last executing test programs: 9m12.237616933s ago: executing program 0 (id=949): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32], 0x48) (async) close(r4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000000903000000000000000000070000000900010073797a3000000000931b81e6fe3261f5282591df05fa180002001400018008000100e00000020800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000003c0)=0x1) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m8.373291718s ago: executing program 0 (id=953): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4084, 0xff4}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 9m7.498341923s ago: executing program 0 (id=962): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'sit0\x00', 0x1, 0x10000}) (async) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'sit0\x00', 0x1, 0x10000}) getpeername(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x80) 9m7.114072392s ago: executing program 0 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000004c0), 0x80000) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0xf, 0x2, 0x201, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x1}, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r0}, @generic="8e1779e45bd1be4a5b2b90d6008f2351abaf39262c94df4d8f7f535cae2132972f241d9a462a4a9090af6ed8322ca55914e0c5"]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0040800500010005000000"], 0x3c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) connect$nfc_llcp(r1, &(0x7f0000000880)={0x27, r10, 0xffffffffffffffff, 0x4, 0xbf, 0x2, "376eea3c16a5500e2acc30f4df1b1aaf114458c5d93fba36d331e969d7988d77f61b39c2be457c25978f00d6370e642db9ba0e26a92f9793337692116694df", 0xa}, 0x60) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r11, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r12) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 9m6.433408355s ago: executing program 0 (id=968): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="17ba00001000010400002000030000000000000010445f693d0d93aa6a", @ANYRES32=0x0, @ANYBLOB="2b030000212002001c00128009000100626f6e64000000000c0002800800070000000400"], 0x3c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) connect$netlink(r8, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x4ef50b0e7e59f25a}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r12, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x28004000) sendto$packet(r9, &(0x7f00000001c0)='\x00', 0x1, 0x4c0c0, &(0x7f0000000180)={0x11, 0x5, r12, 0x1, 0x0, 0x6, @random="d700"}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0x9}, {0xffff, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x60, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9m0.621008729s ago: executing program 0 (id=980): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xc2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[], 0xffdd) 8m44.60669106s ago: executing program 32 (id=980): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xc2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[], 0xffdd) 8m4.702438093s ago: executing program 2 (id=1417): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x74, 0x0, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) 8m3.810696708s ago: executing program 2 (id=1422): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2c, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="140005000000000000000000000b000000000001"], 0x3c}, 0x1, 0x11}, 0x0) 8m3.601944008s ago: executing program 2 (id=1425): r0 = socket(0x10, 0x3, 0x0) unshare(0x600) (async) r1 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) socket(0x10, 0x803, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0xca, &(0x7f0000001140)=""/202, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0xc000) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0xcbc}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r9, 0x2a74}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) 8m3.233327088s ago: executing program 2 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x10, 0x7800, 0x2, 0xfffffff8, {{0xe, 0x4, 0x1, 0x31, 0x38, 0x66, 0x0, 0xf3, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x7, [{@loopback, 0x400}, {@empty}]}, @rr={0x7, 0x7, 0x8d, [@multicast1]}, @ssrr={0x89, 0x7, 0xb5, [@multicast2]}]}}}}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ac0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002280)={@private0, 0x0}, &(0x7f00000022c0)=0x14) sendmmsg$inet(r0, &(0x7f0000003600)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="1837bf0f8aba331bdf5cea5e3966411b9a7903b8168fdfebf212f2983b892c9a4edb049cd3bbf9c426b5b9354f0cd045cc31dec3c51d9649c50b23adfb5e51dd5c742194f16cdb875bc622ad978d51352056d73ad8e2eb1b41b97c0bc2e7a2cfd38f40811560c7d6db74e24dbbbf94bf1c58be473edd6d9258662d1abf6e2a7153cd9475c4b39bc2fcdaa8799fab147dcc9cb60a6726d9d7c06b31e7fbaa9c813f0fe36c5102f5cdcdc0cb59e8ef83de837e240bc0d0275c29ff9a38bc1f8a5e8eb0e5e515cc", 0xc6}, {&(0x7f0000000480)="07eb1f763bb6defe817c0fe2e013769fbcdfbb42e7e9fdaec5c620e159e09c8e815bc0fba9dcc966fff4c22c9637c93dec6cb090904d7c9a2599efb90c8c28874582c442c61e4848c5388b1f4634008a036e3a13ca4861381da34a63dfa0d8f54132a4e54ff2bec8fe862cb4091b25d1cd76a452daae7aafb09057734123ee332cd848f23f8e8bfa221f401b243ddc88ac177e09fc798a1bee8eb3d9cfbbe2a1a98a287513d75d", 0xa7}], 0x2, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6d5b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x78}}, {{&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f00000005c0)="bbd17f4fc1e19fe582ca1835729a09d175ea1da347eab4a35dd7b9bc532608e3325a38270560eb5d7141444f50b721cecf224d257640c606dfd38e599907d787c1accf25b5600073c661e1ab12f5c59543c6fc1328bc5cbe3487762ddbe0ba6e9ffd964e3d5bcc814299b5ee3123efe32e9859d0f1436861eb8f4a3aca89042acd85523dcb926f308bfbd63d04b40c2bc39392cced54a02798d5bc0d980490d08104756eb7c387584f431c8ef306e4ff", 0xb0}, {&(0x7f0000000680)="a9a53b12fc7806a6c3b932aafb4f3f1c38720b51e54b1713041ea7a542b9bbadf59442c5b2a2ae263969932f99f313beff2aaf77b5d882116b25bc1592ee0944d8979ba0b58972294980f10938fee8b85f30513d16108b3ec0bd5287379bd61238cbcda38687529da876f4af6a984cc5918695a674381df4127a9b64e550c5b39f541f205a88e39512e4c67bd46a911f27cdf0df711b5d9f2b0fa36efd60996c3b569c5cab0f47a0f08e7f47c88a1193bddf82a44b42130bf551e7a08b96fc2695e87518eb0ba02765d31739bb40504061bb10b9a417ca8ecbb7da6be53e44240e1d87d5561988a99b042596650c5f211427ae4f4a0462", 0xf7}, {&(0x7f0000000400)='Z1', 0x2}, {&(0x7f0000000780)="4262db685318a5cbde4128e2c0f18b0f4f3c2b6a7ed91ac14e6bfb4552f03050ca1fa6ac1e1c2dac5031a7680b84e391b0ef28382715a4617625c0954839b419e48c75cf0152635231c2fb", 0x4b}, {&(0x7f0000000800)="b6dd3c70b0e08ee043146c4c69c00d2d76da706576af5a398f9aa72d4f712b56f27e78bcc3f442b75ee5b6940353eefe01e2bd3eba2f9de4b97363ed62f0f324651c39a144ac57b4275d42f229b0e8dd31039ec3ce56ae", 0x57}, {&(0x7f0000000880)="43b7d964542acfdfe82e1cf582df75287c138a9850bcb2a7b4daa893250223fbcf5e1b5acad2e5ce242bf6d4d3892d50f0781cf4e508de8d75b6a281179877a62327d38e612d910e69d96f1dfa9bb7fa33bc90c9bada2b08724ad0836c84d17b8f179bbcc9d1249e9980bda7ea96b15bb90f6517c5ee89e4df408094cb696864fb19f4006f", 0x85}], 0x6, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x921}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000bc0)="d133cb418cc1c7fe49c076cbc80ae258eac23bd89145eb", 0x17}, {&(0x7f0000000d00)="cc75cfae98dc70e1fe3c4760cd4b3381f6d693f636d9c18d279fd2063fc9469a513938e334f730b3f460e5ae639a91ab1d876cf632c19fee7a7c19a02d398a854c93136422261c716a5b786d15808d6304a315cd1d74c1090788d106266feab34c2b9cf7c83556d46bd104ecac37b2b99090e3c152a1d4462ddf799676c18f9c44279e4b45dcaadfb56f6ca1fcf64c57b8f08448c7988ddb05dbcf39c0691ba5b1ccc4a5f5929d1183f1605fc13650d87e6f44fb5969fb957135b78e6e799fdba93e78dbeee7a7d446f63804ccc7b6f36a0d33c0d18405703beda3a538d13ab224a2ca55baafb58c852775fb5338c1839955b783b838ceab981f6c5ba1b02c66b6f8aa3e335f6c755a8c9443ed9f9a6fe5f278f3aa673a8b3cc90f2d2ef1772955c95fc0462651de820ca7b193b57fe81c69d1b089571f0341558e77bccd7300c9172224f0667e30b7345745a8a0845a09b817e4dfb23db82e342c9c0baf014a0aef39c629d7842720cc775beb06b06a471795055cc44e4bd4daf07b6e3acd64cf6d3afbc53df6bbfac1ad910cd45fd265a5e889adb5ecd4301a39aacc83939b54e0411ac8a8bd56bc80f3efe7474bc8698ed3ab8fcdb91c253f4ecdf2d419c1a01215969ef72ed08a251ac92fe2869e645023de600d07ce0733d94ac4aeafa4254e829a8bb10dafe8becfd14f2da377968683f0a661729abf6e0e3be6b508d68f05147952ff39d70c340f6e3eb96528263201db50045274af5d759eba26da0abeec50980ab8b2330b7ce5a7c59c6ac23f8426cd83a9fb90764b5d41af49f82669109cc7c75a8bea45cd175675058deacc9221057cdb29b908497942056ff250d0d867afc150943cf57694f9e83e31f7209de570a0ea64abc6f3d3b72431a002a380fbc9fc8d7743abb9895415ffe5eaec3c636cbc642b70371461dbcb975aac65780a0bafc926562fa8874f2b59e7983f6aae5e8e8ab1c4df8e87195ed1fa97f306869be0e6a124ed2a2cfb05a48eaa5183d46837733e5baf04bc918bbe7ecbc6029b69ba0becbc3e74d4d54111056794a9974932198c128bb8f7903a6ad355435b2b78834373f68b20ced071368d8646d4016de24e95ab0dc4c37ee8de950e679e0ef0c3f7d9996be862416571194418f2ad221c1029ee21ae211e79ff4e8f650ad9e07c393580b8ec47b07a70cc927c219454ff9505230ab229b807a26b43e276d05564e95183469d8d66e29fded74348cb1117fcdbd00504a3c3eb5f6887c1805d2b96f2c8e6b86ea4666ca419bd6b753085211c90b8983a30452189ffaf010e6054d33a94e3a58f590a7c4ff263647d5deabded82558a5b4593ff2ca3f1877930d73513b1d29157e972200f3c42af890ce25f2f3175ffdea59a36d2095d178b7e99a52e2e381d5d96c966eb91e470ae8b481ea7df1cd7781fa059d4ac5a47d5c35ff2f06f48937ea7ded786323de31606bb453d5f9836daeec0a48bf72d995c6a9f65111e1fd0278df2616e7cf95e8a7c6ffdcbc6e1cc453226ef14153e939a8c38d329c012acf180714b1c77e515e8fb8042efd3f5efc7272d6582475b98909be653396d12581a2068726ccb9276e4522059b75d01e1bb3b478dbdaa9dc494e0d6caca30e64cebac685f5522a70be74de1d592833f3215af53b065cb83cd073cf7dfac06d686b091a54aaf73cb412313dd2ffcf49c2c1fd15e796fa0c23ccc2c1f3a512977cb1f552dd13023c48f6ce9d1c19abf77c5640e0ea3c011e0c2ab52096fd772dd2f8832ba991cbcf59a7af83bfed19f664c7e396160c097f75d7ab93b1244fd0fc55fc84bf9406decc4f53452e9a4b44ed61a9806b0d21e264369b2e6a2e7614cc262d6f365323549b16dc4a113a36cce248db919b1e03a43fcfaf3377aea880555a11a7337f57caae82be4bf51603c4bcaa481badb1f71ba4041607ec3b5e55f16bd979964f3088d2f99fd7e34e9e47ad61b990946077b323085d416183250c9e943fda1b8a701c28f71b6fde6f4b851956e092567aee487b1e5c7ca1a0b133b2b79c52ac47df748a5615c3c8de5d01189b0699848b5f35642117878c680803a39b986b4fe5847e30a07dd441b15222f7c6ee2408d3ab7e545ed9880c38a8078e56acb7bb2bd7e7c55f3307425008f0b175fcd544499cbbe04facecc7692b445f5a688b5b15223fc74bb6476289599886b0af2c7779d32f465f5cd6a669b7646a5bf8db815ed15cdaf504c1216d35d612b67fc0cc56e904cd530076ad041dc892cba561f0442c4aaf1874311de5a065f7e75427448e450c47fab8ad7b0c1a8cfc9718259400e5c55d147fda6bb234d1b39047e3b255c20a2ea9a39638f5308b5a2640efa77c301d9bcadf4d2e1df131d0e1b6aecb5cee5955d1caa8a27a606654215df5542de94fa70ac6509b9ed00020353a72bac0cd98fd84048b075fbf7282caa19db0413486a3a9532d22f248261f675011371a8f50b77eadea80f4bfc6e1b28d74196afe1c3cc93ce6e1246c9b38d95be7be07e404c8492eb10202cd716bba8051804b7650ce118d7fec96b2fe064c7050225521460c8a1da9ec8520d65a7c037c3f79b62c1614ec68e0425123caab3ce317926cdd8780259bbe988b08cea5d22962881642bc7ce6c053b6fa72908651cb7e09c3a2225aac35556dc6accbe46c03cb5b5d114bab4fd747b650f7fea6177332b5f35a0bf842d9f8e1d70107d0ff7e36e5aa5d20faf3b4c07fc212d425c7ebfdab206fdd4b0e56fbc6ae469be288fa2e23278cec041dcfcea63f2d009c3d0bb74b399d43bd02b29be9f4d17c09aed0b1eb59a0828d6bf7d995a76ce44c5b35fe37f4578f00fab4b047fed6ba5f316baba736b857d2ee8c59cc79c91dd244e3ef07b3793a8945ee8792582f42d53bf83f8d7c6e5aee0ce78f5f13d60c725404dcef80ea81d5a909e7f49a6699aea7b045a6c361f68a6e6f5b4ea8289d38901c5fdaf81a8aeface8a18859df8a6762f81eef7a223cba8767ebc7994c7ecb8b26630f43f6925969be298f0b59cd0911bce090398aedd8a21ecebf065d5d6b00d37d9e7aa360a871f640ff1abb43e771a8d20402ce4f00b964472eb7f9b787a1cbc52ffa77b0217190c8de3864ee8997b82029e5df78517c1c4cac3c963de019dd88732f6f8794b188cbd9332bc428c1c11cad1096b1b3977e74d0cba861b3fd612673f5784a362394fd1a20f193353bf2b23e5590226e4e18d2a189dfb8710e0cc88a008c8a127b90f6ca22cdfa7bc79901d8475a7400e9d17d67a288548d47f6c8fd1679f26f6904473ed1a690ae00145601662483d502cc0c201ab9cde9bfeedac5078ae0a464ef541b0599db2aacb9875df734d3b7c69e1d0e2392b8e64f10fff2e4327b5b6b897aa938f5070f1d0b61e95002181fc94644ec7d01963d59340211e636050b729e93ff8550c950e7405d33ca80c85d1152489222d56680ca893b3ed18a5e749c780cc227869f99b11453eb72a6f4a6e1c557c350d8eb305505b1e3cc082a2486d18a1348f88a99e3d528d5847b0ad77c094f1cc121d1dbabf4870ff71c8ef49d80605bd1d38961222456d0d116733deae404bf3cf5175b1139add2ae22db20b549ef70f815b2417b2c2fe016ec90a7d23a3725e7335a27778ee44b759b1786c385cb62391e81f36e09d212ada9075e674299ee9bc5f2fbe40e4c5a68f5258e99b3140b06c5190f555b96018d5f5dcf20beabcde4236c200e9bb13ac731ce29965e20653d7667f4ee7eae7c614f107842fae89e7f45775b13f9eae2c3e1e7c129b13adf4306b04dfd9eead573dcb0636adddd4c181289697d372b554e45707535b2ea9271bd4cc978e978a5611e44e5dc783f961ea6521ab0141397e205005e551b54631d2dd1fced35a5fb7eb9d0cc335580806096538b7d6173a388f5237ccdbd0859c8151943847df889ce361d4868d4bf2845996b2b3cf75451589147e4deb3c24d241b8ebf13415383a21674574d01e62c0725f5dc1ef3af5f5f9e815230ae036a51ab6c2bf8942bf4d2375ebf054856971aaac28f64848dd78ae7df2af3545ccad02efb2efe963c91fa9b5373a76c54addabf46171c1de5969e1771c9501778de9bde9f33b9007408954b42a80b13c5d2fd81f3bffba77bb4e653be898c8a39ca351ff3776f6a0b411747b6ea9d25d1559910f0603cc863e25054712542bee8e2e5f33d3612f485228a220d470352c11e253aa39bda78dc5ce7dc69b06f5721689b15b57f2621fd73aa0a14d9a499f7c174a36b3b30ff478c3173b5536ac74505d129f74adbca953e24414234df065f3b3f2e95e3dcbfbcda142cbab9b065a6e6aee5231c3f80e2c7084d3839ba367723161f4bd3b4d5352f9bdc3b0b28d7152f1491bfe9a147d923ca6a65fd5b7fbac48c238718107f941301613bfc3f6594387a941bf4a3bb656efdfe25ca1f081389bff78a0c589c78dac4d5cc18bd86ed5cb39d00b1433c0e0c832ebf53f3974d6011f5f616c2ad4bf993bcd2063dc6860ee18f8551b9ddba196dfda215cc2668d580381bd775bbc474364cd6509da120d82aa22045cbc2d9f141ae23a1e3fe7ccd0652234bc1d43f5c54584ba3a523b80e849d3f820a88e53dac0854bcab57e5a0ae0260c9690104b15581cb4e8adf694ad824f158da1bc4cb68f1e7102138136d286a936471f72fe383a4c677f7c9a8d0e88be81ecd45651de869028721effbb59cf10fe3205318c4cc08ab8d450e998440f81c39195ad0a3d97ca87e50b95775b5781d2d4b14eb5218fde733ba53d982d995770b96090962592ea994d0fe8de9c1d5cf48ec080cbdf035d3047de14547954ea69d5dbc201af1492d091aa3a2f472b9692fa4e29b6d9b0480fff1f6f19f0b7e11eeaaee922e20f26bd74e846da0a9b40ef9e647a534f14d28a57a18e149048b570a7db24dbf0f99b07dbcf24f0b9760b93c63b1696808c36773b96cdd189ba595ec4c45ecd497a70046c76af6b580884d3b29863ddb915a81d146d5222ac09189c03374522c091c7c58646c25025bd8952e214e0e151fea2739cf1a1af9506590a6690729aa0590ebc9cac8e7de1b8c17c28799a24cfa521971ee534896cb426026052dc6c2dee0d240274cd00e37ac234d2860d712279ed00335a5bf38afacb2e8f7e0531fa35b22c63a199f18a17f8953cb42e31d8f03d85a0a77d53cdef4e20ed9cecf150b386f9d3af5046b56e1125b6282dbcbf73c4455d02fc2c78632930a678e0665c80101dc7faccb8dc29296226e3f01938f5ceeab4ce2ccd844c5a8b2a55ba69333270737ad8da2a1308e97bfa6e69d1284cba27df4aa4f02989821fc7861bdfc96c8176b1af6ccef0e91cc5889883f808169ad3e1d4d79e83515e9f708e39fabc943604df7afaab252dc78ff8bf7e89868ef6d1a0995344fa47c2e50f0fb3f5fb3438c0b284bd7215b83a1528aa8538e02514480fd82c76c6b5b0e224b7cd74e454f0eb4d9d3f3f6993c0bd93719ef1c449a2f6d2f9087a8333904fd68ed2c40040eaef14b5902e793331134e017c3e6b469d31a9fd2ea77a4998e46992060cb86819b0a3a063d622dded81261f2939b1db6c5b49bd4895553631a2bb63326b5389faaa50f3795884f936fee2f52d02f53bf34cc30593fa52349ae2c3b67a16ab228f1bf99cadc8ebe140e94bab219a6d9062b8528e2c537efe71be56bc7018e5bb1d4bd21a79ec1bbf1c7d6ef03df58f117c809521c95d86d208067471ba65072ed40fbc28aee239c340fc03ebe1890e8f1e", 0x1000}, {&(0x7f0000000c00)="8f8bf3db9e6e6b1d9b6e822295d2a0c5890dbb06da882125a6348132ac74568055472d6e16feda8677ceb2502980bfbf44857e4a88637a8894868a8d7204599fbfeb498130c3f4d8935f828c0f293c95492e380c857264b76f24c2a3b487e0b6652634d23e98a3c19c1d977a033a", 0x6e}, {&(0x7f0000001d00)="0f603cc6c15e04b7d5b2d9003795d829d08b49e04dd3028b5628bf006ecf16be2b0f186b0328c9d454e4418a2e04ace603534f28c67ce7262838a86856ed5cf71d124ac9d696f1e85207e8a72fc377ef7bb739012e86379c714ef3893667a3d4e2c18f2428e784782f8caa007b4ece46f15045f0c3f54e579a75", 0x7a}, {&(0x7f0000001d80)="7b62daa587af342eea648af35bd51988dee8f6332e944e6b52be5414bb7f0298668198a393dd5698dcd4eec4bb3c4a751c45b6b2973d25a10f3c0470a003a85d23c34e", 0x43}, {&(0x7f0000001e00)="339e975d7e80e54d230b55965dc7d6ddeaf8f1b483511ac092517f544ae5181011288373611aed795db0c290da4375faf2948217ac6b58fb64670b9e287ade6ee8664328f97c42acc2", 0x49}, {&(0x7f0000000c80)="ad41c4111eeb782b78", 0x9}, {&(0x7f0000001e80)="c54dd5d41893644b0773bf72f44f9fcbb5d267d791415f9f684292fa8dd595ce309ee394da6037856377c7f926926fd6d911541b047167aa2f32689cfea0bb20984bcf274d1259a5ba284daf714e4dba4ed3f3b0382a19f332df8c19efccb98754506ec727caeb8643d2b823514cd569ecf3490e5c2cd92191f8e4657a3615ebf112248cb0e1146f7e9a177358c1a51e37552793d417a1059cac554dedd37fd8881c8f", 0xa3}, {&(0x7f0000001f40)="72b3ba93924c3294821d833e7eed21d5183850a70f52c386aeb95ddf330478978b17daeee3d33d91e0394e38bf0fdf3ec0b77f7c451ee2e43c834bfe754c9d9549508313ba294c2e9d046fbae761e555e8f46dc2edbaf7abcc6c2c82d1578e2c8b4c7599740db202289ca81fec94bf6214940ffc4c52d176dcaff4f167b106ca4de412ccf9021f50794956115449bb0f32751d06386416bd0c7210b748cf2b65ad2e6c8d371f72b179bc582d24f9f7d95c39f28e2ad8059a0e4d291deab2dc474284f65aa8616ed30e43b559fc55cb7a1a13", 0xd2}], 0x9, &(0x7f0000002140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x38}}, {{&(0x7f0000002180)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000002240)=[{&(0x7f00000021c0)="d7ebd68682176376afe2e9e6a734b260ffa15892a8854d673b0c9a451e5cc7413cc82937a72cda832cac38e8f910e3d1b4ba58b2731b16505c5134e29d2186f867432bfe35d36ff29250be9aec314661937e36", 0x53}], 0x1, &(0x7f0000002300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x68}}, {{&(0x7f0000002380)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003540)=[{&(0x7f00000023c0)="db602f31e0596acf8424c1f610f076cc1ae5b8afbb9c543f092d02", 0x1b}, {&(0x7f0000002400)="2463acb1001e28a565c31f91f57bf33be7aac78855363704a23fe199eed6b502ff7d8b14b8e071ba60ce4f14f554b29419a6d660c5e96d73a2b709eadcd727600dd53eeab3430232610402484f31268e89d8a6ba9c209b3600d2cfc2", 0x5c}, {&(0x7f0000002480)="71095b352fd33436bc1121a5aa0efd856cc917464ba087d15b0a4dda66c8790a4b16aa749a9f05fa8e174839f8488e6f5478b7c3a5a93e076175a9a388fd75fd71e88d0385de82531c09b585e0809f0bc14fefc3a357e3f1e99556d0ab8691c7aa7de464283a8b89400612f4ad3753753990f2a303b05192a9423b37d5031fd73fcc475333be30d50b7bbb9898c396d2ab8eebddc81b26ddadc69651567c50239c", 0xa1}, {&(0x7f0000002540)="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", 0x1000}], 0x4, &(0x7f0000003580)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x66, 0x1, 0xb, [{@multicast2, 0x3ff}, {@local, 0x4}, {@broadcast}]}, @timestamp_addr={0x44, 0x24, 0x26, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xc8}, {@private=0xa010102, 0x9}, {@multicast2, 0x608}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x80}}], 0x5, 0x20040050) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="050034008b0000000500490006006600"], 0x44}}, 0x0) 8m3.09039013s ago: executing program 2 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m1.202080156s ago: executing program 2 (id=1441): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800a279e4432acf01400000000008000240000000001400000011000100000000000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x404600}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xa8, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x69f84528, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_FRAME={0x36, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @device_a, @from_mac=@device_b, {0xc, 0x4}}, @vht_group_id={0x15, 0x1, {0xffffffffffffffff, "e99f07f41235413fab81375fc3547844"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xe, 0x8, 0x0, 0x5c, 0xcf4]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x2, 0xe324, 0x0, 0x3, 0x1a1e, 0x5, 0x0, 0x14, 0x54d2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000880) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r8 = accept4(r3, 0x0, 0x0, 0x80000) r9 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r12 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bind$xdp(r9, &(0x7f0000000240)={0x2c, 0x1, r11, 0x0, r12}, 0x60) (async) recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x140) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014001a800800028004"], 0x34}, 0x1, 0x2}, 0x0) 8m0.853530242s ago: executing program 33 (id=1441): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800a279e4432acf01400000000008000240000000001400000011000100000000000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x404600}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xa8, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x69f84528, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_FRAME={0x36, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @device_a, @from_mac=@device_b, {0xc, 0x4}}, @vht_group_id={0x15, 0x1, {0xffffffffffffffff, "e99f07f41235413fab81375fc3547844"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xe, 0x8, 0x0, 0x5c, 0xcf4]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x2, 0xe324, 0x0, 0x3, 0x1a1e, 0x5, 0x0, 0x14, 0x54d2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000880) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r8 = accept4(r3, 0x0, 0x0, 0x80000) r9 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r12 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bind$xdp(r9, &(0x7f0000000240)={0x2c, 0x1, r11, 0x0, r12}, 0x60) (async) recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x140) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014001a800800028004"], 0x34}, 0x1, 0x2}, 0x0) 2.899155964s ago: executing program 6 (id=6440): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}}, 0x840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000400)=0x80) (async) r4 = accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000400)=0x80) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x10, 0xf5faa88dbc6c3d31, 0xe0, 0x0, {{0x23, 0x4, 0x0, 0x21, 0x8c, 0x64, 0x0, 0xc, 0x4, 0x0, @remote, @remote, {[@end, @cipso={0x86, 0x75, 0x1, [{0x7, 0x7, "ec74fcf434"}, {0x5, 0x6, "98182607"}, {0x7, 0x8, "ff03519848a4"}, {0x7, 0x10, "a3d208dbd6c7502b02d0dfb6f5a6"}, {0x0, 0xf, "a1afb2a3897df6aaec0cd667be"}, {0x2, 0x11, "92ca6e219f90ffec7548ddafcd3728"}, {0x2, 0x2}, {0x0, 0xc, "b4cec123cf0184aeda5e"}, {0x0, 0xf, "a04230343b2b98a12e128e5468"}, {0x6, 0xd, "09a0619b2a130f32fae50b"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x55}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x22000080) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000780)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000780)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x104, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "c91d31557f0c97a9c08b70cc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c015238699118ffab08d4f788f196712960f5bee288cc358511ba5abfbb6731805881a7adbca43a3f8b14743c588e1a26b116a7e5d565ddd6b82f92c32927939af74300fc33bb485ba96f69e91562f11a2ef45f39f679a55aff024cc7877b2dfdadbe1e381"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc801}, 0x408c0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r11) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r13, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r14 = socket(0x11, 0x1, 0x1) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) sendmsg$NL80211_CMD_PROBE_CLIENT(r14, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r15, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2c}}}}}, 0x20}}, 0x0) accept4(r5, &(0x7f0000000d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000d80)=0x80, 0x800) (async) r16 = accept4(r5, &(0x7f0000000d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000d80)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000e00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r16, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r15, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x24004000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000f40)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000f40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x5, 0x19, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}]}, &(0x7f0000001240)='syzkaller\x00', 0x1ff, 0x17, &(0x7f0000001280)=""/23, 0x40f00, 0x10, '\x00', r7, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x8, 0x6, 0xb68}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000019c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x0, 0x5, 0xd, 0x3}, {0x4, 0x1, 0x9, 0xb}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0x3}, 0x94) 2.838514046s ago: executing program 1 (id=6441): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 2.52627127s ago: executing program 6 (id=6444): socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000001440)=[{&(0x7f0000001300)=""/110, 0x6e}, {&(0x7f0000001380)=""/75, 0x4b}, {&(0x7f0000001400)=""/30, 0x1e}], 0x3, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r2, &(0x7f0000001180)="50e3dd929393039bb660571eb96cbecfd24b7160d9eb996a2800cf1fa816cfa169eb13d0389daed2a38447211e308963c7d4c2937ca9652e79fd5f098248b579730e3a078065a243dd3878095d52e77b6171c62391", &(0x7f0000001200)=""/233}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000004000100ba00"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x40, r4, 0x12, 0x7, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4018}, 0x41) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000002900)=""/4096, 0xe17}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000600)=""/53, 0x35}], 0x5, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x48, 0x2000, 0x0) (async) r5 = socket(0x2b, 0x5, 0x0) bind$inet(r2, &(0x7f0000001580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r6, 0xffffe000) (async, rerun: 32) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$bt_hci(r11, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async, rerun: 64) r12 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 64) setsockopt$inet6_int(r12, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x20000014) (async) socket$nl_route(0x10, 0x3, 0x0) 2.312208503s ago: executing program 4 (id=6446): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newlink={0x24, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_VF_PORTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x2a, 0x2, 0x9) bind$bt_hci(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f07c60000000000000081"], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000ffff120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000006000500020000000500010006000000"], 0x4c}}, 0x24000090) 2.230424858s ago: executing program 1 (id=6447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r4, 0x0, 0x20, 0x0, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c846}, 0x40104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='ext4_remove_blocks\x00', r0}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.169446528s ago: executing program 6 (id=6448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x4) 2.018430451s ago: executing program 3 (id=6450): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="43003300805a6d00080211000001080211"], 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14005}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd25, 0x0, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x28}}, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (rerun: 64) 2.017333408s ago: executing program 6 (id=6451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}]}, 0x38}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 2.017029897s ago: executing program 4 (id=6452): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400e400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.847670028s ago: executing program 4 (id=6454): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) 1.831536282s ago: executing program 5 (id=6455): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f6a0200"/32], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) r6 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d61637674b568aa89d187699d4e6aa9", @ANYRES32=r4, @ANYBLOB="0800040044000000"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 1.286499483s ago: executing program 5 (id=6456): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) (fail_nth: 3) 1.286081815s ago: executing program 3 (id=6457): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async, rerun: 64) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_prespec={0x44, 0x4, 0xae, 0x3, 0xc}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async, rerun: 32) r5 = socket(0x2, 0x3, 0x1) (rerun: 32) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) 1.27163499s ago: executing program 6 (id=6458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400000600ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a0012ab348c3dfb701355525e98e09a4a5f7644bfc24d1502e2d162851fe5dfb0159394edbbf2661657fef229db6d5ad96fc41137a83375b2badeb2416e524c0249d83b7d5aba78afc8", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 1.248101091s ago: executing program 4 (id=6459): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='+pids +'], 0x1b) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000680)={0x2, 0x4e26, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1, 0x0, 0x0, 0x4000810}, 0x2000c804) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005402010001000000000000000722000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0xa60}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000580)={r3, 0xe88, 0x6, 0x1}, &(0x7f00000005c0)=0x10) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @empty, 0x9}, {0xa, 0x4e20, 0x4, @mcast1, 0x80000001}, 0x1, {[0x1, 0x5, 0x0, 0x8, 0xffff, 0xfffffffe, 0xffff, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f0000001880), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x1f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="050000000000000000000000f0621659e6bb98d47ea2bb5417ddeb2a7447c5e867907fc963324e1600ddc85e156b5c51a3a2b75f13cb5c8b5235c3b21a38421b394a7b08681ebec3e018abbe07a2963ef8d45cd05837852d02c6d9b69f5c5685f7d53b85df299af5e8f2ea32e10b324fa7a10d22f97fa6bd8f9503124d67240f11750549336d07b7b8c22c0face56e6ef04af7d8eabd23b586b526144ee673826be06ffe8cfacfb8535cdb575a4f67bcc451202d7d900547cb98ab5cc3928bd85b486fff87adc43ba511d0b14184975cda893e81d9bdeac1a959cef84893d4a0c075b46d2b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r8}, &(0x7f0000000c40), &(0x7f0000000c80)=r6}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000007600010000000000000000000300000000e9"], 0x18}}, 0x0) 1.178377164s ago: executing program 1 (id=6460): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) close(0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x78, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x78}}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x1}}}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000c8010000090a010400000000000000ea0100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000218c0111800b00010074617267657400007c0102800400030008000240000000006b010100"], 0x210}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000002c0)=0x4) 788.686376ms ago: executing program 3 (id=6461): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) 712.815622ms ago: executing program 5 (id=6462): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x5f, 0x15, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) 630.349918ms ago: executing program 6 (id=6463): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000d14013128bd7000040000000800010000000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) (async) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/223, 0xdf}, {&(0x7f0000000340)=""/76, 0xffffffffffffff3d}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f00000002c0)=""/72, 0x48}], 0x5) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) r6 = socket(0x14, 0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x61e0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 612.389068ms ago: executing program 1 (id=6464): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400ef00"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 612.020826ms ago: executing program 4 (id=6465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xce, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 570.35107ms ago: executing program 1 (id=6466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x14c}}, 0x0) 478.132325ms ago: executing program 5 (id=6467): socket$packet(0x11, 0x2, 0x300) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000004c0)=""/160, &(0x7f0000000200)=0xa0) (async, rerun: 32) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000480)={@empty, r5}, 0x14) (rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async, rerun: 64) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0x21) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0xbef}}}, &(0x7f00000000c0)=0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000001"], 0x48) (async) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'perf_event'}, {0x2b, 'rdma'}, {0x2b, 'net'}, {0x2d, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2d, 'hugetlb'}, {0x2d, 'memory'}]}, 0x3a) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x4}, 0x38) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 414.347195ms ago: executing program 3 (id=6468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x145}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) (async, rerun: 32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000480)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @call={0x85, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800dd8d0000004000000000020000000000000500000000060015000300000014001680100008800c0003800500010081020000"], 0x38}}, 0x0) 411.842326ms ago: executing program 1 (id=6469): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600004c00000000008490783fffffa9ac1414aa00100000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000000201010000000000000000020000e42300028014000180080001000000000008000200000100010c0002800500010000000000040003800400018067e7d471409cba25f849d7bd26c03c5877d2dd"], 0x40}}, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000380)=0x5) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x2) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) close(0x3) close(r5) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "ae209b4b6e8a5b6b", "b9b60227760dec2ae2da3053bdc7fcb21f69aa17f31c31f2bf2ebe66d91f15c7", "cd74c2da", "7862fb0ebaefbf71"}, 0x38) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @broadcast, 0x0, 0x0, 'sed\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'rr\x00'}, 0x2c) 296.897914ms ago: executing program 4 (id=6470): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x1000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 253.509324ms ago: executing program 3 (id=6471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @random="c80a605c3572", {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x1, 0x8c, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 118.424325ms ago: executing program 5 (id=6472): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) (fail_nth: 4) 74.489946ms ago: executing program 3 (id=6473): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x314c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3120, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "9a137562acd387fd0ac36ea976f1ae0c9fe3bcb568481268150e7c55191763afb8b9853f57e85597f86ea24ddda8befdd388df0ab7fd84459bbd59708b690614fb1d7f69628207f8eef38c260ab7b7732e59e0f5175b2d5d1cf0f606cf143aa018c869abc91b2c0037abf216656572d217472591e47d9cc7e923471e905c77fba92711cb72a8c2cf25c2d84318132a12ee1f46be68aa0a37d54bc3d31ea4b893f97cced1eacdf8519a806ec9a6a61945625e46791d3f3174dcd47f7609567e708e756334afbb254d4c07813ce5677ce1eef3fbe1966b905b2b34ddff8dea8d4a30698e0c68b6372039d24888095649f2104bc98a5f"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x98, 0x1, "75ed3fd60819d6b5cc264ee8f8018e42f4c385537554f52380e85878e5d0e1b6e2fd476faf955a71684cfd3ab361fa59576d792a7d14f8a0ae66586b3d6260e1e4be7968b105dfc7cf7f70d3d4c72497b9508233cf3b3c0f0832008437d752266aec52ee776a051f875d23d660cf667342fa2f8e28b6fb9e269ff00464557c250db370f42665c3b0d7162b6cb763643e5ec2f106"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "094c83dd57d076ec4693b50153"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x742}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "31d7246bdfeb80c653d182a683448caa02e5d8389f9c3ecfbe310db20879b49f227e4fe3778db0d9833b78a6648035b42d30199251b4bd513ca9ddb4ac34e5407f0c04418a68329de0da238e40d97b922da200d585af326c2a2cfc1890c5701de15c8b6818"}, @NFTA_DATA_VALUE={0x60, 0x1, "e6fcc94c084fe2592fa765782c735b4e5b65840e892c829a2eb5a9224c4b1f870fc97228f24413886d29745c32dbef1dcf2fd17bc4ca8e9f4789f4b83ab04dc10d4f93af0e3cae9af92661fc700d395ee65d1aaf3f30fd582eebfffd"}, @NFTA_DATA_VALUE={0x65, 0x1, "c37a48e752c621fffa59fd59a4f7fb15b08d5013fa4245a310170b2386bc8183c06ddf36c09691e85cbfafad6f3cc6793b6ba8289e2016b77756cf3679334c4404ad0e4712e81e0e7344a4c854dd4644f1bb85aaf61cfefd8b9edf918901d53fc0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x64, 0x1, "b58da81f15bf11c9948340f02e0dc5b0fb9f3781720ef8a418b78d1e7debbab0a88abfc1e5ab61b41f10b987bb452191baac52b30351db6463e5d2ce2e8e174958f65997c66a58b4fd4761d171c328b1ba644ae5eb38903052ec626bf87ca564"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x1494, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x135c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "e3746473dc8c7ecb1df8592e77d8dfd48c70760c2c33f57b72b09b91a8fe5283f09a3f20a4aedcd4fda70787d41e49c91c0c5995a57edfed66662c5b8d65754aca376e21489f1765b9f0742a50c2a4d8fef80d2b812c4418da289f9c093aa28d9ba3e62abb1ba640ec197cdf006a6c2ad302b42bb9f630ad9b56634a2251547d494fb1b3cbf2cf163291bd403a93f5b461768eed92ab5b0e7a039ca7c57d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "a8ee6a1fd4b104156e1eae27f5b65d3aea5ac694f627571d50cf65bc332beb7b93827c6c42861562f6643eac9eb5ab39703767aa98ef2e250f5b9a1733e5c516456bce6e56e6cf7a30fc09"}, @NFTA_DATA_VALUE={0xb4, 0x1, "8d10b9a37c1466b8a5932dbb5f76098b9c0293f343f521ec2ed261c41de3829bb888f44b4169bf1679f06fee43433f7545353ca3ab6873dd389189a95d09492026fcc6b690057a59251f7cb18cc3b59a674b369f0b92d8f9df55f76eaeb01e3300d541111e2f619b4ef76b499e92cbd56f5c68f3da7e8943e0e92050d2d861eb594f931aacbd55bb6c225bebe5d8be3a7ebe797cee6e4db403cc39deabad427ff379a84353e5cd3be848097a9d02355b"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "67b54817322b143a61d1f59417df78b98cd003c9e8f2c5f7f67eb2193dda96e470ec1e2d18d3a98a11aec55dd59216f261fe87b3c9899fb09ea958d25d10bd1b2649824533977f2f792817546cb535b1c08477389b12a15677fc06cf40f6424a60c4f72e5f994338917e5c99fd9e4a1a05b75070381a0e44d7b46b298a3228562ed7423b2095402d08378c90dffd2cf6f6becd8f2d0af6130a45c7d72691cbb4086919eee5bb81ffce720812248116f988d136b0102c5bc75e90e1a75fc2de548fddb7a9a54fab75a6ec5c2e0e6dd7f283ab08"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x39, 0x1, "79016b8a46ee2eacecfb694bc752a7ea7c2f509d5c75e5aa83cdf4467583ef51b03d217d0c860c8f64dc55dda44f0d2f6d5da5d2a3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x401}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "1a97e13ceb537fc822a2798b93d6e0c5f2d852ae1d3656f2d8d9d2200b70769c2e2558d768821c9b38c2d8e95271472f6fe5fc609d2a25c4bb558e9227940dad1fbb0a1c837b35059909bc8781f93f2d7db00b984a5b2056c7639a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x14a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffcd}, @NFTA_SET_ELEM_KEY_END={0x1318, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "d63ab9a200e261deca32c7f1e19e3e800f62573f3a4af83b2fc1400b43a7817e6bae467e72942bd5567f9636dc4e51b4d79570a05a7a8381564fe06d527acf285d58435c2ec26c5d7939cf4f84c62bae5e17cec79e86cf3cb3b5e5341764818fdca826927cc6d4c57c50adf80123b2ac12557a3fa072a9b8c4b55413956e690bbea81c67bbc193c43ae67a9fb817ef4236876a053e471b6995843b96d9459442128fa9ce856d9481482b3e8d4ece5bba549cd1ff4448c5da"}, @NFTA_DATA_VALUE={0xa1, 0x1, "2b25010edbc13b30cbd0a62ab861cbfacee2f458fe45faf214ba33cfb13ed90b80907165ff2154d001d0f9c9c707577ff13b262543e09388bc29de51fe9cc8e87ee7be00ead330c1dbfd1ea3d6424156404b975faea9d8f52178a2538de188c3da29d38f2b79e1b3d58c120f8633e496559eb4c2a01f5844b43645cd1cc45b3425ba36f330a9623363d6f29d7f50524fdb6c52821cffb2bd5594f287e7"}, @NFTA_DATA_VALUE={0x2e, 0x1, "931c67d15b0d5135f2e263e523fcccebfdfeedf516fccf5e40dfebb57cc1a96773202012cc4985b5cfd9"}, @NFTA_DATA_VALUE={0x86, 0x1, "b9d67cdeacd242738c3eeac8322c3349747c64faa9243fff7461d82863eccf8e48d97730a017523e49f9c5c90b0081e5137919fd3e51b5d565321a5752813d2d8917bfcb6f5d7566ea23027544351bb1310f4365d237a5783da954b40ee88480a5f6c996c3990d356d9b0849b788efe343cb6123ed03d16cec9d34a6289dbad171a2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5c, 