last executing test programs: 3m16.570633748s ago: executing program 2 (id=3025): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3m16.340377985s ago: executing program 2 (id=3029): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x144, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x16, 0x8, "588249f3f00c48574c833585de345f062cd2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xcc, 0x8, "555ee4cb71db0921fe6d6813a0700badd8270dce3fadea19c5e3015794a107f8c6df61684562299abac8521d1c121863e71ac9ef281e42fd11739bc648ee9ea5b57eadffbb485a53cbe5992ee84e7530e18711c758cf59ba2d848540157527f16f6ef46aa4ec9d7bb8025c56de5ea290b517a7dac0cab54506e951a3bb11933c81d6c5a934b5a3ceed7bf4e23dc3ce8d71ade2dcd398a3d63558dfe7c22ec63547dc40a74ac7c3391aaa257c4285db2751a5ae6393d9793402953c880951b48b2248cf70460e0101"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x40055) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m16.016276594s ago: executing program 2 (id=3032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x1}) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x1}) (async) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) listen(r2, 0x5) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) (async) 3m15.750258238s ago: executing program 2 (id=3036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03002200000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 3m15.625041843s ago: executing program 2 (id=3038): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000102ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052) 3m15.550974539s ago: executing program 2 (id=3039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100736e6d705f7472", @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000380)={'security\x00', 0x79, "3c7a199bedefa9a87c53ba2299b70fc394741556d1fe0e6cf41ffb8bddc85b92ee8b2aa9e0bdc7067f3e3f29d2cfb56007296c0450e221e96e3e733e4d011db127988a626098770b003ef8cce2aacba1372b3d7c6a7c311abc44320e717c00f3fd1957136c7a176c3cf86e0639d03a011b9a59d9db337cb9ae"}, &(0x7f0000000440)=0x9d) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) unshare(0x20040600) unshare(0x4010100) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, 0x0, 0x0) getsockopt$llc_int(r7, 0x10c, 0x8, 0x0, &(0x7f0000001380)) 3m0.394850183s ago: executing program 32 (id=3039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100736e6d705f7472", @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000380)={'security\x00', 0x79, "3c7a199bedefa9a87c53ba2299b70fc394741556d1fe0e6cf41ffb8bddc85b92ee8b2aa9e0bdc7067f3e3f29d2cfb56007296c0450e221e96e3e733e4d011db127988a626098770b003ef8cce2aacba1372b3d7c6a7c311abc44320e717c00f3fd1957136c7a176c3cf86e0639d03a011b9a59d9db337cb9ae"}, &(0x7f0000000440)=0x9d) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) unshare(0x20040600) unshare(0x4010100) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, 0x0, 0x0) getsockopt$llc_int(r7, 0x10c, 0x8, 0x0, &(0x7f0000001380)) 2m35.997833624s ago: executing program 1 (id=3400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 2m35.533077458s ago: executing program 1 (id=3403): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x640080, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000006c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x640080, 0x0) (async) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000006c0)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) socket(0x10, 0x80003, 0x0) (async) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (async) 2m35.181584554s ago: executing program 1 (id=3407): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m34.800528085s ago: executing program 1 (id=3411): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x8400, 0x40500}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x6}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000007a0100007a000000030000000c0000000400000f020000000300000010000000050000000300000005000000000000000300000000000080ff010000040000000000000005000000fad41000000001000093010000000100000001040000080000000c00000000000009030000000000000000000003000000000002000000010000000000005f00"], &(0x7f0000000940)=""/130, 0x97, 0x82, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x10, 0x0}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x15, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @ldst={0x1, 0x0, 0x6, 0x6, 0x2, 0x8, 0x10}, @ldst={0x1, 0x2, 0x6, 0x7, 0x5, 0xfffffffffffffff4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x8, 0x0, 0x1, 0x10, 0x4}]}, &(0x7f0000000b80)='syzkaller\x00', 0x8, 0x33, &(0x7f0000000bc0)=""/51, 0x100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xd, 0x80000000, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[r1, r0, r0, r1, r0, r0], &(0x7f0000000c80)=[{0x2, 0x2, 0x6, 0x9}], 0x10, 0xa1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xb, 0x10, &(0x7f00000004c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @generic={0x1, 0x8, 0x6, 0x4, 0x81}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000540)='syzkaller\x00', 0x1, 0xaa, &(0x7f00000007c0)=""/170, 0x40f00, 0x20, '\x00', r4, @fallback=0x15, r6, 0x8, &(0x7f0000000a40)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x0, &(0x7f0000000d80)=[r0], 0x0, 0x10, 0xfffffff7}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x10001, 0x6, 0x7, 0x802, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x2e, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca1a, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x4, 0x8, 0x0, 0x8, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xc, 0xe2, &(0x7f00000001c0)=""/226, 0x0, 0x15, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x200, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r0, r0], &(0x7f0000000380), 0x10, 0x6}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r16], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x10, 0x8, &(0x7f0000000640)=ANY=[@ANYRES64=r12, @ANYRES32=r0, @ANYRES16=r13, @ANYRES32=r6, @ANYBLOB="df8a2606112b0270dba5694a0e3392a894347b03c5fa7a2f245a78887d9af09989abd0d998dcfb350eedc97327cf532f0839bc938c45d4968c451de32d560b8c70e361abc72d48cd119f3c2557af8f9cdfa52d3f5fa72b2d058a40385b1e45441ee9fbdb05e754341470880b8886b0710e0b2e71700765fd5965da955fab08c9d842ab1f1339d30f8105cc1b5af7613c4b067335f9c48a59fb9830f22770bd488ca572c7167308327e9cb4ead31dcf0b4b4d527816dcd37ced4d1c"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r18, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r18, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$kcm(r17, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000580)="c4d557cd10921971c04a0450947ff28534b6917959724354b13fbdd3b1df0d67d70db6adbaa5d4f78d8fd9e98c1749a8e784d69ba372984e5c905972e8648e715dfdecc5686b9d3d8fb659af404eaafdde8c836595121ed93b491cd6ca32f7b5d3027dc782c2e88d717ec09d032bdb9186ea28077770288f05072fa5", 0x7c}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, &(0x7f0000002500)=[{0x70, 0x117, 0x24, "9a3532f38ce9d3f05dcbe8996ff173497b6f36ea92ce6c200fe9d71017a5d468c8bff2ab818fdd0018887e0db02b803b97e5af1f435f57feadb46654dc93ab6abfe13a13293343e2ae591d672ccc0d0ce8ff5e276cdd6e7a5a4a254c9dc3"}], 0x70}, 0xc0) 2m34.463944993s ago: executing program 1 (id=3416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000000ffffffff170000006c00028008000100040000003c000380080001005ed500000800010000000000080001000b00000008000100fdc6000008000200000000000800020004000000080002000600000024000380080002000104000088000200c601000008000100060000000800020002000000"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2m34.210150728s ago: executing program 1 (id=3421): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x3b, 0x10, 0x70bd29, 0x25dfdbfd, {0x7}, [@typed={0x8, 0x96, 0x0, 0x0, @str='GPL\x00'}, @nested={0x22, 0x30, 0x0, 0x1, [@nested={0x4, 0xa4}, @generic, @generic="12f2c0d41c8d46a86737ed9b484a80aec50a", @typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x4008841) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000007050010000400000008001b000000e0"], 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 2m19.102991015s ago: executing program 33 (id=3421): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x3b, 0x10, 0x70bd29, 0x25dfdbfd, {0x7}, [@typed={0x8, 0x96, 0x0, 0x0, @str='GPL\x00'}, @nested={0x22, 0x30, 0x0, 0x1, [@nested={0x4, 0xa4}, @generic, @generic="12f2c0d41c8d46a86737ed9b484a80aec50a", @typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x4008841) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000007050010000400000008001b000000e0"], 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 2.433510801s ago: executing program 5 (id=5128): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x100, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.35266981s ago: executing program 5 (id=5130): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000000)={0x7af0726, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7, 0x7}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x210040, &(0x7f00000000c0)={@align=0x3, {0x1, 0x2, 0x1, 0xffffffffffffffff}}, 0x100, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xa1f}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x140a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x18}}, 0x44004) write$tun(r2, &(0x7f00000002c0)={@void, @val={0x3, 0x1, 0x8, 0xf, 0x7fff, 0x1d8}, @mpls={[], @ipv4=@esp={{0x13, 0x4, 0x3, 0x5, 0x2478, 0x66, 0x0, 0x26, 0x32, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xb, 0x5a, [@remote, @remote]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0x1, [0x5, 0xfffffffb]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "a0eba8415242006701cdd8b131d2e5"}, @lsrr={0x83, 0x7, 0x15, [@dev={0xac, 0x14, 0x14, 0xe}]}]}}, {0x4d2, 0x0, @basic={0x0, 0x0, 0x9, [@runt="b7d7a36fcca627ec9df1907568ce271847", @ipv4=@esp={{0x20, 0x4, 0x2, 0x2, 0x3a6, 0x64, 0x0, 0x7, 0x32, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x0, [{@local, 0xb30a}, {@multicast2, 0xc}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0x8}, {@broadcast, 0x8000}, {@empty, 0x8}, {@empty, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x7, [{@private=0xa010102, 0x9}, {@local, 0xf}, {@remote, 0xa3}, {@multicast1, 0x5}, {@multicast2, 0x2}]}, @noop]}}, {0x8, 0xfffffffc, @cc={0x1, 0x0, 0x6, 0x0, 0x1, 0x6532, 0x5, [@ipv4=@esp={{0x12, 0x4, 0x1, 0x1, 0x5c, 0x65, 0x0, 0x3, 0x32, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x68, [@private=0xa010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1f, 