54a, 0x8, 0x60000000, 0x5, 0x3, 0x0, 0x6, 0x0, 0x2, 0x3, 0x5, 0x5, 0xb2a80000, 0xc81, 0x80000000, 0xfffff800, 0x95, 0x100, 0xe, 0x2, 0x5, 0xfffffff7, 0xf82, 0x8, 0x3, 0x5, 0x7fffffff, 0xc090, 0x0, 0xa3, 0x1, 0x8, 0x10000, 0x200000, 0x1, 0x3ff, 0x5, 0x0, 0x7, 0x8, 0xffa, 0x8, 0x5, 0x7, 0x0, 0x200, 0xffffffff, 0x1, 0x6, 0x8, 0x1, 0x81, 0xb0, 0xfd39, 0xff, 0x6, 0x4f, 0x4, 0x44, 0x9, 0x2, 0x7, 0x4, 0x81, 0x80, 0xffffffff, 0x3, 0x4a35, 0x7, 0x6, 0x4, 0x3, 0xfffffffa, 0x6, 0x8, 0x7845, 0x1, 0x0, 0xafb, 0x4668b733, 0x1, 0x7, 0x400, 0x10, 0x80, 0x8, 0x6, 0x1, 0x8000, 0x80000001, 0xff, 0x1, 0x9, 0x7, 0x2, 0x2de, 0x8, 0x7fff, 0x2, 0x7ff, 0x6, 0x8, 0x400, 0x6, 0x5, 0xfffffffc, 0x3, 0x69, 0x2, 0x80, 0x2, 0x4, 0x6a, 0x4, 0x8, 0x7f, 0x4, 0x5, 0x1, 0x4, 0x5, 0x81, 0xba6, 0xfffffffa, 0xffff6a34, 0x823, 0x8, 0x3ff, 0x3, 0x5, 0x4, 0x6, 0xfffffffa, 0x7fffffff, 0x9, 0x5, 0x440, 0x5, 0xfffffffc, 0x76af, 0x7, 0xfffffffa, 0x5, 0x9, 0x2d8b, 0xc250, 0x0, 0x0, 0x3d9, 0x3, 0x5, 0x5, 0xffffffff, 0x7, 0x4, 0x6, 0x9bb, 0xffffffc8, 0x9, 0xffff, 0x0, 0xc, 0x1, 0x2358, 0x7f83, 0x8001, 0x1, 0x2e9, 0x830, 0x4a9, 0x3, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x2, 0xaf9, 0x0, 0x7, 0x9, 0x1, 0x401, 0x3, 0x2, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x10001, 0x5, 0x80000000, 0x1, 0x80000000, 0xfffffffc, 0x5, 0x6, 0x0, 0x7, 0x800]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x80000001, 0x7, 0x9, 0x40, 0xfff, 0x0, 0x3, 0x0, 0xffffffff, 0x6, 0x9, 0x8, 0x5, 0x401, 0x7f, 0xf, 0x7, 0x401, 0xc, 0x101, 0x7fff, 0x27af, 0x8, 0x385, 0x7fd17375, 0x9, 0x5, 0x346, 0x8000, 0x1fb4, 0x80, 0x7, 0x5, 0x9, 0x1, 0x2, 0x0, 0x0, 0x1, 0xa, 0x2, 0x7, 0x7, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xcb7a, 0x1, 0x0, 0x2, 0x1, 0x5, 0x0, 0x3, 0x101, 0x1, 0x3, 0xff, 0x8, 0x1, 0x6, 0x5, 0x1, 0x5, 0x400, 0x0, 0x8c, 0x40, 0x665d, 0xb18, 0xffff, 0x2, 0x7, 0x4, 0x1, 0x7, 0x7, 0x5, 0x5, 0x7fffffff, 0x5, 0x3, 0x7, 0x7f, 0x3, 0x800, 0xfff, 0xfffeffff, 0x40000000, 0x1760000, 0x8, 0x4, 0x6, 0x65d, 0x45d8, 0x1, 0x0, 0xad1, 0xef, 0x10, 0x6, 0x5, 0x0, 0x63, 0x6, 0x7, 0x200, 0x2, 0x1afa, 0xfffffffa, 0x1, 0x10, 0x4, 0x4, 0x4, 0x3, 0x2, 0x25, 0x5, 0x6, 0x40, 0x1, 0xe81e, 0x5, 0x9, 0x2879, 0x7, 0x2, 0x88, 0x17, 0x3, 0x4, 0xc, 0x8, 0x3, 0x7f, 0x4, 0x101, 0x5, 0x4, 0x1, 0x2, 0x200, 0x7, 0x9, 0x1000, 0x22d1, 0x430, 0x1, 0x3, 0x4, 0x80, 0x2, 0x0, 0x7c25, 0x7, 0x7, 0x10, 0x9, 0x1, 0x1ff, 0x5, 0x1, 0x1, 0xfffffff5, 0xffffffff, 0x6, 0x499, 0xe27, 0x609c, 0x4, 0x81, 0x9, 0x200, 0x9, 0x5, 0x5, 0x8, 0xd2, 0x7, 0x8, 0x106e, 0xf5f, 0x8, 0x6, 0x1, 0x10001, 0x1ff, 0x0, 0xee9, 0x9f04, 0x8000, 0xff500, 0x10001, 0x7, 0x3, 0x4, 0xb60, 0x4, 0x2, 0x6, 0x80000000, 0x3, 0x400, 0x0, 0x3ff, 0x5, 0x6, 0x25, 0xff, 0x6, 0x9a, 0x0, 0x3, 0x3141, 0xff, 0x101, 0xe3c, 0x1, 0x6, 0x1, 0x5, 0x9, 0x4, 0x4, 0xfffffffe, 0x8001, 0x0, 0x6, 0x3, 0x0, 0x9, 0x379784d7, 0xfffffff3, 0x0, 0xffff, 0x8000000, 0x0, 0x0, 0xed84, 0x5f5, 0x4, 0x8, 0x0, 0x1, 0xfffffffd, 0xfffffffe, 0x80, 0x9, 0x8, 0x0, 0xfffffffe, 0x2, 0x3]}]}}]}, 0x1040}}, 0x4008000) recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@union={0xc, 0x2, 0x0, 0x5, 0x1, 0x7, [{0x2, 0x2}, {0xa, 0x1, 0x1}]}]}, {0x0, [0x0, 0x30, 0x5f]}}, &(0x7f00000003c0)=""/88, 0x41, 0x58, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r6, r8, 0x4, 0x5, 0x3}, 0x50) 1.247936262s ago: executing program 0 (id=1723): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000bc0)={r0, &(0x7f0000000ac0)='\x00', 0xa340, &(0x7f0000000b00)={@align=0x9, {0x2, 0x8b, 0x40000000, 0x1}}, 0x9, &(0x7f0000000b40), &(0x7f0000000b80)=0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x22, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_fd={0x18, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000c00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0xdd8c, 0xb, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000cc0)=[{0x3, 0x3, 0xb, 0x1}, {0x3, 0x1, 0xc, 0x8}], 0x10, 0x5a3}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000340)=r7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x48800) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000380)={0xfffffffffffffffa, 0x4, 0x3c49, 0x9}) unshare(0x42000200) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf25fe8000000000000000000000000000bbac1414aa000000000000000000000000fffc0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000000004000000000000c30000000000000000000000000000000000000000000000ff09000000000000000000000080400000000000000000080000000000000000000000000000000044000500000000000000000f0000ffff0a010100000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000059f49ab5b3b235c2b181b1c357c0b698b27bfb6ca0d458a4bed3d0edb7fce0b4f0b0315c229541fb5f93d065db67635adb02424fa6cfea093ac852a1cd4f28e1b58ef44a29da7235b181b23d07ef46833a5063742ccb0b4d280094e5dd368ee3c3a7502018246a60d5f4ee0638aa7227925c9a106e5335da59ff737c5763ca670ee89cc6c57953a0e3bd780b4e84c6dc0829dbff9da3e570caef96f5bddfe97d20d90d4cf7ceef00"/347], 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc0000002100010000000000040000007f000001000000000000000000000000fc02000000000000000000000000000100000000000000000a00000000000000", @ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="00000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000e7ffffffffffff050000000000000000000000003c000000000000000a000a002c001300000000000000000000e160ee7737d8d57dcfa89445d60eb0afab96da00b43a860b5de94fd1720798e06d419d650a3fe9f3713d9c7844c2140b0000000000"], 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r14, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0', @ANYRES16=r15, @ANYBLOB="000326bd7000fcdbdf25310000000a000100777000"], 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x4000) 1.158390637s ago: executing program 1 (id=1724): socketpair(0x24, 0x1, 0x2, &(0x7f0000000100)) 1.095916161s ago: executing program 1 (id=1725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0xff}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@local, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0xa}]}]}, 0xa0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x4f, 0x2e, 0x5f]}}, 0x0, 0x53}, 0x28) 996.087737ms ago: executing program 1 (id=1726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'dvmrp0\x00', @local}) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) 964.330543ms ago: executing program 3 (id=1727): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x18, 0x29, 0x37, {0x3b}}}], 0x18}, 0x922bac8556bdad8e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0xa4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x70, 0x2, [@TCA_MATCHALL_ACT={0x6c, 0x2, [@m_ife={0x68, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff9}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x80000, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x0, 0x3, 0x1, 0x8}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000181100000000000000000000008000", @ANYRES32=r10], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r13, 0x4058587a, &(0x7f0000000600)={{r11, &(0x7f0000000200)='\x00', 0x100, &(0x7f00000003c0)={@_ha_fsid={[0xffffffff, 0xcf0]}, {0x100, 0x81, 0x9, 0x10001}}, 0x9, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xb}, {[0xffffffd1, 0x3, 0x1, 0xc01f]}, 0x813e39f8, 0xad, &(0x7f0000000540)=""/173}) sendmsg$NFT_BATCH(r14, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x158, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xc0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0xbf107d3aa5158bb4}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8000}]}}}]}, @NFTA_SET_USERDATA={0x5b, 0xd, 0x1, 0x0, "8c19ad3ed8a95c4b70df951b4b570b173c25f339934925df57c8ee1001a08b683723d9fb92fad31d0646eef4586bc440a8dbc15c56662f279d3cf683a6e1cafb556f0643ca1d6947f3edad32328521cf97e4d687f23f80"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x900, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x40) 877.859151ms ago: executing program 4 (id=1728): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$inet6(0xa, 0x2, 0x0) epoll_create(0x400) pipe(&(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 860.482333ms ago: executing program 2 (id=1729): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) 732.160384ms ago: executing program 1 (id=1730): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x4b16, 0x4) bind$llc(r1, &(0x7f0000000040), 0x10) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4000400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000006c00), r5) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040000203302801c3317ce5f757bf6d20063f597800400150004008b80080086800400b28006330180248ee8cb0ce5e0d895c6b595e76ffcfd197da0adcd9d7979508c90d1cf9ad03bcdaab45d6abc786283a305332d4bfdd98843bb5371957131d3e838950b0ed49964c423ea19a2", @ANYRES16=r0, @ANYRES64=r2], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0x2400c840) 714.244051ms ago: executing program 2 (id=1731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x2000201c}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001540)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) shutdown(r0, 0x1) 572.016331ms ago: executing program 0 (id=1732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @local}}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000087c6020028b59c1f103d1a57f0a0764953559b52642e699f3afd0d1a859e1d90761e870dc39a4e0bd8fb2989fce13c1fb8d091800d13222b8cd725ff8864d49f17277d888a18437ab9f07226d21100"/98, @ANYRES16=r4, @ANYBLOB="01022bbd7000ffdbdf25000000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4008044) 431.137283ms ago: executing program 4 (id=1733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004800) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x44) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, 0x3, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0xe4, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x280d1}, 0x20004005) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x69f}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24040880) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) (async) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb0, r11, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc000}, 0x88c0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2cd5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4545}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x400c099) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r9) sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r12, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20040040) (async) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000dc0)) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x8014f000) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000e00)={0x0, 0x1, 0x5fba, 0x6, 0x6, 0x1ff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000f00)={0x0, 0xbc, &(0x7f0000000e40)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0xffff, @local, 0x7}, @in6={0xa, 0x4e23, 0x7ff, @private1, 0x2186}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x80, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x9, @local, 0x8}, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}]}, &(0x7f0000000f40)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000f80)={r13, 0x3, 0x100}, 0x8) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000fc0)) (async) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000001000)={0xffffffffffffffff, 0x8, 0x5, 0x3, @vifc_lcl_ifindex=r3, @empty}, 0x10) (async) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x86}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c800) (async) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xa0, 0x0, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe43e}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x2004c090) 367.810658ms ago: executing program 2 (id=1734): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x5, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500)={0x0, 0xb, 0x401, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001800), &(0x7f0000001580), 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001640)="ada423fc0243ff6f15676b6d0d3c37e7ae107cebaa619306e42deb89b6a885f690a0cbe72c1208decc75ebefa7742e0b97c969684f067d437047f0bda760594963ee9667261d4d5479df8e18ce92e8f9647c1f1f4b5162ea09ebb0a21db2a0112aa1a8588398882a13d08feaabc2f02a7ee8f44703a6033b22716057731c8ffc7c9f6dffd7afa6af736fcab707cf871d9ce65a24408792e3870c622a2af15529724235ea1ee614e71d26cbf59e19a7302bc7dc96de32698425", 0xb9}, {0x0}, {&(0x7f0000001740)="9b64d0a31bed8f45fdcc21aeaf26a500b48c322ed74ff502d3c930376f14393035d4e369208afbef5109d65c7e91feed97e95493b26a01793dbdc5e0e8b755760761074fa007f57cb01e99135389ec9d482767e221", 0x55}], 0x5, 0x5, 0x401) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xf, "baed052d7956e3e59d6249adba046e"}, &(0x7f0000000080)=0x17) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xfff, 0xff81, 0xfffffff0, 0x7, 0x1, 0x80000000, 0xf}, &(0x7f00000002c0)=0x9c) sendfile(r4, r3, 0x0, 0xf03a0005) 288.068237ms ago: executing program 1 (id=1735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x9a}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 208.113396ms ago: executing program 4 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 156.847742ms ago: executing program 0 (id=1737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8400, 0x1114}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'pim6reg1\x00', @remote}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000290000007e1f0000030000004d290200", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200000000000000000000d80000000010000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r5, &(0x7f00000004c0)="2082ffd3d2ad80327838596ff1c295174cba8a51b4fccbc2b98c40f27a732dd03a6d30403f11b0495d07653897e9730a8f34933ce8761b269e53813cfe71b6977e6ade9619ef19ef910c723220330e1931e63ff0d1e8b6817c3502c73b7ba1b4c871f01f3991711a6a5e648747d2c4d14c24169a42f525371bd9c0e09563b829b3222871fefe00fdabdefe08b65543ea638ba61ad8685427763b81947b8dc434e540e4f49b75358cf25d72c74f8eaed8a58814b9dd6316f5e4e455adeca4d303397d73cbc2e68b07a507329ba6edd10eae77881282a8e485b2123ff2893f4f82de8f800457b2a3e503d483a541eed12cfadfeba4f020a9773eab0045", &(0x7f00000005c0)=""/38}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000000180)="cf", 0x1}, {&(0x7f0000000400)="fd", 0x1}, {&(0x7f0000000300)='0', 0x1}, {&(0x7f00000001c0)="d5", 0x1}, {&(0x7f0000000480)='q', 0x1}], 0x5, 0xa) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000840)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd01, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x23) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=@newtfilter={0x280, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x250, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x2}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x0, 0x0, 0x80000000, {0xc, 0x2, 0x5, 0x8, 0x8009, 0x8}, {0x9, 0x2, 0x3, 0x9, 0x0, 0xffff}, 0x6, 0x9, 0x2}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x8}}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_EMATCHES={0x1e4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff01}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x1c0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x12c, 0x2, 0x0, 0x0, {{0x6, 0x9, 0xf}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xe4, 0x5, "03f17b8c6c0f036651e4a6c17f6104d67dfcc0670250d5d1d9d573a03d2bcd00c907ea4a8560fbd68380537a35f67e72b6a29121129d5e62f597802ee7dbd52224612b3f86ebb3d41f72c013a01396ddecc41a9723e96dcfa2642b27ec7b41e97cf10af87f9441575b2972289d608f0533b5ccee29cbe5c705001a59bf4c4f5584e688b6659b8a4c26e3a9cf5624347d16778a2b37c7296dd29b4df3b62446db5b4d7b19899368e2d12b1ff2e7c007171e26e4fe7013723c5e79d744c61a6a70ae3e4a6ea238a6dc08f6b20398e86c1d2124b7ec540261cbe2c50fbc78a7132b"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1e, 0x5, "243d9fe5debe6025a81295c1fd6d138eec06e61da368dff8a1d8"}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "87e3814be9482fa7de0b5510884c9dc7d7019baf52ff9c04f49d87a07d750c12dd95ac102e6b62e59035f5555e086a4b24660906f446816db191fc544c097508558f1b31e2c5cb57491239de06c721d67905f12619c7c7316c6fda88952c0edb47bc706d12adc78fa19b15b79f57635f12a4d564cce0d0ee896e5383c22a32b5ff0d5b8b7cf457b3dc8e18d6206ceca5df5967f4ecc51aca56c0bc8683e6a1755f8d6f"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x4}, {{0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff7, 0x1, 0xff81}, {0x5, 0xd, 0x1, 0x2, 0x4, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x1000}, {{0x3, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x5}, {0x1, 0x10000, 0x1, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5}, {0x4, 0xfffffff8, 0x7, 0x3, 0xa, 0x0, 0x2}}}, @TCF_EM_U32={0xfffffec4, 0x1, 0x0, 0x0, {{0xcfc9, 0x3, 0x401}, {0x7f, 0x101, 0x9, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0x988, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xb4}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 78.849672ms ago: executing program 1 (id=1738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xec, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf5b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffeffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1b, 0xc, "8dc923e520926b7a932e7181a3dbca148d233ff9e363a0"}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x144}}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000001840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100026bd7000fbdbdf252b00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e330000000c0005000203aaaaaaaaaaaa08000200", @ANYRES32=r6, @ANYBLOB="f0b6093643192a4ebf68559f0046293679a37810dd8a60616b2271419d404e3617e8b7e7623ebd6179ad7d87edf6fe7cf38902998617aaf65ea95e298739f682908c86a075867588c422a578c8fc922c9340c0e0db0e075a8c5775bf5da413ad352c01bfb0a695964e649f8600000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000881) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x3a) 0s ago: executing program 4 (id=1739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}, @func_proto]}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x10000, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) kernel console output (not intermixed with test programs): 99] syz_tun: entered allmulticast mode [ 202.316805][ T1174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.342769][ T1174] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.365221][ T1174] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.379675][ T6599] syz_tun: left allmulticast mode [ 202.389600][ T1174] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.568678][ T6613] syz_tun: entered allmulticast mode [ 202.600517][ T6616] tipc: Invalid UDP bearer configuration [ 202.600596][ T6616] tipc: Enabling of bearer rejected, failed to enable media [ 202.672421][ T6629] tipc: Invalid UDP bearer configuration [ 202.672480][ T6629] tipc: Enabling of bearer rejected, failed to enable media [ 202.696045][ T6615] syz_tun: left allmulticast mode [ 202.709683][ T6620] tipc: Started in network mode [ 202.735279][ T6620] tipc: Node identity 8279ab7fa0f4, cluster identity 4711 [ 202.774934][ T6620] tipc: Enabled bearer , priority 0 [ 202.785374][ T6630] syzkaller0: entered promiscuous mode [ 202.825980][ T6630] syzkaller0: entered allmulticast mode [ 202.900673][ T6620] tipc: Resetting bearer [ 202.941712][ T6620] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 202.996807][ T6619] tipc: Resetting bearer [ 203.054419][ T6619] tipc: Disabling bearer [ 203.149224][ T6658] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 203.409636][ T6671] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 203.739450][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.819367][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.209571][ T6706] veth3: entered allmulticast mode [ 204.976145][ T6746] bond_slave_0: entered promiscuous mode [ 204.996796][ T6745] __nla_validate_parse: 11 callbacks suppressed [ 204.996817][ T6745] netlink: 32 bytes leftover after parsing attributes in process `syz.2.226'. [ 205.043162][ T6746] bond0: (slave bond_slave_0): Releasing backup interface [ 205.152226][ T6745] bridge_slave_1 (unregistering): left allmulticast mode [ 205.184418][ T6745] bridge_slave_1 (unregistering): left promiscuous mode [ 205.211369][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.303174][ T6749] syzkaller1: entered promiscuous mode [ 205.314374][ T50] Bluetooth: hci0: command tx timeout [ 205.324553][ T6749] syzkaller1: entered allmulticast mode [ 205.504428][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 205.526514][ T6768] netlink: 80 bytes leftover after parsing attributes in process `syz.2.231'. [ 205.750043][ T6785] netlink: 'syz.3.234': attribute type 40 has an invalid length. [ 205.768897][ T6787] netlink: 'syz.2.235': attribute type 2 has an invalid length. [ 206.326586][ T6815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.409869][ T6822] vlan2: entered promiscuous mode [ 206.415212][ T6822] bridge0: entered promiscuous mode [ 206.700353][ T6841] batman_adv: batadv0: Adding interface: gretap1 [ 206.707342][ T6841] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.733736][ T6841] batman_adv: batadv0: Interface activated: gretap1 [ 206.767476][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 206.773960][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 206.780892][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 206.787411][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 206.849562][ T6725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.856193][ T6725] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 206.878519][ T6725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.887634][ T6725] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 206.923073][ T6725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.929410][ T6725] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 206.943059][ T6725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.950703][ T6725] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 206.970811][ T6725] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.977806][ T6725] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 207.489163][ T6863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.815319][ T6874] tipc: Started in network mode [ 207.831076][ T6874] tipc: Node identity fee29e6f8486cb85330000000000001, cluster identity 4711 [ 207.871438][ T6874] tipc: Enabling of bearer rejected, failed to enable media [ 207.900328][ T6884] netlink: 279 bytes leftover after parsing attributes in process `syz.0.250'. [ 207.939715][ T6884] veth0_to_bond: default FDB implementation only supports local addresses [ 208.043849][ T6891] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 208.097827][ T6894] netlink: 'syz.2.253': attribute type 3 has an invalid length. [ 208.172291][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 208.191096][ T6898] syz_tun: entered allmulticast mode [ 208.394298][ T6905] dvmrp1: entered allmulticast mode [ 208.584578][ T6896] syz_tun: left allmulticast mode [ 209.007930][ T6914] netlink: 67 bytes leftover after parsing attributes in process `syz.0.257'. [ 210.004223][ T6949] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 210.035565][ T6949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 210.063987][ T6949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 210.104604][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 210.675218][ T6969] wireguard0: entered allmulticast mode [ 210.678723][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'. [ 210.755997][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.269'. [ 210.902374][ T6982] gretap0: entered promiscuous mode [ 210.979630][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 211.008188][ T6982] gretap0: left promiscuous mode [ 211.571925][ T7015] FAULT_INJECTION: forcing a failure. [ 211.571925][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.595361][ T7015] CPU: 0 UID: 0 PID: 7015 Comm: syz.4.278 Not tainted syzkaller #0 PREEMPT(full) [ 211.595391][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 211.595402][ T7015] Call Trace: [ 211.595411][ T7015] [ 211.595419][ T7015] dump_stack_lvl+0xe8/0x150 [ 211.595455][ T7015] should_fail_ex+0x40c/0x560 [ 211.595485][ T7015] _copy_from_user+0x2d/0xb0 [ 211.595515][ T7015] bpf_test_init+0xd8/0x150 [ 211.595551][ T7015] bpf_prog_test_run_skb+0x31e/0x2230 [ 211.595603][ T7015] ? __fget_files+0x3a2/0x420 [ 211.595629][ T7015] ? __fget_files+0x2a/0x420 [ 211.595660][ T7015] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 211.595692][ T7015] bpf_prog_test_run+0x2c5/0x340 [ 211.595725][ T7015] __sys_bpf+0xa22/0xd90 [ 211.595760][ T7015] ? __pfx___sys_bpf+0x10/0x10 [ 211.595799][ T7015] ? __fget_files+0x2a/0x420 [ 211.595843][ T7015] ? ksys_write+0x242/0x270 [ 211.595876][ T7015] ? __pfx_ksys_write+0x10/0x10 [ 211.595911][ T7015] __x64_sys_bpf+0xba/0xd0 [ 211.595935][ T7015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.595956][ T7015] do_syscall_64+0x174/0x580 [ 211.595985][ T7015] ? trace_irq_disable+0x3b/0x140 [ 211.596028][ T7015] ? clear_bhb_loop+0x40/0x90 [ 211.596053][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.596073][ T7015] RIP: 0033:0x7f7efc99de99 [ 211.596092][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.596108][ T7015] RSP: 002b:00007f7efd909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.596130][ T7015] RAX: ffffffffffffffda RBX: 00007f7efcc25fa0 RCX: 00007f7efc99de99 [ 211.596144][ T7015] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 211.596156][ T7015] RBP: 00007f7efd909090 R08: 0000000000000000 R09: 0000000000000000 [ 211.596169][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.596180][ T7015] R13: 00007f7efcc26038 R14: 00007f7efcc25fa0 R15: 00007ffeaead2c48 [ 211.596213][ T7015] [ 211.640995][ T7018] netlink: 'syz.0.279': attribute type 6 has an invalid length. [ 211.914902][ T7027] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 212.093693][ T7036] netlink: 52 bytes leftover after parsing attributes in process `syz.4.281'. [ 212.301849][ T7032] veth3: entered allmulticast mode [ 212.361951][ T7032] bond2: (slave veth3): Enslaving as an active interface with a down link [ 212.398428][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 212.474674][ T7048] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.498370][ T7048] block nbd0: shutting down sockets [ 212.736828][ T7034] bond2: entered promiscuous mode [ 212.771835][ T7034] bond2: entered allmulticast mode [ 212.797343][ T7034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.824136][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.833365][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.910699][ T7027] bond2: (slave veth0_to_bond): making interface the new active one [ 212.935375][ T7027] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 213.010252][ T7045] syzkaller1: entered allmulticast mode [ 213.245437][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 213.285245][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 213.436652][ T7072] unsupported nla_type 39715 [ 213.443158][ T7076] vcan0: tx drop: invalid da for name 0x0000000200000000 [ 213.963859][ T111] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.988436][ T111] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.999074][ T7108] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 214.007158][ T1174] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.083681][ T1174] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.212582][ T7115] bond1: (slave veth0_to_bond): making interface the new active one [ 214.223196][ T7120] netlink: 'syz.4.293': attribute type 58 has an invalid length. [ 214.262724][ T7115] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.287757][ T7108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.589121][ T7132] tipc: New replicast peer: 255.255.255.255 [ 214.598079][ T7132] tipc: Enabled bearer , priority 10 [ 214.607139][ T7132] tipc: Enabling of bearer rejected, already enabled [ 214.630686][ T7132] tipc: Enabling of bearer rejected, already enabled [ 214.684593][ T7132] tipc: Enabling of bearer rejected, already enabled [ 215.067483][ T7153] netlink: 'syz.0.302': attribute type 12 has an invalid length. [ 215.137616][ T7148] __nla_validate_parse: 5 callbacks suppressed [ 215.137639][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 215.270519][ T7158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.489989][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 215.547719][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 215.590572][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 215.716302][ T5733] tipc: Node number set to 579709823 [ 215.885949][ T7184] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 215.973798][ T7191] netlink: 56 bytes leftover after parsing attributes in process `syz.3.310'. [ 216.047407][ T7184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.565740][ T7216] netlink: 'syz.3.318': attribute type 4 has an invalid length. [ 216.640530][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 216.776858][ T7216] bridge0: port 3(dummy0) entered blocking state [ 216.852830][ T7216] bridge0: port 3(dummy0) entered disabled state [ 216.925616][ T7216] dummy0: entered allmulticast mode [ 217.004934][ T7216] dummy0: entered promiscuous mode [ 217.062328][ T7216] bridge0: port 3(dummy0) entered blocking state [ 217.069039][ T7216] bridge0: port 3(dummy0) entered forwarding state [ 217.128153][ T7234] team0: Device xfrm0 is of different type [ 217.159834][ T7212] dummy0: left allmulticast mode [ 217.175122][ T7212] dummy0: left promiscuous mode [ 217.213570][ T7212] bridge0: port 3(dummy0) entered disabled state [ 217.361373][ T7203] syz.2.314 (7203) used greatest stack depth: 17664 bytes left [ 217.482094][ T7243] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 217.483034][ T7244] netlink: 140 bytes leftover after parsing attributes in process `syz.1.325'. [ 217.502346][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 217.749405][ T7229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.321'. [ 217.829609][ T7253] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 217.865115][ T7253] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 217.882767][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 217.891849][ T7260] Cannot find add_set index 0 as target [ 218.441420][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.642570][ T7287] syzkaller0: entered promiscuous mode [ 218.666063][ T7287] syzkaller0: entered allmulticast mode [ 219.037670][ T7303] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 219.079973][ T7303] bond3: option mode: invalid value (9) [ 219.091688][ T7303] bond3 (unregistering): Released all slaves [ 220.026026][ T7338] netlink: 'syz.1.357': attribute type 13 has an invalid length. [ 220.156137][ T7339] __nla_validate_parse: 8 callbacks suppressed [ 220.156156][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 220.474589][ T7358] syzkaller0: entered promiscuous mode [ 220.488655][ T7358] syzkaller0: entered allmulticast mode [ 220.503746][ T7358] netlink: 72 bytes leftover after parsing attributes in process `syz.4.360'. [ 220.583733][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'. [ 220.829811][ T7384] netlink: 'syz.4.367': attribute type 11 has an invalid length. [ 220.895804][ T7386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.897921][ T7389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.031737][ T7384] bond4: option updelay: invalid value (18446744073709518847) [ 221.048987][ T7384] bond4: option updelay: allowed values 0 - 2147483647 [ 221.078713][ T7384] bond4 (unregistering): Released all slaves [ 221.129439][ T7390] netlink: 'syz.4.367': attribute type 11 has an invalid length. [ 221.141376][ T7394] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 221.223095][ T7409] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 221.346252][ T7406] netlink: 'syz.2.372': attribute type 5 has an invalid length. [ 221.431396][ T7409] bond1: entered promiscuous mode [ 221.439715][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.621733][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 221.697898][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.713612][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.004477][ T48] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.022116][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.033025][ T48] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.047159][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.070839][ T48] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.107163][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.139830][ T48] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.169234][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.231625][ T7428] xt_time: unknown flags 0xf4 [ 222.450467][ T7439] dvmrp0: entered allmulticast mode [ 222.793162][ T7434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.823587][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 222.835997][ T7448] netlink: 144 bytes leftover after parsing attributes in process `syz.0.384'. [ 222.938713][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 223.001897][ T7434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.123531][ T7462] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 223.425023][ T7434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.713379][ T7434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.743280][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 224.111507][ T1174] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.193247][ T3329] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.303374][ T1174] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.393069][ T111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.640055][ T7520] xt_hashlimit: size too large, truncated to 1048576 [ 224.800576][ T7514] netlink: 164 bytes leftover after parsing attributes in process `syz.2.403'. [ 224.814448][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 225.358539][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'. [ 225.545651][ T7543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.410'. [ 225.590263][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.597774][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.637356][ T7546] FAULT_INJECTION: forcing a failure. [ 225.637356][ T7546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.673382][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz.2.413 Not tainted syzkaller #0 PREEMPT(full) [ 225.673415][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 225.673427][ T7546] Call Trace: [ 225.673435][ T7546] [ 225.673444][ T7546] dump_stack_lvl+0xe8/0x150 [ 225.673481][ T7546] should_fail_ex+0x40c/0x560 [ 225.673511][ T7546] _copy_from_user+0x2d/0xb0 [ 225.673542][ T7546] ___sys_sendmsg+0x1c6/0x360 [ 225.673573][ T7546] ? __lock_acquire+0x683/0x2cf0 [ 225.673605][ T7546] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.673644][ T7546] ? preempt_schedule_common+0x82/0xd0 [ 225.673702][ T7546] ? __fget_files+0x2a/0x420 [ 225.673728][ T7546] ? __fget_files+0x3a2/0x420 [ 225.673766][ T7546] __x64_sys_sendmsg+0x1b1/0x290 [ 225.673798][ T7546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.673847][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.673869][ T7546] do_syscall_64+0x174/0x580 [ 225.673895][ T7546] ? trace_irq_disable+0x3b/0x140 [ 225.673928][ T7546] ? clear_bhb_loop+0x40/0x90 [ 225.673951][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.673969][ T7546] RIP: 0033:0x7fd59339de99 [ 225.673988][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.674004][ T7546] RSP: 002b:00007fd594317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.674025][ T7546] RAX: ffffffffffffffda RBX: 00007fd593625fa0 RCX: 00007fd59339de99 [ 225.674038][ T7546] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000011 [ 225.674050][ T7546] RBP: 00007fd594317090 R08: 0000000000000000 R09: 0000000000000000 [ 225.674061][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.674071][ T7546] R13: 00007fd593626038 R14: 00007fd593625fa0 R15: 00007ffcdfdf9cd8 [ 225.674102][ T7546] [ 225.861282][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 225.870225][ T7549] netlink: 'syz.0.412': attribute type 21 has an invalid length. [ 226.175107][ T7558] netlink: 'syz.1.415': attribute type 11 has an invalid length. [ 226.666633][ T7580] netlink: 2 bytes leftover after parsing attributes in process `syz.0.422'. [ 226.729375][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'. [ 226.740730][ T7579] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 226.775363][ T7579] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 226.827232][ T7579] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 226.898884][ T7579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 226.983686][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 227.010933][ T7579] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 227.470332][ T3329] smbdirect: ib_dev[syz2] removed [ 227.749796][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'. [ 227.784276][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'. [ 227.861199][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 227.890039][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 227.967926][ T7604] syzkaller0: entered promiscuous mode [ 228.011823][ T7604] syzkaller0: entered allmulticast mode [ 228.100920][ T7605] geneve2: entered promiscuous mode [ 228.233059][ T7625] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 229.880038][ T7625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.898785][ T7626] bond3: (slave geneve2): making interface the new active one [ 229.908873][ T7626] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 229.986451][ T7641] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 230.173521][ T7641] ¿: entered promiscuous mode [ 230.219013][ T7648] batman_adv: batadv0: Interface deactivated: gretap1 [ 230.493825][ T7656] __nla_validate_parse: 1 callbacks suppressed [ 230.493848][ T7656] netlink: 64 bytes leftover after parsing attributes in process `syz.3.438'. [ 230.514702][ T7656] netlink: 64 bytes leftover after parsing attributes in process `syz.3.438'. [ 230.962390][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.444'. [ 231.138239][ T7693] ipvlan2: entered promiscuous mode [ 231.157265][ T7693] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.170224][ T30] audit: type=1800 audit(1784459508.715:2): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.448" name="memory.events" dev="tmpfs" ino=512 res=0 errno=0 [ 231.197612][ T7693] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 231.203407][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 231.231115][ T7693] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 231.464278][ T7710] netlink: 'syz.0.452': attribute type 5 has an invalid length. [ 231.789914][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 232.149910][ T7735] bridge_slave_1: left allmulticast mode [ 232.166215][ T7735] bridge_slave_1: left promiscuous mode [ 232.172999][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.228920][ T7735] bridge_slave_0: left allmulticast mode [ 232.245082][ T7735] bridge_slave_0: left promiscuous mode [ 232.265745][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.319953][ T7752] tipc: Started in network mode [ 232.326856][ T7752] tipc: Node identity 4a6432509157, cluster identity 4711 [ 232.339870][ T7752] tipc: Enabled bearer , priority 0 [ 232.358803][ T7743] syzkaller0: entered promiscuous mode [ 232.374962][ T7743] syzkaller0: entered allmulticast mode [ 232.383986][ T7748] syzkaller0: entered promiscuous mode [ 232.391199][ T7748] syzkaller0: entered allmulticast mode [ 232.418165][ T7743] tipc: Resetting bearer [ 232.430513][ T7742] tipc: Resetting bearer [ 232.461250][ T7742] tipc: Disabling bearer [ 232.527008][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 232.622600][ T7761] netlink: 220 bytes leftover after parsing attributes in process `syz.4.467'. [ 232.650771][ T7759] bond0: (slave bond_slave_1): Releasing backup interface [ 232.707152][ T7757] ip6tnl2: entered allmulticast mode [ 233.034258][ T7772] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.472'. [ 233.095986][ T7782] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 233.348444][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035187400: rx timeout, send abort [ 233.403854][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 233.415606][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 233.662939][ T7797] netlink: 'syz.4.478': attribute type 1 has an invalid length. [ 233.684126][ T7797] netlink: 'syz.4.478': attribute type 2 has an invalid length. [ 233.741144][ T1174] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 233.750569][ T1174] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 233.774337][ T187] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 233.846260][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056616c00: rx timeout, send abort [ 233.859547][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035187400: abort rx timeout. Force session deactivation [ 234.327079][ T187] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 234.354785][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056616c00: abort rx timeout. Force session deactivation [ 234.517889][ T5747] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 234.622319][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.669292][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.701096][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.728160][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.798443][ T7823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.137472][ T7842] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.182792][ T30] audit: type=1804 audit(1784459512.725:3): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.489" name="/newroot/98/cgroup.controllers" dev="tmpfs" ino=518 res=1 errno=0 [ 235.219572][ T30] audit: type=1800 audit(1784459512.725:4): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.489" name="cgroup.controllers" dev="tmpfs" ino=518 res=0 errno=0 [ 235.446684][ T7857] sctp: [Deprecated]: syz.3.491 (pid 7857) Use of int in maxseg socket option. [ 235.446684][ T7857] Use struct sctp_assoc_value instead [ 235.644652][ T7862] syzkaller0: entered promiscuous mode [ 235.660512][ T7862] syzkaller0: entered allmulticast mode [ 236.119914][ T7888] __nla_validate_parse: 2 callbacks suppressed [ 236.119936][ T7888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.501'. [ 236.361964][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 236.762709][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 237.207926][ T7941] veth0: entered promiscuous mode [ 237.359431][ T7942] veth0: left promiscuous mode [ 238.200373][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.239325][ T7972] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 238.248662][ T7972] netlink: 756 bytes leftover after parsing attributes in process `syz.0.526'. [ 238.625982][ T7991] netlink: 44 bytes leftover after parsing attributes in process `syz.3.529'. [ 238.891697][ T8004] IPVS: set_ctl: invalid protocol: 20551 10.1.1.1:20001 [ 238.894253][ T187] IPVS: starting estimator thread 0... [ 238.994771][ T8007] IPVS: using max 24 ests per chain, 57600 per kthread [ 239.177602][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'. [ 239.877828][ T8042] xt_hashlimit: size too large, truncated to 1048576 [ 239.942374][ T8047] bridge_slave_0 (unregistering): left allmulticast mode [ 239.949739][ T8047] bridge_slave_0 (unregistering): left promiscuous mode [ 239.963115][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.985791][ T8050] netlink: 'syz.1.543': attribute type 11 has an invalid length. [ 240.003984][ T8050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.543'. [ 240.019587][ T8050] netlink: 68 bytes leftover after parsing attributes in process `syz.1.543'. [ 240.232247][ T8058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.358797][ T8061] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 240.358974][ T5747] IPVS: starting estimator thread 0... [ 240.478052][ T8064] IPVS: using max 25 ests per chain, 60000 per kthread [ 241.268069][ T8107] bridge0: entered promiscuous mode [ 241.274913][ T8107] bridge0: entered allmulticast mode [ 241.401166][ T8116] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 241.468290][ T8118] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 241.515855][ T8118] netlink: 'syz.3.554': attribute type 2 has an invalid length. [ 241.584519][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'. [ 241.633034][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 241.661460][ T8116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.709921][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 241.790817][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 241.831328][ T8116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.553'. [ 241.903051][ T8136] sctp: [Deprecated]: syz.2.558 (pid 8136) Use of int in maxseg socket option. [ 241.903051][ T8136] Use struct sctp_assoc_value instead [ 241.988445][ T8142] syzkaller1: entered promiscuous mode [ 242.004350][ T8142] syzkaller1: entered allmulticast mode [ 242.027035][ T8145] Bluetooth: MGMT ver 1.23 [ 242.037375][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 242.044891][ T8145] netlink: 136 bytes leftover after parsing attributes in process `syz.1.561'. [ 242.396255][ T8165] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 242.415911][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 242.709046][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 242.783143][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 243.137458][ T8201] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 243.259554][ T8201] bond5: entered promiscuous mode [ 243.271135][ T8201] bond5: entered allmulticast mode [ 243.291206][ T8201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.583373][ T8218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.692311][ T5646] block nbd0: Receive control failed (result -107) [ 244.018750][ T8234] netlink: 'syz.4.582': attribute type 5 has an invalid length. [ 244.741160][ T8270] geneve0: entered promiscuous mode [ 244.770949][ T8270] macvlan2: entered promiscuous mode [ 245.435330][ T8302] x_tables: unsorted entry at hook 2 [ 245.974710][ T8318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.129221][ T8333] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 246.285904][ T8335] tipc: Cannot configure node identity twice [ 246.939609][ T111] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 246.948525][ T8371] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.263308][ T8383] __nla_validate_parse: 78 callbacks suppressed [ 247.263331][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 247.383599][ T8391] syzkaller1: entered promiscuous mode [ 247.398914][ T8391] syzkaller1: entered allmulticast mode [ 247.560170][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 247.613697][ T8364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.651758][ T8374] netlink: 'syz.3.618': attribute type 2 has an invalid length. [ 247.879863][ T24] IPVS: starting estimator thread 0... [ 247.912814][ T8400] IPVS: lc: FWM 3 0x00000003 - no destination available [ 247.995454][ T8405] IPVS: using max 25 ests per chain, 60000 per kthread [ 248.147065][ T8418] openvswitch: netlink: Multiple metadata blocks provided [ 248.350104][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 248.472925][ T8431] syzkaller0: entered promiscuous mode [ 248.507258][ T8431] syzkaller0: entered allmulticast mode [ 249.108805][ T8474] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.149162][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 249.332730][ T8482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.646'. [ 249.408050][ T8488] netlink: 36 bytes leftover after parsing attributes in process `syz.3.646'. [ 249.766599][ T8500] syzkaller1: entered promiscuous mode [ 249.787395][ T8500] syzkaller1: entered allmulticast mode [ 250.167814][ T8526] ipt_rpfilter: unknown options [ 250.291328][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 250.376435][ T8531] netlink: 104 bytes leftover after parsing attributes in process `syz.2.661'. [ 250.714383][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 250.755110][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 251.009530][ T8558] netlink: 'syz.3.666': attribute type 39 has an invalid length. [ 251.013500][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 251.677046][ T8591] syzkaller0: entered promiscuous mode [ 251.692963][ T8591] syzkaller0: entered allmulticast mode [ 251.726765][ T8591] 0: reclassify loop, rule prio 0, protocol 800 [ 252.150896][ T8615] syzkaller1: entered promiscuous mode [ 252.181051][ T8615] syzkaller1: entered allmulticast mode [ 252.270555][ T8619] netlink: 68 bytes leftover after parsing attributes in process `syz.4.684'. [ 252.407325][ T8622] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 252.621983][ T8622] bond5: option mode: invalid value (8) [ 252.640325][ T8622] bond5 (unregistering): Released all slaves [ 253.064468][ T8645] netlink: 68 bytes leftover after parsing attributes in process `syz.4.691'. [ 253.106385][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.691'. [ 253.140912][ T8649] syzkaller0: entered promiscuous mode [ 253.147913][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 253.154503][ T8649] syzkaller0: entered allmulticast mode [ 253.200495][ T8649] 0: reclassify loop, rule prio 0, protocol 800 [ 253.475789][ T8655] block nbd1: Unsupported socket: should be TCP or UNIX. [ 253.521293][ T8655] syzkaller0: entered promiscuous mode [ 253.538126][ T8655] syzkaller0: entered allmulticast mode [ 253.864656][ T8664] bond6: option primary_reselect: invalid value (6) [ 253.872959][ T8671] xt_TCPMSS: Only works on TCP SYN packets [ 253.895594][ T8664] bond6 (unregistering): Released all slaves [ 254.008235][ T8669] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 254.299951][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.703'. [ 254.344729][ T8685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.625348][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 254.643928][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.707'. [ 254.714919][ T8707] syzkaller0: entered promiscuous mode [ 254.720768][ T8707] syzkaller0: entered