0x1, "b2b2540a839d12a7e3851c5b0fb3de06b56aed143aa763dd237bf006c99c7f5e0484021fb70e0de59955bf129701499591745aafb9cc4055bfc654845a1464a97942e5e647c61ab62a1da0b48016d9640843f85ef22dc68b"}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "85b5cdce93240dff56cc98dbc405b2e865b67953ff5499bcd553d9fac167488b2199cef7d9c0c92cef8e2ee6a6e696ae7e4464d721eea6e0bbf829477a9b8207185733fe39940d9afa853ee222ac03ed95bbac29582876cf5a5c25417574a809165b798d1e8a63cd705dd6f0b907f69316160c7658ee6e06eafdd1b702e81078b4e4ee5925579fbcf0f9d22420ea2ba45aee5cedd06794"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x31d4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = accept4(r1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000001c0)=0x80, 0x80800) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x120, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x20}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6d}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xa5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x800}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 5 (id=6474): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') getpeername$inet(r0, 0x0, 0x0) socket(0xa, 0x2, 0x3) r1 = socket(0x8, 0x3, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): :216 writeback:0 [ 692.701453][T22849] slab_reclaimable:12027 slab_unreclaimable:140004 [ 692.701453][T22849] mapped:29650 shmem:1380 pagetables:1166 [ 692.701453][T22849] sec_pagetables:0 bounce:0 [ 692.701453][T22849] kernel_misc_reclaimable:0 [ 692.701453][T22849] free:1286131 free_pcp:11703 free_cma:0 [ 692.753172][T22849] Node 0 active_anon:19592kB inactive_anon:0kB active_file:14660kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118600kB dirty:864kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13520kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 692.864751][T22849] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 692.928536][T22849] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.026592][T22849] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 693.046332][T22849] Node 0 DMA32 free:1233676kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19216kB inactive_anon:0kB active_file:14660kB inactive_file:158544kB unevictable:1536kB writepending:868kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:38380kB local_pcp:20176kB free_cma:0kB [ 693.099649][T22870] tipc: Enabled bearer , priority 0 [ 693.118636][T22874] FAULT_INJECTION: forcing a failure. [ 693.118636][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 693.149157][T22874] CPU: 1 UID: 0 PID: 22874 Comm: syz.6.5129 Not tainted syzkaller #0 PREEMPT(full) [ 693.149188][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.149203][T22874] Call Trace: [ 693.149212][T22874] [ 693.149221][T22874] dump_stack_lvl+0x189/0x250 [ 693.149253][T22874] ? __pfx____ratelimit+0x10/0x10 [ 693.149282][T22874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.149308][T22874] ? __pfx__printk+0x10/0x10 [ 693.149343][T22874] ? __pfx___might_resched+0x10/0x10 [ 693.149364][T22874] ? fs_reclaim_acquire+0x7d/0x100 [ 693.149404][T22874] should_fail_ex+0x414/0x560 [ 693.149439][T22874] should_failslab+0xa8/0x100 [ 693.149473][T22874] __kmalloc_noprof+0xcb/0x4f0 [ 693.149519][T22874] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 693.149553][T22874] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 693.149589][T22874] genl_family_rcv_msg_doit+0xb8/0x300 [ 693.149624][T22874] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 693.149659][T22874] ? apparmor_capable+0x137/0x1b0 [ 693.149688][T22874] ? bpf_lsm_capable+0x9/0x20 [ 693.149718][T22874] ? security_capable+0x7e/0x2e0 [ 693.149758][T22874] genl_rcv_msg+0x60e/0x790 [ 693.149791][T22874] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.149814][T22874] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 693.149842][T22874] ? __asan_memcpy+0x40/0x70 [ 693.149866][T22874] ? __pfx_ref_tracker_free+0x10/0x10 [ 693.149906][T22874] netlink_rcv_skb+0x205/0x470 [ 693.149935][T22874] ? __lock_acquire+0xab9/0xd20 [ 693.149968][T22874] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.149995][T22874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.150049][T22874] ? down_read+0x1ad/0x2e0 [ 693.150086][T22874] genl_rcv+0x28/0x40 [ 693.150107][T22874] netlink_unicast+0x82c/0x9e0 [ 693.150155][T22874] ? __pfx_netlink_unicast+0x10/0x10 [ 693.150186][T22874] ? netlink_sendmsg+0x642/0xb30 [ 693.150215][T22874] ? skb_put+0x11b/0x210 [ 693.150253][T22874] netlink_sendmsg+0x805/0xb30 [ 693.150297][T22874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.150334][T22874] ? aa_sock_msg_perm+0xf1/0x1d0 [ 693.150369][T22874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.150394][T22874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.150428][T22874] __sock_sendmsg+0x219/0x270 [ 693.150460][T22874] ____sys_sendmsg+0x505/0x830 [ 693.150490][T22874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.150523][T22874] ? import_iovec+0x74/0xa0 [ 693.150553][T22874] ___sys_sendmsg+0x21f/0x2a0 [ 693.150578][T22874] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.150645][T22874] ? __fget_files+0x2a/0x420 [ 693.150676][T22874] ? __fget_files+0x3a0/0x420 [ 693.150722][T22874] __x64_sys_sendmsg+0x19b/0x260 [ 693.150748][T22874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.150784][T22874] ? __pfx_ksys_write+0x10/0x10 [ 693.150809][T22874] ? rcu_is_watching+0x15/0xb0 [ 693.150839][T22874] ? do_syscall_64+0xbe/0x3b0 [ 693.150875][T22874] do_syscall_64+0xfa/0x3b0 [ 693.150906][T22874] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.150935][T22874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.150957][T22874] ? clear_bhb_loop+0x60/0xb0 [ 693.150985][T22874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.151005][T22874] RIP: 0033:0x7f704078ebe9 [ 693.151025][T22874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.151044][T22874] RSP: 002b:00007f70415c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.151065][T22874] RAX: ffffffffffffffda RBX: 00007f70409b5fa0 RCX: 00007f704078ebe9 [ 693.151082][T22874] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 693.151096][T22874] RBP: 00007f70415c9090 R08: 0000000000000000 R09: 0000000000000000 [ 693.151108][T22874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.151122][T22874] R13: 00007f70409b6038 R14: 00007f70409b5fa0 R15: 00007ffdebdfdda8 [ 693.151168][T22874] [ 693.152637][T22849] lowmem_reserve[]: [ 693.369139][T22870] syzkaller0: entered promiscuous mode [ 693.376213][T22849] 0 [ 693.398412][T22870] syzkaller0: entered allmulticast mode [ 693.409392][T22849] 0 [ 693.450495][T22870] tipc: Resetting bearer [ 693.477720][T22849] 1 1 1 [ 693.477761][T22849] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 693.477826][T22849] lowmem_reserve[]: 0 0 0 0 0 [ 693.477878][T22849] Node 1 Normal free:3898424kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7584kB local_pcp:0kB free_cma:0kB [ 693.477945][T22849] lowmem_reserve[]: 0 0 0 0 0 [ 693.477996][T22849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 693.478226][T22849] Node 0 DMA32: 2733*4kB (UME) 1313*8kB (UME) 1027*16kB (UM) 125*32kB (UME) 127*64kB (UME) 125*128kB (UME) 91*256kB (UM) 27*512kB (U) 14*1024kB (UME) 13*2048kB (UM) 263*4096kB (UM) = 1221324kB [ 693.478449][T22849] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 693.478597][T22849] Node 1 Normal: 166*4kB (UME) 46*8kB (UME) 43*16kB (UME) 228*32kB (UME) 74*64kB (UME) 19*128kB (UM) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3898424kB [ 693.478828][T22849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.478849][T22849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 693.478869][T22849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.478889][T22849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 693.478909][T22849] 45119 total pagecache pages [ 693.478925][T22849] 0 pages in swap cache [ 693.478935][T22849] Free swap = 124996kB [ 693.478946][T22849] Total swap = 124996kB [ 693.478958][T22849] 2097051 pages RAM [ 693.478968][T22849] 0 pages HighMem/MovableOnly [ 693.478979][T22849] 425656 pages reserved [ 693.478989][T22849] 0 pages cma reserved [ 693.801187][T22895] netlink: 'syz.6.5134': attribute type 1 has an invalid length. [ 693.856775][T22894] __nla_validate_parse: 5 callbacks suppressed [ 693.856797][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5134'. [ 693.931554][T22869] tipc: Resetting bearer [ 695.490452][T22869] tipc: Disabling bearer [ 695.503987][T22894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.537692][T22905] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 695.568298][T22918] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5138'. [ 695.899957][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5142'. [ 696.228651][T22955] FAULT_INJECTION: forcing a failure. [ 696.228651][T22955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.254039][T22955] CPU: 1 UID: 0 PID: 22955 Comm: syz.1.5149 Not tainted syzkaller #0 PREEMPT(full) [ 696.254072][T22955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.254086][T22955] Call Trace: [ 696.254095][T22955] [ 696.254106][T22955] dump_stack_lvl+0x189/0x250 [ 696.254147][T22955] ? __pfx____ratelimit+0x10/0x10 [ 696.254178][T22955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.254206][T22955] ? __pfx__printk+0x10/0x10 [ 696.254252][T22955] should_fail_ex+0x414/0x560 [ 696.254286][T22955] _copy_to_user+0x31/0xb0 [ 696.254314][T22955] simple_read_from_buffer+0xe1/0x170 [ 696.254353][T22955] proc_fail_nth_read+0x1b3/0x220 [ 696.254382][T22955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 696.254411][T22955] ? rw_verify_area+0x2a6/0x4d0 [ 696.254439][T22955] ? __lock_acquire+0xab9/0xd20 [ 696.254469][T22955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 696.254496][T22955] vfs_read+0x200/0xa30 [ 696.254523][T22955] ? fdget_pos+0x247/0x320 [ 696.254548][T22955] ? __pfx___mutex_lock+0x10/0x10 [ 696.254582][T22955] ? __pfx_vfs_read+0x10/0x10 [ 696.254613][T22955] ? __fget_files+0x2a/0x420 [ 696.254653][T22955] ? __fget_files+0x3a0/0x420 [ 696.254684][T22955] ? __fget_files+0x2a/0x420 [ 696.254729][T22955] ksys_read+0x145/0x250 [ 696.254762][T22955] ? __pfx_ksys_read+0x10/0x10 [ 696.254789][T22955] ? rcu_is_watching+0x15/0xb0 [ 696.254841][T22955] ? do_syscall_64+0xbe/0x3b0 [ 696.254879][T22955] do_syscall_64+0xfa/0x3b0 [ 696.254910][T22955] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.254940][T22955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.254962][T22955] ? clear_bhb_loop+0x60/0xb0 [ 696.254990][T22955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.255011][T22955] RIP: 0033:0x7ff7fbf8d5fc [ 696.255038][T22955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 696.255057][T22955] RSP: 002b:00007ff7fcddd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 696.255081][T22955] RAX: ffffffffffffffda RBX: 00007ff7fc1b5fa0 RCX: 00007ff7fbf8d5fc [ 696.255098][T22955] RDX: 000000000000000f RSI: 00007ff7fcddd0a0 RDI: 0000000000000005 [ 696.255112][T22955] RBP: 00007ff7fcddd090 R08: 0000000000000000 R09: 0000000000000000 [ 696.255126][T22955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.255145][T22955] R13: 00007ff7fc1b6038 R14: 00007ff7fc1b5fa0 R15: 00007fffc24eaf48 [ 696.255180][T22955] [ 696.269858][T22957] tipc: Enabling of bearer rejected, already enabled [ 696.588330][T22961] FAULT_INJECTION: forcing a failure. [ 696.588330][T22961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.616574][T22961] CPU: 0 UID: 0 PID: 22961 Comm: syz.1.5151 Not tainted syzkaller #0 PREEMPT(full) [ 696.616607][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.616621][T22961] Call Trace: [ 696.616631][T22961] [ 696.616641][T22961] dump_stack_lvl+0x189/0x250 [ 696.616674][T22961] ? __pfx____ratelimit+0x10/0x10 [ 696.616704][T22961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.616731][T22961] ? __pfx__printk+0x10/0x10 [ 696.616763][T22961] ? __might_fault+0xb0/0x130 [ 696.616808][T22961] should_fail_ex+0x414/0x560 [ 696.616842][T22961] _copy_from_user+0x2d/0xb0 [ 696.616878][T22961] kstrtouint_from_user+0xc4/0x170 [ 696.616915][T22961] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 696.616969][T22961] proc_fail_nth_write+0x88/0x200 [ 696.616994][T22961] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 696.617026][T22961] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 696.617054][T22961] vfs_write+0x27b/0xb30 [ 696.617094][T22961] ? __pfx_vfs_write+0x10/0x10 [ 696.617126][T22961] ? __fget_files+0x2a/0x420 [ 696.617165][T22961] ? __fget_files+0x3a0/0x420 [ 696.617196][T22961] ? __fget_files+0x2a/0x420 [ 696.617239][T22961] ksys_write+0x145/0x250 [ 696.617272][T22961] ? __pfx_ksys_write+0x10/0x10 [ 696.617298][T22961] ? rcu_is_watching+0x15/0xb0 [ 696.617327][T22961] ? do_syscall_64+0xbe/0x3b0 [ 696.617364][T22961] do_syscall_64+0xfa/0x3b0 [ 696.617392][T22961] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.617422][T22961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.617444][T22961] ? clear_bhb_loop+0x60/0xb0 [ 696.617472][T22961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.617493][T22961] RIP: 0033:0x7ff7fbf8d69f [ 696.617513][T22961] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 696.617532][T22961] RSP: 002b:00007ff7fcddd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 696.617556][T22961] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff7fbf8d69f [ 696.617571][T22961] RDX: 0000000000000001 RSI: 00007ff7fcddd0a0 RDI: 0000000000000008 [ 696.617585][T22961] RBP: 00007ff7fcddd090 R08: 0000000000000000 R09: 0000000000000000 [ 696.617599][T22961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 696.617612][T22961] R13: 00007ff7fc1b6038 R14: 00007ff7fc1b5fa0 R15: 00007fffc24eaf48 [ 696.617649][T22961] [ 696.668346][T22966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5153'. [ 697.294256][T22981] netlink: 'syz.5.5158': attribute type 1 has an invalid length. [ 697.309921][T22981] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5158'. [ 697.324176][T22982] netlink: 81 bytes leftover after parsing attributes in process `syz.1.5155'. [ 697.541338][T23001] tipc: Enabled bearer , priority 0 [ 697.608106][T23006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5165'. [ 697.625134][T23001] syzkaller0: entered promiscuous mode [ 697.631397][T23001] syzkaller0: entered allmulticast mode [ 697.638138][T23001] tipc: Resetting bearer [ 697.755411][T16007] tipc: Resetting bearer [ 697.779635][T22997] tipc: Resetting bearer [ 697.935862][T23017] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5168'. [ 698.422771][T23035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5175'. [ 699.119226][T23044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.674210][T22997] tipc: Disabling bearer [ 699.691814][T23017] vlan2: entered promiscuous mode [ 699.697637][T23017] bridge0: entered promiscuous mode [ 699.900043][T23055] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5179'. [ 699.945496][T23060] syzkaller1: entered promiscuous mode [ 699.966977][T23060] syzkaller1: entered allmulticast mode [ 700.254648][T23062] bond2: entered promiscuous mode [ 700.301207][T23062] bond2: entered allmulticast mode [ 700.309564][T23062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.361000][T23083] netlink: 'syz.5.5186': attribute type 83 has an invalid length. [ 700.757357][T23096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5190'. [ 700.911012][T23099] tipc: Enabled bearer , priority 0 [ 701.008099][T23099] syzkaller0: entered promiscuous mode [ 701.014565][T23099] syzkaller0: entered allmulticast mode [ 701.023762][T23099] tipc: Resetting bearer [ 701.066290][T23098] tipc: Resetting bearer [ 701.280846][T23112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5194'. [ 702.229134][T23130] netlink: 'syz.1.5198': attribute type 8 has an invalid length. [ 702.292681][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5198'. [ 703.168126][T23098] tipc: Disabling bearer [ 703.508408][T23150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5202'. [ 703.702341][T23161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5202'. [ 703.733488][T23165] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5205'. [ 703.842473][T23169] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 703.906555][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5206'. [ 703.936264][T23169] tipc: Invalid UDP bearer configuration [ 703.936329][T23169] tipc: Enabling of bearer rejected, failed to enable media [ 704.119648][T23178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5209'. [ 704.183428][T23181] tipc: Enabling of bearer rejected, already enabled [ 704.468501][T23195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5216'. [ 704.469589][T23197] netlink: 'syz.5.5218': attribute type 1 has an invalid length. [ 704.641363][T23207] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 704.660467][T23207] netlink: 'syz.1.5222': attribute type 2 has an invalid length. [ 704.711696][T23203] bond3 (unregistering): Released all slaves [ 704.743987][T23215] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 704.752328][T23215] netlink: 'syz.1.5222': attribute type 2 has an invalid length. [ 704.765959][T23214] sit0: entered promiscuous mode [ 704.775896][T23214] netlink: 'syz.5.5223': attribute type 1 has an invalid length. [ 704.798280][T23213] tipc: Enabled bearer , priority 0 [ 704.934443][T23213] syzkaller0: entered promiscuous mode [ 704.940354][T23213] syzkaller0: entered allmulticast mode [ 704.946978][T23213] tipc: Resetting bearer [ 704.977272][T23212] tipc: Resetting bearer [ 706.485710][T23212] tipc: Disabling bearer [ 706.724636][T23240] bond6: entered promiscuous mode [ 706.730065][T23240] bond6: entered allmulticast mode [ 706.735748][T23240] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.061637][T23260] __nla_validate_parse: 3 callbacks suppressed [ 707.061658][T23260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5236'. [ 707.068711][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5235'. [ 707.342211][T23277] tipc: Enabled bearer , priority 0 [ 707.349735][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5240'. [ 707.396865][T23285] tipc: Enabling of bearer rejected, already enabled [ 707.405478][T23291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5240'. [ 707.436921][T23291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5240'. [ 707.479402][T23296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5240'. [ 707.591187][T23277] syzkaller0: entered promiscuous mode [ 707.602865][T23277] syzkaller0: entered allmulticast mode [ 707.612622][T23277] tipc: Resetting bearer [ 707.708665][ T6864] tipc: Resetting bearer [ 707.749626][T23276] tipc: Resetting bearer [ 708.922876][T23341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5255'. [ 710.089984][T23276] tipc: Disabling bearer [ 710.331070][T23356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5257'. [ 710.407602][T23359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5257'. [ 710.599694][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5257'. [ 710.845203][T23368] bond3: entered promiscuous mode [ 710.857178][T23368] bond3: entered allmulticast mode [ 710.876749][T23368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 710.904757][T23379] netlink: 'syz.3.5264': attribute type 12 has an invalid length. [ 710.916258][T23379] netlink: 'syz.3.5264': attribute type 29 has an invalid length. [ 710.924547][T23379] netlink: 'syz.3.5264': attribute type 2 has an invalid length. [ 710.955019][T23379] netlink: 'syz.3.5264': attribute type 3 has an invalid length. [ 711.148475][T23398] netlink: 'syz.6.5266': attribute type 2 has an invalid length. [ 711.214118][T23398] nbd: must specify an index to disconnect [ 711.421826][T23406] tipc: Enabled bearer , priority 0 [ 711.503554][T23413] FAULT_INJECTION: forcing a failure. [ 711.503554][T23413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.511276][T23406] syzkaller0: entered promiscuous mode [ 711.549024][T23406] syzkaller0: entered allmulticast mode [ 711.566040][T23413] CPU: 0 UID: 0 PID: 23413 Comm: syz.1.5270 Not tainted syzkaller #0 PREEMPT(full) [ 