0xc3, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @local, @rand_addr=0x64010100]}]}}, {0x4d5, 0x6, @basic={0x0, 0x0, 0x8}, "6712422942e9", 0x6}}, @ipv6=@tipc_packet={0x4, 0x6, "b6e462", 0xb5, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, {[@srh={0x89, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x3a, 0x0, 0x4, 0x0, 0x9, 0x18, 0xb9e}, @fragment={0x2e, 0x0, 0x7, 0x1, 0x0, 0x0, 0x67}, @routing={0x73, 0xc, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, @private2, @empty]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x86, 0x0, 0x0, 0x3, 0x5, 0x3, 0x9, 0x7bff, 0x3, 0x4e24, 0x4e22}, 0x2, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, @runt="a82566a32b2b53024f7fc8a36d1f4936bb764a43a77a7c94c56aea1a4032c9c87a262f820aa036d4c2f3380f924d3b312f5969c4ac49ddf4e5", @ipv4=@icmp={{0x41, 0x4, 0x1, 0x3, 0x17c, 0x67, 0x0, 0x96, 0x1, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x83, 0x1, [{0x5, 0x7, "28c7ecc4e8"}, {0x5, 0x8, "5fbcf7861f3d"}, {0x1, 0x8, "b340e3c0fcb0"}, {0x0, 0x12, "e46e37dfab95edb0fa5a94be2c185857"}, {0x6, 0x5, "6de257"}, {0x1, 0x11, "88b0cb9ebce2a7e3f6751c759fe451"}, {0x7, 0x12, "abb5183c4cdf2f94969c043998aeb8e6"}, {0x2, 0xe, "1a925ccfa02a394a1ed2fe40"}, {0x5, 0x11, "8151645674e6edc0af3f0d0147e6b2"}, {0x0, 0xd, "6259971eed4db5062eae02"}]}, @lsrr={0x83, 0x1b, 0xd6, [@loopback, @multicast2, @empty, @multicast2, @empty, @broadcast]}, @ssrr={0x89, 0x13, 0xb1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @empty]}, @rr={0x7, 0x2b, 0xba, [@remote, @empty, @broadcast, @broadcast, @rand_addr=0x64010102, @multicast1, @private=0xa010102, @loopback, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@loopback, 0x3efd}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x59, 0x25, 0x0, {0x1a, 0x4, 0x0, 0x12, 0x1, 0x65, 0x9, 0x2, 0x21, 0x8, @multicast2, @broadcast, {[@lsrr={0x83, 0xf, 0x28, [@private=0xa010101, @remote, @multicast2]}, @generic={0xe, 0x7, "9c10a77678"}, @timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x2, [{@rand_addr=0x64010101, 0x3}, {@local, 0x80}, {@empty, 0x9}]}, @ssrr={0x89, 0x13, 0x74, [@rand_addr=0x64010102, @loopback, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x51, 0x3, 0x9, [{@remote, 0x2}]}]}}, "e36e89cebffa07bc"}}, @runt="36564f14783383fc9700bb10e896f48caa6b1f8e"]}, "65aa", 0x2}}, @ipv6=@esp={0xf, 0x6, "e25b5c", 0x3ce, 0x32, 0x1, @remote, @mcast1, {[@fragment={0x2c, 0x0, 0xf, 0x0, 0x0, 0x1b, 0x68}, @dstopts={0xf4, 0x5, '\x00', [@ra={0x5, 0x2, 0x400}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x3ff, [0x3, 0x7, 0x0]}}]}], {0x4d6, 0x9, @cc={0x1, 0x0, 0x101, 0x6, 0x1, 0x2800, 0xb1e, [@ipv6=@udp={0x8, 0x6, "166984", 0x20c, 0x11, 0xff, @loopback, @mcast1, {[@fragment={0x67, 0x0, 0x4, 0x0, 0x0, 0x15, 0x65}, @hopopts={0x2e, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x0, 0x18, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x28, {0x1, 0x8, 0xd, 0x8, [0x100000001, 0x1ff, 0x3, 0x5d0a]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @empty}, @generic={0x4, 0x5f, "1c73db7e46dfd58d5ff2d72b70d571034d8a2aac39935d4d9ef942cf9b7773f2966b0280d75f2807e6c52ae39bca09591de03e2d03fd37c198577ac1a73524efb33496b2b7523ce510fded380480daa627787452c7ff3f458fdb3cc15f792d"}, @jumbo={0xc2, 0x4, 0xc}]}, @fragment={0xa3, 0x0, 0x9, 0x1, 0x0, 0x16, 0x67}, @srh={0x0, 0x14, 0x4, 0xa, 0x5, 0x40, 0xfffc, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @remote, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x0, 0x0, 0x9, 0x0, 0x0, 0x1c, 0x66}, @fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x4, 0x66}], {0x4e23, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "726f96022910c54b838abe44af8a9532f01237908a91801da0c90d68c9506027", "b42f88a81f0a470f3d4804aa56750666", {"500cdd001aabffdfbd739f4cd4a32f98", "b5c97f6de0627dfa5f3a6241b0118085"}}}}}, @ipv6=@generic={0x3, 0x6, "f569bd", 0x109, 0xff, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, {[@dstopts={0x2b, 0xc, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x8, 0x10, [0x7f, 0x3ff, 0x3, 0xe, 0x9, 0xfffffffffffffffc, 0x2, 0x5, 0xffffffffffffff59, 0x7fffffff]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @routing={0x8, 0xe, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2]}, @routing={0x62, 0x4, 0x0, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2]}], "ea"}}]}, "1f10ed3d56af52", 0x7}}}, @ipv6=@esp={0x8, 0x6, "b780a2", 0x1c47, 0x32, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[@srh={0x2e, 0xc, 0x4, 0x6, 0x22, 0x20, 0xf, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback]}, @dstopts={0x4, 0x208, '\x00', [@pad1, @generic={0x3, 0x3d, "1b87ccf155a4c5135a02e77d51bc6126f5550d1a1fcf884fed188e2aac9b323c92a730e420db4c851b1a912b4d199d7a53f6c514a1188d35f645aff9a1"}, @generic={0x7, 0x1000, "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"}]}, @routing={0x2, 0x6, 0x2, 0xf9, 0x0, [@local, @private2, @mcast1]}, @routing={0x6c, 0xa, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x11}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x3a, 0x5, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xb}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xb}]}, @hopopts={0x5a, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x3, 0xc1, "ee243ac28a08534c566004402dbcb7e06f871cd40844b502bcfb679e0f3adb7835157811103fe767ae8ab1ee9e016b1409d7afc1c2dd4437b72e8ba26ff961cc365d554fed79bbc302c1a221f2e28c31c5a289335135bd44749c033e35351693596297b51ad82a9d992bd499ce80873420c7025818f9f2dad9b45b159dde1216bc35b056657659a8c823e3b3d5f2048e80bc1a5fff1a545f52abdb3daa97726cfd678c0d2a7ed725e73ef31781aaa5ad20b3e4cca7f438cd7f7813057b7f035200"}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1}]}], {0x4d2, 0x6, @cc={0x1, 0x0, 0x7, 0xfffffffb, 0x7, 0x9, 0x101, [@runt="de5fd39df569f8e607de46b1b21f", @runt="a45c3286f3a2aad932f8434862ecff586105c0cac1cdc3f5b48c031ec22b035c7de9619d944d1121d48490adc295", @ipv6=@icmpv6={0xc, 0x6, "152c36", 0x5b3, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @local, {[@dstopts={0x73, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2000}]}, @fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68}, @hopopts={0x62, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @hopopts={0x2b, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xd6}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}, @fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x5, 0x64}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x5, 0x0, 0x7, 0x2, [{0x19, 0x15, "a49c6f3b66e99a146441ffcdb81b5566c0936064ad4b40447383f61e976db08b309be5cd0fa65e53c6fb501f5e209b816bb6a3ed8043f3ef25e7f7d791d7b8e5f759fd05b4e9dc6c63173b89530e52ee066d848aba25c9b0942c20521f6f204c3ce82eff5e004776ece663d4bd4a5314db8ab466b963ecb582bee03e754733833d98d6ce732c0ab2dd204679e35e368ee41af23719bf4a20ab5ded16026c81221fb3cf7e2363bcb8"}, {0xe, 0x8, "e4ec41a4f495069904db87802eabd98a0190bcdcea5d9d1ed588c1065dcbb8d76e74b2a88ddac8277c6deb6fbaf0b86d60fb4729c33589111a76f63754e0427c271d"}, {0xe, 0x1d, "d43fb1611cdeb91075484efd18bfc88e788b2e1d3e3a8b53c805e64e33e2a7635027228fc0d7f2a05a497e413e0512cdff24111a782feb16e5c390ab1ae920109ce01270c48eb99abea91db82dd32581a9498809d2e0aeba2a80571db8f5b12cf527da18fdb862f88809eb1d7d8492a4cb4de19575af35453ea9991fb60c5f329d3ce0e5cc6ab204fc0634641595d45dbf1f3c75618b18a83f77cca084d527d432cb7c9fed096f97eb39aca746f69497a9abbd40aaff38d6f111cfe148ea2112ee4eb32ee894e7656f1b0ba79c695e815937b372a81f7e58876caad36fa8e13326ee8985e7ff05df1d782c0e4a"}, {0x3, 0x3, "1a0a78e8299d75c95a381d1a91f43ebded50e096a31b5c18bff9e1"}, {0x19, 0x14, "77a41ea7ab5f50206a71f2c71b2cb33c91a10cfcc73b5da98401fc7d99a609e8ab930c194eb48d2c963058866b1e7ffe821ca2ad8b08626d9e4b88af6b988696810be01e36e6cfd8f23b8f9650c76d6d35d3fdd862cf1cc7581fde4b415a69dae6b5d4b85f489d4c822bd0d3e83ed1d7b30d1de6d06e457eedc6b3be85643731042a8b4e8567bdd75296d9c74de507334df363d08d36d0caa638be034195e3b828"}, {0x18, 0x15, "3031001b5d483dd8de92ca6e58222efafee1a7ea6889db341602a5df3b794aa5c00d56cc4a37dbf693b11e66b2dcc50580a2e2d4ece5040fcffeca5e3b6d01931f4664d65a906b2709310ce5694bbd2899d95b80d6499825e029a0227b8f5c010c55007b9b6aade7234c502e2037683b3b7e088fc74fdc33100849797a717ae4ea844c2879eb8416c4d964006c1496de50621f4173fc6256d4dfc498cacb15c7e05ca7395cee"}, {0x0, 0xe, "3b1b566784e3e898bbca07227ee5aba8c127c6de481e4faaff832f7364ea29b2d9562e02dd8adb5294f9cff7f95949069f2302a9611a60670dd64f9e98d5fbbfbdc54af7a21feaab78178211d5efd913fcad8d51e55389bf5765b42b1caee0718a39a0ca710f24b5c3a4e7aa29d24e8ec80fad02bc"}, {0x1, 0x11, "a56ac00081b5a9db41aeafbb56e2b48c6a7351571fc9c6a629a9668a55c9b707b862a3fcd96d62497419a8d916dafc7f064eabd20869e2d77b1b9e7183fa6e6f24fcc60d75100692969b039d75b381d4d21e1f9043caa9b68ce13baae35f3bb6b5d9611a100e2897f39d882f0194bce943069f203dc18d9ee2def1166e7cb136b1b94fa6b47567b4"}, {0x4, 0x1e, "365ec3e3be714893e3c6b5b7a44e598a82e534d5bb764db4bdee023bf2a251a67d1dd57c4c95bdbff2a4e38f0a210bab1a64ed77f8db65a94dae0a0cceb8acefbc41e8252e5707a0dcfb30c77b11263a0f684a7e4324ad11d5105d6eacaba99ea3a60f95f69496454399e968be914f86968d257c01865babaee01b473b3b77befe5fecdc9bc42b0c032e42fe8501522fa9017172a79e4a829953ddfa730dc214cdf89c9b1acb3ef12fe83c1b4ad9d9323844bdde2c3e9c77c2050676197f186e63f84a5813c8b3544c80dd3c5c11f341feb9b0c9b1d1afaa7d857c9261de8cb84b21bac4a860e56f4a959886bdce93d7ee4d55"}]}}}, @ipv4=@tipc={{0x26, 0x4, 0x1, 0x4, 0x1bc, 0x67, 0x0, 0x3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0xb, [{@multicast1, 0x9}, {@multicast2}, {@empty, 0xb}]}, @lsrr={0x83, 0x17, 0x5a, [@rand_addr=0x64010101, @multicast2, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x2e, 0x0, 0x6, [0x8000, 0x8, 0x6, 0xffff7fff, 0x400, 0xffffffff, 0xe, 0x4, 0x4]}, @rr={0x7, 0x7, 0x37, [@multicast1]}, @generic={0x7, 0x7, "e26d8f2cba"}, @timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@private=0xa010101, 0x4700}]}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7, 0x0, 0x1, 0x7, 0x3dfc, 0x3, 0x4e21, 0x4e23, 0x4, 0x2}, [{0x1, 0x80000, 0x0, 0xf, 0x8, 0xf, 0x3, 0xcb1d}, {0x6, 0x9, 0x0, 0x81, 0x3, 0x6, 0xe, 0x5}, {0x2bf3, 0x0, 0x1000, 0x8, 0x1, 0xb, 0x3, 0x7}, {0x7e2c, 0x6, 0x3, 0x7ce3, 0xfff, 0xa, 0xe, 0x8}, {0x0, 0x6, 0x5, 0x3, 0x8001, 0x2, 0x2, 0x7}, {0x1ff, 0x0, 0x9, 0x9, 0x40, 0x6, 0x8, 0xd}, {0xe1e, 0x7, 0xfff, 0x6, 0xc8, 0x7, 0x0, 0x1}, {0x1, 0xaf, 0xc50, 0x5, 0x8, 0x9, 0x4, 0x7fff}, {0xda, 0xffff, 0x1, 0xc, 0x4, 0x800, 0x1, 0x3}]}}, @ipv6=@dccp_packet={0xb, 0x6, "f1a16c", 0x128, 0x21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@hopopts={0x87, 