allmulticast mode [ 255.411335][ T8718] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 255.416638][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.711'. [ 255.569852][ T8718] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.876042][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.991166][ T8740] Bluetooth: MGMT ver 1.23 [ 256.231060][ T8746] syzkaller0: entered promiscuous mode [ 256.245527][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 256.256060][ T8746] syzkaller0: entered allmulticast mode [ 256.275469][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 256.458575][ T8757] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 256.880717][ T8780] 8021q: VLANs not supported on sit0 [ 256.914982][ T8780] block nbd2: not configured, cannot reconfigure [ 257.215121][ T8796] netlink: 'syz.1.735': attribute type 30 has an invalid length. [ 257.359609][ T8797] netlink: 'syz.4.734': attribute type 13 has an invalid length. [ 257.408329][ T8802] __nla_validate_parse: 1 callbacks suppressed [ 257.408347][ T8802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.737'. [ 257.414494][ T8797] netlink: 'syz.4.734': attribute type 17 has an invalid length. [ 257.433935][ T8796] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 257.462775][ T8796] bond1 (unregistering): Released all slaves [ 257.706318][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 257.818366][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.841993][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.892001][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.905655][ T8828] x_tables: duplicate underflow at hook 1 [ 258.053880][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.088303][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.129499][ T8797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.140136][ T8797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.161304][ T8797] veth1_vlan: left promiscuous mode [ 258.169179][ T8797] veth0_vlan: left promiscuous mode [ 258.177086][ T8797] veth0_vlan: entered promiscuous mode [ 258.183978][ T8838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.744'. [ 258.198320][ T8797] veth1_vlan: entered promiscuous mode [ 258.211231][ T8797] veth1_macvtap: left promiscuous mode [ 258.219120][ T8797] veth0_macvtap: left promiscuous mode [ 258.226942][ T8797] veth0_macvtap: entered promiscuous mode [ 258.244745][ T8797] veth1_macvtap: entered promiscuous mode [ 258.270068][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.306663][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.323418][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.340517][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.370192][ T8797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.381865][ T8797] wireguard0: left allmulticast mode [ 258.398657][ T8797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.413063][ T8797] veth3: left allmulticast mode [ 258.422455][ T8797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.437948][ T8797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.446505][ T8797] bond5: left promiscuous mode [ 258.451360][ T8797] bond5: left allmulticast mode [ 258.451625][ T8848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.456862][ T8797] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.478371][ T8797] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.509670][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.516945][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.527460][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.534713][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.625599][ T8819] syzkaller0: entered promiscuous mode [ 258.631097][ T8819] syzkaller0: entered allmulticast mode [ 258.642492][ T8835] pim6reg: entered allmulticast mode [ 258.648865][ T111] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.659753][ T111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.670849][ T8839] syzkaller0: entered promiscuous mode [ 258.677483][ T8839] syzkaller0: entered allmulticast mode [ 258.943547][ T8861] xt_CT: No such helper "snmp_trap" [ 260.580905][ T111] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.590330][ T111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.666297][ T8869] netlink: 'syz.2.750': attribute type 2 has an invalid length. [ 260.701936][ T111] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.735245][ T111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.774263][ T111] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.815515][ T111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.017008][ T111] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 261.201049][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 261.255771][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.758'. [ 261.420600][ T8887] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 263.080472][ T8897] ip6erspan1: entered promiscuous mode [ 263.348925][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.764'. [ 263.633941][ T8929] netlink: 'syz.2.768': attribute type 16 has an invalid length. [ 263.646306][ T8929] netlink: 'syz.2.768': attribute type 17 has an invalid length. [ 263.654944][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 263.729480][ T8929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.747824][ T8929] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.761971][ T8929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.874523][ T8929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.918476][ T8929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.952768][ T8929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.992258][ T8929] veth1_vlan: left promiscuous mode [ 264.000666][ T8929] veth0_vlan: left promiscuous mode [ 264.013860][ T8929] veth0_vlan: entered promiscuous mode [ 264.028465][ T8929] veth1_vlan: entered promiscuous mode [ 264.035059][ T8929] veth1_vlan: entered allmulticast mode [ 264.044358][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 264.087876][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.098929][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.111812][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.150030][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.166776][ T8929] batman_adv: batadv0: Interface activated: gretap1 [ 264.178502][ T8929] bond1: left promiscuous mode [ 264.186128][ T8929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.195442][ T8929] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.204826][ T8929] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 264.213126][ T8929] geneve2: left promiscuous mode [ 264.220049][ T8929] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 264.300122][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.307359][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.441495][ T3329] bridge0: port 3(macvlan0) entered blocking state [ 264.448261][ T3329] bridge0: port 3(macvlan0) entered forwarding state [ 264.473995][ T8936] pim6reg1: entered promiscuous mode [ 264.480691][ T8936] pim6reg1: entered allmulticast mode [ 264.487948][ T3295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.497585][ T3295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.589549][ T3295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.599938][ T3295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.207188][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 265.476526][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.502826][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.636857][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 265.660543][ T8987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.706164][ T3295] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.767129][ T3295] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.891494][ T3295] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.957814][ T3295] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.114329][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 266.255339][ T9026] netlink: 'syz.3.785': attribute type 49 has an invalid length. [ 266.531210][ T9036] tipc: Enabled bearer , priority 10 [ 266.931776][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 266.986519][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 267.239816][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 267.492714][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.891810][ T5747] tipc: Node number set to 2800200403 [ 267.923098][ T9101] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 268.941741][ T9110] syzkaller0: entered promiscuous mode [ 268.950641][ T9110] syzkaller0: entered allmulticast mode [ 269.766990][ T5646] block nbd2: Receive control failed (result -32) [ 270.016123][ T9158] netlink: 64 bytes leftover after parsing attributes in process `syz.0.811'. [ 271.816917][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 271.834198][ T9156] netlink: 'syz.4.812': attribute type 11 has an invalid length. [ 271.997575][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 272.023707][ T9156] netlink: 'syz.4.812': attribute type 11 has an invalid length. [ 272.060515][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 272.173302][ T9184] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 272.209586][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 272.369306][ T9187] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 272.405311][ T9184] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 272.444954][ T9184] bond3 (unregistering): Released all slaves [ 272.596442][ T9197] netlink: 'syz.4.822': attribute type 2 has an invalid length. [ 273.361492][ T9226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.879242][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.832'. [ 273.919183][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.832'. [ 274.424641][ T9257] tipc: Enabled bearer , priority 0 [ 274.450341][ T9257] syzkaller0: entered promiscuous mode [ 274.480611][ T9257] syzkaller0: entered allmulticast mode [ 274.603129][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 274.626268][ T9260] tipc: Resetting bearer [ 274.677093][ T9263] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 274.693844][ T9265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.710152][ T9260] tipc: Disabling bearer [ 274.712226][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 274.947588][ T9269] hsr0: entered allmulticast mode [ 274.976873][ T9269] hsr_slave_0: entered allmulticast mode [ 274.990370][ T9269] hsr_slave_1: entered allmulticast mode [ 275.022110][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 275.043271][ T9272] tap0: tun_chr_ioctl cmd 1074025677 [ 275.049857][ T9272] tap0: linktype set to 780 [ 275.127517][ T9269] hsr_slave_0: left promiscuous mode [ 275.148639][ T9269] hsr_slave_1: left promiscuous mode [ 275.152183][ T9285] netlink: 'syz.0.845': attribute type 4 has an invalid length. [ 275.162262][ T9285] netlink: 152 bytes leftover after parsing attributes in process `syz.0.845'. [ 275.202043][ T9269] hsr0 (unregistering): left allmulticast mode [ 276.027538][ T9316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.850'. [ 276.079412][ T9314] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 276.252292][ T9316] team0 (unregistering): Port device team_slave_0 removed [ 276.302141][ T9316] team0 (unregistering): Port device team_slave_1 removed [ 276.651508][ T9330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.851179][ T9334] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 276.876845][ T9334] team0: Port device batadv1 added [ 278.081212][ T9380] bond_slave_0: left promiscuous mode [ 278.282830][ T9380] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 278.333779][ T9380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.339437][ T9387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.345348][ T9380] bond2: left promiscuous mode [ 278.372964][ T9380] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 278.418279][ T374] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.475188][ T9390] syzkaller0: entered promiscuous mode [ 278.494287][ T9390] syzkaller0: entered allmulticast mode [ 278.526380][ T9390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.636938][ T9392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.765194][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 278.821116][ T9396] macvlan0: mtu less than device minimum [ 278.868885][ T9400] netlink: 5 bytes leftover after parsing attributes in process `syz.4.872'. [ 279.162983][ T9414] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.173540][ T9414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.182319][ T9414] IPv6: NLM_F_CREATE should be set when creating new route [ 279.392594][ T9421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.043320][ T9355] Set syz1 is full, maxelem 65536 reached [ 280.263165][ T9442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.485870][ T9453] netlink: 128 bytes leftover after parsing attributes in process `syz.0.886'. [ 280.568531][ T9457] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 280.605805][ T9457] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 280.636135][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.888'. [ 280.646586][ T9457] netlink: 152 bytes leftover after parsing attributes in process `syz.0.886'. [ 280.669334][ T9465] x_tables: duplicate underflow at hook 2 [ 280.718515][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 280.746203][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 280.872837][ T9471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.531633][ T9504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.573214][ T9507] netlink: 'syz.1.901': attribute type 2 has an invalid length. [ 281.601340][ T9503] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 281.844451][ T9507] : entered promiscuous mode [ 282.044954][ T9523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.088754][ T9510] netlink: 72 bytes leftover after parsing attributes in process `syz.2.902'. [ 282.253278][ T9516] netlink: 108 bytes leftover after parsing attributes in process `syz.2.902'. [ 282.282706][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 282.306352][ T9516] netlink: 108 bytes leftover after parsing attributes in process `syz.2.902'. [ 282.354256][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.566051][ T9532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.816968][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 282.843894][ T9553] netlink: 'syz.2.912': attribute type 8 has an invalid length. [ 282.906170][ T9553] netlink: 'syz.2.912': attribute type 8 has an invalid length. [ 282.919631][ T374] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.977430][ T374] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.985823][ T9564] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 283.010621][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.080826][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.351281][ T9578] syzkaller0: entered promiscuous mode [ 283.377304][ T9578] syzkaller0: entered allmulticast mode [ 283.404334][ T9578] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 283.412798][ T9578] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 283.768252][ T9584] syzkaller0: entered promiscuous mode [ 283.782260][ T9584] syzkaller0: entered allmulticast mode [ 283.901467][ T9600] IPv6: sit1: Disabled Multicast RS [ 284.023893][ T9607] xt_ecn: cannot match TCP bits for non-tcp packets [ 284.078571][ T9607] bond0 (unregistering): Released all slaves [ 284.417121][ T9620] bond2: (slave veth0_to_bond): Releasing active interface [ 284.455937][ T9620] bond2: (slave veth3): making interface the new active one [ 284.487145][ T9610] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 284.521440][ T9624] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 284.607798][ T9625] net_ratelimit: 2 callbacks suppressed [ 284.607818][ T9625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.639108][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.710820][ T9610] bond7: option mode: invalid value (12) [ 284.719159][ T9610] bond7 (unregistering): Released all slaves [ 284.746311][ T9611] : renamed from dummy0 (while UP) [ 284.849811][ T9624] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 285.090140][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.098022][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.513199][ T9644] __nla_validate_parse: 12 callbacks suppressed [ 285.513220][ T9644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.936'. [ 285.557242][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.936'. [ 285.568815][ T9644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.936'. [ 285.616384][ T9632] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 285.707797][ T9632] bond2: left allmulticast mode [ 285.760048][ T9651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.938807][ T9653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.970227][ T9657] bond2: entered promiscuous mode [ 285.995539][ T9657] bond2: entered allmulticast mode [ 286.051596][ T9658] bond2: (slave dummy0): making interface the new active one [ 286.071236][ T9658] dummy0: entered promiscuous mode [ 286.093027][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 286.107411][ T9658] dummy0: entered allmulticast mode [ 286.123911][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.942'. [ 286.140664][ T9658] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 286.161446][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.177489][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.196449][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.221142][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.270458][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.276367][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 286.313718][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.353767][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.395662][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.639532][ T30] audit: type=1804 audit(1784459564.185:5): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.945" name="/newroot/181/cgroup.controllers" dev="tmpfs" ino=943 res=1 errno=0 [ 286.714612][ T30] audit: type=1800 audit(1784459564.185:6): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="cgroup.controllers" dev="tmpfs" ino=943 res=0 errno=0 [ 286.785804][ T30] audit: type=1800 audit(1784459564.215:7): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="cgroup.controllers" dev="tmpfs" ino=943 res=0 errno=0 [ 286.862827][ T9722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.123138][ T9727] validate_nla: 1 callbacks suppressed [ 287.123160][ T9727] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 287.220248][ T9727] x_tables: duplicate underflow at hook 2 [ 287.223959][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 287.239744][ T9727] bond3: (slave bridge1): making interface the new active one [ 287.249579][ T9727] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 287.268039][ T9735] netlink: 'syz.0.954': attribute type 4 has an invalid length. [ 287.285816][ T9735] netlink: 'syz.0.954': attribute type 4 has an invalid length. [ 288.639111][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.969113][ T9805] batadv_slave_1: entered promiscuous mode [ 289.000008][ T9807] netlink: 'syz.4.968': attribute type 12 has an invalid length. [ 289.032562][ T9807] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 289.198313][ T9814] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 289.210726][ T9813] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 289.227766][ T9813] bridge3: entered promiscuous mode [ 289.233174][ T9813] bridge3: entered allmulticast mode [ 289.246616][ T9803] batadv_slave_1: left promiscuous mode [ 289.249497][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'. [ 289.333597][ T12] tipc: Subscription rejected, illegal request [ 289.450750][ T9814] bond4: entered promiscuous mode [ 289.460343][ T9814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.468783][ T9820] bond4: entered allmulticast mode [ 289.490012][ T9829] nbd: must specify at least one socket [ 289.763883][ T9834] syzkaller0: entered promiscuous mode [ 289.775361][ T9834] syzkaller0: entered allmulticast mode [ 289.839589][ T9849] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 289.862241][ T9834] tipc: Enabled bearer , priority 0 [ 289.968505][ T9857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.990679][ T9849] bond4: entered promiscuous mode [ 290.001346][ T9849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.047005][ T9862] tipc: Resetting bearer [ 290.077799][ T9833] tipc: Resetting bearer [ 290.122005][ T9833] tipc: Disabling bearer [ 290.152265][ T9865] x_tables: duplicate underflow at hook 3 [ 290.298145][ T9867] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 290.336965][ T9867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.481472][ T9881] pim6reg: left allmulticast mode [ 290.577886][ T9883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.989'. [ 290.712668][ T9885] batman_adv: batadv0: Adding interface: dummy0 [ 290.719230][ T9885] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.746679][ T9885] batman_adv: batadv0: Interface activated: dummy0 [ 291.371552][ T9905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.511588][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 291.517162][ T9915] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 291.614759][ T9917] netlink: 48 bytes leftover after parsing attributes in process `syz.4.997'. [ 291.617725][ T9916] gretap1: entered allmulticast mode [ 291.651599][ T9917] netlink: 48 bytes leftover after parsing attributes in process `syz.4.997'. [ 291.681793][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 291.703522][ T9915] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 291.890732][ T9933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.900951][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 291.921597][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 291.972225][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 292.458113][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'. [ 292.559486][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1015'. [ 292.560986][ T9967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.582457][ T9971] netlink: 'syz.3.1016': attribute type 3 has an invalid length. [ 292.803937][ T9977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.407103][T10008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.725287][T10041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.734574][T10038] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 293.902270][T10038] bond8: entered promiscuous mode [ 293.920429][T10038] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.956249][T10055] xt_hashlimit: max too large, truncated to 1048576 [ 294.707574][T10085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.942756][T10096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.008752][T10099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.131409][T10105] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 295.445687][T10105] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 295.854779][T10130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.954165][T10132] macvlan0: entered promiscuous mode [ 295.959256][T10136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.193921][T10141] __nla_validate_parse: 6 callbacks suppressed [ 296.193941][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 296.260142][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 296.577226][T10158] smc: adding net device wg2 with user defined pnetid SYZ0 [ 296.733837][T10163] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 296.748685][T10163] syzkaller1: linktype set to 0 [ 296.800352][T10172] syzkaller1: entered promiscuous mode [ 296.810556][T10172] syzkaller1: entered allmulticast mode [ 297.043006][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.111777][T10185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.166837][T10190] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.456900][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1077'. [ 297.748572][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.949804][T10238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.286024][T10248] netlink: 'syz.2.1094': attribute type 27 has an invalid length. [ 298.338558][T10252] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 298.364260][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 298.373579][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'. [ 298.407379][T10257] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 298.756243][T10248] bridge0: port 3(macvlan0) entered disabled state [ 298.763823][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.966573][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.137097][T10248] veth1_vlan: left allmulticast mode [ 299.186347][T10248] batman_adv: batadv0: Interface deactivated: gretap1 [ 299.207631][T10248] ip6tnl2: left allmulticast mode [ 299.218872][T10248] geneve0: left promiscuous mode [ 299.231836][T10248] macvlan2: left promiscuous mode [ 299.256097][T10248] bond2: left promiscuous mode [ 299.261187][T10248] dummy0: left promiscuous mode [ 299.266957][T10248] bond2: left allmulticast mode [ 299.272137][T10248] dummy0: left allmulticast mode [ 299.285624][T10248] bond4: left promiscuous mode [ 299.294687][T10248] bond4: left allmulticast mode [ 299.369790][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.380100][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.393477][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.443364][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.450758][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.476278][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.500961][T10251] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 299.532946][T10264] lo speed is unknown, defaulting to 1000 [ 299.557405][ T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.580213][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.599799][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.623797][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.727373][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.756808][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.788872][ T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.805265][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.845521][T10264] lo speed is unknown, defaulting to 1000 [ 299.888739][T10264] lo speed is unknown, defaulting to 1000 [ 299.905540][T10287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.946629][T10290] tipc: Enabled bearer , priority 0 [ 299.965435][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 299.985267][T10290] syzkaller0: entered promiscuous mode [ 299.991105][T10290] syzkaller0: entered allmulticast mode [ 300.021541][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 300.023101][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 300.098343][T10295] netlink: 'syz.1.1102': attribute type 19 has an invalid length. [ 300.146340][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 300.152003][T10295] netlink: 'syz.1.1102': attribute type 20 has an invalid length. [ 300.277047][T10296] netlink: 'syz.1.1102': attribute type 19 has an invalid length. [ 300.354824][T10296] netlink: 'syz.1.1102': attribute type 20 has an invalid length. [ 300.466189][T10024] netdevsim netdevsim1 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.487239][T10024] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.523779][T10024] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.563031][T10024] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.650264][T10289] tipc: Resetting bearer [ 300.651429][T10264] infiniband s: set down [ 300.693677][T10264] infiniband s: added lo [ 300.722954][T10289] tipc: Disabling bearer [ 300.743237][ T9675] lo speed is unknown, defaulting to 1000 [ 300.779313][T10264] smbdirect: ib_dev[s]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 300.806143][T10264] smbdirect: ib_dev[s]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 300.829960][T10264] smbdirect: ib_dev[s]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 300.920433][T10264] RDS/IB: s: added [ 300.940328][T10264] smc: adding ib device s with port count 1 [ 300.950829][T10264] smc: ib device s port 1 has no pnetid [ 300.968296][ T9675] lo speed is unknown, defaulting to 1000 [ 301.000944][T10264] lo speed is unknown, defaulting to 1000 [ 301.075430][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1109'. [ 301.371242][T10331] bond5: entered promiscuous mode [ 301.392002][T10331] bond5: entered allmulticast mode [ 301.413370][T10331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.574690][T10346] syzkaller0: entered promiscuous mode [ 301.580904][T10346] syzkaller0: entered allmulticast mode [ 301.816996][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.989515][T10264] lo speed is unknown, defaulting to 1000 [ 303.887469][T10264] lo speed is unknown, defaulting to 1000 [ 304.011521][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'. [ 304.021797][T10376] nbd: must specify at least one socket [ 304.846851][T10410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.852313][T10413] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 304.866616][T10264] lo speed is unknown, defaulting to 1000 [ 304.877265][T10412] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 304.942736][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 305.202495][T10423] dummy0: entered allmulticast mode [ 305.337550][T10423] dummy0: left allmulticast mode [ 305.619806][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 305.648932][T10264] lo speed is unknown, defaulting to 1000 [ 305.817899][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.833299][T10449] xt_CT: No such helper "pptp" [ 305.990376][T10458] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 306.009120][T10458] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1147'. [ 306.024244][T10458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1147'. [ 306.368960][T10476] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1151'. [ 306.471526][T10478] netlink: 'syz.4.1152': attribute type 1 has an invalid length. [ 306.544561][T10478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.598039][T10482] bond9: (slave gretap1): making interface the new active one [ 306.635774][T10482] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 306.710548][T10427] lo speed is unknown, defaulting to 1000 [ 307.008794][T10503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.620109][T10526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.368185][T10549] netlink: 'syz.2.1166': attribute type 1 has an invalid length. [ 308.420918][T10549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.469876][T10549] bond5: (slave gretap2): making interface the new active one [ 308.478991][T10549] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 308.539626][T10554] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1167'. [ 308.658642][T10556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.880728][T10565] netlink: zone id is out of range [ 308.897660][T10565] netlink: del zone limit has 4 unknown bytes [ 309.395976][T10594] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 309.497015][T10599] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1183'. [ 309.520166][T10599] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 309.538706][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1184'. [ 309.548859][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 309.559859][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1184'. [ 309.606439][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 309.935262][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 310.066532][T10633] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 310.189726][T10636] lo speed is unknown, defaulting to 1000 [ 310.341252][T10653] xt_hashlimit: max too large, truncated to 1048576 [ 310.475423][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 310.617210][T10661] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 311.196044][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 311.376135][T10690] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 311.410979][T10694] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 311.642105][T10688] veth3: entered allmulticast mode [ 311.692924][T10688] bond2: (slave veth3): Enslaving as an active interface with an up link [ 311.719508][T10691] syzkaller0: entered promiscuous mode [ 311.725455][T10691] syzkaller0: entered allmulticast mode [ 312.487168][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1216'. [ 312.806263][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 314.513330][T10789] tipc: Enabling of bearer rejected, failed to enable media [ 314.645256][T10798] IPv6: addrconf: prefix option has invalid lifetime [ 314.687646][T10790] syzkaller0: entered promiscuous mode [ 314.706770][T10790] syzkaller0: entered allmulticast mode [ 314.726942][T10795] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 314.748581][T10795] syzkaller1: linktype set to 805 [ 315.755035][T10826] __nla_validate_parse: 2 callbacks suppressed [ 315.755056][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 317.250015][T10805] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 