711.566079][T23413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.566093][T23413] Call Trace: [ 711.566102][T23413] [ 711.566112][T23413] dump_stack_lvl+0x189/0x250 [ 711.566147][T23413] ? __pfx____ratelimit+0x10/0x10 [ 711.566178][T23413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.566205][T23413] ? __pfx__printk+0x10/0x10 [ 711.566237][T23413] ? __might_fault+0xb0/0x130 [ 711.566281][T23413] should_fail_ex+0x414/0x560 [ 711.566318][T23413] _copy_from_iter+0x3f5/0x16f0 [ 711.566345][T23413] ? __local_bh_enable_ip+0x12d/0x1c0 [ 711.566375][T23413] ? __pfx__copy_from_iter+0x10/0x10 [ 711.566394][T23413] ? __napi_alloc_frag_align+0x163/0x560 [ 711.566427][T23413] ? __napi_alloc_frag_align+0x163/0x560 [ 711.566463][T23413] ? __napi_alloc_frag_align+0x338/0x560 [ 711.566497][T23413] ? __netdev_alloc_frag_align+0x188/0x1e0 [ 711.566529][T23413] ? __netdev_alloc_frag_align+0x1af/0x1e0 [ 711.566566][T23413] skb_copy_datagram_from_iter+0xf5/0x720 [ 711.566611][T23413] ? __lock_acquire+0xab9/0xd20 [ 711.566646][T23413] ? iov_iter_single_seg_count+0x84/0x2f0 [ 711.566675][T23413] tun_get_user+0x1691/0x3e20 [ 711.566724][T23413] ? __pfx_tun_get_user+0x10/0x10 [ 711.566769][T23413] ? ref_tracker_alloc+0x318/0x460 [ 711.566798][T23413] ? __lock_acquire+0xab9/0xd20 [ 711.566832][T23413] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 711.566870][T23413] ? tun_get+0x1c/0x2f0 [ 711.566904][T23413] ? tun_get+0x1c/0x2f0 [ 711.566925][T23413] ? tun_get+0x1c/0x2f0 [ 711.566952][T23413] tun_chr_write_iter+0x113/0x200 [ 711.566990][T23413] do_iter_readv_writev+0x619/0x8b0 [ 711.567032][T23413] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 711.567061][T23413] ? common_file_perm+0x1b5/0x230 [ 711.567101][T23413] ? bpf_lsm_file_permission+0x9/0x20 [ 711.567128][T23413] ? security_file_permission+0x75/0x290 [ 711.567159][T23413] ? rw_verify_area+0x255/0x4d0 [ 711.567191][T23413] vfs_writev+0x31a/0x960 [ 711.567219][T23413] ? __lock_acquire+0xab9/0xd20 [ 711.567253][T23413] ? __pfx_vfs_writev+0x10/0x10 [ 711.567293][T23413] ? __fget_files+0x2a/0x420 [ 711.567331][T23413] ? __fget_files+0x3a0/0x420 [ 711.567364][T23413] ? __fget_files+0x2a/0x420 [ 711.567408][T23413] do_writev+0x14d/0x2d0 [ 711.567432][T23413] ? __pfx_do_writev+0x10/0x10 [ 711.567459][T23413] ? do_syscall_64+0xbe/0x3b0 [ 711.567493][T23413] do_syscall_64+0xfa/0x3b0 [ 711.567522][T23413] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.567551][T23413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.567574][T23413] ? clear_bhb_loop+0x60/0xb0 [ 711.567601][T23413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.567622][T23413] RIP: 0033:0x7ff7fbf8ebe9 [ 711.567641][T23413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.567660][T23413] RSP: 002b:00007ff7fcdbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 711.567683][T23413] RAX: ffffffffffffffda RBX: 00007ff7fc1b6090 RCX: 00007ff7fbf8ebe9 [ 711.567699][T23413] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 711.567713][T23413] RBP: 00007ff7fcdbc090 R08: 0000000000000000 R09: 0000000000000000 [ 711.567726][T23413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.567738][T23413] R13: 00007ff7fc1b6128 R14: 00007ff7fc1b6090 R15: 00007fffc24eaf48 [ 711.567774][T23413] [ 711.568134][T23406] tipc: Resetting bearer [ 712.009714][T23405] tipc: Resetting bearer [ 712.998975][T23451] __nla_validate_parse: 4 callbacks suppressed [ 712.998998][T23451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5281'. [ 713.963944][T23405] tipc: Disabling bearer [ 714.169608][T23464] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5284'. [ 714.420355][T23477] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5290'. [ 714.451862][T23467] syzkaller0: entered promiscuous mode [ 714.460487][T23467] syzkaller0: entered allmulticast mode [ 714.483147][T23481] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5292'. [ 716.275628][T23485] tipc: Enabled bearer , priority 0 [ 716.358534][T23492] syzkaller0: entered promiscuous mode [ 716.364072][T23492] syzkaller0: entered allmulticast mode [ 716.382551][T23492] tipc: Resetting bearer [ 716.504756][T16003] tipc: Resetting bearer [ 716.544133][T23478] tipc: Resetting bearer [ 717.917595][T23478] tipc: Disabling bearer [ 717.932148][T23523] tipc: Enabling of bearer rejected, failed to enable media [ 717.943207][T23524] tipc: Enabling of bearer rejected, failed to enable media [ 718.118773][T23530] netlink: 'syz.1.5301': attribute type 1 has an invalid length. [ 718.187010][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5300'. [ 718.222067][T23530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5301'. [ 718.234362][T23541] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 718.250354][T23537] bond7: (slave gretap3): making interface the new active one [ 718.253710][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5300'. [ 718.259754][T23537] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 718.277891][T23530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5301'. [ 718.319333][T23532] bridge0: port 3(dummy0) entered disabled state [ 718.325934][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.333822][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.513084][T23552] netlink: 'syz.1.5307': attribute type 13 has an invalid length. [ 718.548709][T23550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5308'. [ 718.573961][T23552] gretap0: refused to change device tx_queue_len [ 718.581707][T23552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 718.817230][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 718.855042][T23569] team0: left allmulticast mode [ 718.906536][T23569] team_slave_0: left allmulticast mode [ 718.923321][T23569] team_slave_1: left allmulticast mode [ 718.943162][T23569] geneve0: left allmulticast mode [ 718.959146][T23569] team0: left promiscuous mode [ 718.975946][T23569] team_slave_0: left promiscuous mode [ 718.996927][T23569] team_slave_1: left promiscuous mode [ 719.005108][T23569] geneve0: left promiscuous mode [ 719.035949][T23569] bridge0: port 3(team0) entered disabled state [ 719.102722][T23569] bridge_slave_1: left allmulticast mode [ 719.164410][T23569] bridge_slave_1: left promiscuous mode [ 719.183599][T23569] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.261219][T23569] bridge_slave_0: left allmulticast mode [ 719.283973][T23569] bridge_slave_0: left promiscuous mode [ 719.304514][T23569] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.442728][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5317'. [ 719.453298][T23595] netlink: 'syz.6.5317': attribute type 7 has an invalid length. [ 719.461554][T23595] netlink: 'syz.6.5317': attribute type 8 has an invalid length. [ 719.470971][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5317'. [ 719.738613][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5320'. [ 719.802684][T23612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5321'. [ 719.808869][T23605] netlink: 'syz.3.5320': attribute type 2 has an invalid length. [ 719.968483][T23619] FAULT_INJECTION: forcing a failure. [ 719.968483][T23619] name failslab, interval 1, probability 0, space 0, times 0 [ 719.990557][T23619] CPU: 0 UID: 0 PID: 23619 Comm: syz.6.5325 Not tainted syzkaller #0 PREEMPT(full) [ 719.990589][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 719.990604][T23619] Call Trace: [ 719.990613][T23619] [ 719.990624][T23619] dump_stack_lvl+0x189/0x250 [ 719.990657][T23619] ? __pfx____ratelimit+0x10/0x10 [ 719.990689][T23619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.990716][T23619] ? __pfx__printk+0x10/0x10 [ 719.990755][T23619] ? __pfx___might_resched+0x10/0x10 [ 719.990776][T23619] ? fs_reclaim_acquire+0x7d/0x100 [ 719.990824][T23619] should_fail_ex+0x414/0x560 [ 719.990859][T23619] should_failslab+0xa8/0x100 [ 719.990894][T23619] __kmalloc_cache_noprof+0x70/0x3d0 [ 719.990924][T23619] ? dev_ethtool+0x126/0x19b0 [ 719.990959][T23619] dev_ethtool+0x126/0x19b0 [ 719.990986][T23619] ? __lock_acquire+0xab9/0xd20 [ 719.991026][T23619] ? __pfx_dev_ethtool+0x10/0x10 [ 719.991061][T23619] ? dev_load+0x21/0x1f0 [ 719.991101][T23619] ? dev_load+0x21/0x1f0 [ 719.991132][T23619] dev_ioctl+0x392/0x1150 [ 719.991168][T23619] sock_do_ioctl+0x22c/0x300 [ 719.991199][T23619] ? __pfx_sock_do_ioctl+0x10/0x10 [ 719.991222][T23619] ? __lock_acquire+0xab9/0xd20 [ 719.991272][T23619] sock_ioctl+0x576/0x790 [ 719.991301][T23619] ? __pfx_sock_ioctl+0x10/0x10 [ 719.991329][T23619] ? __fget_files+0x2a/0x420 [ 719.991362][T23619] ? __fget_files+0x3a0/0x420 [ 719.991394][T23619] ? __fget_files+0x2a/0x420 [ 719.991432][T23619] ? bpf_lsm_file_ioctl+0x9/0x20 [ 719.991461][T23619] ? __pfx_sock_ioctl+0x10/0x10 [ 719.991487][T23619] __se_sys_ioctl+0xfc/0x170 [ 719.991517][T23619] do_syscall_64+0xfa/0x3b0 [ 719.991552][T23619] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.991582][T23619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.991604][T23619] ? clear_bhb_loop+0x60/0xb0 [ 719.991632][T23619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.991654][T23619] RIP: 0033:0x7f704078ebe9 [ 719.991674][T23619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.991695][T23619] RSP: 002b:00007f70415c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.991718][T23619] RAX: ffffffffffffffda RBX: 00007f70409b5fa0 RCX: 00007f704078ebe9 [ 719.991735][T23619] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000005 [ 719.991750][T23619] RBP: 00007f70415c9090 R08: 0000000000000000 R09: 0000000000000000 [ 719.991764][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.991778][T23619] R13: 00007f70409b6038 R14: 00007f70409b5fa0 R15: 00007ffdebdfdda8 [ 719.991814][T23619] [ 721.087844][T23666] FAULT_INJECTION: forcing a failure. [ 721.087844][T23666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.160000][T23666] CPU: 0 UID: 0 PID: 23666 Comm: syz.3.5340 Not tainted syzkaller #0 PREEMPT(full) [ 721.160031][T23666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.160046][T23666] Call Trace: [ 721.160055][T23666] [ 721.160065][T23666] dump_stack_lvl+0x189/0x250 [ 721.160096][T23666] ? __pfx____ratelimit+0x10/0x10 [ 721.160134][T23666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.160162][T23666] ? __pfx__printk+0x10/0x10 [ 721.160193][T23666] ? __might_fault+0xb0/0x130 [ 721.160238][T23666] should_fail_ex+0x414/0x560 [ 721.160275][T23666] _copy_from_user+0x2d/0xb0 [ 721.160302][T23666] ethtool_set_link_ksettings+0x138/0x3c0 [ 721.160337][T23666] ? __pfx_ethtool_set_link_ksettings+0x10/0x10 [ 721.160364][T23666] ? __mutex_lock+0x5b6/0x1360 [ 721.160403][T23666] ? dev_ethtool+0x1d0/0x19b0 [ 721.160444][T23666] ? bpf_lsm_capable+0x9/0x20 [ 721.160473][T23666] ? security_capable+0x7e/0x2e0 [ 721.160513][T23666] dev_ethtool+0x1171/0x19b0 [ 721.160550][T23666] ? __pfx_dev_ethtool+0x10/0x10 [ 721.160593][T23666] ? dev_load+0x21/0x1f0 [ 721.160626][T23666] dev_ioctl+0x392/0x1150 [ 721.160661][T23666] sock_do_ioctl+0x22c/0x300 [ 721.160692][T23666] ? __pfx_sock_do_ioctl+0x10/0x10 [ 721.160716][T23666] ? __lock_acquire+0xab9/0xd20 [ 721.160765][T23666] sock_ioctl+0x576/0x790 [ 721.160794][T23666] ? __pfx_sock_ioctl+0x10/0x10 [ 721.160821][T23666] ? __fget_files+0x2a/0x420 [ 721.160853][T23666] ? __fget_files+0x3a0/0x420 [ 721.160975][T23666] ? __fget_files+0x2a/0x420 [ 721.161027][T23666] ? bpf_lsm_file_ioctl+0x9/0x20 [ 721.161057][T23666] ? __pfx_sock_ioctl+0x10/0x10 [ 721.161084][T23666] __se_sys_ioctl+0xfc/0x170 [ 721.161123][T23666] do_syscall_64+0xfa/0x3b0 [ 721.161155][T23666] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.161185][T23666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.161207][T23666] ? clear_bhb_loop+0x60/0xb0 [ 721.161235][T23666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.161257][T23666] RIP: 0033:0x7fce6538ebe9 [ 721.161278][T23666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.161298][T23666] RSP: 002b:00007fce66152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.161321][T23666] RAX: ffffffffffffffda RBX: 00007fce655b5fa0 RCX: 00007fce6538ebe9 [ 721.161337][T23666] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000005 [ 721.161351][T23666] RBP: 00007fce66152090 R08: 0000000000000000 R09: 0000000000000000 [ 721.161366][T23666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.161380][T23666] R13: 00007fce655b6038 R14: 00007fce655b5fa0 R15: 00007ffc5652e698 [ 721.161416][T23666] [ 721.161545][T23668] veth0: entered promiscuous mode [ 721.476155][T23657] veth0: left promiscuous mode [ 721.532000][T23683] netlink: 'syz.3.5347': attribute type 3 has an invalid length. [ 721.539990][T23683] netlink: 'syz.3.5347': attribute type 1 has an invalid length. [ 721.617247][T23687] netlink: 'syz.4.5348': attribute type 29 has an invalid length. [ 721.652030][T23687] netlink: 'syz.4.5348': attribute type 29 has an invalid length. [ 722.188680][T23711] syzkaller0: entered promiscuous mode [ 722.201003][T23711] syzkaller0: entered allmulticast mode [ 723.720281][T23729] __nla_validate_parse: 4 callbacks suppressed [ 723.720304][T23729] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5368'. [ 725.422613][T23753] netlink: 'syz.3.5379': attribute type 6 has an invalid length. [ 725.438915][T23753] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5379'. [ 725.484247][T23707] Set syz1 is full, maxelem 65536 reached [ 726.304308][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5384'. [ 726.823986][T23778] netlink: 'syz.5.5390': attribute type 10 has an invalid length. [ 726.830111][ T30] audit: type=1107 audit(1755643529.740:5): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 727.142491][T23792] sctp: [Deprecated]: syz.5.5397 (pid 23792) Use of int in max_burst socket option deprecated. [ 727.142491][T23792] Use struct sctp_assoc_value instead [ 728.031018][T23840] macvtap0: refused to change device tx_queue_len [ 728.135843][T23846] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.218249][T23846] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.311114][T23846] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.410446][T23846] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.598663][T16011] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.655908][T16010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.813036][T16005] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.837576][T16005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.991315][T23884] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5437'. [ 729.461912][T23907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5449'. [ 729.480548][T23907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5449'. [ 730.821285][T23967] netlink: 'syz.6.5477': attribute type 10 has an invalid length. [ 730.830334][T23967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.848445][T23967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.862437][T23967] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 731.108882][T23977] Dead loop on virtual device ip6_vti0, fix it urgently! [ 731.445781][T23993] netlink: 'syz.1.5490': attribute type 1 has an invalid length. [ 731.469120][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5490'. [ 731.698076][T24007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5497'. [ 731.737461][T24007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5497'. [ 731.764681][T24007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5497'. [ 731.805396][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5498'. [ 731.964428][T24023] netlink: 'syz.4.5502': attribute type 41 has an invalid length. [ 732.016771][T24023] netlink: 'syz.4.5502': attribute type 4 has an invalid length. [ 732.032608][T24023] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5502'. [ 732.061193][T24023] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 732.182165][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5507'. [ 732.229547][T24035] netlink: 'syz.5.5506': attribute type 9 has an invalid length. [ 732.434059][T24043] netlink: 'syz.5.5511': attribute type 12 has an invalid length. [ 732.596432][T24050] netlink: 'syz.1.5515': attribute type 1 has an invalid length. [ 733.933987][T24119] netlink: ct family unspecified [ 733.939191][T24119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.568283][T24151] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.673108][T24156] netlink: 'syz.6.5564': attribute type 6 has an invalid length. [ 734.724946][T24159] __nla_validate_parse: 12 callbacks suppressed [ 734.724970][T24159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5565'. [ 734.754902][T24157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5565'. [ 734.775078][T24159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5565'. [ 734.973246][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 735.508144][T24200] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.5583'. [ 735.526239][T24200] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.5583'. [ 735.535830][T24200] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.5583'. [ 735.589825][T24202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5586'. [ 735.705658][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5590'. [ 735.764899][T24214] netlink: 'syz.4.5591': attribute type 2 has an invalid length. [ 735.783772][T24214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5591'. [ 736.127044][T24233] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 736.151103][T24233] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 736.415523][T24243] tipc: Enabled bearer , priority 0 [ 736.519274][T24243] syzkaller0: entered promiscuous mode [ 736.524814][T24243] syzkaller0: entered allmulticast mode [ 736.539102][T24243] tipc: Resetting bearer [ 736.556018][T24241] tipc: Resetting bearer [ 736.599334][T24250] FAULT_INJECTION: forcing a failure. [ 736.599334][T24250] name failslab, interval 1, probability 0, space 0, times 0 [ 736.616745][T24250] CPU: 1 UID: 0 PID: 24250 Comm: syz.4.5609 Not tainted syzkaller #0 PREEMPT(full) [ 736.616778][T24250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.616792][T24250] Call Trace: [ 736.616801][T24250] [ 736.616811][T24250] dump_stack_lvl+0x189/0x250 [ 736.616843][T24250] ? __pfx____ratelimit+0x10/0x10 [ 736.616874][T24250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.616901][T24250] ? __pfx__printk+0x10/0x10 [ 736.616939][T24250] ? __pfx___might_resched+0x10/0x10 [ 736.616960][T24250] ? fs_reclaim_acquire+0x7d/0x100 [ 736.616999][T24250] should_fail_ex+0x414/0x560 [ 736.617033][T24250] should_failslab+0xa8/0x100 [ 736.617066][T24250] __kmalloc_cache_noprof+0x70/0x3d0 [ 736.617095][T24250] ? __request_module+0x2b5/0x5e0 [ 736.617133][T24250] __request_module+0x2b5/0x5e0 [ 736.617166][T24250] ? __pfx___request_module+0x10/0x10 [ 736.617202][T24250] ? __pfx___request_module+0x10/0x10 [ 736.617238][T24250] ? apparmor_capable+0x137/0x1b0 [ 736.617273][T24250] ? dev_load+0x21/0x1f0 [ 736.617307][T24250] dev_ioctl+0x384/0x1150 [ 736.617342][T24250] sock_do_ioctl+0x22c/0x300 [ 736.617372][T24250] ? __pfx_sock_do_ioctl+0x10/0x10 [ 736.617397][T24250] ? __lock_acquire+0xab9/0xd20 [ 736.617448][T24250] sock_ioctl+0x576/0x790 [ 736.617478][T24250] ? __pfx_sock_ioctl+0x10/0x10 [ 736.617504][T24250] ? __fget_files+0x2a/0x420 [ 736.617537][T24250] ? __fget_files+0x3a0/0x420 [ 736.617569][T24250] ? __fget_files+0x2a/0x420 [ 736.617605][T24250] ? bpf_lsm_file_ioctl+0x9/0x20 [ 736.617634][T24250] ? __pfx_sock_ioctl+0x10/0x10 [ 736.617660][T24250] __se_sys_ioctl+0xfc/0x170 [ 736.617690][T24250] do_syscall_64+0xfa/0x3b0 [ 736.617729][T24250] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.617758][T24250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.617781][T24250] ? clear_bhb_loop+0x60/0xb0 [ 736.617807][T24250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.617828][T24250] RIP: 0033:0x7f8147f8ebe9 [ 736.617848][T24250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.617867][T24250] RSP: 002b:00007f8148d4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.617890][T24250] RAX: ffffffffffffffda RBX: 00007f81481b5fa0 RCX: 00007f8147f8ebe9 [ 736.617907][T24250] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000005 [ 736.617922][T24250] RBP: 00007f8148d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 