0x4, '\x00', [@pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x9, 0x9, [0x10001, 0x8, 0x2]}}, @generic={0xd3}]}, @srh={0x32, 0x4, 0x4, 0x2, 0x4, 0x40, 0x4, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x84}, @srh={0xea, 0x6, 0x4, 0x3, 0x7, 0x48, 0x3, [@private0, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x0, 0xa, 0x4, 0x5, 0x7, 0x8, 0xb0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x87, 0x0, 0x4, 0x0, 0x7f, 0x40, 0x3}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x5, "44b231", 0xc, "f5e444"}, "c8111a5029ae34cc72df650a32e07eea1e6fbe9d54ae608040aa498550928893"}}}, @runt="5baa69d178e83a55a95ed66dfc5b842ffa198a8058a31fab81ecc36123b1ba87", @runt="d0d4e6e618f9d842173881ad425e8107efb1620985b80bb41ffe63b496cc2a729cc37ccee166a8a871d3e08f4950de14b7285443664a", @runt="f8e6284c5f9cda642d29c2e4024284f14624e0ef4e8b8b82ff42f77c97"]}, "79e2d64f705f01", 0x7}}}]}, "5097", 0x2}}}}, 0x2482) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000002780)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x6, 'dummy0\x00'}) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000002880)) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80c0018}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000029c0)=0x2, 0x4) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf95}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000}, 0x10001) recvfrom(0xffffffffffffffff, &(0x7f0000002b40)=""/170, 0xaa, 0x2003, &(0x7f0000002c00)=@pppoe={0x18, 0x0, {0x2, @local, 'erspan0\x00'}}, 0x80) r3 = accept4$unix(r2, &(0x7f0000002c80)=@abs, &(0x7f0000002d00)=0x6e, 0x81800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000002d80)=[{r1, 0x80}, {r3, 0x50}, {r0, 0xa500}, {r5, 0xc189}, {r1, 0x9240}, {r0, 0x4100}, {r0}], 0x7, 0x8001) r6 = openat$cgroup_ro(r2, &(0x7f0000002dc0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000002e00)={@void, @val={0x1, 0x1, 0x9, 0x6, 0xd, 0x6}, @x25={0x3, 0xe, 0xf3, "f02473"}}, 0x10) bind(r4, &(0x7f0000002e40)=@pppoe={0x18, 0x0, {0x2, @empty, 'team0\x00'}}, 0x80) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000002ec0)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000002f00)={'netdevsim0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0xb0, 0x464, 0x800, 0x70bd26, 0x25dfdbff, "f3ccd120bd64d0e8c08437c007e6d364b5b5e961b7908616de91209314144c867103072694d05114a0dee92040dc86d4b833c1bb1ec911122cd04fd7cf93b072e44a8a6e99cb0d52e8164b85f43aceca8ead5b211a65a4ed3671a43f9eda970102a9140a7a2abed7c344623d678099dbbcb6a94c0307487c0f5d7b5aa8922e12c4e33c75274e8a4e3cc99a5fa9ee3b9558f96f936705e0ea8f2cbdd2bd4a", ["", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x20008014) setsockopt$inet6_buf(r6, 0x29, 0x22, &(0x7f00000030c0)="5a15a834fb5a2dbac3987fd8906159c72def6013ef4b86af76859a68d7e50f9bb3749ef8f100ad95d1da4d67defb47487f1493c1d7d69dd74b008050635c9d29050fda6924a0fe8cf6a9d090a67db232f4773c81e56e3adac78f4104de6a6dafa09b9809532196b9083caf66059e9c10bdadf2fe9acad205592a036915afcf66f6c245ab9a42211cde3cc0", 0x8b) bind$bt_rfcomm(r2, &(0x7f0000003180)={0x1f, @none, 0x8}, 0xa) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) listen(r3, 0x7) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) socket$tipc(0x1e, 0x0, 0x0) r8 = accept4(r4, 0x0, &(0x7f00000031c0), 0x800) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000003200), 0x3) 2.198696899s ago: executing program 6 (id=5134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffff"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa85c90ad3ef8e822d04ce6f932aaaaaaaaac08df363241e6509ddd0bd9d278eb7485fa2280600fe880000000000000000af0300000101ff020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312ddea838291c44740f730164d633c54"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00'}) r7 = socket$rds(0x15, 0x5, 0x0) bind(r7, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x4, {0xa, 0x4e24, 0x8000, @local, 0xce}}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}}, 0x44010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0xffffffffffffff79) 2.145801654s ago: executing program 5 (id=5135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000300), &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) 1.748703258s ago: executing program 3 (id=5139): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="0200000000000000000000000000000061106f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3, 0x3, 0x4a, @mcast2, @empty, 0x1, 0x10, 0x5, 0x7}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0xd, 0x0, 0x834f, 0x1074a4b7f3dd1789, r1}) 1.717424676s ago: executing program 3 (id=5141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002a80), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x24, r4, 0x821, 0x70bd25, 0xfffffff7, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x64000}, 0xc040) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r5, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000004f80)="ef66f2dd78c79ea63ba182c99f4c6c80ded85f864557859c91c67e232da846c2a249fea1f722922ee8531756c2921c86b4463b1a183d188ad8619668bd11", 0x3e}], 0x1, 0x0, 0x0, 0x4008004}}], 0x1, 0x4000801) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="60b80000", @ANYRES16=r0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES16=0x0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005", @ANYRES16=r0, @ANYRESOCT=r5], 0x60}, 0x1, 0x0, 0x0, 0x4040050}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0x8}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r7) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.695576996s ago: executing program 6 (id=5143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.589488624s ago: executing program 3 (id=5144): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x89e1, &(0x7f00000000c0)='lapb0') sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000940)="1a51b561b55e5d1f6b1259b3d9a0f78ebc53bcc2ec44521ddeeff987f8cb32c93340ca81d7a8eb9b42de63a07f1220dc7c8a26e97090eb98ceebbe6f5d2c132b78de3b854cc303ba40ce80a72298f4b5b00afe1f536b1af503088ed7b4ea60cc8e2ca70b0d84689c5adefd3700786b89c40ec9f4db54c59608ce363af097c3e673b6fd1172ffd5f6531d5e8e895b2872", 0x90}, {&(0x7f0000000a00)="9ed857f9f4a1df3cd9400283d56a1321c4e63a133e09df17da0c7117a845c3e1a5a5c42b05c681985c24639e5990ff0a4202d7c1e120703bdf36701de74dbccc711d5204e2e03ed26a1338a6a95132101fbe7c46d0ecbb6511a0dc20ea622e9b57b86c1c172091c3bc23d866204d16153aae93936073fcef37592e205dbfede19496813a0821d94d57e16f0f4136a0138a12c01651c4f7bd5b22b4d1280e8dc29af7af364bbfe5c02cce6761701934254bc9dd2f789e806325560d4348ef31d608", 0xc1}, {&(0x7f0000000b00)="f7", 0x1}, {&(0x7f0000000b40)="2bcea9d4cc086da2bbd8245d3db540d815bc7b4f8ca6d632f31781c86415bd348e339023eddfcd426261a594e9b60d0504f989d2eea03a0f752f3242cb941cb009b6b83dc6ca42e9f9ddfa85c8da8495d6d7d6464c9a665f4414ae6f83adf0cb9cb29f09bc51c935d6056ebd45ab1c9893274e6933cf66aba1f9ba34a2d5eef2fa4ad8cd55c468a644320f7cc7d58811bbf37976af3b44853181dd2b04fa2a1aee2c229834e0bfd5d9b9452ce65ef92194d540fd27bdabeacdd773040d1c762a062c745b0c7bfcac", 0xc8}], 0x4}}], 0x1, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200031000000003070000fcdbdf25060009001001000053bb467d04f14562c5d163273ef4a720564f485a5a703fd40c3075e50a5d8c36195600000000000003000600000000000200100000000000000000570000000002000100000000000000020d00000000030005003300000002"], 0x80}, 0x1, 0x7}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.476665998s ago: executing program 6 (id=5147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000002400000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) 1.458693066s ago: executing program 0 (id=5148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002002100000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$nl_netfilter(0x10, 0x3, 0xc) 1.317191485s ago: executing program 0 (id=5150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140), 0x4) (async) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000000240)) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x5e, &(0x7f0000000200)={&(0x7f0000002680)=ANY=[@ANYBLOB="138bcb38ed522cd0687a344bf98c73f97d0bd0d9cc4a49675e835fa802303eb585d2c7a25afda8b7934199801e5269a93659d1271f34ad0231f772ea121df5e32d"], 0x34}, 0x1, 0x0, 0x0, 0xc008070}, 0x2c040014) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x5, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000001c0)={r5, 0x62, "977d0b66d162cd9b02a8ed00832a85b18c1822a9203e301f9b8cb40b8005e2ff26d3407b9281b6814ede7b5c077365c3bc704f3718d0cd4ad814c356af7dc9f4b6e00ef91a2ed64f60a33e6613054ecb96e55dee3b96c773adc87410d4cf9abe8e3d"}, &(0x7f0000000240)=0x6a) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000002640)={&(0x7f00000002c0), 0xc, &(0x7f0000002600)={&(0x7f0000000380)={0x2250, 0x1c, 0x100, 0x70bd2a, 0x25dfdbfc, {0x20}, [@generic="35420399dcf0b4352e921282003efaa4c16b4a9ac22a780edb74d95bc0e028e9aab00cea7f4680654ec5e859cb4528827cde81d2e9eef6eff49b1f5916b7736eaec6836977d4b492fe6a494923913eb0e8c3be92bcc599fb661b0add0a1c919d00ac4e3bda8363b87b6fe0b3053a4e0cfeb2748e777dfeab893427a441af450f159a4458eac1dca05d8175db", @typed={0xbb, 0x15, 0x0, 0x0, @binary="aa362a61396c7146b8235addfc2c378fb1eb057298fea93fb8ce24770fbb5fb4c53121153c8122d41936be2752ddeabd6d32c6437c9728f900442583265f808523a6f81f896860d490606eab694c77c8b22ba29a6c43904a6c502a1375732160dcd9bada1cfaebb2f557d889a06c84c1b1c5ff78b4b17eeaa6e115637af33036f5a0e6123c2890c3af4316e06d6eb710340654ce22a285a918f2423fd8a5ac3b95c82574d06c733c23d3226d0a25c79878e41a737a1a10"}, @generic="4d7d76246db533c3c0544b9424ca94113f6be21b0ea58a7e0ea5769cd1dc", @generic="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", @generic="8274faf84d40a2e241fff21ae8cf80dea5dee324683a9a74e18332d83cda6cc611b27e5aaeec25acbd3be12cad719aa52de91f48243c467075ed61f964600ef4763de3cb4aea9d58200118a2219ab9b28fb790dde140a66a36e76621169cc3422fc2fbb5f6223d0b645ae48bae796f2a8f44deccd7a619291e043d8a5745a9865f58dc7339a507e4959d7c1d1f8ceefb0fd333f3dcc9ee75c5e420bdaf82b1449ca2391350e1744a8f25b1ebbc5d2ce1c104c1240a504991b46b8adbb26f1c383fdec0ea0f79", @generic="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", @typed={0x5, 0x13b, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@loopback}]}, 0x2250}, 0x1, 0x0, 0x0, 0x4000001}, 