317.259916][T10805] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 317.269592][T10805] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 317.487263][T10835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.505474][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1242'. [ 317.591925][T10838] rdma_op ffff888072ad91f0 conn xmit_rdma 0000000000000000 [ 317.904619][T10850] syzkaller0: entered promiscuous mode [ 317.918672][T10850] syzkaller0: entered allmulticast mode [ 317.943285][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 317.969617][T10850] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1248'. [ 317.997130][T10850] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1248'. [ 318.105272][T10860] syzkaller0: entered promiscuous mode [ 318.110919][T10860] syzkaller0: entered allmulticast mode [ 318.122868][T10860] 0: reclassify loop, rule prio 0, protocol 800 [ 318.124144][T10865] netlink: 'syz.1.1253': attribute type 8 has an invalid length. [ 318.419703][T10878] FAULT_INJECTION: forcing a failure. [ 318.419703][T10878] name failslab, interval 1, probability 0, space 0, times 1 [ 318.434049][T10878] CPU: 1 UID: 0 PID: 10878 Comm: syz.3.1257 Not tainted syzkaller #0 PREEMPT(full) [ 318.434076][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 318.434086][T10878] Call Trace: [ 318.434094][T10878] [ 318.434103][T10878] dump_stack_lvl+0xe8/0x150 [ 318.434137][T10878] should_fail_ex+0x40c/0x560 [ 318.434165][T10878] should_failslab+0xa8/0x100 [ 318.434196][T10878] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 318.434221][T10878] ? sctp_get_port_local+0x6bd/0x1700 [ 318.434240][T10878] ? sctp_get_port_local+0x6bd/0x1700 [ 318.434267][T10878] sctp_get_port_local+0x6bd/0x1700 [ 318.434301][T10878] ? __pfx_sctp_get_port_local+0x10/0x10 [ 318.434323][T10878] ? sctp_bind_addr_match+0x30/0x2b0 [ 318.434348][T10878] ? sctp_bind_addr_match+0x28b/0x2b0 [ 318.434381][T10878] sctp_do_bind+0x4d9/0x9a0 [ 318.434411][T10878] sctp_connect_new_asoc+0x270/0x6b0 [ 318.434435][T10878] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 318.434463][T10878] ? __local_bh_enable_ip+0xd0/0x130 [ 318.434484][T10878] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 318.434506][T10878] ? security_sctp_bind_connect+0x7e/0x2c0 [ 318.434538][T10878] sctp_sendmsg+0x159b/0x2d00 [ 318.434585][T10878] ? __pfx_sctp_sendmsg+0x10/0x10 [ 318.434634][T10878] ? aa_sk_perm+0x6d5/0x900 [ 318.434670][T10878] ? __might_fault+0xaf/0x130 [ 318.434697][T10878] ? sock_rps_record_flow+0x19/0x350 [ 318.434728][T10878] ? inet_sendmsg+0x298/0x320 [ 318.434757][T10878] ? __pfx_inet_sendmsg+0x10/0x10 [ 318.434783][T10878] sock_sendmsg_nosec+0x10e/0x180 [ 318.434811][T10878] __sys_sendto+0x408/0x5a0 [ 318.434839][T10878] ? ksys_write+0x1e6/0x270 [ 318.434872][T10878] ? __pfx___sys_sendto+0x10/0x10 [ 318.434898][T10878] ? __mutex_unlock_slowpath+0x731/0x900 [ 318.434959][T10878] ? __pfx_ksys_write+0x10/0x10 [ 318.434994][T10878] __x64_sys_sendto+0xde/0x100 [ 318.435023][T10878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.435045][T10878] do_syscall_64+0x174/0x580 [ 318.435073][T10878] ? trace_irq_disable+0x3b/0x140 [ 318.435117][T10878] ? clear_bhb_loop+0x40/0x90 [ 318.435141][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.435161][T10878] RIP: 0033:0x7ff8d819de99 [ 318.435180][T10878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.435197][T10878] RSP: 002b:00007ff8d910a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 318.435218][T10878] RAX: ffffffffffffffda RBX: 00007ff8d8425fa0 RCX: 00007ff8d819de99 [ 318.435233][T10878] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 318.435245][T10878] RBP: 00007ff8d910a090 R08: 0000200000000140 R09: 000000000000001c [ 318.435257][T10878] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000001 [ 318.435269][T10878] R13: 00007ff8d8426038 R14: 00007ff8d8425fa0 R15: 00007fff364118c8 [ 318.435302][T10878] [ 318.799629][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 318.945757][T10896] netlink: 'syz.0.1264': attribute type 1 has an invalid length. [ 318.953670][T10896] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1264'. [ 319.041444][T10900] xt_hashlimit: size too large, truncated to 1048576 [ 319.143568][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1262'. [ 319.171912][T10905] openvswitch: netlink: Flow actions attr not present in new flow. [ 319.505945][T10912] lo speed is unknown, defaulting to 1000 [ 319.519668][T10915] netlink: 'syz.2.1268': attribute type 11 has an invalid length. [ 319.583234][T10915] syzkaller0: entered promiscuous mode [ 319.614464][T10915] syzkaller0: entered allmulticast mode [ 319.667740][T10931] FAULT_INJECTION: forcing a failure. [ 319.667740][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 319.689459][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.1.1272 Not tainted syzkaller #0 PREEMPT(full) [ 319.689487][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 319.689499][T10931] Call Trace: [ 319.689507][T10931] [ 319.689515][T10931] dump_stack_lvl+0xe8/0x150 [ 319.689552][T10931] should_fail_ex+0x40c/0x560 [ 319.689581][T10931] should_failslab+0xa8/0x100 [ 319.689613][T10931] __kmalloc_cache_noprof+0xa8/0x660 [ 319.689649][T10931] ? sctp_add_bind_addr+0x8c/0x370 [ 319.689677][T10931] ? sctp_add_bind_addr+0x8c/0x370 [ 319.689704][T10931] ? __pfx_sctp_get_port_local+0x10/0x10 [ 319.689729][T10931] sctp_add_bind_addr+0x8c/0x370 [ 319.689755][T10931] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 319.689778][T10931] sctp_do_bind+0x597/0x9a0 [ 319.689810][T10931] sctp_connect_new_asoc+0x270/0x6b0 [ 319.689834][T10931] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 319.689862][T10931] ? __local_bh_enable_ip+0xd0/0x130 [ 319.689884][T10931] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 319.689906][T10931] ? security_sctp_bind_connect+0x7e/0x2c0 [ 319.689937][T10931] sctp_sendmsg+0x159b/0x2d00 [ 319.689987][T10931] ? __pfx_sctp_sendmsg+0x10/0x10 [ 319.690025][T10931] ? aa_sk_perm+0x6d5/0x900 [ 319.690060][T10931] ? __might_fault+0xaf/0x130 [ 319.690088][T10931] ? sock_rps_record_flow+0x19/0x350 [ 319.690119][T10931] ? inet_sendmsg+0x298/0x320 [ 319.690148][T10931] ? __pfx_inet_sendmsg+0x10/0x10 [ 319.690174][T10931] sock_sendmsg_nosec+0x10e/0x180 [ 319.690202][T10931] __sys_sendto+0x408/0x5a0 [ 319.690230][T10931] ? ksys_write+0x1e6/0x270 [ 319.690263][T10931] ? __pfx___sys_sendto+0x10/0x10 [ 319.690288][T10931] ? __mutex_unlock_slowpath+0x731/0x900 [ 319.690351][T10931] ? __pfx_ksys_write+0x10/0x10 [ 319.690387][T10931] __x64_sys_sendto+0xde/0x100 [ 319.690416][T10931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.690438][T10931] do_syscall_64+0x174/0x580 [ 319.690467][T10931] ? trace_irq_disable+0x3b/0x140 [ 319.690492][T10931] ? clear_bhb_loop+0x40/0x90 [ 319.690517][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.690537][T10931] RIP: 0033:0x7f65d679de99 [ 319.690557][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.690572][T10931] RSP: 002b:00007f65d76ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 319.690595][T10931] RAX: ffffffffffffffda RBX: 00007f65d6a25fa0 RCX: 00007f65d679de99 [ 319.690609][T10931] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 319.690629][T10931] RBP: 00007f65d76ac090 R08: 0000200000000140 R09: 000000000000001c [ 319.690642][T10931] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000001 [ 319.690654][T10931] R13: 00007f65d6a26038 R14: 00007f65d6a25fa0 R15: 00007ffc325eb2c8 [ 319.690688][T10931] [ 320.193226][T10939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'. [ 320.240214][T10939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'. [ 320.558930][T10960] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 320.612240][T10963] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 321.152356][T10951] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 321.452789][T10988] IPVS: ip_vs_add_dest(): server weight less than zero [ 321.494488][T10986] IPVS: rr: FWM 3 0x00000003 - no destination available [ 322.206286][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 322.233635][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 322.290828][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1299'. [ 322.587382][T11026] smc: net device wg2 erased user defined pnetid SYZ0 [ 322.899881][ T7026] udevd[7026]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.293732][T11059] sctp: [Deprecated]: syz.2.1306 (pid 11059) Use of int in max_burst socket option. [ 323.293732][T11059] Use struct sctp_assoc_value instead [ 323.350981][T11060] sctp: [Deprecated]: syz.2.1306 (pid 11060) Use of int in max_burst socket option. [ 323.350981][T11060] Use struct sctp_assoc_value instead [ 323.511412][T11076] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1310'. [ 323.537930][T11076] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1310'. [ 323.938716][T11098] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 323.980865][T11098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.993336][T11099] bridge0: port 3(netdevsim1) entered blocking state [ 324.033549][T11099] bridge0: port 3(netdevsim1) entered disabled state [ 324.063200][T11099] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 324.087078][T11099] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 324.165668][T11098] bond3: (slave geneve2): making interface the new active one [ 324.178053][T11112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1319'. [ 324.193791][T11098] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 324.225760][T11110] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1317'. [ 324.261112][T11117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1319'. [ 324.964375][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.977548][T11121] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 325.351541][T11121] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.383464][T11136] bond6: (slave veth3): Enslaving as an active interface with a down link [ 325.421283][T11146] bond6: (slave veth5): Enslaving as an active interface with a down link [ 325.790215][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 328.292408][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 329.098948][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 330.193645][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 331.472462][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.480097][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.606813][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.632993][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.718132][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 331.863073][T10026] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.890435][T10026] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.901628][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1348'. [ 331.912541][T10026] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.921898][T10026] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.931279][T10026] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.942485][T10026] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.973441][T10026] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.994239][T10026] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.098919][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1350'. [ 332.361835][T11277] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 332.392551][T11279] syzkaller0: entered promiscuous mode [ 332.413855][T11279] syzkaller0: entered allmulticast mode [ 332.471311][T11282] xt_hashlimit: size too large, truncated to 1048576 [ 332.535588][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 332.555565][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 332.588905][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 332.688642][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 333.565157][T11313] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 333.801801][T11323] gretap1: entered allmulticast mode [ 333.972818][T11325] syzkaller0: entered promiscuous mode [ 333.989820][T11325] syzkaller0: entered allmulticast mode [ 334.028045][T11325] __nla_validate_parse: 2 callbacks suppressed [ 334.028066][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1369'. [ 334.071858][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 334.540929][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1378'. [ 336.892996][T11393] xt_l2tp: v2 sid > 0xffff: 262144 [ 336.961430][T11395] syzkaller0: entered promiscuous mode [ 336.984350][T11395] syzkaller0: entered allmulticast mode [ 337.004888][T11395] 0: reclassify loop, rule prio 0, protocol 800 [ 337.160608][T11408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1392'. [ 337.203590][T11408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1392'. [ 337.392657][T11419] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 337.480450][T11419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.641931][T11419] bond5: option all_slaves_active: invalid value (6) [ 337.674481][T11419] bond5 (unregistering): Released all slaves [ 337.946643][T11431] lo speed is unknown, defaulting to 1000 [ 338.009468][T11442] syzkaller0: entered promiscuous mode [ 338.022251][T11442] syzkaller0: entered allmulticast mode [ 338.321494][T11453] x_tables: duplicate underflow at hook 1 [ 338.338453][T11453] x_tables: duplicate underflow at hook 1 [ 338.351679][T11453] x_tables: duplicate underflow at hook 1 [ 338.362685][T11453] x_tables: duplicate underflow at hook 1 [ 338.383633][T11453] x_tables: duplicate underflow at hook 1 [ 338.397740][T11453] x_tables: duplicate underflow at hook 1 [ 338.407120][T11453] x_tables: duplicate underflow at hook 1 [ 338.422964][T11453] x_tables: duplicate underflow at hook 1 [ 338.437337][T11453] x_tables: duplicate underflow at hook 1 [ 338.450215][T11453] x_tables: duplicate underflow at hook 1 [ 338.606789][T11464] tipc: New replicast peer: 255.255.255.255 [ 338.622537][T11464] tipc: Enabled bearer , priority 10 [ 338.727252][T11468] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1412'. [ 338.759045][T11468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1412'. [ 338.901618][T11440] lo speed is unknown, defaulting to 1000 [ 339.060554][T11478] syzkaller0: entered promiscuous mode [ 339.084896][T11478] syzkaller0: entered allmulticast mode [ 339.344602][T11484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1417'. [ 339.462472][T11432] lo speed is unknown, defaulting to 1000 [ 339.752912][ T9648] tipc: Node number set to 3677565520 [ 341.114678][T11538] gretap0: entered promiscuous mode [ 341.380859][T11540] syzkaller0: entered promiscuous mode [ 341.387064][T11540] syzkaller0: entered allmulticast mode [ 341.804375][T11560] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1434'. [ 346.430759][T11573] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 346.533079][T11575] lo speed is unknown, defaulting to 1000 [ 346.688424][T11581] batman_adv: batadv0: Adding interface: gretap1 [ 346.705762][T11581] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.759803][T11581] batman_adv: batadv0: Interface activated: gretap1 [ 346.782386][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'. [ 347.369131][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1444'. [ 348.010530][T11627] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 348.083843][T11627] bond6: option mode: invalid value (9) [ 348.093716][T11627] bond6 (unregistering): Released all slaves [ 348.263450][T11644] xt_connbytes: Forcing CT accounting to be enabled [ 348.272335][T11639] : renamed from dummy0 [ 348.366939][T11637] syzkaller0: entered promiscuous mode [ 348.375936][T11637] syzkaller0: entered allmulticast mode [ 348.652087][T11657] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1454'. [ 351.079876][T11685] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 351.129044][T11692] netlink: 'syz.3.1463': attribute type 29 has an invalid length. [ 351.170951][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 351.208953][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 351.225699][T11687] gretap2: entered allmulticast mode [ 351.258258][T11703] openvswitch: netlink: Flow actions attr not present in new flow. [ 351.279372][T11685] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 351.482065][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1468'. [ 351.565612][T11718] syzkaller0: entered promiscuous mode [ 351.604923][T11718] syzkaller0: entered allmulticast mode [ 351.626189][T11725] 0: reclassify loop, rule prio 0, protocol 800 [ 352.149530][T11749] xt_check_table_hooks: 55 callbacks suppressed [ 352.149554][T11749] x_tables: duplicate underflow at hook 1 [ 352.259715][T11751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.420324][T11765] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 