736.617936][T24250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.617950][T24250] R13: 00007f81481b6038 R14: 00007f81481b5fa0 R15: 00007ffe11d8aec8 [ 736.617986][T24250] [ 737.055369][T24262] Bluetooth: MGMT ver 1.23 [ 738.896289][T24241] tipc: Disabling bearer [ 738.924261][T24263] bond4: entered promiscuous mode [ 738.929805][T24263] bond4: entered allmulticast mode [ 738.937473][T24263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 738.954630][T24268] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 739.080702][T24282] team0: No ports can be present during mode change [ 739.142585][T24282] netlink: 'syz.3.5616': attribute type 1 has an invalid length. [ 739.164620][T24286] delete_channel: no stack [ 739.167264][T24282] netlink: 'syz.3.5616': attribute type 2 has an invalid length. [ 739.195646][T24290] netlink: 'syz.6.5620': attribute type 11 has an invalid length. [ 739.212393][T24294] netlink: 'syz.6.5620': attribute type 4 has an invalid length. [ 739.221237][T24290] netlink: 'syz.6.5620': attribute type 11 has an invalid length. [ 739.557871][T24309] netlink: 'syz.4.5624': attribute type 11 has an invalid length. [ 739.561159][T24311] FAULT_INJECTION: forcing a failure. [ 739.561159][T24311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.585056][T24311] CPU: 1 UID: 0 PID: 24311 Comm: syz.3.5625 Not tainted syzkaller #0 PREEMPT(full) [ 739.585090][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.585104][T24311] Call Trace: [ 739.585114][T24311] [ 739.585125][T24311] dump_stack_lvl+0x189/0x250 [ 739.585158][T24311] ? __pfx____ratelimit+0x10/0x10 [ 739.585190][T24311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.585217][T24311] ? __pfx__printk+0x10/0x10 [ 739.585263][T24311] should_fail_ex+0x414/0x560 [ 739.585298][T24311] _copy_to_user+0x31/0xb0 [ 739.585327][T24311] simple_read_from_buffer+0xe1/0x170 [ 739.585366][T24311] proc_fail_nth_read+0x1b3/0x220 [ 739.585395][T24311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.585425][T24311] ? rw_verify_area+0x2a6/0x4d0 [ 739.585452][T24311] ? __lock_acquire+0xab9/0xd20 [ 739.585492][T24311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.585520][T24311] vfs_read+0x200/0xa30 [ 739.585547][T24311] ? fdget_pos+0x247/0x320 [ 739.585572][T24311] ? __pfx___mutex_lock+0x10/0x10 [ 739.585605][T24311] ? __pfx_vfs_read+0x10/0x10 [ 739.585636][T24311] ? __fget_files+0x2a/0x420 [ 739.585676][T24311] ? __fget_files+0x3a0/0x420 [ 739.585708][T24311] ? __fget_files+0x2a/0x420 [ 739.585754][T24311] ksys_read+0x145/0x250 [ 739.585781][T24311] ? __fget_files+0x3a0/0x420 [ 739.585815][T24311] ? __pfx_ksys_read+0x10/0x10 [ 739.585851][T24311] ? do_syscall_64+0xbe/0x3b0 [ 739.585888][T24311] do_syscall_64+0xfa/0x3b0 [ 739.585918][T24311] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.585948][T24311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.585970][T24311] ? clear_bhb_loop+0x60/0xb0 [ 739.585999][T24311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.586021][T24311] RIP: 0033:0x7fce6538d5fc [ 739.586041][T24311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 739.586065][T24311] RSP: 002b:00007fce66152030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.586087][T24311] RAX: ffffffffffffffda RBX: 00007fce655b5fa0 RCX: 00007fce6538d5fc [ 739.586103][T24311] RDX: 000000000000000f RSI: 00007fce661520a0 RDI: 0000000000000006 [ 739.586117][T24311] RBP: 00007fce66152090 R08: 0000000000000000 R09: 0000000000000000 [ 739.586131][T24311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.586144][T24311] R13: 00007fce655b6038 R14: 00007fce655b5fa0 R15: 00007ffc5652e698 [ 739.586177][T24311] [ 739.841422][T24316] __nla_validate_parse: 4 callbacks suppressed [ 739.841442][T24316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5628'. [ 739.847886][T24317] netlink: 'syz.1.5626': attribute type 4 has an invalid length. [ 739.849101][T24317] tipc: Enabled bearer , priority 0 [ 739.919467][T24317] syzkaller0: entered promiscuous mode [ 739.925048][T24317] syzkaller0: entered allmulticast mode [ 739.931459][T24317] tipc: Resetting bearer [ 739.965553][T24313] tipc: Resetting bearer [ 740.251794][T24338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5633'. [ 740.428233][T24344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5635'. [ 741.949907][T24313] tipc: Disabling bearer [ 741.963577][T24316] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 742.169837][T24354] IPVS: set_ctl: invalid protocol: 100 127.0.0.1:20004 [ 742.443642][T24371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5643'. [ 742.686719][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5648'. [ 742.771102][T24389] tipc: Enabling of bearer rejected, already enabled [ 742.922152][T24395] syz_tun: entered allmulticast mode [ 742.943420][T24396] unknown channel width for channel at 909000KHz? [ 742.974168][T24397] unknown channel width for channel at 909000KHz? [ 742.983419][T24400] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.5650'. [ 743.026338][T24400] netlink: 104088 bytes leftover after parsing attributes in process `syz.5.5650'. [ 743.049489][T24401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.056227][T24400] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.5650'. [ 743.181710][T24403] vlan5: entered allmulticast mode [ 743.197812][T24403] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 743.504546][T15062] syz_tun (unregistering): left allmulticast mode [ 743.549352][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.562811][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.593863][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.602761][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.611005][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.696257][T19522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.716227][T19522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.725827][T19522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.747822][T19522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.857617][T19522] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.027108][T24426] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5659'. [ 744.120352][T24418] lo speed is unknown, defaulting to 1000 [ 744.210350][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5664'. [ 744.361551][T24440] bond3: entered promiscuous mode [ 744.369949][T24440] bond3: entered allmulticast mode [ 744.375623][T24440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.469932][T11760] IPVS: starting estimator thread 0... [ 744.567115][T24455] IPVS: using max 23 ests per chain, 55200 per kthread [ 744.768339][T24464] mac80211_hwsim hwsim32 syzkaller0: Caught tx_queue_len zero misconfig [ 744.935564][T24470] __nla_validate_parse: 1 callbacks suppressed [ 744.935587][T24470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5675'. [ 745.203326][T24486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5679'. [ 745.345109][T24486] team1: entered promiscuous mode [ 745.355334][T24486] team1: entered allmulticast mode [ 745.361693][T24418] chnl_net:caif_netlink_parms(): no params data found [ 745.565829][T24502] netlink: 'syz.5.5683': attribute type 1 has an invalid length. [ 745.595817][T24501] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5684'. [ 745.604613][T24502] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5683'. [ 745.819402][T24496] bond8: entered promiscuous mode [ 745.833662][T24496] bond8: entered allmulticast mode [ 745.840340][T24496] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.848659][T24418] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.879570][T24418] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.891690][T24519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5688'. [ 745.900856][ T51] Bluetooth: hci2: command tx timeout [ 745.906567][T24418] bridge_slave_0: entered allmulticast mode [ 745.924093][T24418] bridge_slave_0: entered promiscuous mode [ 745.934395][T24418] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.950288][T24418] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.965870][T24418] bridge_slave_1: entered allmulticast mode [ 745.992686][T24418] bridge_slave_1: entered promiscuous mode [ 746.084473][T24525] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 746.119729][T24525] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 746.120971][T24526] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 746.139398][T24526] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 746.156879][T24418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.181378][T24418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.242854][T24418] team0: Port device team_slave_0 added [ 746.255671][T24418] team0: Port device team_slave_1 added [ 746.325012][T24418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.332581][T24418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.359354][T24418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.403746][T24418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.411211][T24418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.450432][T24418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.562286][T24542] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 746.611874][T24549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5696'. [ 746.695586][T24418] hsr_slave_0: entered promiscuous mode [ 746.717867][T24418] hsr_slave_1: entered promiscuous mode [ 746.724698][T24418] debugfs: 'hsr0' already exists in 'hsr' [ 746.731245][T24418] Cannot create hsr debugfs directory [ 746.834971][T24555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5699'. [ 746.938353][T24557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5700'. [ 747.335553][T24571] bond5: entered promiscuous mode [ 747.341123][T24571] bond5: entered allmulticast mode [ 747.348998][T24571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 747.413195][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.514229][T24418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.526517][T24418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.537144][T24418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 747.595479][T24589] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.5710'. [ 747.634381][T24589] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.5710'. [ 747.750562][T24418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.766339][T24418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.783856][T24418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 747.818179][T24602] netlink: 'syz.1.5711': attribute type 12 has an invalid length. [ 747.926601][T24418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.943394][T24418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.954184][T24418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 747.969533][ T51] Bluetooth: hci2: command tx timeout [ 748.080467][T24418] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.120383][T24418] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.157513][T24418] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 748.492905][T24418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 748.645918][T24635] bond9: entered promiscuous mode [ 748.651355][T24635] bond9: entered allmulticast mode [ 748.657235][T24635] 8021q: adding VLAN 0 to HW filter on device bond9 [ 748.669381][T24418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 748.753269][T24418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 748.805920][T24418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 749.110203][T24418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.168825][T24418] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.196020][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.203330][T16011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.287786][T16010] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.295152][T16010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.380357][T24676] netlink: 'syz.4.5732': attribute type 13 has an invalid length. [ 749.412654][T24676] lo: entered promiscuous mode [ 749.424797][T24676] lo: entered allmulticast mode [ 749.434450][T24676] tunl0: entered promiscuous mode [ 749.447121][T24676] tunl0: entered allmulticast mode [ 749.487930][T24676] gre0: entered promiscuous mode [ 749.502703][T24676] gre0: entered allmulticast mode [ 749.553797][T24676] gretap0: entered promiscuous mode [ 749.574663][T24676] gretap0: entered allmulticast mode [ 749.578086][T24685] netlink: 'syz.6.5738': attribute type 2 has an invalid length. [ 749.595537][T24676] erspan0: entered promiscuous mode [ 749.605463][T24676] erspan0: entered allmulticast mode [ 749.612222][ T24] hid (null): unknown global tag 0xe [ 749.618066][T24676] erspan0: refused to change device tx_queue_len [ 749.618095][T24676] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 749.732598][ T24] hid (null): nested delimiters [ 749.944755][T24699] __nla_validate_parse: 5 callbacks suppressed [ 749.944780][T24699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5740'. [ 750.052443][ T51] Bluetooth: hci2: command tx timeout [ 750.313803][T24418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.434777][T24720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5750'. [ 750.475135][T24418] veth0_vlan: entered promiscuous mode [ 750.529182][T24418] veth1_vlan: entered promiscuous mode [ 750.677502][T24418] veth0_macvtap: entered promiscuous mode [ 750.709629][T24418] veth1_macvtap: entered promiscuous mode [ 750.918261][T24418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.980864][T24418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.984612][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5758'. [ 751.036758][T16011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.045627][T16011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.077660][T24748] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5759'. [ 751.096168][T16011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.157224][T16011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.446807][T24757] IPv6: sit1: Disabled Multicast RS [ 751.455340][T16007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.481091][T16007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.500481][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5765'. [ 751.525384][T16010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.558572][T16010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.026510][T24786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5772'. [ 752.126909][ T51] Bluetooth: hci2: command tx timeout [ 752.403337][T24802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5777'. [ 752.850133][T24813] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 752.909407][T24815] netlink: 'syz.3.5784': attribute type 24 has an invalid length. [ 752.921526][ T24] hid-generic 0005:0D45:1012.0003: unknown global tag 0xe [ 752.955573][ T24] hid-generic 0005:0D45:1012.0003: item 0 2 1 14 parsing failed [ 752.981896][ T24] hid-generic 0005:0D45:1012.0003: probe with driver hid-generic failed with error -22 [ 753.218929][T19522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 753.232392][T19522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 753.247840][T19522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 753.273975][T19522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 753.291675][T19522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 753.464829][T16010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.491657][T16010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 753.502381][T16010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.701246][T24847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5795'. [ 753.727815][T16010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.746837][T16010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 753.761192][T16010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.832144][T24847] vlan2: entered promiscuous mode [ 753.856731][T24847] bridge0: entered promiscuous mode [ 754.024052][T16010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.054704][T16010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 754.081065][T16010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.143211][T24822] lo speed is unknown, defaulting to 1000 [ 754.229271][T16010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.258279][T16010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 754.277004][T16010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.089066][T24904] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.5816'. [ 755.116304][T24904] netlink: 104088 bytes leftover after parsing attributes in process `syz.5.5816'. [ 755.126036][T24904] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.5816'. [ 755.412858][ T51] Bluetooth: hci5: command tx timeout [ 756.261723][T16010] bond0 (unregistering): Released all slaves [ 756.279269][T16010] bond1 (unregistering): Released all slaves [ 756.411778][T16010] bond2 (unregistering): Released all slaves [ 756.427805][T16010] bond3 (unregistering): Released all slaves [ 756.442523][T16010] bond4 (unregistering): Released all slaves [ 756.581762][T16010] bond5 (unregistering): Released all slaves [ 756.717901][T16010] bond6 (unregistering): Released all slaves [ 756.841789][T16010] bond7 (unregistering): Released all slaves [ 756.858200][T16010] bond8 (unregistering): Released all slaves [ 756.989821][T16010] bond9 (unregistering): Released all slaves [ 757.174604][T24822] chnl_net:caif_netlink_parms(): no params data found [ 757.272558][T16010] tipc: Disabling bearer [ 757.290673][T16010] tipc: Disabling bearer [ 757.296027][T16010] tipc: Left network mode [ 757.488447][ T51] Bluetooth: hci5: command tx timeout [ 757.494180][T24822] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.518202][T24822] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.540546][T24822] bridge_slave_0: entered allmulticast mode [ 757.569835][T24822] bridge_slave_0: entered promiscuous mode [ 757.673795][T24822] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.682454][T24822] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.694720][T24822] bridge_slave_1: entered allmulticast mode [ 757.706562][T24822] bridge_slave_1: entered promiscuous mode [ 757.822536][T24822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.889144][T24822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.960773][T24822] team0: Port device team_slave_0 added [ 757.983325][T24822] team0: Port device team_slave_1 added [ 758.232418][T24822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.247754][T24822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.274694][T24822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.301842][T24822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.310675][T24822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.337092][T24822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.369114][T16010] hsr_slave_0: left promiscuous mode [ 758.380271][T16010] hsr_slave_1: left promiscuous mode [ 758.437914][T16010] veth1_macvtap: left promiscuous mode [ 758.450427][T16010] veth0_macvtap: left promiscuous mode [ 758.460479][T16010] veth1_vlan: left promiscuous mode [ 758.465961][T16010] veth0_vlan: left promiscuous mode [ 758.659427][T24979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5834'. [ 759.015258][T16010] pim6reg (unregistering): left allmulticast mode [ 759.368407][T24999] netlink: 'syz.3.5838': attribute type 2 has an invalid length. [ 759.389050][T24999] netlink: 'syz.3.5838': attribute type 1 has an invalid length. [ 759.403845][T24999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5838'. [ 759.570802][ T51] Bluetooth: hci5: command tx timeout [ 760.355977][T24822] hsr_slave_0: entered promiscuous mode [ 760.385516][T24822] hsr_slave_1: entered promiscuous mode [ 760.412232][T24822] debugfs: 'hsr0' already exists in 'hsr' [ 760.435921][T24822] Cannot create hsr debugfs directory [ 760.545668][T25016] netlink: 'syz.5.5842': attribute type 4 has an invalid length. [ 760.961884][T25035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.023096][T16010] IPVS: stop unused estimator thread 0... [ 761.337349][T25051] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5852'. [ 