0x4811) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000870800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYBLOB="2f5707154953fd449f92f61c0d0059de91d75c11d9fddb7b78064f03b243e8bfe39945e39568b8c0fb42ae3e61f89b8a3d25f96b80c4396db52c1880a730890dca32ebac8bf3ebc676dcb14bf0335219efe767ca0953a48509dc758a3e18ad02e3698c6106915fa93d3fc0309a80b3aaa832f6bfac1e9c4d0a2b1acd3bae6ed6f75f9525507a7d1714bbee9cf4b8a7e15c9725ce6dba91a378764596a58ec8d6674c34ad91a22b576d5fb5d88682", @ANYRES16=r3], 0xfe33) 1.274566223s ago: executing program 6 (id=5151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000090100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) 1.092560736s ago: executing program 5 (id=5152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) (async) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000040)) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x454, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xaf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62f4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @loopback, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x41}, 0x5}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "fdc72845c864923e04d309ffcc1fb03d95fca2c7386903c283494789bf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff9fc}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0b6f670adabbc1da3d4be70eeb1cd4f7f837642831aa"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "d6188baa1124472efbb5dc205f8bc4ec97303bd8b9dea84d6c82d42647567727880e"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0ccdad71200c4e4d1bef2088a1b87d8227174bf3deb192a5b167e7cc7d238ffd1f0603"}}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() (async) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(des3_ede-generic)\x00'}, 0x58) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={0x0, 0x13}, &(0x7f0000000880)=0x8) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f00000008c0)={{r3}, 0x0, 0x2, @unused=[0xf5, 0x7ab, 0x401, 0xffffffff], @subvolid=0x8001}) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000018c0), &(0x7f0000001900)=0x4) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010000}, 0x20004050) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000001a40)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f0000001a80)=""/213, &(0x7f0000001b80)=0xd5) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001bc0)={r8, @in={{0x2, 0x4e20, @local}}, 0x5, 0xf271, 0x6, 0x5, 0x2b, 0x705, 0x5}, &(0x7f0000001c80)=0x9c) (async) r13 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001cc0), &(0x7f0000001d00)=0x10) ioctl$SIOCPNADDRESOURCE(r13, 0x89e0, &(0x7f0000001d40)=0x8) (async) r14 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_SET_FEATURES(r14, 0x40309439, &(0x7f0000001d80)={0x0, 0x1, 0xc}) (async) ioctl$sock_SIOCDELDLCI(r10, 0x8981, &(0x7f0000001dc0)={'pimreg\x00', 0x200}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001e00)={r12}, 0x8) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x70, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0xc010) 1.092238045s ago: executing program 4 (id=5153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffff"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa85c90ad3ef8e822d04ce6f932aaaaaaaaac08df363241e6509ddd0bd9d278eb7485fa2280600fe880000000000000000af0300000101ff020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312ddea838291c44740f730164d633c54"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00'}) r7 = socket$rds(0x15, 0x5, 0x0) bind(r7, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x4, {0xa, 0x4e24, 0x8000, @local, 0xce}}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}}, 0x44010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0xffffffffffffff79) 1.062881135s ago: executing program 6 (id=5154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000600)=""/114, 0x1080002, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x2, 0x8000, 0x6}, 0x50) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xb4, &(0x7f0000000540)={@broadcast, @random="e24d2313ab04", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x13, 0xa6, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x92, 0x0, @opaque="0c0b4e4008b046459ecac9000f5fb6c2476b185d3abeaf88744b239c4864b21e7170edf7d18d1b75fbb4241a4c41d4b324d77d211d43ab08cec613ea4952440f044f577dbcec7a9a5975cff98e5980ee69b9c35e38d8b1c711718478b1fc546f59a98ddac2fad7a76d91fc1bbacc740c772d22aae2c19c86fb1d8cae72b53cf83f40444841d90475f7e3"}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async, rerun: 64) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x4, 0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)=""/17, 0x11}, 0x80000000}], 0x1, 0x100, 0x0) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@private0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) 899.377233ms ago: executing program 3 (id=5155): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 849.32946ms ago: executing program 4 (id=5156): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0018"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x24004000) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) 804.697625ms ago: executing program 5 (id=5157): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000800)='//H', 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) setsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f00000001c0)="520222171935f335f1e859e48843f49ecfabe6b7aa722b66173da5cfcfd393c7d2070bbb91ab1ffa5da786cc4db054006fd676484e513462d69932ded722da3375df83a1748971fa20cecfc3ab09095aad8df77320aa60a2395a9b1c2ef04ac3a39350293363d331ab4061e904586bc47e737a30bc4eb214f6d15c3ebdf02fe04e78c21c2c3a0352e3c22402e8ecce7ff6", 0x91) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a801800038014000500070080040800416a0180d10003000100"], 0x38}}, 0x0) 804.46349ms ago: executing program 0 (id=5158): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x188, 0x10, 0x713, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x33}, @in6=@empty, {}, {}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus640-sse2\x00'}}}]}, 0x188}}, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 752.642448ms ago: executing program 4 (id=5159): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ppoll(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000ed14001d23996e29350064756d6d7930000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000ed14001d23996e29350064756d6d7930000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'geneve0\x00', @remote}) write$tun(r5, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 716.343834ms ago: executing program 3 (id=5160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002003f00000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$nl_netfilter(0x10, 0x3, 0xc) 566.606661ms ago: executing program 0 (id=5161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000004100000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) 548.082031ms ago: executing program 3 (id=5162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x503, 0x70bd22, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x2400c000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 451.291ms ago: executing program 0 (id=5163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x1}}}}, 0x30}}, 0xffffffffffffffa1) 400.887539ms ago: executing program 5 (id=5164): openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x4000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073030000000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="60060202"], 0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 389.925253ms ago: executing program 0 (id=5165): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x89e1, &(0x7f00000000c0)='lapb0') sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000940)="1a51b561b55e5d1f6b1259b3d9a0f78ebc53bcc2ec44521ddeeff987f8cb32c93340ca81d7a8eb9b42de63a07f1220dc7c8a26e97090eb98ceebbe6f5d2c132b78de3b854cc303ba40ce80a72298f4b5b00afe1f536b1af503088ed7b4ea60cc8e2ca70b0d84689c5adefd3700786b89c40ec9f4db54c59608ce363af097c3e673b6fd1172ffd5f6531d5e8e895b2872", 0x90}, {&(0x7f0000000a00)="9ed857f9f4a1df3cd9400283d56a1321c4e63a133e09df17da0c7117a845c3e1a5a5c42b05c681985c24639e5990ff0a4202d7c1e120703bdf36701de74dbccc711d5204e2e03ed26a1338a6a95132101fbe7c46d0ecbb6511a0dc20ea622e9b57b86c1c172091c3bc23d866204d16153aae93936073fcef37592e205dbfede19496813a0821d94d57e16f0f4136a0138a12c01651c4f7bd5b22b4d1280e8dc29af7af364bbfe5c02cce6761701934254bc9dd2f789e806325560d4348ef31d608", 0xc1}, {&(0x7f0000000b00)="f7", 0x1}, {&(0x7f0000000b40)="2bcea9d4cc086da2bbd8245d3db540d815bc7b4f8ca6d632f31781c86415bd348e339023eddfcd426261a594e9b60d0504f989d2eea03a0f752f3242cb941cb009b6b83dc6ca42e9f9ddfa85c8da8495d6d7d6464c9a665f4414ae6f83adf0cb9cb29f09bc51c935d6056ebd45ab1c9893274e6933cf66aba1f9ba34a2d5eef2fa4ad8cd55c468a644320f7cc7d58811bbf37976af3b44853181dd2b04fa2a1aee2c229834e0bfd5d9b9452ce65ef92194d540fd27bdabeacdd773040d1c762a062c745b0c7bfcac", 0xc8}], 0x4}}], 0x1, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200031000000003070000fcdbdf25060009001001000053bb467d04f14562c5d163273ef4a720564f485a5a703fd40c3075e50a5d8c36195600000000000003000600000000000200100000000000000000570000000002000100000000000000020d00000000030005003300000002"], 0x80}, 0x1, 0x7}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 336.993951ms ago: executing program 4 (id=5166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffff"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa85c90ad3ef8e822d04ce6f932aaaaaaaaac08df363241e6509ddd0bd9d278eb7485fa2280600fe880000000000000000af0300000101ff020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312ddea838291c44740f730164d633c54"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00'}) r7 = socket$rds(0x15, 0x5, 0x0) bind(r7, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x4, {0xa, 0x4e24, 0x8000, @local, 0xce}}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}}, 0x44010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0xffffffffffffff79) 185.019065ms ago: executing program 4 (id=5167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}, 0x1, 0x0, 0x0, 0xf5ff}, 0x0) 872.801µs ago: executing program 4 (id=5168): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x41, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) 0s ago: executing program 6 (id=5169): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="6574683000000000000000000000000001000000") ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) kernel console output (not intermixed with test programs): f0 [ 381.254042][T17369] ? do_vfs_ioctl+0x116f/0x1530 [ 