352.479617][T11772] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 352.523722][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1484'. [ 352.555423][T11768] lo speed is unknown, defaulting to 1000 [ 352.580059][T11768] lo speed is unknown, defaulting to 1000 [ 352.620868][T11768] lo speed is unknown, defaulting to 1000 [ 352.629146][T11768] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 352.668050][T11768] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 352.721778][T11768] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 352.802371][T11768] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 352.883212][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1490'. [ 352.883254][T11781] syzkaller0: entered promiscuous mode [ 352.912818][T11781] syzkaller0: entered allmulticast mode [ 352.961942][T11768] lo speed is unknown, defaulting to 1000 [ 353.015823][T11768] lo speed is unknown, defaulting to 1000 [ 353.029375][T11768] lo speed is unknown, defaulting to 1000 [ 353.049137][T11768] lo speed is unknown, defaulting to 1000 [ 353.081232][T11768] lo speed is unknown, defaulting to 1000 [ 353.303336][T11803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1494'. [ 353.315034][T11803] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 353.528262][T11821] openvswitch: netlink: Message has 8 unknown bytes. [ 353.947274][T11838] syzkaller0: entered promiscuous mode [ 353.953724][T11838] syzkaller0: entered allmulticast mode [ 353.996260][T11842] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 354.023109][T11842] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1506'. [ 354.032813][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 355.197694][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 355.259448][T11883] netlink: 'syz.1.1516': attribute type 2 has an invalid length. [ 355.323322][T11883] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 355.357083][T11883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1516'. [ 355.620476][T11870] ip6gre1: entered promiscuous mode [ 355.631270][T11886] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.652375][T11870] ip6gre1: entered allmulticast mode [ 355.697983][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.717310][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.732718][T11911] syzkaller0: entered promiscuous mode [ 355.733055][T11908] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 355.739899][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.769883][T11911] syzkaller0: entered allmulticast mode [ 355.784292][T11913] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 355.822173][T11870] smc: removing ib device s [ 355.846027][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.940063][ T187] lo speed is unknown, defaulting to 1000 [ 355.955177][ T187] s: Port: 1 Link ACTIVE [ 355.982373][T11870] smbdirect: ib_dev[s] removed [ 356.028990][T11913] tipc: Enabled bearer , priority 10 [ 356.054487][T11889] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 356.072381][T11919] tipc: Enabling of bearer rejected, failed to enable media [ 356.119914][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1518'. [ 356.431663][T11917] bond1: (slave geneve0): making interface the new active one [ 356.447889][T11917] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 356.675501][ T9648] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.802989][T11949] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 357.267054][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 357.746610][T11987] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1534'. [ 357.774454][T11985] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.810668][T11987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.867419][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 358.359450][T11966] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.659119][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.703589][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.770754][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.860989][T12010] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 358.901364][ T5286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.940406][T12019] FAULT_INJECTION: forcing a failure. [ 358.940406][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 358.986276][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.2.1540 Not tainted syzkaller #0 PREEMPT(full) [ 358.986303][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 358.986312][T12019] Call Trace: [ 358.986320][T12019] [ 358.986327][T12019] dump_stack_lvl+0xe8/0x150 [ 358.986359][T12019] should_fail_ex+0x40c/0x560 [ 358.986386][T12019] should_failslab+0xa8/0x100 [ 358.986412][T12019] __kmalloc_cache_noprof+0xa8/0x660 [ 358.986435][T12019] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 358.986457][T12019] ? __kmalloc_cache_noprof+0x150/0x660 [ 358.986480][T12019] ? sctp_add_bind_addr+0x8c/0x370 [ 358.986503][T12019] ? sctp_add_bind_addr+0x8c/0x370 [ 358.986535][T12019] sctp_add_bind_addr+0x8c/0x370 [ 358.986567][T12019] sctp_copy_local_addr_list+0x31a/0x4e0 [ 358.986594][T12019] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 358.986621][T12019] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 358.986648][T12019] ? sctp_v6_is_any+0x64/0x80 [ 358.986675][T12019] ? sctp_copy_one_addr+0x93/0x360 [ 358.986705][T12019] sctp_bind_addr_copy+0xb3/0x3c0 [ 358.986733][T12019] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 358.986760][T12019] sctp_connect_new_asoc+0x2ff/0x6b0 [ 358.986784][T12019] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 358.986810][T12019] ? __local_bh_enable_ip+0xd0/0x130 [ 358.986830][T12019] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 358.986852][T12019] ? security_sctp_bind_connect+0x7e/0x2c0 [ 358.986881][T12019] sctp_sendmsg+0x159b/0x2d00 [ 358.986929][T12019] ? __pfx_sctp_sendmsg+0x10/0x10 [ 358.986975][T12019] ? aa_sk_perm+0x6d5/0x900 [ 358.987011][T12019] ? __might_fault+0xaf/0x130 [ 358.987038][T12019] ? sock_rps_record_flow+0x19/0x350 [ 358.987069][T12019] ? inet_sendmsg+0x298/0x320 [ 358.987097][T12019] ? __pfx_inet_sendmsg+0x10/0x10 [ 358.987122][T12019] sock_sendmsg_nosec+0x10e/0x180 [ 358.987150][T12019] __sys_sendto+0x408/0x5a0 [ 358.987176][T12019] ? ksys_write+0x1e6/0x270 [ 358.987208][T12019] ? __pfx___sys_sendto+0x10/0x10 [ 358.987232][T12019] ? __mutex_unlock_slowpath+0x731/0x900 [ 358.987298][T12019] ? __pfx_ksys_write+0x10/0x10 [ 358.987335][T12019] __x64_sys_sendto+0xde/0x100 [ 358.987363][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.987386][T12019] do_syscall_64+0x174/0x580 [ 358.987414][T12019] ? trace_irq_disable+0x3b/0x140 [ 358.987439][T12019] ? clear_bhb_loop+0x40/0x90 [ 358.987462][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.987480][T12019] RIP: 0033:0x7fd59339de99 [ 358.987499][T12019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.987516][T12019] RSP: 002b:00007fd594317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 358.987537][T12019] RAX: ffffffffffffffda RBX: 00007fd593625fa0 RCX: 00007fd59339de99 [ 358.987551][T12019] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 358.987563][T12019] RBP: 00007fd594317090 R08: 0000200000000140 R09: 000000000000001c [ 358.987576][T12019] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000002 [ 358.987588][T12019] R13: 00007fd593626038 R14: 00007fd593625fa0 R15: 00007ffcdfdf9cd8 [ 358.987623][T12019] [ 359.332262][T12007] lo speed is unknown, defaulting to 1000 [ 359.642502][T12033] bond0: entered promiscuous mode [ 359.662364][T12033] bond_slave_0: entered promiscuous mode [ 359.676511][T12033] bond_slave_1: entered promiscuous mode [ 359.706525][T12033] batadv0: entered promiscuous mode [ 359.739103][T12033] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 359.758444][T12033] bond0: left promiscuous mode [ 359.763403][T12033] bond_slave_0: left promiscuous mode [ 359.773793][T12033] bond_slave_1: left promiscuous mode [ 359.786934][T12033] batadv0: left promiscuous mode [ 359.911355][T12036] netlink: 'syz.2.1544': attribute type 2 has an invalid length. [ 359.960579][T12036] bond0: entered promiscuous mode [ 359.976612][T12036] bond_slave_0: entered promiscuous mode [ 359.983851][T12036] bond_slave_1: entered promiscuous mode [ 359.996531][T12036] batadv0: entered promiscuous mode [ 360.023550][T12036] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 360.051306][T12036] bond0: left promiscuous mode [ 360.065409][T12036] bond_slave_0: left promiscuous mode [ 360.075524][T12036] bond_slave_1: left promiscuous mode [ 360.114355][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.132140][T12036] batadv0: left promiscuous mode [ 360.167826][T12039] tipc: Bearer : already 2 bearers with priority 10 [ 360.177041][T12039] tipc: Bearer : trying with adjusted priority [ 360.192107][T12039] tipc: Enabling of bearer rejected, failed to enable media [ 360.225800][T12044] netlink: 279 bytes leftover after parsing attributes in process `syz.3.1545'. [ 360.306836][T12044] veth0_to_bond: default FDB implementation only supports local addresses [ 360.952765][T12090] FAULT_INJECTION: forcing a failure. [ 360.952765][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 360.980529][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz.2.1553 Not tainted syzkaller #0 PREEMPT(full) [ 360.980556][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 360.980568][T12090] Call Trace: [ 360.980575][T12090] [ 360.980584][T12090] dump_stack_lvl+0xe8/0x150 [ 360.980620][T12090] should_fail_ex+0x40c/0x560 [ 360.980648][T12090] should_failslab+0xa8/0x100 [ 360.980678][T12090] __kmalloc_cache_noprof+0xa8/0x660 [ 360.980702][T12090] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 360.980729][T12090] ? __kmalloc_cache_noprof+0x150/0x660 [ 360.980753][T12090] ? sctp_add_bind_addr+0x8c/0x370 [ 360.980776][T12090] ? sctp_add_bind_addr+0x8c/0x370 [ 360.980809][T12090] sctp_add_bind_addr+0x8c/0x370 [ 360.980841][T12090] sctp_copy_local_addr_list+0x31a/0x4e0 [ 360.980894][T12090] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 360.980920][T12090] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 360.980949][T12090] ? sctp_v6_is_any+0x64/0x80 [ 360.980986][T12090] ? sctp_copy_one_addr+0x93/0x360 [ 360.981016][T12090] sctp_bind_addr_copy+0xb3/0x3c0 [ 360.981041][T12090] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 360.981069][T12090] sctp_connect_new_asoc+0x2ff/0x6b0 [ 360.981093][T12090] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 360.981121][T12090] ? __local_bh_enable_ip+0xd0/0x130 [ 360.981142][T12090] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 360.981163][T12090] ? security_sctp_bind_connect+0x7e/0x2c0 [ 360.981196][T12090] sctp_sendmsg+0x159b/0x2d00 [ 360.981245][T12090] ? __pfx_sctp_sendmsg+0x10/0x10 [ 360.981283][T12090] ? aa_sk_perm+0x6d5/0x900 [ 360.981321][T12090] ? __might_fault+0xaf/0x130 [ 360.981349][T12090] ? sock_rps_record_flow+0x19/0x350 [ 360.981380][T12090] ? inet_sendmsg+0x298/0x320 [ 360.981411][T12090] ? __pfx_inet_sendmsg+0x10/0x10 [ 360.981437][T12090] sock_sendmsg_nosec+0x10e/0x180 [ 360.981470][T12090] __sys_sendto+0x408/0x5a0 [ 360.981498][T12090] ? ksys_write+0x1e6/0x270 [ 360.981532][T12090] ? __pfx___sys_sendto+0x10/0x10 [ 360.981557][T12090] ? __mutex_unlock_slowpath+0x731/0x900 [ 360.981620][T12090] ? __pfx_ksys_write+0x10/0x10 [ 360.981657][T12090] __x64_sys_sendto+0xde/0x100 [ 360.981688][T12090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.981711][T12090] do_syscall_64+0x174/0x580 [ 360.981740][T12090] ? trace_irq_disable+0x3b/0x140 [ 360.981765][T12090] ? clear_bhb_loop+0x40/0x90 [ 360.981791][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.981811][T12090] RIP: 0033:0x7fd59339de99 [ 360.981831][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.981849][T12090] RSP: 002b:00007fd594317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 360.981872][T12090] RAX: ffffffffffffffda RBX: 00007fd593625fa0 RCX: 00007fd59339de99 [ 360.981887][T12090] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 360.981900][T12090] RBP: 00007fd594317090 R08: 0000200000000140 R09: 000000000000001c [ 360.981913][T12090] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000002 [ 360.981925][T12090] R13: 00007fd593626038 R14: 00007fd593625fa0 R15: 00007ffcdfdf9cd8 [ 360.981959][T12090] [ 361.342566][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 361.390651][T12097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.502670][T12097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.646952][T12107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1556'. [ 361.951886][T12114] SET target dimension over the limit! [ 362.020615][T12115] SET target dimension over the limit! [ 362.040740][T12126] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1562'. [ 362.219171][T12134] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 362.457760][T12144] FAULT_INJECTION: forcing a failure. [ 362.457760][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 362.497881][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.1.1566 Not tainted syzkaller #0 PREEMPT(full) [ 362.497912][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 362.497923][T12144] Call Trace: [ 362.497932][T12144] [ 362.497941][T12144] dump_stack_lvl+0xe8/0x150 [ 362.497978][T12144] should_fail_ex+0x40c/0x560 [ 362.498009][T12144] should_failslab+0xa8/0x100 [ 362.498040][T12144] __kmalloc_cache_noprof+0xa8/0x660 [ 362.498065][T12144] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 362.498093][T12144] ? __kmalloc_cache_noprof+0x150/0x660 [ 362.498117][T12144] ? sctp_add_bind_addr+0x8c/0x370 [ 362.498143][T12144] ? sctp_add_bind_addr+0x8c/0x370 [ 362.498177][T12144] sctp_add_bind_addr+0x8c/0x370 [ 362.498209][T12144] sctp_copy_local_addr_list+0x31a/0x4e0 [ 362.498241][T12144] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 362.498269][T12144] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 362.498299][T12144] ? sctp_v6_is_any+0x64/0x80 [ 362.498329][T12144] ? sctp_copy_one_addr+0x93/0x360 [ 362.498361][T12144] sctp_bind_addr_copy+0xb3/0x3c0 [ 362.498390][T12144] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 362.498418][T12144] sctp_connect_new_asoc+0x2ff/0x6b0 [ 362.498443][T12144] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 362.498471][T12144] ? __local_bh_enable_ip+0xd0/0x130 [ 362.498492][T12144] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 362.498513][T12144] ? security_sctp_bind_connect+0x7e/0x2c0 [ 362.498554][T12144] sctp_sendmsg+0x159b/0x2d00 [ 362.498602][T12144] ? __pfx_sctp_sendmsg+0x10/0x10 [ 362.498640][T12144] ? aa_sk_perm+0x6d5/0x900 [ 362.498679][T12144] ? __might_fault+0xaf/0x130 [ 362.498704][T12144] ? sock_rps_record_flow+0x19/0x350 [ 362.498734][T12144] ? inet_sendmsg+0x298/0x320 [ 362.498763][T12144] ? __pfx_inet_sendmsg+0x10/0x10 [ 362.498787][T12144] sock_sendmsg_nosec+0x10e/0x180 [ 362.498814][T12144] __sys_sendto+0x408/0x5a0 [ 362.498842][T12144] ? ksys_write+0x1e6/0x270 [ 362.498874][T12144] ? __pfx___sys_sendto+0x10/0x10 [ 362.498898][T12144] ? __mutex_unlock_slowpath+0x731/0x900 [ 362.498958][T12144] ? __pfx_ksys_write+0x10/0x10 [ 362.498993][T12144] __x64_sys_sendto+0xde/0x100 [ 362.499019][T12144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.499041][T12144] do_syscall_64+0x174/0x580 [ 362.499069][T12144] ? trace_irq_disable+0x3b/0x140 [ 362.499093][T12144] ? clear_bhb_loop+0x40/0x90 [ 362.499118][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.499138][T12144] RIP: 0033:0x7f65d679de99 [ 362.499158][T12144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.499174][T12144] RSP: 002b:00007f65d76ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.499196][T12144] RAX: ffffffffffffffda RBX: 00007f65d6a25fa0 RCX: 00007f65d679de99 [ 362.499210][T12144] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 362.499221][T12144] RBP: 00007f65d76ac090 R08: 0000200000000140 R09: 000000000000001c [ 362.499234][T12144] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000002 [ 362.499247][T12144] R13: 00007f65d6a26038 R14: 00007f65d6a25fa0 R15: 00007ffc325eb2c8 [ 362.499281][T12144] [ 363.061401][T12151] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1568'. [ 363.225773][T12166] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 363.332868][T12166] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 363.572871][T12185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.691042][T12192] FAULT_INJECTION: forcing a failure. [ 363.691042][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 363.774437][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.1.1579 Not tainted syzkaller #0 PREEMPT(full) [ 363.774469][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 363.774481][T12192] Call Trace: [ 363.774490][T12192] [ 363.774499][T12192] dump_stack_lvl+0xe8/0x150 [ 363.774537][T12192] should_fail_ex+0x40c/0x560 [ 363.774567][T12192] should_failslab+0xa8/0x100 [ 363.774596][T12192] __kmalloc_cache_noprof+0xa8/0x660 [ 363.774620][T12192] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 363.774646][T12192] ? __kmalloc_cache_noprof+0x150/0x660 [ 363.774668][T12192] ? sctp_add_bind_addr+0x8c/0x370 [ 363.774691][T12192] ? sctp_add_bind_addr+0x8c/0x370 [ 363.774725][T12192] sctp_add_bind_addr+0x8c/0x370 [ 363.774757][T12192] sctp_copy_local_addr_list+0x31a/0x4e0 [ 363.774787][T12192] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 363.774816][T12192] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 363.774844][T12192] ? sctp_v6_is_any+0x64/0x80 [ 363.774874][T12192] ? sctp_copy_one_addr+0x93/0x360 [ 363.774914][T12192] sctp_bind_addr_copy+0xb3/0x3c0 [ 363.774943][T12192] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 363.774970][T12192] sctp_connect_new_asoc+0x2ff/0x6b0 [ 363.774996][T12192] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 363.775025][T12192] ? __local_bh_enable_ip+0xd0/0x130 [ 363.775045][T12192] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 363.775068][T12192] ? security_sctp_bind_connect+0x7e/0x2c0 [ 363.775101][T12192] sctp_sendmsg+0x159b/0x2d00 [ 363.775151][T12192] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.775189][T12192] ? aa_sk_perm+0x6d5/0x900 [ 363.775226][T12192] ? __might_fault+0xaf/0x130 [ 363.775254][T12192] ? sock_rps_record_flow+0x19/0x350 [ 363.775287][T12192] ? inet_sendmsg+0x298/0x320 [ 363.775315][T12192] ? __pfx_inet_sendmsg+0x10/0x10 [ 363.775341][T12192] sock_sendmsg_nosec+0x10e/0x180 [ 363.775368][T12192] __sys_sendto+0x408/0x5a0 [ 363.775396][T12192] ? ksys_write+0x1e6/0x270 [ 363.775430][T12192] ? __pfx___sys_sendto+0x10/0x10 [ 363.775455][T12192] ? __mutex_unlock_slowpath+0x731/0x900 [ 363.775524][T12192] ? __pfx_ksys_write+0x10/0x10 [ 363.775560][T12192] __x64_sys_sendto+0xde/0x100 [ 363.775589][T12192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.775612][T12192] do_syscall_64+0x174/0x580 [ 363.775640][T12192] ? trace_irq_disable+0x3b/0x140 [ 363.775665][T12192] ? clear_bhb_loop+0x40/0x90 [ 363.775691][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.775712][T12192] RIP: 0033:0x7f65d679de99 [ 363.775731][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.775749][T12192] RSP: 002b:00007f65d76ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 363.775773][T12192] RAX: ffffffffffffffda RBX: 00007f65d6a25fa0 RCX: 00007f65d679de99 [ 363.775788][T12192] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 363.775800][T12192] RBP: 00007f65d76ac090 R08: 0000200000000140 R09: 000000000000001c [ 363.775814][T12192] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000002 [ 363.775825][T12192] R13: 00007f65d6a26038 R14: 00007f65d6a25fa0 R15: 00007ffc325eb2c8 [ 363.775859][T12192] [ 364.187364][T12201] netlink: 'syz.1.1582': attribute type 7 has an invalid length. [ 364.426002][T12209] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1582'. [ 364.491826][T12209] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1582'. [ 364.849796][T12232] sit0: entered promiscuous mode [ 364.883330][T12232] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 364.953940][T12232] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1588'. [ 365.211353][T12245] syzkaller0: entered promiscuous mode [ 365.230481][T12245] syzkaller0: entered allmulticast mode [ 365.250133][T12245] simple: basic_9 [ 365.371479][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1594'. [ 365.396481][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1594'. [ 365.610650][T12267] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1595'. [ 365.657011][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 365.681169][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 365.699767][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 366.548781][T12307] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.646312][T12310] bond6: entered promiscuous mode [ 366.659160][T12310] bond6: entered allmulticast mode [ 366.703687][T12320] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 368.058729][T12380] bond7: entered promiscuous mode [ 368.359015][T12401] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 368.441701][T12405] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 368.620151][T12417] __nla_validate_parse: 8 callbacks suppressed [ 368.620173][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1627'. [ 368.648410][T12417] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 369.154300][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.749461][T12417] geneve4: entered promiscuous mode [ 373.125890][T12450] netlink: 'syz.4.1632': attribute type 29 has an invalid length. [ 373.573047][T12473] netlink: 'syz.4.1638': attribute type 13 has an invalid length. [ 373.703116][T12481] openvswitch: netlink: IP tunnel TTL not specified. [ 373.730377][T12481] dummy0: entered promiscuous mode [ 373.753756][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 373.756706][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 373.824950][T12481] dummy0 (unregistering): left promiscuous mode [ 373.839925][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 374.186422][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 374.608047][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1649'. [ 374.995385][T12543] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 375.782378][T12575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1661'. [ 375.965119][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 376.010069][T12580] syzkaller1: entered promiscuous mode [ 376.025768][T12580] syzkaller1: entered allmulticast mode [ 377.031011][T12597] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 377.051335][T12597] bond7 (unregistering): Released all slaves [ 377.238894][T12611] lo speed is unknown, defaulting to 1000 [ 377.867705][T12643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.168312][T12651] pimreg: entered allmulticast mode [ 378.489058][T12679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'. [ 378.630367][T12651] syzkaller0: entered promiscuous mode [ 378.677186][T12651] syzkaller0: entered allmulticast mode [ 378.729503][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 378.757153][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 379.186715][T12704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.725018][T12717] netlink: 'syz.3.1696': attribute type 15 has an invalid length. [ 382.849584][T12650] pimreg: left allmulticast mode [ 382.939997][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 382.949671][T12738] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1700'. [ 382.978561][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 383.011141][T12738] geneve2: entered promiscuous mode [ 383.023224][T12738] geneve2: entered allmulticast mode [ 383.032773][T12731] lo speed is unknown, defaulting to 1000 [ 383.042056][T10021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.068877][T10021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.111479][T12741] netlink: 'syz.1.1701': attribute type 4 has an invalid length. [ 383.170503][T10021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.197043][T12746] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.1703'. [ 383.199838][T10021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.223057][T12742] netlink: 'syz.1.1701': attribute type 4 has an invalid length. [ 383.507169][T12741] batman_adv: batadv0: Interface deactivated: dummy0 [ 383.604753][T12741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.728530][T12741] batman_adv: batadv0: Interface deactivated: gretap1 [ 383.905265][T10028] netdevsim netdevsim1 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.927106][T10028] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.944329][T10028] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.969611][T10028] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.024898][T12769] nft_compat: unsupported protocol 5 [ 384.027342][T10028] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.055476][T10028] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.076276][T10028] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.093490][T12771] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 384.114474][T10028] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.188478][T12771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.217064][T12771] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 384.309837][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 384.365526][T12778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.749352][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 384.921433][T12804] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 384.955768][T12804] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1718'. [ 385.030678][T12806] syzkaller0: entered promiscuous mode [ 385.042877][T12806] syzkaller0: entered allmulticast mode [ 385.071540][T12806] 0: reclassify loop, rule prio 0, protocol 800 [ 385.117046][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1721'. [ 385.256346][T12819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1723'. [ 385.278704][T12819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1723'. [ 385.458496][T12816] lo speed is unknown, defaulting to 1000 [ 385.670526][T12833] netlink: 12536 bytes leftover after parsing attributes in process `syz.1.1730'. [ 385.693046][T12833] openvswitch: netlink: Flow key attr not present in new flow. [ 386.180482][T12858] netlink: 'syz.4.1736': attribute type 2 has an invalid length. [ 386.217219][T12858] : entered promiscuous mode [ 386.815366][ C1] ------------[ cut here ]------------ [ 386.822304][ C1] sk->sk_forward_alloc [ 386.822333][ C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62b/0x740, CPU#1: swapper/1/0 [ 386.836298][ C1] Modules linked in: [ 386.840421][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 386.849508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 386.859624][ C1] RIP: 0010:inet_sock_destruct+0x62b/0x740 [ 386.865549][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 72 57 7a f7 90 0f 0b 90 e9 8b fe ff ff e8 64 57 7a f7 90 0f 0b 90 e9 b1 fe ff ff e8 56 57 7a f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 386.885246][ C1] RSP: 0018:ffffc90000a08d28 EFLAGS: 00010246 [ 386.891378][ C1] RAX: ffffffff8a4c1aea RBX: dffffc0000000000 RCX: ffff88801def8000 [ 386.899470][ C1] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 386.907497][ C1] RBP: 0000000000000f70 R08: ffff88801c39a4a7 R09: 1ffff11003873494 [ 386.915559][ C1] R10: dffffc0000000000 R11: ffffed1003873495 R12: ffff88801c39a200 [ 386.923584][ C1] R13: dffffc0000000000 R14: ffff88801c39a48c R15: ffffffff9010d680 [ 386.931648][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 386.940655][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.947335][ C1] CR2: 00007f1ac8824e9c CR3: 000000002237c000 CR4: 00000000003526f0 [ 386.955395][ C1] Call Trace: [ 386.958711][ C1] [ 386.961630][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 386.967182][ C1] __sk_destruct+0x89/0x9d0 [ 386.971737][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 386.976946][ C1] ? rcu_core+0x70d/0x10a0 [ 386.981408][ C1] rcu_core+0x78b/0x10a0 [ 386.985745][ C1] ? __pfx_rcu_core+0x10/0x10 [ 386.990473][ C1] ? sched_balance_domains+0xe8/0x880 [ 386.995935][ C1] handle_softirqs+0x225/0x840 [ 387.000742][ C1] ? __irq_exit_rcu+0xca/0x220 [ 387.005571][ C1] __irq_exit_rcu+0xca/0x220 [ 387.010206][ C1] irq_exit_rcu+0x9/0x30 [ 387.014542][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 387.020226][ C1] [ 387.023183][ C1] [ 387.026200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 387.032217][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 387.038004][ C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 387.057705][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 387.063827][ C1] RAX: 000000000013dc4d RBX: ffffffff819ab450 RCX: 0000000080000001 [ 387.071910][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 387.079970][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 387.088035][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 387.096085][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 387.104170][ C1] ? do_idle+0x2e0/0x540 [ 387.108455][ C1] default_idle+0x9/0x20 [ 387.112712][ C1] default_idle_call+0x72/0xb0 [ 387.117526][ C1] do_idle+0x2e0/0x540 [ 387.121626][ C1] ? __pfx_do_idle+0x10/0x10 [ 387.126381][ C1] cpu_startup_entry+0x43/0x60 [ 387.131174][ C1] start_secondary+0x101/0x110 [ 387.136013][ C1] common_startup_64+0x13e/0x157 [ 387.140994][ C1] [ 387.144069][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 387.151469][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 387.160468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 387.170707][ C1] Call Trace: [ 387.174001][ C1] [ 387.176872][ C1] vpanic+0x56c/0xa60 [ 387.180903][ C1] ? __pfx__printk+0x10/0x10 [ 387.185501][ C1] ? __pfx_vpanic+0x10/0x10 [ 387.190040][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 387.195335][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 387.200549][ C1] panic+0xc5/0xd0 [ 387.204284][ C1] ? __pfx_panic+0x10/0x10 [ 387.208736][ C1] ? common_startup_64+0x13e/0x157 [ 387.213860][ C1] __warn+0x315/0x4c0 [ 387.217845][ C1] ? inet_sock_destruct+0x62b/0x740 [ 387.223061][ C1] ? inet_sock_destruct+0x62b/0x740 [ 387.228267][ C1] __report_bug+0x331/0x530 [ 387.232782][ C1] ? kasan_save_track+0x3e/0x80 [ 387.237641][ C1] ? kasan_save_free_info+0x40/0x50 [ 387.243020][ C1] ? __kasan_slab_free+0x5c/0x80 [ 387.247971][ C1] ? inet_sock_destruct+0x62b/0x740 [ 387.253179][ C1] ? __pfx___report_bug+0x10/0x10 [ 387.258208][ C1] ? do_idle+0x2e0/0x540 [ 387.262454][ C1] ? cpu_startup_entry+0x43/0x60 [ 387.267395][ C1] ? start_secondary+0x101/0x110 [ 387.272352][ C1] ? common_startup_64+0x13e/0x157 [ 387.277482][ C1] ? inet_sock_destruct+0x62b/0x740 [ 387.282689][ C1] report_bug+0x16a/0x220 [ 387.287066][ C1] ? inet_sock_destruct+0x62b/0x740 [ 387.292274][ C1] ? inet_sock_destruct+0x62d/0x740 [ 387.297481][ C1] handle_bug+0x9c/0x200 [ 387.301821][ C1] exc_invalid_op+0x1a/0x50 [ 387.306433][ C1] asm_exc_invalid_op+0x1a/0x20 [ 387.311288][ C1] RIP: 0010:inet_sock_destruct+0x62b/0x740 [ 387.317106][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 72 57 7a f7 90 0f 0b 90 e9 8b fe ff ff e8 64 57 7a f7 90 0f 0b 90 e9 b1 fe ff ff e8 56 57 7a f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 387.336824][ C1] RSP: 0018:ffffc90000a08d28 EFLAGS: 00010246 [ 387.342904][ C1] RAX: ffffffff8a4c1aea RBX: dffffc0000000000 RCX: ffff88801def8000 [ 387.350885][ C1] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 387.358867][ C1] RBP: 0000000000000f70 R08: ffff88801c39a4a7 R09: 1ffff11003873494 [ 387.366934][ C1] R10: dffffc0000000000 R11: ffffed1003873495 R12: ffff88801c39a200 [ 387.374915][ C1] R13: dffffc0000000000 R14: ffff88801c39a48c R15: ffffffff9010d680 [ 387.382904][ C1] ? inet_sock_destruct+0x62a/0x740 [ 387.388124][ C1] ? inet_sock_destruct+0x62a/0x740 [ 387.393333][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 387.398800][ C1] __sk_destruct+0x89/0x9d0 [ 387.403313][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 387.408610][ C1] ? rcu_core+0x70d/0x10a0 [ 387.413037][ C1] rcu_core+0x78b/0x10a0 [ 387.417316][ C1] ? __pfx_rcu_core+0x10/0x10 [ 387.422011][ C1] ? sched_balance_domains+0xe8/0x880 [ 387.427396][ C1] handle_softirqs+0x225/0x840 [ 387.432174][ C1] ? __irq_exit_rcu+0xca/0x220 [ 387.436955][ C1] __irq_exit_rcu+0xca/0x220 [ 387.441562][ C1] irq_exit_rcu+0x9/0x30 [ 387.445823][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 387.451468][ C1] [ 387.454404][ C1] [ 387.457341][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 387.463327][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 387.469058][ C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 387.488673][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 387.494839][ C1] RAX: 000000000013dc4d RBX: ffffffff819ab450 RCX: 0000000080000001 [ 387.502818][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 387.511143][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 387.519125][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 387.527101][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 387.535081][ C1] ? do_idle+0x2e0/0x540 [ 387.539346][ C1] default_idle+0x9/0x20 [ 387.543596][ C1] default_idle_call+0x72/0xb0 [ 387.548386][ C1] do_idle+0x2e0/0x540 [ 387.552466][ C1] ? __pfx_do_idle+0x10/0x10 [ 387.557073][ C1] cpu_startup_entry+0x43/0x60 [ 387.561850][ C1] start_secondary+0x101/0x110 [ 387.566625][ C1] common_startup_64+0x13e/0x157 [ 387.571671][ C1] [ 387.575038][ C1] Kernel Offset: disabled [ 387.579379][ C1] Rebooting in 86400 seconds..