761.372837][T25054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5853'. [ 761.386274][T25054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5853'. [ 761.469260][T25054] veth9: entered allmulticast mode [ 761.646476][ T51] Bluetooth: hci5: command tx timeout [ 761.719889][T24822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 761.743474][T24822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 761.782157][T24822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 761.829948][T24822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 762.087286][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5863'. [ 762.135649][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5863'. [ 762.188641][T24822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.349723][T24822] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.399058][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.406288][T16011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.468919][T16003] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.476165][T16003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.539007][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5871'. [ 762.643438][T25116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5872'. [ 762.674887][T25116] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5872'. [ 762.687975][T25116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5872'. [ 762.769484][T25122] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 763.171091][T25142] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5879'. [ 763.357041][T25148] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 763.403365][T25150] netlink: 'syz.5.5882': attribute type 1 has an invalid length. [ 763.455609][T25148] bond4: entered promiscuous mode [ 763.465692][T25148] bond4: entered allmulticast mode [ 763.474068][T25148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.706838][T25156] 8021q: adding VLAN 0 to HW filter on device bond7 [ 763.764735][T25156] bond6: (slave bond7): making interface the new active one [ 763.807230][T25156] bond6: (slave bond7): Enslaving as an active interface with an up link [ 763.967786][T24822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.262559][T25184] netlink: 'syz.3.5893': attribute type 10 has an invalid length. [ 764.291580][T25184] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.351714][T25184] bridge_slave_1: left allmulticast mode [ 764.362900][T25184] bridge_slave_1: left promiscuous mode [ 764.370265][T25184] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.416803][T25184] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 764.701234][T25197] netlink: 'syz.5.5897': attribute type 83 has an invalid length. [ 765.010047][T25209] netlink: 'syz.6.5899': attribute type 3 has an invalid length. [ 765.373086][T24822] veth0_vlan: entered promiscuous mode [ 765.404016][T24822] veth1_vlan: entered promiscuous mode [ 765.484347][T24822] veth0_macvtap: entered promiscuous mode [ 765.565624][T24822] veth1_macvtap: entered promiscuous mode [ 765.639588][T24822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.695228][T24822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.719437][T16011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.730318][T16011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.757867][T16011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.789555][T16011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.000992][T25240] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 766.086608][T16008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.104744][T16008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.181537][T16008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.205469][T16008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.521406][T25251] __nla_validate_parse: 1 callbacks suppressed [ 766.521428][T25251] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5909'. [ 766.555778][T25251] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5909'. [ 766.982359][T25261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5912'. [ 767.703839][T25286] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 768.033889][T25296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.041268][T25296] IPv6: NLM_F_CREATE should be set when creating new route [ 768.048545][T25296] IPv6: NLM_F_CREATE should be set when creating new route [ 768.075585][T25297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.102452][T25297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.121562][T25296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.244482][T25303] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5926'. [ 768.262776][T25303] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5926'. [ 768.503760][T25301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5925'. [ 768.766881][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5928'. [ 768.778390][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5928'. [ 768.839553][T25315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5930'. [ 769.296412][T25329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5936'. [ 769.396643][T25329] netlink: 'syz.5.5936': attribute type 11 has an invalid length. [ 769.763061][T25350] netlink: 'syz.6.5943': attribute type 12 has an invalid length. [ 769.869664][T25352] FAULT_INJECTION: forcing a failure. [ 769.869664][T25352] name failslab, interval 1, probability 0, space 0, times 0 [ 769.905201][T25352] CPU: 1 UID: 0 PID: 25352 Comm: syz.5.5944 Not tainted syzkaller #0 PREEMPT(full) [ 769.905234][T25352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.905249][T25352] Call Trace: [ 769.905259][T25352] [ 769.905270][T25352] dump_stack_lvl+0x189/0x250 [ 769.905303][T25352] ? __pfx____ratelimit+0x10/0x10 [ 769.905341][T25352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.905369][T25352] ? __pfx__printk+0x10/0x10 [ 769.905402][T25352] ? __lock_acquire+0xab9/0xd20 [ 769.905446][T25352] should_fail_ex+0x414/0x560 [ 769.905481][T25352] should_failslab+0xa8/0x100 [ 769.905516][T25352] kmem_cache_alloc_noprof+0x73/0x3c0 [ 769.905545][T25352] ? skb_clone+0x212/0x3a0 [ 769.905574][T25352] skb_clone+0x212/0x3a0 [ 769.905602][T25352] __netlink_deliver_tap+0x404/0x850 [ 769.905649][T25352] ? netlink_deliver_tap+0x2e/0x1b0 [ 769.905683][T25352] netlink_deliver_tap+0x19c/0x1b0 [ 769.905717][T25352] netlink_unicast+0x7fa/0x9e0 [ 769.905756][T25352] ? __pfx_netlink_unicast+0x10/0x10 [ 769.905787][T25352] ? netlink_sendmsg+0x642/0xb30 [ 769.905816][T25352] ? skb_put+0x11b/0x210 [ 769.905854][T25352] netlink_sendmsg+0x805/0xb30 [ 769.905898][T25352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.905935][T25352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 769.905971][T25352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.905995][T25352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.906028][T25352] __sock_sendmsg+0x219/0x270 [ 769.906064][T25352] ____sys_sendmsg+0x505/0x830 [ 769.906091][T25352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.906124][T25352] ? import_iovec+0x74/0xa0 [ 769.906152][T25352] ___sys_sendmsg+0x21f/0x2a0 [ 769.906178][T25352] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.906240][T25352] ? __fget_files+0x2a/0x420 [ 769.906272][T25352] ? __fget_files+0x3a0/0x420 [ 769.906319][T25352] __x64_sys_sendmsg+0x19b/0x260 [ 769.906352][T25352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 769.906387][T25352] ? __pfx_ksys_write+0x10/0x10 [ 769.906413][T25352] ? rcu_is_watching+0x15/0xb0 [ 769.906442][T25352] ? do_syscall_64+0xbe/0x3b0 [ 769.906479][T25352] do_syscall_64+0xfa/0x3b0 [ 769.906508][T25352] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.906537][T25352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.906559][T25352] ? clear_bhb_loop+0x60/0xb0 [ 769.906587][T25352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.906608][T25352] RIP: 0033:0x7f2aaed8ebe9 [ 769.906629][T25352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.906649][T25352] RSP: 002b:00007f2aafc9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.906673][T25352] RAX: ffffffffffffffda RBX: 00007f2aaefb5fa0 RCX: 00007f2aaed8ebe9 [ 769.906689][T25352] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 769.906703][T25352] RBP: 00007f2aafc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 769.906718][T25352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.906731][T25352] R13: 00007f2aaefb6038 R14: 00007f2aaefb5fa0 R15: 00007ffcf56ec128 [ 769.906767][T25352] [ 770.271975][T25176] Set syz1 is full, maxelem 65536 reached [ 770.376994][T16008] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 770.396333][T16011] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 770.405096][T16011] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 770.460116][T16011] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 770.997084][T25405] FAULT_INJECTION: forcing a failure. [ 770.997084][T25405] name failslab, interval 1, probability 0, space 0, times 0 [ 771.046197][T25405] CPU: 1 UID: 0 PID: 25405 Comm: syz.5.5961 Not tainted syzkaller #0 PREEMPT(full) [ 771.046229][T25405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 771.046243][T25405] Call Trace: [ 771.046252][T25405] [ 771.046262][T25405] dump_stack_lvl+0x189/0x250 [ 771.046294][T25405] ? __pfx____ratelimit+0x10/0x10 [ 771.046324][T25405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.046351][T25405] ? __pfx__printk+0x10/0x10 [ 771.046387][T25405] ? __pfx___might_resched+0x10/0x10 [ 771.046406][T25405] ? fs_reclaim_acquire+0x7d/0x100 [ 771.046445][T25405] should_fail_ex+0x414/0x560 [ 771.046479][T25405] should_failslab+0xa8/0x100 [ 771.046512][T25405] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 771.046542][T25405] ? __alloc_skb+0x112/0x2d0 [ 771.046581][T25405] __alloc_skb+0x112/0x2d0 [ 771.046619][T25405] netlink_ack+0x146/0xa50 [ 771.046648][T25405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.046678][T25405] ? ref_tracker_free+0x63a/0x7d0 [ 771.046709][T25405] ? __asan_memcpy+0x40/0x70 [ 771.046734][T25405] ? __pfx_ref_tracker_free+0x10/0x10 [ 771.046776][T25405] netlink_rcv_skb+0x28c/0x470 [ 771.046809][T25405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.046843][T25405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.046888][T25405] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.046929][T25405] netlink_unicast+0x82c/0x9e0 [ 771.046977][T25405] ? __pfx_netlink_unicast+0x10/0x10 [ 771.047008][T25405] ? netlink_sendmsg+0x642/0xb30 [ 771.047038][T25405] ? skb_put+0x11b/0x210 [ 771.047076][T25405] netlink_sendmsg+0x805/0xb30 [ 771.047118][T25405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.047155][T25405] ? aa_sock_msg_perm+0xf1/0x1d0 [ 771.047191][T25405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.047216][T25405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.047250][T25405] __sock_sendmsg+0x219/0x270 [ 771.047282][T25405] ____sys_sendmsg+0x505/0x830 [ 771.047311][T25405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.047345][T25405] ? import_iovec+0x74/0xa0 [ 771.047374][T25405] ___sys_sendmsg+0x21f/0x2a0 [ 771.047400][T25405] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.047464][T25405] ? __fget_files+0x2a/0x420 [ 771.047497][T25405] ? __fget_files+0x3a0/0x420 [ 771.047542][T25405] __x64_sys_sendmsg+0x19b/0x260 [ 771.047568][T25405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.047602][T25405] ? __pfx_ksys_write+0x10/0x10 [ 771.047629][T25405] ? rcu_is_watching+0x15/0xb0 [ 771.047657][T25405] ? do_syscall_64+0xbe/0x3b0 [ 771.047693][T25405] do_syscall_64+0xfa/0x3b0 [ 771.047723][T25405] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.047751][T25405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.047773][T25405] ? clear_bhb_loop+0x60/0xb0 [ 771.047800][T25405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.047820][T25405] RIP: 0033:0x7f2aaed8ebe9 [ 771.047840][T25405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.047859][T25405] RSP: 002b:00007f2aafc9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.047882][T25405] RAX: ffffffffffffffda RBX: 00007f2aaefb5fa0 RCX: 00007f2aaed8ebe9 [ 771.047898][T25405] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 771.047913][T25405] RBP: 00007f2aafc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 771.047927][T25405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.047945][T25405] R13: 00007f2aaefb6038 R14: 00007f2aaefb5fa0 R15: 00007ffcf56ec128 [ 771.047981][T25405] [ 771.639625][T25422] netlink: 'syz.4.5969': attribute type 9 has an invalid length. [ 771.648864][T25422] __nla_validate_parse: 6 callbacks suppressed [ 771.648912][T25422] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.5969'. [ 771.678717][T25419] netlink: 'syz.6.5966': attribute type 1 has an invalid length. [ 771.830717][T25428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.444035][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5984'. [ 772.478609][T25467] veth0_to_batadv: entered promiscuous mode [ 772.478922][T25460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5983'. [ 772.484633][T25467] veth0_to_batadv: entered allmulticast mode [ 772.545627][T25467] syzkaller1: entered promiscuous mode [ 772.555331][T25467] syzkaller1: entered allmulticast mode [ 772.891613][T25472] sctp: [Deprecated]: syz.5.5987 (pid 25472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.891613][T25472] Use struct sctp_sack_info instead [ 772.980766][T25474] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 773.058512][T25483] FAULT_INJECTION: forcing a failure. [ 773.058512][T25483] name failslab, interval 1, probability 0, space 0, times 0 [ 773.089120][T25483] CPU: 1 UID: 0 PID: 25483 Comm: syz.4.5990 Not tainted syzkaller #0 PREEMPT(full) [ 773.089153][T25483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.089168][T25483] Call Trace: [ 773.089177][T25483] [ 773.089187][T25483] dump_stack_lvl+0x189/0x250 [ 773.089220][T25483] ? __pfx____ratelimit+0x10/0x10 [ 773.089252][T25483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.089279][T25483] ? __pfx__printk+0x10/0x10 [ 773.089307][T25483] ? netlink_unicast+0x82c/0x9e0 [ 773.089337][T25483] ? ___sys_sendmsg+0x21f/0x2a0 [ 773.089358][T25483] ? do_syscall_64+0xfa/0x3b0 [ 773.089402][T25483] should_fail_ex+0x414/0x560 [ 773.089438][T25483] should_failslab+0xa8/0x100 [ 773.089473][T25483] kmem_cache_alloc_noprof+0x73/0x3c0 [ 773.089503][T25483] ? skb_clone+0x212/0x3a0 [ 773.089532][T25483] skb_clone+0x212/0x3a0 [ 773.089561][T25483] __netlink_deliver_tap+0x404/0x850 [ 773.089607][T25483] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.089640][T25483] netlink_deliver_tap+0x19c/0x1b0 [ 773.089673][T25483] netlink_sendskb+0x68/0x140 [ 773.089705][T25483] netlink_unicast+0x397/0x9e0 [ 773.089731][T25483] ? __asan_memcpy+0x40/0x70 [ 773.089765][T25483] ? __pfx_netlink_unicast+0x10/0x10 [ 773.089804][T25483] netlink_rcv_skb+0x28c/0x470 [ 773.089838][T25483] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 773.089873][T25483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 773.089919][T25483] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.089960][T25483] netlink_unicast+0x82c/0x9e0 [ 773.089999][T25483] ? __pfx_netlink_unicast+0x10/0x10 [ 773.090029][T25483] ? netlink_sendmsg+0x642/0xb30 [ 773.090059][T25483] ? skb_put+0x11b/0x210 [ 773.090103][T25483] netlink_sendmsg+0x805/0xb30 [ 773.090146][T25483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.090180][T25483] ? aa_sock_msg_perm+0xf1/0x1d0 [ 773.090214][T25483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 773.090238][T25483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.090273][T25483] __sock_sendmsg+0x219/0x270 [ 773.090306][T25483] ____sys_sendmsg+0x505/0x830 [ 773.090335][T25483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.090369][T25483] ? import_iovec+0x74/0xa0 [ 773.090398][T25483] ___sys_sendmsg+0x21f/0x2a0 [ 773.090424][T25483] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.090489][T25483] ? __fget_files+0x2a/0x420 [ 773.090522][T25483] ? __fget_files+0x3a0/0x420 [ 773.090568][T25483] __x64_sys_sendmsg+0x19b/0x260 [ 773.090594][T25483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.090628][T25483] ? __pfx_ksys_write+0x10/0x10 [ 773.090656][T25483] ? rcu_is_watching+0x15/0xb0 [ 773.090685][T25483] ? do_syscall_64+0xbe/0x3b0 [ 773.090722][T25483] do_syscall_64+0xfa/0x3b0 [ 773.090752][T25483] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.090782][T25483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.090804][T25483] ? clear_bhb_loop+0x60/0xb0 [ 773.090829][T25483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.090847][T25483] RIP: 0033:0x7f04bc18ebe9 [ 773.090865][T25483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.090886][T25483] RSP: 002b:00007f04ba3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.090910][T25483] RAX: ffffffffffffffda RBX: 00007f04bc3b5fa0 RCX: 00007f04bc18ebe9 [ 773.090927][T25483] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 773.090941][T25483] RBP: 00007f04ba3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.090955][T25483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.090968][T25483] R13: 00007f04bc3b6038 R14: 00007f04bc3b5fa0 R15: 00007ffc2cae3e88 [ 773.091004][T25483] [ 773.629042][T25495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5998'. [ 773.756882][T25502] netlink: 'syz.4.5999': attribute type 1 has an invalid length. [ 773.827976][T25507] tipc: Enabling of bearer rejected, failed to enable media [ 773.845390][T25507] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6000'. [ 773.893591][T25513] pim6reg: entered allmulticast mode [ 774.005464][T25507] bond8: entered promiscuous mode [ 774.033265][T25507] bond8: entered allmulticast mode [ 774.053436][T25507] 8021q: adding VLAN 0 to HW filter on device bond8 [ 774.065865][T25524] FAULT_INJECTION: forcing a failure. [ 774.065865][T25524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.079438][T25524] CPU: 1 UID: 0 PID: 25524 Comm: syz.6.6004 Not tainted syzkaller #0 PREEMPT(full) [ 774.079467][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.079480][T25524] Call Trace: [ 774.079488][T25524] [ 774.079498][T25524] dump_stack_lvl+0x189/0x250 [ 774.079526][T25524] ? __pfx____ratelimit+0x10/0x10 [ 774.079554][T25524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.079578][T25524] ? __pfx__printk+0x10/0x10 [ 774.079605][T25524] ? __might_fault+0xb0/0x130 [ 774.079643][T25524] should_fail_ex+0x414/0x560 [ 774.079673][T25524] _copy_from_user+0x2d/0xb0 [ 774.079695][T25524] do_ipv6_setsockopt+0x23e/0x2eb0 [ 774.079724][T25524] ? aa_label_sk_perm+0x4cd/0x630 [ 774.079757][T25524] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 774.079782][T25524] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 774.079821][T25524] ? vfs_write+0x956/0xb30 [ 774.079851][T25524] ? __pfx___might_resched+0x10/0x10 [ 774.079881][T25524] ? __lock_acquire+0xab9/0xd20 [ 774.079912][T25524] ? aa_sk_perm+0x81e/0x950 [ 774.079941][T25524] ? __pfx_aa_sk_perm+0x10/0x10 [ 774.079980][T25524] ? __fget_files+0x2a/0x420 [ 774.080008][T25524] ? aa_sock_opt_perm+0xff/0x1b0 [ 774.080030][T25524] ipv6_setsockopt+0x59/0x170 [ 774.080055][T25524] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 774.080085][T25524] do_sock_setsockopt+0x17c/0x1b0 [ 774.080122][T25524] __x64_sys_setsockopt+0x13f/0x1b0 [ 774.080147][T25524] do_syscall_64+0xfa/0x3b0 [ 774.080175][T25524] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.080202][T25524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.080224][T25524] ? clear_bhb_loop+0x60/0xb0 [ 774.080248][T25524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.080267][T25524] RIP: 0033:0x7f704078ebe9 [ 774.080288][T25524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.080307][T25524] RSP: 002b:00007f70415a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 774.080329][T25524] RAX: ffffffffffffffda RBX: 00007f70409b6090 RCX: 00007f704078ebe9 [ 774.080346][T25524] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 774.080358][T25524] RBP: 00007f70415a8090 R08: 0000000000000008 R09: 0000000000000000 [ 774.080371][T25524] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 774.080384][T25524] R13: 00007f70409b6128 R14: 00007f70409b6090 R15: 00007ffdebdfdda8 [ 774.080417][T25524] [ 774.389632][T25526] netlink: 'syz.4.6006': attribute type 10 has an invalid length. [ 774.459597][T25507] bond8 (unregistering): Released all slaves [ 774.481168][T25513] pim6reg: left allmulticast mode [ 774.501617][T25525] syz_tun: entered allmulticast mode [ 774.510891][T25526] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.520909][T25526] bridge_slave_1: left allmulticast mode [ 774.526967][T25526] bridge_slave_1: left promiscuous mode [ 774.533213][T25526] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.543439][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6006'. [ 774.566526][T25526] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 774.721638][T25536] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6008'. [ 774.727091][T25523] syz_tun (unregistering): left allmulticast mode [ 774.761808][T25538] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6009'. [ 774.842193][T25541] netlink: 'syz.3.6011': attribute type 10 has an invalid length. [ 774.945613][T25541] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 775.131033][T25554] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6015'. [ 775.417299][T25574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6022'. [ 775.502302][T25571] netlink: 'syz.5.6021': attribute type 1 has an invalid length. [ 775.884076][T25606] netlink: 'syz.3.6034': attribute type 1 has an invalid length. [ 775.892726][T25606] netlink: 'syz.3.6034': attribute type 1 has an invalid length. [ 776.088623][T25612] team0: Device gtp1 is of different type [ 776.722486][T25657] __nla_validate_parse: 10 callbacks suppressed [ 776.722507][T25657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6049'. [ 776.830537][T25662] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6050'. [ 776.985486][T25669] netlink: 'syz.3.6054': attribute type 1 has an invalid length. [ 776.996425][T25666] netlink: 'syz.6.6052': attribute type 1 has an invalid length. [ 777.004244][T25666] netlink: 'syz.6.6052': attribute type 4 has an invalid length. [ 777.018415][T25666] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6052'. [ 777.505620][T25700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6064'. [ 777.696014][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.705386][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.715699][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.751451][T25711] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 777.832703][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.844296][T25717] IPVS: Unknown mcast interface: netpci0 [ 777.869097][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.946638][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.965661][T25711] hsr0 speed is unknown, defaulting to 1000 [ 777.984178][T25711] hsr0 speed is unknown, defaulting to 1000 [ 778.003291][T25711] hsr0 speed is unknown, defaulting to 1000 [ 778.029630][T25711] hsr0 speed is unknown, defaulting to 1000 [ 778.344859][T25745] netlink: 'syz.5.6077': attribute type 1 has an invalid length. [ 778.406262][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6077'. [ 778.406825][T25746] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6076'. [ 778.532753][T25752] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6079'. [ 778.577514][T25750] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6077'. [ 778.588358][T25750] syzkaller0: entered promiscuous mode [ 778.593903][T25750] syzkaller0: entered allmulticast mode [ 778.652346][T25754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6080'. [ 778.665339][T25757] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6082'. [ 778.684207][T25754] openvswitch: netlink: Actions may not be safe on all matching packets [ 778.703724][T25758] openvswitch: netlink: Missing key (keys=40, expected=80) [ 779.533153][T25794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 779.548162][T25801] 8021q: VLANs not supported on ipvlan1 [ 780.066715][T25828] tipc: Enabled bearer , priority 0 [ 780.087916][T25828] syzkaller0: entered promiscuous mode [ 780.095179][T25828] syzkaller0: entered allmulticast mode [ 780.218797][T25828] tipc: Resetting bearer [ 780.241214][T25827] tipc: Resetting bearer [ 780.300385][T25827] tipc: Disabling bearer [ 780.615228][T25859] netlink: 'syz.3.6115': attribute type 142 has an invalid length. [ 780.728238][T25867] netlink: 'syz.5.6119': attribute type 10 has an invalid length. [ 780.743610][T25868] sock: sock_timestamping_bind_phc: sock not bind to device [ 780.761973][T25868] ipvlan0: entered promiscuous mode [ 780.774487][T25868] ipvlan0: entered allmulticast mode [ 780.783866][T25868] veth0_vlan: entered allmulticast mode [ 780.803689][T25875] FAULT_INJECTION: forcing a failure. [ 780.803689][T25875] name failslab, interval 1, probability 0, space 0, times 0 [ 780.808610][T25874] netlink: 'syz.1.6123': attribute type 5 has an invalid length. [ 780.832685][T25875] CPU: 0 UID: 0 PID: 25875 Comm: syz.3.6122 Not tainted syzkaller #0 PREEMPT(full) [ 780.832715][T25875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 780.832729][T25875] Call Trace: [ 780.832739][T25875] [ 780.832748][T25875] dump_stack_lvl+0x189/0x250 [ 780.832780][T25875] ? __pfx____ratelimit+0x10/0x10 [ 780.832811][T25875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.832839][T25875] ? __pfx__printk+0x10/0x10 [ 780.832877][T25875] ? __pfx___might_resched+0x10/0x10 [ 780.832905][T25875] should_fail_ex+0x414/0x560 [ 780.832940][T25875] should_failslab+0xa8/0x100 [ 780.832974][T25875] __kmalloc_cache_noprof+0x70/0x3d0 [ 780.833004][T25875] ? subflow_ulp_init+0xd0/0x5c0 [ 780.833031][T25875] subflow_ulp_init+0xd0/0x5c0 [ 780.833053][T25875] ? tcp_set_ulp+0xb1/0x5f0 [ 780.833092][T25875] tcp_set_ulp+0x539/0x5f0 [ 780.833127][T25875] mptcp_subflow_create_socket+0x5c5/0xb40 [ 780.833165][T25875] ? look_up_lock_class+0x74/0x170 [ 780.833196][T25875] ? register_lock_class+0x51/0x320 [ 780.833231][T25875] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 780.833278][T25875] ? __lock_acquire+0xab9/0xd20 [ 780.833319][T25875] __mptcp_nmpc_sk+0x150/0x720 [ 780.833346][T25875] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 780.833367][T25875] ? __local_bh_enable_ip+0x12d/0x1c0 [ 780.833390][T25875] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.833420][T25875] ? __local_bh_enable_ip+0x12d/0x1c0 [ 780.833445][T25875] mptcp_sendmsg_fastopen+0xd4/0x580 [ 780.833485][T25875] mptcp_sendmsg+0x176c/0x1970 [ 780.833515][T25875] ? __pfx___might_resched+0x10/0x10 [ 780.833533][T25875] ? __lock_acquire+0xab9/0xd20 [ 780.833584][T25875] ? aa_sk_perm+0x81e/0x950 [ 780.833622][T25875] ? __pfx_aa_sk_perm+0x10/0x10 [ 780.833652][T25875] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 780.833693][T25875] ? inet6_sendmsg+0x101/0x120 [ 780.833716][T25875] __sock_sendmsg+0xe5/0x270 [ 780.833760][T25875] ____sys_sendmsg+0x505/0x830 [ 780.833788][T25875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.833821][T25875] ? import_iovec+0x74/0xa0 [ 780.833849][T25875] ___sys_sendmsg+0x21f/0x2a0 [ 780.833873][T25875] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.833937][T25875] ? __fget_files+0x2a/0x420 [ 780.833967][T25875] ? __fget_files+0x3a0/0x420 [ 780.834011][T25875] __x64_sys_sendmsg+0x19b/0x260 [ 780.834036][T25875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 780.834069][T25875] ? __pfx_ksys_write+0x10/0x10 [ 780.834094][T25875] ? rcu_is_watching+0x15/0xb0 [ 780.834121][T25875] ? do_syscall_64+0xbe/0x3b0 [ 780.834156][T25875] do_syscall_64+0xfa/0x3b0 [ 780.834184][T25875] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.834212][T25875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.834232][T25875] ? clear_bhb_loop+0x60/0xb0 [ 780.834265][T25875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.834286][T25875] RIP: 0033:0x7fd96578ebe9 [ 780.834306][T25875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.834326][T25875] RSP: 002b:00007fd96659a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.834348][T25875] RAX: ffffffffffffffda RBX: 00007fd9659b5fa0 RCX: 00007fd96578ebe9 [ 780.834363][T25875] RDX: 0000000024000059 RSI: 0000200000000000 RDI: 0000000000000003 [ 780.834377][T25875] RBP: 00007fd96659a090 R08: 0000000000000000 R09: 0000000000000000 [ 780.834390][T25875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.834403][T25875] R13: 00007fd9659b6038 R14: 00007fd9659b5fa0 R15: 00007fff2d4f8558 [ 780.834456][T25875] [ 781.180421][T25867] team0: Device veth1_macvtap failed to register rx_handler [ 781.205992][T25878] netlink: 'syz.6.6120': attribute type 1 has an invalid length. [ 781.214238][T25868] netlink: 'syz.6.6120': attribute type 1 has an invalid length. [ 781.711207][T25897] bond0: (slave bridge_slave_1): Releasing backup interface [ 781.725124][T25905] FAULT_INJECTION: forcing a failure. [ 781.725124][T25905] name failslab, interval 1, probability 0, space 0, times 0 [ 781.760191][T25905] CPU: 1 UID: 0 PID: 25905 Comm: syz.3.6135 Not tainted syzkaller #0 PREEMPT(full) [ 781.760219][T25905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.760231][T25905] Call Trace: [ 781.760238][T25905] [ 781.760247][T25905] dump_stack_lvl+0x189/0x250 [ 781.760274][T25905] ? __pfx____ratelimit+0x10/0x10 [ 781.760310][T25905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.760331][T25905] ? __pfx__printk+0x10/0x10 [ 781.760372][T25905] ? __pfx___might_resched+0x10/0x10 [ 781.760388][T25905] ? fs_reclaim_acquire+0x7d/0x100 [ 781.760422][T25905] should_fail_ex+0x414/0x560 [ 781.760451][T25905] should_failslab+0xa8/0x100 [ 781.760485][T25905] __kmalloc_cache_noprof+0x70/0x3d0 [ 781.760510][T25905] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 781.760538][T25905] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 781.760569][T25905] mptcp_sendmsg_fastopen+0x17d/0x580 [ 781.760606][T25905] mptcp_sendmsg+0x176c/0x1970 [ 781.760632][T25905] ? __pfx___might_resched+0x10/0x10 [ 781.760648][T25905] ? __lock_acquire+0xab9/0xd20 [ 781.760691][T25905] ? aa_sk_perm+0x81e/0x950 [ 781.760723][T25905] ? __pfx_aa_sk_perm+0x10/0x10 [ 781.760749][T25905] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 781.760783][T25905] ? inet6_sendmsg+0x101/0x120 [ 781.760803][T25905] __sock_sendmsg+0xe5/0x270 [ 781.760830][T25905] ____sys_sendmsg+0x505/0x830 [ 781.760855][T25905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.760883][T25905] ? import_iovec+0x74/0xa0 [ 781.760908][T25905] ___sys_sendmsg+0x21f/0x2a0 [ 781.760929][T25905] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.760985][T25905] ? __fget_files+0x2a/0x420 [ 781.761012][T25905] ? __fget_files+0x3a0/0x420 [ 781.761052][T25905] __x64_sys_sendmsg+0x19b/0x260 [ 781.761073][T25905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.761103][T25905] ? __pfx_ksys_write+0x10/0x10 [ 781.761126][T25905] ? rcu_is_watching+0x15/0xb0 [ 781.761154][T25905] ? do_syscall_64+0xbe/0x3b0 [ 781.761185][T25905] do_syscall_64+0xfa/0x3b0 [ 781.761210][T25905] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.761236][T25905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.761254][T25905] ? clear_bhb_loop+0x60/0xb0 [ 781.761277][T25905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.761295][T25905] RIP: 0033:0x7fd96578ebe9 [ 781.761313][T25905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.761330][T25905] RSP: 002b:00007fd96659a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.761361][T25905] RAX: ffffffffffffffda RBX: 00007fd9659b5fa0 RCX: 00007fd96578ebe9 [ 781.761375][T25905] RDX: 0000000024000059 RSI: 0000200000000000 RDI: 0000000000000003 [ 781.761387][T25905] RBP: 00007fd96659a090 R08: 0000000000000000 R09: 0000000000000000 [ 781.761399][T25905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.761410][T25905] R13: 00007fd9659b6038 R14: 00007fd9659b5fa0 R15: 00007fff2d4f8558 [ 781.761441][T25905] [ 782.234676][T25916] pimreg: entered allmulticast mode [ 782.652224][T25942] __nla_validate_parse: 17 callbacks suppressed [ 782.652245][T25942] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6145'. [ 782.688094][T25941] team_slave_0: entered allmulticast mode [ 782.976659][T25961] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6152'. [ 783.446940][T25983] tipc: Enabled bearer , priority 0 [ 783.462666][T25982] tipc: Disabling bearer [ 783.642697][T25994] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 783.739367][T25955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 783.751406][T25955] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 783.905049][T25955] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 783.916964][T26007] netlink: 'syz.5.6170': attribute type 3 has an invalid length. [ 783.924518][T25955] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 783.942364][T26007] sctp: [Deprecated]: syz.5.6170 (pid 26007) Use of int in max_burst socket option. [ 783.942364][T26007] Use struct sctp_assoc_value instead [ 784.024354][T26007] netlink: 'syz.5.6170': attribute type 1 has an invalid length. [ 784.149308][T26016] syzkaller0: entered promiscuous mode [ 784.175360][T26016] syzkaller0: entered allmulticast mode [ 784.251689][T26026] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6173'. [ 784.265410][T26026] ip6gretap0: entered promiscuous mode [ 784.366760][T26026] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6173'. [ 784.371291][T26032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.441282][T26029] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6173'. [ 784.451211][T26029] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6173'. [ 784.914002][T26044] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6177'. [ 786.076327][T26048] bond0: option mode: unable to set because the bond device has slaves [ 786.267570][T26053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6180'. [ 786.343296][T26060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6184'. [ 786.638070][T26083] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6188'. [ 786.802569][T26095] netlink: 'syz.5.6193': attribute type 5 has an invalid length. [ 786.869173][T26096] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.883297][T16011] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.908351][T16011] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.934086][T16011] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.971552][T26105] openvswitch: netlink: IP tunnel dst address not specified [ 786.995951][T16011] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.167432][T26113] netlink: 'syz.3.6196': attribute type 1 has an invalid length. [ 787.224343][T26118] netlink: 'syz.6.6199': attribute type 13 has an invalid length. [ 787.617918][T26133] netlink: 'syz.3.6202': attribute type 1 has an invalid length. [ 787.778652][T26147] netlink: 'syz.5.6208': attribute type 15 has an invalid length. [ 787.786991][T26147] netlink: 'syz.5.6208': attribute type 1 has an invalid length. [ 787.857296][T26147] __nla_validate_parse: 5 callbacks suppressed [ 787.857320][T26147] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6208'. [ 787.912540][T26154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.090338][T26157] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 788.204586][T26169] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6216'. [ 788.417120][T26180] netlink: 'syz.5.6222': attribute type 2 has an invalid length. [ 788.439232][T26183] netlink: 'syz.4.6221': attribute type 4 has an invalid length. [ 788.488552][T26186] netlink: 'syz.1.6224': attribute type 1 has an invalid length. [ 788.500917][T26184] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6223'. [ 788.644838][T26193] lo speed is unknown, defaulting to 1000 [ 788.797494][T26203] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.6231'. [ 788.816415][T26203] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6231'. [ 788.836008][T26203] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.6231'. [ 789.214309][T26220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6235'. [ 789.236862][T26193] hsr0 speed is unknown, defaulting to 1000 [ 789.273336][T26217] netlink: 'syz.3.6235': attribute type 10 has an invalid length. [ 789.313479][T26217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.325218][T26217] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 789.530547][T26226] tipc: Started in network mode [ 789.542229][T26226] tipc: Node identity 827fbd4efc11, cluster identity 4711 [ 789.576687][T26226] tipc: Enabled bearer , priority 0 [ 789.616388][T26231] syzkaller0: entered promiscuous mode [ 789.676747][T26231] syzkaller0: entered allmulticast mode [ 789.853602][T26241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6242'. [ 789.910445][T26243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6244'. [ 789.969659][T26243] vlan2: entered promiscuous mode [ 789.975088][T26243] bridge0: entered promiscuous mode [ 789.989935][T26245] sit0: entered promiscuous mode [ 790.007543][T26245] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6245'. [ 790.336987][T26225] tipc: Resetting bearer [ 790.405821][T26225] tipc: Disabling bearer [ 791.037448][T26294] geneve0: entered promiscuous mode [ 791.222463][T26309] syzkaller1: entered promiscuous mode [ 791.228126][T26309] syzkaller1: entered allmulticast mode [ 791.529181][T26329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.828393][T26346] validate_nla: 2 callbacks suppressed [ 791.828414][T26346] netlink: 'syz.5.6277': attribute type 24 has an invalid length. [ 792.076904][T26360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.251921][T26368] netlink: 'syz.4.6280': attribute type 24 has an invalid length. [ 792.974576][T26399] tipc: Enabling of bearer rejected, failed to enable media [ 792.990217][T26401] __nla_validate_parse: 17 callbacks suppressed [ 792.990238][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6291'. [ 793.034584][T26401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6291'. [ 793.332935][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6295'. [ 793.416633][T26421] tipc: Enabling of bearer rejected, failed to enable media [ 793.424709][T26422] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6296'. [ 793.437419][T26421] tipc: Enabling of bearer rejected, failed to enable media [ 793.458337][T26424] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6298'. [ 793.466433][T26422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.220823][T26461] tipc: Started in network mode [ 794.255443][T26461] tipc: Node identity e234230e0dfb, cluster identity 4711 [ 794.301223][T26461] tipc: Enabled bearer , priority 0 [ 794.650307][T26458] tipc: Disabling bearer [ 795.060258][T26476] netlink: 'syz.3.6314': attribute type 16 has an invalid length. [ 795.075203][T26476] netlink: 'syz.3.6314': attribute type 17 has an invalid length. [ 795.221339][T26482] openvswitch: netlink: Flow key attr not present in new flow. [ 795.324695][T26476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.073460][T16173] syz_tun (unregistering): left allmulticast mode [ 796.120668][T16173] `: (slave syz_tun): Releasing backup interface [ 796.162528][T19522] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 796.176372][T19522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 796.185067][T19522] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 796.204631][T19522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 796.213456][T19522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.283204][T26526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6328'. [ 796.295561][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 796.308489][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 796.352479][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 796.364378][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 796.375714][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.662861][T26542] netlink: 116 bytes leftover after parsing attributes in process `syz.6.6330'. [ 796.691758][T26519] lo speed is unknown, defaulting to 1000 [ 796.891096][T26552] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 797.192717][T26519] hsr0 speed is unknown, defaulting to 1000 [ 797.411106][T26539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 797.419506][T26539] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 797.605280][T26519] chnl_net:caif_netlink_parms(): no params data found [ 797.665964][T26579] xfrm1: entered allmulticast mode [ 797.736767][T26579] netlink: 25 bytes leftover after parsing attributes in process `syz.5.6346'. [ 797.918022][T26583] can: request_module (can-proto-0) failed. [ 797.979302][T26519] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.988504][T26519] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.996255][T26519] bridge_slave_0: entered allmulticast mode [ 798.004430][T26519] bridge_slave_0: entered promiscuous mode [ 798.049198][T26519] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.065450][T26519] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.080980][T26519] bridge_slave_1: entered allmulticast mode [ 798.101992][T26519] bridge_slave_1: entered promiscuous mode [ 798.206730][T26608] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6354'. [ 798.302310][T26519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.331210][T26608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6354'. [ 798.334365][T26519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.625556][T26519] team0: Port device team_slave_0 added [ 798.669848][T26519] team0: Port device team_slave_1 added [ 798.854939][T26519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.887358][T26519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.949304][T26519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.969665][T26519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.978415][T26519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.005480][T26519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.018771][T26628] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6360'. [ 799.031316][T26627] tipc: Enabled bearer , priority 0 [ 799.060371][T26629] syzkaller0: entered promiscuous mode [ 799.076546][T26629] syzkaller0: entered allmulticast mode [ 799.252947][T26629] tipc: Resetting bearer [ 799.265028][T26636] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6365'. [ 799.277046][T26622] tipc: Resetting bearer [ 799.280175][T26636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6365'. [ 799.331594][T26622] tipc: Disabling bearer [ 799.484438][T26519] hsr_slave_0: entered promiscuous mode [ 799.510188][T26519] hsr_slave_1: entered promiscuous mode [ 799.524216][T26519] debugfs: 'hsr0' already exists in 'hsr' [ 799.532878][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6368'. [ 799.542594][T26519] Cannot create hsr debugfs directory [ 799.595142][T26654] netlink: 'syz.6.6369': attribute type 1 has an invalid length. [ 799.631868][T26654] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6369'. [ 799.652946][T26660] netlink: 'syz.3.6370': attribute type 10 has an invalid length. [ 799.793718][T26662] IPVS: set_ctl: invalid protocol: 44 172.20.20.53:20004 [ 799.924110][T26674] netlink: 'syz.5.6374': attribute type 4 has an invalid length. [ 800.134075][T26519] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.188531][T26519] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.299135][T26519] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.316281][T26519] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.383375][T26519] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.419148][T26519] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.671602][T26700] bond8: entered allmulticast mode [ 800.693332][T26700] 8021q: adding VLAN 0 to HW filter on device bond8 [ 800.717735][T26700] bridge0: port 2(bond8) entered blocking state [ 800.724484][T26700] bridge0: port 2(bond8) entered disabled state [ 800.737511][T26700] bond8: entered promiscuous mode [ 800.764979][T26710] netlink: 'syz.3.6386': attribute type 1 has an invalid length. [ 800.787498][T26710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6386'. [ 800.796738][T26710] netlink: 'syz.3.6386': attribute type 7 has an invalid length. [ 800.804500][T26710] netlink: 'syz.3.6386': attribute type 8 has an invalid length. [ 800.818496][T26519] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.824989][T26710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6386'. [ 800.853106][T26519] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.907622][T26710] team0: entered promiscuous mode [ 800.913239][T26710] team_slave_0: entered promiscuous mode [ 800.963854][T26710] team_slave_1: entered promiscuous mode [ 801.011106][T26710] bond0: entered promiscuous mode [ 801.035021][T26710] bond_slave_0: entered promiscuous mode [ 801.042243][T26710] bond_slave_1: entered promiscuous mode [ 801.052359][T26710] bridge_slave_1: entered promiscuous mode [ 801.062516][T26710] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 801.074121][T26710] batadv0: entered promiscuous mode [ 801.086898][T26710] team0: left promiscuous mode [ 801.091894][T26710] team_slave_0: left promiscuous mode [ 801.101681][T26710] team_slave_1: left promiscuous mode [ 801.112612][T26710] bond0: left promiscuous mode [ 801.117938][T26710] bond_slave_0: left promiscuous mode [ 801.123616][T26710] bond_slave_1: left promiscuous mode [ 801.129528][T26710] bridge_slave_1: left promiscuous mode [ 801.135433][T26710] mac80211_hwsim hwsim46 wlan1: left promiscuous mode [ 801.142668][T26710] batadv0: left promiscuous mode [ 801.193094][T26725] vlan5: entered promiscuous mode [ 801.284487][T26728] veth1_to_bond: entered allmulticast mode [ 801.319600][T26728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6392'. [ 801.449912][T26728] bond0: (slave bond_slave_1): Releasing backup interface [ 801.537368][T26728] veth1_to_bond (unregistering): left allmulticast mode [ 801.703807][T26743] netlink: 'syz.3.6395': attribute type 11 has an invalid length. [ 801.719556][T26743] netlink: 'syz.3.6395': attribute type 11 has an invalid length. [ 801.751927][T26519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.812427][T26519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.894003][T26519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.941798][T26519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 801.946891][T26758] netlink: 'syz.4.6401': attribute type 1 has an invalid length. [ 802.031829][T26762] lo: left promiscuous mode [ 802.047511][T26758] can: request_module (can-proto-0) failed. [ 802.294632][T26779] netlink: 'syz.4.6404': attribute type 30 has an invalid length. [ 802.539980][T26797] netlink: 'syz.6.6409': attribute type 1 has an invalid length. [ 802.699911][T26519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.771764][T26519] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.804621][T16003] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.812441][T16003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.866642][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.873950][T16011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.935493][T26816] syz_tun: entered allmulticast mode [ 803.172389][T26815] syz_tun: left allmulticast mode [ 803.341793][T26828] netlink: 'syz.6.6418': attribute type 11 has an invalid length. [ 803.367205][T26828] __nla_validate_parse: 5 callbacks suppressed [ 803.367226][T26828] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6418'. [ 803.410762][T26829] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6419'. [ 803.430141][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6419'. [ 803.633141][T26841] openvswitch: netlink: Missing key (keys=40, expected=100) [ 803.665317][T26519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.726338][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 803.824375][T26519] veth0_vlan: entered promiscuous mode [ 803.867874][T26519] veth1_vlan: entered promiscuous mode [ 803.997468][T26519] veth0_macvtap: entered promiscuous mode [ 804.039921][T26519] veth1_macvtap: entered promiscuous mode [ 804.115579][T26519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.220565][T26519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.251048][ T6864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.280959][ T6864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.362004][ T6864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.391417][ T6864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.478608][T26863] !: renamed from dummy0 (while UP) [ 804.775784][T16010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.796975][T16010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.917016][T16010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.924890][T16010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.991660][T26878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6436'. [ 805.075716][T26881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6312'. [ 805.155572][T26881] vlan2: entered promiscuous mode [ 805.179365][T26881] bridge0: entered promiscuous mode [ 805.434155][T26896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6439'. [ 805.847204][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6445'. [ 805.872165][T26917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6445'. [ 805.902227][T26917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6445'. [ 805.958644][T26922] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.992046][T26924] netlink: 'syz.1.6447': attribute type 13 has an invalid length. [ 806.024573][T26921] netlink: 'syz.4.6446': attribute type 5 has an invalid length. [ 806.084658][T26924] veth0_macvtap: left promiscuous mode [ 806.099720][T26924] macvtap0: entered allmulticast mode [ 806.120833][T26924] macvtap0: refused to change device tx_queue_len [ 806.251291][T26942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6452'. [ 806.959358][T26955] FAULT_INJECTION: forcing a failure. [ 806.959358][T26955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.014510][T26955] CPU: 0 UID: 0 PID: 26955 Comm: syz.5.6456 Not tainted syzkaller #0 PREEMPT(full) [ 807.014559][T26955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.014583][T26955] Call Trace: [ 807.014592][T26955] [ 807.014602][T26955] dump_stack_lvl+0x189/0x250 [ 807.014634][T26955] ? __pfx____ratelimit+0x10/0x10 [ 807.014665][T26955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.014692][T26955] ? __pfx__printk+0x10/0x10 [ 807.014723][T26955] ? __might_fault+0xb0/0x130 [ 807.014767][T26955] should_fail_ex+0x414/0x560 [ 807.014802][T26955] _copy_from_iter+0x1db/0x16f0 [ 807.014828][T26955] ? tcp_leave_memory_pressure+0xea/0x100 [ 807.014854][T26955] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 807.014887][T26955] ? __pfx__copy_from_iter+0x10/0x10 [ 807.014917][T26955] ? get_page+0xee/0x240 [ 807.014946][T26955] ? sk_msg_alloc+0x8e9/0x980 [ 807.014979][T26955] sk_msg_memcopy_from_iter+0x360/0x710 [ 807.015026][T26955] tcp_bpf_sendmsg+0x5ec/0x1a40 [ 807.015070][T26955] ? process_measurement+0x3d8/0x1a40 [ 807.015116][T26955] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 807.015225][T26955] ? __lock_acquire+0xab9/0xd20 [ 807.015257][T26955] ? __pfx_aa_sk_perm+0x10/0x10 [ 807.015287][T26955] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 807.015308][T26955] ? sock_rps_record_flow+0x19/0x410 [ 807.015338][T26955] ? inet_send_prepare+0x5c/0x270 [ 807.015369][T26955] ? inet6_sendmsg+0x101/0x120 [ 807.015399][T26955] __sock_sendmsg+0xe5/0x270 [ 807.015432][T26955] ____sys_sendmsg+0x52d/0x830 [ 807.015461][T26955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.015491][T26955] ? import_iovec+0x74/0xa0 [ 807.015518][T26955] ___sys_sendmsg+0x21f/0x2a0 [ 807.015544][T26955] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.015610][T26955] ? __fget_files+0x2a/0x420 [ 807.015642][T26955] ? __fget_files+0x3a0/0x420 [ 807.015688][T26955] __sys_sendmmsg+0x227/0x430 [ 807.015717][T26955] ? __pfx___sys_sendmmsg+0x10/0x10 [ 807.015737][T26955] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 807.015801][T26955] ? ksys_write+0x22a/0x250 [ 807.015833][T26955] ? __pfx_ksys_write+0x10/0x10 [ 807.015859][T26955] ? rcu_is_watching+0x15/0xb0 [ 807.015889][T26955] __x64_sys_sendmmsg+0xa0/0xc0 [ 807.015914][T26955] do_syscall_64+0xfa/0x3b0 [ 807.015943][T26955] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.015973][T26955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.015994][T26955] ? clear_bhb_loop+0x60/0xb0 [ 807.016022][T26955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.016043][T26955] RIP: 0033:0x7f2aaed8ebe9 [ 807.016062][T26955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.016082][T26955] RSP: 002b:00007f2aafc9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.016105][T26955] RAX: ffffffffffffffda RBX: 00007f2aaefb5fa0 RCX: 00007f2aaed8ebe9 [ 807.016121][T26955] RDX: 0000000000000001 RSI: 0000200000002440 RDI: 0000000000000004 [ 807.016135][T26955] RBP: 00007f2aafc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 807.016149][T26955] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 807.016162][T26955] R13: 00007f2aaefb6038 R14: 00007f2aaefb5fa0 R15: 00007ffcf56ec128 [ 807.016197][T26955] [ 807.763071][T26989] sctp: [Deprecated]: syz.3.6468 (pid 26989) Use of int in maxseg socket option. [ 807.763071][T26989] Use struct sctp_assoc_value instead [ 808.178073][ C1] ------------[ cut here ]------------ [ 808.183944][ C1] WARNING: CPU: 1 PID: 23 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 808.185701][T27009] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 808.193332][ C1] Modules linked in: [ 808.193367][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 808.193395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.224060][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 808.224716][T27009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.229943][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 ea 95 bc f7 90 0f 0b 90 e9 95 fe ff ff e8 dc 95 bc f7 90 0f 0b 90 e9 bb fe ff ff e8 ce 95 bc f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 808.229971][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010246 [ 808.229997][ C1] RAX: ffffffff8a031662 RBX: dffffc0000000000 RCX: ffff88801d2fda00 [ 808.230017][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 808.230072][ C1] RBP: 0000000000000fff R08: ffff888033b4ee9f R09: 1ffff11006769dd3 [ 808.230091][ C1] R10: dffffc0000000000 R11: ffffed1006769dd4 R12: ffff888033b4ec00 [ 808.230111][ C1] R13: dffffc0000000000 R14: ffff888033b4ee84 R15: 1ffff11006769d82 [ 808.230132][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 808.230153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.230171][ C1] CR2: 00002000000023c0 CR3: 0000000063172000 CR4: 00000000003526f0 [ 808.230194][ C1] Call Trace: [ 808.230206][ C1] [ 808.230220][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 808.230276][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 808.230317][ C1] __sk_destruct+0x86/0x660 [ 808.230343][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 808.230366][ C1] ? rcu_core+0xc37/0x1770 [ 808.230405][ C1] rcu_core+0xca8/0x1770 [ 808.230439][ C1] ? __lock_acquire+0xab9/0xd20 [ 808.230496][ C1] ? __pfx_rcu_core+0x10/0x10 [ 808.230539][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 808.230584][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 808.230621][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 808.230663][ C1] handle_softirqs+0x283/0x870 [ 808.230694][ C1] ? run_ksoftirqd+0x9b/0x100 [ 808.400612][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 808.406146][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 808.411214][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 808.416306][ C1] run_ksoftirqd+0x9b/0x100 [ 808.421077][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 808.426262][ C1] smpboot_thread_fn+0x542/0xa60 [ 808.431334][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 808.436558][ C1] kthread+0x711/0x8a0 [ 808.440735][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 808.446263][ C1] ? __pfx_kthread+0x10/0x10 [ 808.450984][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.456266][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.461518][ C1] ? __pfx_kthread+0x10/0x10 [ 808.466179][ C1] ret_from_fork+0x3f9/0x770 [ 808.470925][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 808.476296][ C1] ? __switch_to_asm+0x39/0x70 [ 808.481112][ C1] ? __switch_to_asm+0x33/0x70 [ 808.485952][ C1] ? __pfx_kthread+0x10/0x10 [ 808.490658][ C1] ret_from_fork_asm+0x1a/0x30 [ 808.495499][ C1] [ 808.498588][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 808.505898][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 808.515140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.525241][ C1] Call Trace: [ 808.528582][ C1] [ 808.531529][ C1] dump_stack_lvl+0x99/0x250 [ 808.536142][ C1] ? __asan_memcpy+0x40/0x70 [ 808.540934][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.546162][ C1] ? __pfx__printk+0x10/0x10 [ 808.550798][ C1] vpanic+0x281/0x750 [ 808.555069][ C1] ? __pfx__printk+0x10/0x10 [ 808.559701][ C1] ? __pfx_vpanic+0x10/0x10 [ 808.564229][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 808.569464][ C1] panic+0xb9/0xc0 [ 808.573207][ C1] ? __pfx_panic+0x10/0x10 [ 808.577651][ C1] __warn+0x31b/0x4b0 [ 808.581650][ C1] ? inet_sock_destruct+0x623/0x730 [ 808.586963][ C1] ? inet_sock_destruct+0x623/0x730 [ 808.592198][ C1] report_bug+0x2be/0x4f0 [ 808.596675][ C1] ? inet_sock_destruct+0x623/0x730 [ 808.601915][ C1] ? inet_sock_destruct+0x623/0x730 [ 808.607319][ C1] ? inet_sock_destruct+0x625/0x730 [ 808.612564][ C1] handle_bug+0x84/0x160 [ 808.616864][ C1] exc_invalid_op+0x1a/0x50 [ 808.621397][ C1] asm_exc_invalid_op+0x1a/0x20 [ 808.626272][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 808.632180][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 ea 95 bc f7 90 0f 0b 90 e9 95 fe ff ff e8 dc 95 bc f7 90 0f 0b 90 e9 bb fe ff ff e8 ce 95 bc f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 808.651898][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010246 [ 808.658001][ C1] RAX: ffffffff8a031662 RBX: dffffc0000000000 RCX: ffff88801d2fda00 [ 808.666339][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 808.674330][ C1] RBP: 0000000000000fff R08: ffff888033b4ee9f R09: 1ffff11006769dd3 [ 808.682583][ C1] R10: dffffc0000000000 R11: ffffed1006769dd4 R12: ffff888033b4ec00 [ 808.690599][ C1] R13: dffffc0000000000 R14: ffff888033b4ee84 R15: 1ffff11006769d82 [ 808.698610][ C1] ? inet_sock_destruct+0x622/0x730 [ 808.703845][ C1] ? inet_sock_destruct+0x622/0x730 [ 808.709125][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 808.714359][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 808.720107][ C1] __sk_destruct+0x86/0x660 [ 808.724635][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 808.729765][ C1] ? rcu_core+0xc37/0x1770 [ 808.734215][ C1] rcu_core+0xca8/0x1770 [ 808.738508][ C1] ? __lock_acquire+0xab9/0xd20 [ 808.743434][ C1] ? __pfx_rcu_core+0x10/0x10 [ 808.748180][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 808.753411][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 808.758722][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 808.764145][ C1] handle_softirqs+0x283/0x870 [ 808.768937][ C1] ? run_ksoftirqd+0x9b/0x100 [ 808.773648][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 808.778960][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 808.784022][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 808.789079][ C1] run_ksoftirqd+0x9b/0x100 [ 808.793601][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 808.798740][ C1] smpboot_thread_fn+0x542/0xa60 [ 808.803705][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 808.808752][ C1] kthread+0x711/0x8a0 [ 808.812857][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 808.818337][ C1] ? __pfx_kthread+0x10/0x10 [ 808.822952][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.828175][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.833397][ C1] ? __pfx_kthread+0x10/0x10 [ 808.838007][ C1] ret_from_fork+0x3f9/0x770 [ 808.842626][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 808.847761][ C1] ? __switch_to_asm+0x39/0x70 [ 808.852557][ C1] ? __switch_to_asm+0x33/0x70 [ 808.857346][ C1] ? __pfx_kthread+0x10/0x10 [ 808.861973][ C1] ret_from_fork_asm+0x1a/0x30 [ 808.866807][ C1] [ 808.870176][ C1] Kernel Offset: disabled [ 808.874549][ C1] Rebooting in 86400 seconds..