381.254070][T17369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 381.254102][T17369] sock_do_ioctl+0x101/0x320 [ 381.254130][T17369] ? __pfx_sock_do_ioctl+0x10/0x10 [ 381.254151][T17369] ? hook_file_ioctl+0x1f2/0x600 [ 381.254194][T17369] sock_ioctl+0x57a/0x7e0 [ 381.254220][T17369] ? __pfx_sock_ioctl+0x10/0x10 [ 381.254243][T17369] ? __fget_files+0x2a/0x420 [ 381.254271][T17369] ? __fget_files+0x3a2/0x420 [ 381.254299][T17369] ? __fget_files+0x2a/0x420 [ 381.254332][T17369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.254362][T17369] ? __pfx_sock_ioctl+0x10/0x10 [ 381.254383][T17369] __se_sys_ioctl+0xfc/0x170 [ 381.254408][T17369] do_syscall_64+0x166/0x520 [ 381.254435][T17369] ? trace_irq_disable+0x3b/0x140 [ 381.254456][T17369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.254478][T17369] ? clear_bhb_loop+0x70/0xc0 [ 381.254503][T17369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.254522][T17369] RIP: 0033:0x7f27ed79e159 [ 381.254542][T17369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.254560][T17369] RSP: 002b:00007f27eb9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.254584][T17369] RAX: ffffffffffffffda RBX: 00007f27eda25fa0 RCX: 00007f27ed79e159 [ 381.254600][T17369] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000004 [ 381.254613][T17369] RBP: 00007f27eb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.254626][T17369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.254638][T17369] R13: 00007f27eda26038 R14: 00007f27eda25fa0 R15: 00007ffc4e24e9e8 [ 381.254692][T17369] [ 381.639078][T17383] netlink: 'syz.3.3577': attribute type 1 has an invalid length. [ 381.742570][T17383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.745233][T17383] bond2: (slave bond3): making interface the new active one [ 381.752373][T17383] bond2: (slave bond3): Enslaving as an active interface with an up link [ 381.765046][T17391] veth1_macvtap: left promiscuous mode [ 381.850047][T17389] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 381.850441][T17383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3577'. [ 382.941750][T17467] net_ratelimit: 2 callbacks suppressed [ 382.941855][T17467] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.660918][T17506] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.681272][T17504] __nla_validate_parse: 16 callbacks suppressed [ 383.681295][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3618'. [ 383.681313][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3618'. [ 383.729429][T17509] FAULT_INJECTION: forcing a failure. [ 383.729429][T17509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.729466][T17509] CPU: 0 UID: 0 PID: 17509 Comm: syz.3.3620 Not tainted syzkaller #0 PREEMPT(full) [ 383.729491][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.729514][T17509] Call Trace: [ 383.729524][T17509] [ 383.729535][T17509] dump_stack_lvl+0xe8/0x150 [ 383.729573][T17509] should_fail_ex+0x410/0x560 [ 383.729606][T17509] _copy_from_iter+0x1d3/0x1660 [ 383.729633][T17509] ? __alloc_skb+0x27a/0x7a0 [ 383.729663][T17509] ? __alloc_skb+0x27a/0x7a0 [ 383.729692][T17509] ? __alloc_skb+0x27a/0x7a0 [ 383.729719][T17509] ? __pfx__copy_from_iter+0x10/0x10 [ 383.729743][T17509] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 383.729764][T17509] ? __alloc_skb+0x27a/0x7a0 [ 383.729788][T17509] ? __alloc_skb+0x27a/0x7a0 [ 383.729822][T17509] ? netlink_sendmsg+0x650/0xb40 [ 383.729848][T17509] ? skb_put+0x112/0x210 [ 383.729879][T17509] netlink_sendmsg+0x6c0/0xb40 [ 383.729912][T17509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.729945][T17509] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.729973][T17509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.729994][T17509] sock_sendmsg_nosec+0x13a/0x180 [ 383.730019][T17509] ____sys_sendmsg+0x54e/0x850 [ 383.730053][T17509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.730091][T17509] ? import_iovec+0x73/0xa0 [ 383.730124][T17509] ___sys_sendmsg+0x2a5/0x360 [ 383.730153][T17509] ? __lock_acquire+0x747/0x2de0 [ 383.730182][T17509] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.730254][T17509] ? __fget_files+0x2a/0x420 [ 383.730283][T17509] ? __fget_files+0x3a2/0x420 [ 383.730325][T17509] __x64_sys_sendmsg+0x1b1/0x290 [ 383.730359][T17509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.730415][T17509] do_syscall_64+0x166/0x520 [ 383.730445][T17509] ? trace_irq_disable+0x3b/0x140 [ 383.730468][T17509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.730490][T17509] ? clear_bhb_loop+0x70/0xc0 [ 383.730530][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.730550][T17509] RIP: 0033:0x7fb03b79e159 [ 383.730571][T17509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.730591][T17509] RSP: 002b:00007fb03c603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.730616][T17509] RAX: ffffffffffffffda RBX: 00007fb03ba25fa0 RCX: 00007fb03b79e159 [ 383.730633][T17509] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 383.730647][T17509] RBP: 00007fb03c603090 R08: 0000000000000000 R09: 0000000000000000 [ 383.730661][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.730674][T17509] R13: 00007fb03ba26038 R14: 00007fb03ba25fa0 R15: 00007ffcbfa43428 [ 383.730710][T17509] [ 383.749937][T16120] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.750473][T16116] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.750513][T16116] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.750550][T16116] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.925709][T17511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3621'. [ 383.929681][T17511] blkio.reset_stats is deprecated [ 383.975014][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.125777][T17521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.495227][T17543] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 384.496426][T17543] bond4 (unregistering): Released all slaves [ 384.597964][T17548] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 384.750535][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3636'. [ 384.756816][ T4935] block nbd5: Receive control failed (result -107) [ 384.929166][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3638'. [ 385.214022][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.228488][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.236952][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.238522][T17577] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3642'. [ 385.255019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.255466][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3642'. [ 385.257301][T17577] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3642'. [ 385.259458][T17577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3642'. [ 385.269802][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.270495][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.338461][T17584] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 385.401063][T17584] bridge_slave_0: left allmulticast mode [ 385.401095][T17584] bridge_slave_0: left promiscuous mode [ 385.401323][T17584] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.465216][T17584] bridge_slave_1: left allmulticast mode [ 385.465248][T17584] bridge_slave_1: left promiscuous mode [ 385.465488][T17584] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.533689][T17584] bond0: (slave bond_slave_0): Releasing backup interface [ 385.572756][T17584] bond0: (slave bond_slave_1): Releasing backup interface [ 385.616210][T17599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3647'. [ 385.616250][T17599] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 385.624272][T17584] team0: Port device team_slave_0 removed [ 385.666788][T17584] team0: Port device team_slave_1 removed [ 385.669586][T17584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.680636][T17584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.698258][T17584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.698285][T17584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.701064][T17584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.910240][T17610] netlink: Unknown nat attribute (0) [ 385.910282][T17610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.206296][T17574] wg1 speed is unknown, defaulting to 1000 [ 386.537970][ T5625] Bluetooth: hci6: command 0x0405 tx timeout [ 386.561738][T17636] syz_tun: left allmulticast mode [ 386.561767][T17636] syz_tun: left promiscuous mode [ 386.563553][T17636] bridge0: port 3(syz_tun) entered disabled state [ 386.650745][T17636] bridge_slave_0: left allmulticast mode [ 386.650776][T17636] bridge_slave_0: left promiscuous mode [ 386.651057][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.681316][T17636] bridge_slave_1: left allmulticast mode [ 386.681348][T17636] bridge_slave_1: left promiscuous mode [ 386.681600][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.724753][T17636] bond0: (slave bond_slave_0): Releasing backup interface [ 386.782858][T17636] bond0: (slave bond_slave_1): Releasing backup interface [ 386.819080][T17636] team0: Port device team_slave_0 removed [ 386.852939][T17636] team0: Port device team_slave_1 removed [ 386.863089][T17636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.863115][T17636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.884172][T17636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.884200][T17636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.902915][T17574] syzkaller0 speed is unknown, defaulting to 1000 [ 386.964263][T17658] xt_hashlimit: size too large, truncated to 1048576 [ 387.336408][ T5632] Bluetooth: hci2: command tx timeout [ 387.360095][T17665] ovs-dp0: entered promiscuous mode [ 387.718738][T17681] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.718904][T17681] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 387.977928][T17687] net_ratelimit: 2 callbacks suppressed [ 387.977952][T17687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.978621][T17574] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.978806][T17574] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.978947][T17574] bridge_slave_0: entered allmulticast mode [ 387.981065][T17574] bridge_slave_0: entered promiscuous mode [ 387.986843][T17574] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.986961][T17574] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.987374][T17574] bridge_slave_1: entered allmulticast mode [ 387.989207][T17574] bridge_slave_1: entered promiscuous mode [ 388.099866][T17574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.117679][T17574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.247749][T17574] team0: Port device team_slave_0 added [ 388.257168][T17574] team0: Port device team_slave_1 added [ 388.435860][T17574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.435876][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.435902][T17574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.442164][T17701] netlink: 'syz.5.3676': attribute type 16 has an invalid length. [ 388.512392][T17715] netlink: 'syz.0.3680': attribute type 3 has an invalid length. [ 388.512616][T17715] netlink: 'syz.0.3680': attribute type 3 has an invalid length. [ 388.514084][T17574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.514100][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.514127][T17574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.590450][T17701] veth0_macvtap: entered allmulticast mode [ 388.694028][T17574] hsr_slave_0: entered promiscuous mode [ 388.701144][T17574] hsr_slave_1: entered promiscuous mode [ 388.701986][T17574] debugfs: 'hsr0' already exists in 'hsr' [ 388.702008][T17574] Cannot create hsr debugfs directory [ 388.805821][T17729] block nbd0: Unsupported socket: should be TCP or UNIX. [ 389.015560][T17736] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 389.093537][T17736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.238388][T17743] __nla_validate_parse: 6 callbacks suppressed [ 389.238412][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3691'. [ 389.395495][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'. [ 389.417012][ T5632] Bluetooth: hci2: command tx timeout [ 389.677721][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3695'. [ 389.997180][T17574] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.014822][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.044496][T17574] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.051550][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.052519][T17574] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.082465][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.100186][T17574] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.116319][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.160406][T17774] syzkaller0: entered promiscuous mode [ 390.160433][T17774] syzkaller0: entered allmulticast mode [ 390.231442][T17786] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 390.308668][T17786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 390.458784][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3703'. [ 390.689221][T17574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.750019][T17574] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.781997][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.782112][ T3311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.802426][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.802548][T11169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.824882][T17805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3709'. [ 391.193382][T17822] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3711'. [ 391.198357][T17824] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 391.217214][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3711'. [ 391.217241][T17822] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3711'. [ 391.243069][T17824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 391.296240][T17826] vcan0: tx address claim with dlc 0 [ 391.443467][T17831] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 391.496372][ T5632] Bluetooth: hci2: command tx timeout [ 391.540670][T17839] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3716'. [ 391.738846][T17574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.763375][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3719'. [ 392.084702][T17868] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 392.168144][T17868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.573264][T17884] netlink: 'syz.0.3726': attribute type 1 has an invalid length. [ 392.639705][T17884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.678331][T17889] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 392.983411][T17884] bond1: entered promiscuous mode [ 392.983441][T17884] bond1: entered allmulticast mode [ 393.116735][T17574] veth0_vlan: entered promiscuous mode [ 393.150358][T17574] veth1_vlan: entered promiscuous mode [ 393.328235][T17574] veth0_macvtap: entered promiscuous mode [ 393.346069][T17574] veth1_macvtap: entered promiscuous mode [ 393.386104][T17915] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 393.425901][T17574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.521190][T17915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.556578][T17922] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000004ÿÿÿ [ 393.560531][T17574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.577084][ T5632] Bluetooth: hci2: command tx timeout [ 393.580833][T17582] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 393.954856][ T3311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.954911][ T3311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.954945][ T3311] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.954981][ T3311] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.320746][ T3311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.320768][ T3311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.432941][T17951] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 394.432978][T17951] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 394.432992][T17951] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 394.433006][T17951] __nla_validate_parse: 5 callbacks suppressed [ 394.433019][T17951] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3746'. [ 394.433163][T17951] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3746'. [ 394.447237][T17951] netlink: 'syz.3.3746': attribute type 11 has an invalid length. [ 394.447261][T17951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3746'. [ 394.540748][T17816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.540774][T17816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.381462][T17991] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 395.418800][T17957] syzkaller1: entered promiscuous mode [ 395.418818][T17957] syzkaller1: entered allmulticast mode [ 395.443111][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3751'. [ 395.522233][T17991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.536986][T17999] netlink: Unknown nat attribute (0) [ 395.537023][T17999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.807442][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3754'. [ 396.120163][T18020] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3758'. [ 396.160788][T18023] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3759'. [ 396.160819][T18023] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3759'. [ 396.160835][T18023] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3759'. [ 396.172466][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3758'. [ 396.272007][T18020] team0: Port device team_slave_0 removed [ 396.287253][T18028] sctp: [Deprecated]: syz.5.3762 (pid 18028) Use of int in max_burst socket option. [ 396.287253][T18028] Use struct sctp_assoc_value instead [ 396.371124][T18032] x_tables: ip_tables: osf match: only valid for protocol 6 [ 396.745402][T18048] tipc: Enabled bearer , priority 0 [ 396.747621][T18047] tipc: Disabling bearer [ 396.866090][T18052] netlink: Unknown nat attribute (0) [ 396.866131][T18052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.893794][T18050] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 396.968477][T18050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.245358][T18069] tipc: Started in network mode [ 397.245395][T18069] tipc: Node identity eee02682e165, cluster identity 4711 [ 397.245580][T18069] tipc: Enabled bearer , priority 0 [ 397.278741][T18067] tipc: Disabling bearer [ 397.627692][T18090] bridge_slave_0: left allmulticast mode [ 397.627725][T18090] bridge_slave_0: left promiscuous mode [ 397.628080][T18090] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.639110][T18090] bridge_slave_1: left allmulticast mode [ 397.639137][T18090] bridge_slave_1: left promiscuous mode [ 397.639349][T18090] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.691538][T18090] bond0: (slave bond_slave_0): Releasing backup interface [ 397.723454][T18090] bond0: (slave bond_slave_1): Releasing backup interface [ 397.752308][T18090] team0: Port device team_slave_1 removed [ 397.754361][T18090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.756549][T18090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.781825][T18090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.781862][T18090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.791035][T18098] FAULT_INJECTION: forcing a failure. [ 397.791035][T18098] name failslab, interval 1, probability 0, space 0, times 0 [ 397.791067][T18098] CPU: 1 UID: 0 PID: 18098 Comm: syz.3.3786 Not tainted syzkaller #0 PREEMPT(full) [ 397.791088][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 397.791099][T18098] Call Trace: [ 397.791108][T18098] [ 397.791116][T18098] dump_stack_lvl+0xe8/0x150 [ 397.791147][T18098] should_fail_ex+0x410/0x560 [ 397.791178][T18098] ? __alloc_skb+0x1db/0x7a0 [ 397.791201][T18098] should_failslab+0xa8/0x100 [ 397.791226][T18098] ? __alloc_skb+0x1db/0x7a0 [ 397.791247][T18098] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 397.791267][T18098] ? __alloc_skb+0x18d/0x7a0 [ 397.791290][T18098] ? __alloc_skb+0x1db/0x7a0 [ 397.791319][T18098] __alloc_skb+0x1db/0x7a0 [ 397.791346][T18098] netlink_sendmsg+0x5d4/0xb40 [ 397.791377][T18098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.791405][T18098] ? apparmor_socket_sendmsg+0x98/0x360 [ 397.791429][T18098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.791447][T18098] sock_sendmsg_nosec+0x13a/0x180 [ 397.791472][T18098] ____sys_sendmsg+0x54e/0x850 [ 397.791503][T18098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.791538][T18098] ? import_iovec+0x73/0xa0 [ 397.791567][T18098] ___sys_sendmsg+0x2a5/0x360 [ 397.791591][T18098] ? __lock_acquire+0x747/0x2de0 [ 397.791616][T18098] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.791677][T18098] ? __fget_files+0x2a/0x420 [ 397.791701][T18098] ? __fget_files+0x3a2/0x420 [ 397.791737][T18098] __x64_sys_sendmsg+0x1b1/0x290 [ 397.791766][T18098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.791813][T18098] do_syscall_64+0x166/0x520 [ 397.791837][T18098] ? trace_irq_disable+0x3b/0x140 [ 397.791864][T18098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.791884][T18098] ? clear_bhb_loop+0x70/0xc0 [ 397.791906][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.791924][T18098] RIP: 0033:0x7fb03b79e159 [ 397.791943][T18098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.791959][T18098] RSP: 002b:00007fb03c5e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.791981][T18098] RAX: ffffffffffffffda RBX: 00007fb03ba26090 RCX: 00007fb03b79e159 [ 397.791995][T18098] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 397.792007][T18098] RBP: 00007fb03c5e2090 R08: 0000000000000000 R09: 0000000000000000 [ 397.792019][T18098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.792031][T18098] R13: 00007fb03ba26128 R14: 00007fb03ba26090 R15: 00007ffcbfa43428 [ 397.792063][T18098] [ 398.149506][T18102] tun0: tun_chr_ioctl cmd 1074025675 [ 398.149533][T18102] tun0: persist disabled [ 398.522002][T18122] net_ratelimit: 5 callbacks suppressed [ 398.522025][T18122] openvswitch: netlink: Invalid VLAN frame [ 398.623491][T18130] netlink: Unknown nat attribute (0) [ 398.623533][T18130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.886929][T18146] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.113007][T18153] netlink: 'syz.4.3803': attribute type 32 has an invalid length. [ 399.616814][T18176] netlink: Unknown nat attribute (0) [ 399.616853][T18176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.742901][T18184] ip6t_srh: unknown srh match flags 4000 [ 399.795765][T18192] __nla_validate_parse: 15 callbacks suppressed [ 399.795789][T18192] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3814'. [ 400.401915][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3822'. [ 400.679622][T18233] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3826'. [ 400.791354][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 400.791391][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 400.842086][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 400.842118][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 400.842641][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 400.842662][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 401.208920][T18262] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 401.249802][T18262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.456384][T18271] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3840'. [ 401.849272][T18303] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 401.990095][T18311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.068041][T18307] bond1: (slave veth0_to_bond): Releasing active interface [ 402.128277][T18321] netlink: Unknown nat attribute (0) [ 402.246493][T18323] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 402.670115][T18346] FAULT_INJECTION: forcing a failure. [ 402.670115][T18346] name failslab, interval 1, probability 0, space 0, times 0 [ 402.670151][T18346] CPU: 1 UID: 0 PID: 18346 Comm: syz.0.3860 Not tainted syzkaller #0 PREEMPT(full) [ 402.670179][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 402.670192][T18346] Call Trace: [ 402.670201][T18346] [ 402.670211][T18346] dump_stack_lvl+0xe8/0x150 [ 402.670246][T18346] should_fail_ex+0x410/0x560 [ 402.670277][T18346] should_failslab+0xa8/0x100 [ 402.670304][T18346] ? skb_clone+0x212/0x3a0 [ 402.670346][T18346] kmem_cache_alloc_noprof+0xa1/0x600 [ 402.670370][T18346] ? skb_clone+0x212/0x3a0 [ 402.670408][T18346] skb_clone+0x212/0x3a0 [ 402.670442][T18346] __netlink_deliver_tap+0x413/0x860 [ 402.670477][T18346] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.670501][T18346] netlink_deliver_tap+0x19c/0x1b0 [ 402.670524][T18346] netlink_unicast+0x781/0x940 [ 402.670568][T18346] netlink_sendmsg+0x813/0xb40 [ 402.670600][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.670632][T18346] ? apparmor_socket_sendmsg+0x98/0x360 [ 402.670660][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.670680][T18346] sock_sendmsg_nosec+0x13a/0x180 [ 402.670708][T18346] ____sys_sendmsg+0x54e/0x850 [ 402.670744][T18346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.670784][T18346] ? import_iovec+0x73/0xa0 [ 402.670816][T18346] ___sys_sendmsg+0x2a5/0x360 [ 402.670843][T18346] ? __lock_acquire+0x747/0x2de0 [ 402.670872][T18346] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.670961][T18346] ? __fget_files+0x2a/0x420 [ 402.670990][T18346] ? __fget_files+0x3a2/0x420 [ 402.671031][T18346] __x64_sys_sendmsg+0x1b1/0x290 [ 402.671064][T18346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.671119][T18346] do_syscall_64+0x166/0x520 [ 402.671147][T18346] ? trace_irq_disable+0x3b/0x140 [ 402.671170][T18346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.671200][T18346] ? clear_bhb_loop+0x70/0xc0 [ 402.671225][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.671246][T18346] RIP: 0033:0x7fd29499e159 [ 402.671267][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.671285][T18346] RSP: 002b:00007fd295803028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.671309][T18346] RAX: ffffffffffffffda RBX: 00007fd294c26090 RCX: 00007fd29499e159 [ 402.671333][T18346] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 402.671346][T18346] RBP: 00007fd295803090 R08: 0000000000000000 R09: 0000000000000000 [ 402.671359][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.671377][T18346] R13: 00007fd294c26128 R14: 00007fd294c26090 R15: 00007ffea8796d58 [ 402.671412][T18346] [ 403.663747][T18380] xt_IDLETIMER: timeout value is zero [ 403.677659][T18391] FAULT_INJECTION: forcing a failure. [ 403.677659][T18391] name failslab, interval 1, probability 0, space 0, times 0 [ 403.677700][T18391] CPU: 0 UID: 0 PID: 18391 Comm: syz.5.3875 Not tainted syzkaller #0 PREEMPT(full) [ 403.677724][T18391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 403.677737][T18391] Call Trace: [ 403.677746][T18391] [ 403.677756][T18391] dump_stack_lvl+0xe8/0x150 [ 403.677793][T18391] should_fail_ex+0x410/0x560 [ 403.677826][T18391] should_failslab+0xa8/0x100 [ 403.677852][T18391] ? skb_clone+0x212/0x3a0 [ 403.677885][T18391] kmem_cache_alloc_noprof+0xa1/0x600 [ 403.677910][T18391] ? skb_clone+0x212/0x3a0 [ 403.677949][T18391] skb_clone+0x212/0x3a0 [ 403.677983][T18391] __netlink_deliver_tap+0x413/0x860 [ 403.678020][T18391] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.678043][T18391] netlink_deliver_tap+0x19c/0x1b0 [ 403.678068][T18391] netlink_unicast+0x781/0x940 [ 403.678112][T18391] netlink_sendmsg+0x813/0xb40 [ 403.678146][T18391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.678178][T18391] ? apparmor_socket_sendmsg+0x98/0x360 [ 403.678218][T18391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.678238][T18391] sock_sendmsg_nosec+0x13a/0x180 [ 403.678266][T18391] ____sys_sendmsg+0x54e/0x850 [ 403.678302][T18391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.678342][T18391] ? import_iovec+0x73/0xa0 [ 403.678375][T18391] ___sys_sendmsg+0x2a5/0x360 [ 403.678405][T18391] ? __lock_acquire+0x747/0x2de0 [ 403.678434][T18391] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.678506][T18391] ? __fget_files+0x2a/0x420 [ 403.678535][T18391] ? __fget_files+0x3a2/0x420 [ 403.678575][T18391] __x64_sys_sendmsg+0x1b1/0x290 [ 403.678606][T18391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.678658][T18391] do_syscall_64+0x166/0x520 [ 403.678687][T18391] ? trace_irq_disable+0x3b/0x140 [ 403.678709][T18391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.678729][T18391] ? clear_bhb_loop+0x70/0xc0 [ 403.678755][T18391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.678776][T18391] RIP: 0033:0x7f462119e159 [ 403.678798][T18391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.678817][T18391] RSP: 002b:00007f4621fd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.678842][T18391] RAX: ffffffffffffffda RBX: 00007f4621426090 RCX: 00007f462119e159 [ 403.678858][T18391] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 403.678873][T18391] RBP: 00007f4621fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 403.678887][T18391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.678900][T18391] R13: 00007f4621426128 R14: 00007f4621426090 R15: 00007fff41c88cc8 [ 403.678937][T18391] [ 404.041492][T18401] syzkaller0: entered promiscuous mode [ 404.041517][T18401] syzkaller0: entered allmulticast mode [ 404.121363][T18407] net_ratelimit: 6 callbacks suppressed [ 404.121401][T18407] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 404.282395][T18407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.950759][T18455] FAULT_INJECTION: forcing a failure. [ 404.950759][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 404.950805][T18455] CPU: 1 UID: 0 PID: 18455 Comm: syz.4.3892 Not tainted syzkaller #0 PREEMPT(full) [ 404.950829][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 404.950841][T18455] Call Trace: [ 404.950850][T18455] [ 404.950859][T18455] dump_stack_lvl+0xe8/0x150 [ 404.950904][T18455] should_fail_ex+0x410/0x560 [ 404.950934][T18455] ? __alloc_skb+0x1db/0x7a0 [ 404.950960][T18455] should_failslab+0xa8/0x100 [ 404.950988][T18455] ? __alloc_skb+0x1db/0x7a0 [ 404.951011][T18455] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 404.951033][T18455] ? __alloc_skb+0x18d/0x7a0 [ 404.951057][T18455] ? __alloc_skb+0x1db/0x7a0 [ 404.951086][T18455] __alloc_skb+0x1db/0x7a0 [ 404.951118][T18455] netlink_ack+0x136/0xb30 [ 404.951138][T18455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.951255][T18455] ? ref_tracker_free+0x689/0x830 [ 404.951306][T18455] ? __pfx_ref_tracker_free+0x10/0x10 [ 404.951344][T18455] netlink_rcv_skb+0x2a4/0x4a0 [ 404.951368][T18455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.951398][T18455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.951443][T18455] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.951463][T18455] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.951490][T18455] netlink_unicast+0x7bd/0x940 [ 404.951531][T18455] netlink_sendmsg+0x813/0xb40 [ 404.951563][T18455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.951597][T18455] ? apparmor_socket_sendmsg+0x98/0x360 [ 404.951625][T18455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.951645][T18455] sock_sendmsg_nosec+0x13a/0x180 [ 404.951671][T18455] ____sys_sendmsg+0x54e/0x850 [ 404.951706][T18455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.951753][T18455] ? import_iovec+0x73/0xa0 [ 404.951792][T18455] ___sys_sendmsg+0x2a5/0x360 [ 404.951819][T18455] ? __lock_acquire+0x747/0x2de0 [ 404.951847][T18455] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.951914][T18455] ? __fget_files+0x2a/0x420 [ 404.951942][T18455] ? __fget_files+0x3a2/0x420 [ 404.951982][T18455] __x64_sys_sendmsg+0x1b1/0x290 [ 404.952015][T18455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.952075][T18455] do_syscall_64+0x166/0x520 [ 404.952103][T18455] ? trace_irq_disable+0x3b/0x140 [ 404.952123][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.952142][T18455] ? clear_bhb_loop+0x70/0xc0 [ 404.952165][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.952184][T18455] RIP: 0033:0x7f27ed79e159 [ 404.952204][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.952220][T18455] RSP: 002b:00007f27eb9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.952245][T18455] RAX: ffffffffffffffda RBX: 00007f27eda26090 RCX: 00007f27ed79e159 [ 404.952260][T18455] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 404.952274][T18455] RBP: 00007f27eb9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 404.952286][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.952298][T18455] R13: 00007f27eda26128 R14: 00007f27eda26090 R15: 00007ffc4e24e9e8 [ 404.952341][T18455] [ 405.049768][T16116] IPVS: starting estimator thread 0... [ 405.051773][T18460] openvswitch: netlink: Key type 30 is not supported [ 405.147318][T18461] IPVS: using max 28 ests per chain, 67200 per kthread [ 405.326279][T18466] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 405.411082][T18466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.464294][T18474] Bluetooth: hci0: unsupported parameter 5135 [ 405.464318][T18474] Bluetooth: hci0: unsupported parameter 8192 [ 405.464332][T18474] Bluetooth: hci0: unsupported parameter 5135 [ 405.464345][T18474] Bluetooth: hci0: unsupported parameter 8192 [ 405.610933][T18486] netlink: Unknown nat attribute (0) [ 405.610974][T18486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.084933][T18506] __nla_validate_parse: 7 callbacks suppressed [ 406.084960][T18506] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3906'. [ 406.084982][T18506] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3906'. [ 406.084999][T18506] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3906'. [ 406.806167][T18539] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.862032][T18539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.873806][T18543] netlink: 'syz.6.3915': attribute type 4 has an invalid length. [ 407.158487][T18551] siw: device registration error -23 [ 407.207737][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3922'. [ 407.243455][T18570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.275761][T18570] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3923'. [ 407.540554][T18588] FAULT_INJECTION: forcing a failure. [ 407.540554][T18588] name failslab, interval 1, probability 0, space 0, times 0 [ 407.540592][T18588] CPU: 0 UID: 0 PID: 18588 Comm: syz.0.3925 Not tainted syzkaller #0 PREEMPT(full) [ 407.540616][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 407.540628][T18588] Call Trace: [ 407.540637][T18588] [ 407.540646][T18588] dump_stack_lvl+0xe8/0x150 [ 407.540682][T18588] should_fail_ex+0x410/0x560 [ 407.540720][T18588] should_failslab+0xa8/0x100 [ 407.540758][T18588] ? skb_clone+0x212/0x3a0 [ 407.540790][T18588] kmem_cache_alloc_noprof+0xa1/0x600 [ 407.540813][T18588] ? skb_clone+0x212/0x3a0 [ 407.540852][T18588] skb_clone+0x212/0x3a0 [ 407.540886][T18588] __netlink_deliver_tap+0x413/0x860 [ 407.540923][T18588] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.540947][T18588] netlink_deliver_tap+0x19c/0x1b0 [ 407.540970][T18588] netlink_sendskb+0x68/0x140 [ 407.541004][T18588] netlink_rcv_skb+0x2a4/0x4a0 [ 407.541027][T18588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.541057][T18588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.541093][T18588] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.541113][T18588] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.541141][T18588] netlink_unicast+0x7bd/0x940 [ 407.541183][T18588] netlink_sendmsg+0x813/0xb40 [ 407.541217][T18588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.541247][T18588] ? apparmor_socket_sendmsg+0x98/0x360 [ 407.541273][T18588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.541293][T18588] sock_sendmsg_nosec+0x13a/0x180 [ 407.541320][T18588] ____sys_sendmsg+0x54e/0x850 [ 407.541356][T18588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.541396][T18588] ? import_iovec+0x73/0xa0 [ 407.541427][T18588] ___sys_sendmsg+0x2a5/0x360 [ 407.541454][T18588] ? __lock_acquire+0x747/0x2de0 [ 407.541483][T18588] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.541552][T18588] ? __fget_files+0x2a/0x420 [ 407.541581][T18588] ? __fget_files+0x3a2/0x420 [ 407.541622][T18588] __x64_sys_sendmsg+0x1b1/0x290 [ 407.541655][T18588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.541710][T18588] do_syscall_64+0x166/0x520 [ 407.541748][T18588] ? trace_irq_disable+0x3b/0x140 [ 407.541769][T18588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.541790][T18588] ? clear_bhb_loop+0x70/0xc0 [ 407.541814][T18588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.541834][T18588] RIP: 0033:0x7fd29499e159 [ 407.541856][T18588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.541873][T18588] RSP: 002b:00007fd295803028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.541896][T18588] RAX: ffffffffffffffda RBX: 00007fd294c26090 RCX: 00007fd29499e159 [ 407.541912][T18588] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 407.541925][T18588] RBP: 00007fd295803090 R08: 0000000000000000 R09: 0000000000000000 [ 407.541938][T18588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.541951][T18588] R13: 00007fd294c26128 R14: 00007fd294c26090 R15: 00007ffea8796d58 [ 407.541994][T18588] [ 407.550309][T18586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3926'. [ 407.587282][T18587] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 408.250593][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3931'. [ 408.860544][T18650] FAULT_INJECTION: forcing a failure. [ 408.860544][T18650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.860580][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.4.3942 Not tainted syzkaller #0 PREEMPT(full) [ 408.860604][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.860616][T18650] Call Trace: [ 408.860626][T18650] [ 408.860635][T18650] dump_stack_lvl+0xe8/0x150 [ 408.860673][T18650] should_fail_ex+0x410/0x560 [ 408.860705][T18650] _copy_to_user+0x31/0xb0 [ 408.860734][T18650] simple_read_from_buffer+0xe1/0x170 [ 408.860771][T18650] proc_fail_nth_read+0x1bb/0x230 [ 408.860846][T18650] ? common_file_perm+0x20e/0x2b0 [ 408.860876][T18650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.860904][T18650] ? rw_verify_area+0x24a/0x4c0 [ 408.860937][T18650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.860959][T18650] vfs_read+0x213/0xa80 [ 408.860997][T18650] ? __pfx___mutex_lock+0x10/0x10 [ 408.861028][T18650] ? __pfx_vfs_read+0x10/0x10 [ 408.861062][T18650] ? __fget_files+0x2a/0x420 [ 408.861097][T18650] ? __fget_files+0x3a2/0x420 [ 408.861125][T18650] ? __fget_files+0x2a/0x420 [ 408.861164][T18650] ksys_read+0x150/0x270 [ 408.861189][T18650] ? __pfx_ksys_read+0x10/0x10 [ 408.861233][T18650] do_syscall_64+0x166/0x520 [ 408.861261][T18650] ? trace_irq_disable+0x3b/0x140 [ 408.861284][T18650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.861305][T18650] ? clear_bhb_loop+0x70/0xc0 [ 408.861332][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.861358][T18650] RIP: 0033:0x7f27ed75e98e [ 408.861379][T18650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.861396][T18650] RSP: 002b:00007f27eb9d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.861420][T18650] RAX: ffffffffffffffda RBX: 00007f27eb9d56c0 RCX: 00007f27ed75e98e [ 408.861435][T18650] RDX: 000000000000000f RSI: 00007f27eb9d50a0 RDI: 0000000000000005 [ 408.861448][T18650] RBP: 00007f27eb9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 408.861461][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.861473][T18650] R13: 00007f27eda26128 R14: 00007f27eda26090 R15: 00007ffc4e24e9e8 [ 408.861508][T18650] [ 409.180630][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 409.436353][T18667] syzkaller0: entered promiscuous mode [ 409.436380][T18667] syzkaller0: entered allmulticast mode [ 409.465491][T18667] tipc: Enabled bearer , priority 0 [ 409.471181][T18663] tipc: Resetting bearer [ 409.541786][T18663] tipc: Disabling bearer [ 409.749885][T18685] net_ratelimit: 3 callbacks suppressed [ 409.749907][T18685] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.761330][T18686] netlink: 'syz.0.3950': attribute type 28 has an invalid length. [ 409.761354][T18686] netlink: 'syz.0.3950': attribute type 3 has an invalid length. [ 409.761367][T18686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3950'. [ 409.789490][T18688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.332166][T18726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.431652][T18725] netlink: Failed to add  helper -22 [ 410.431725][T18725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.345041][T18739] openvswitch: netlink: IP tunnel dst address not specified [ 411.364700][T18741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3966'. [ 411.364737][T18741] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 412.952487][T18702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.401775][T18765] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3975'. [ 413.432465][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 413.432494][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 414.466433][ T3392] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.466482][ T3392] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.466513][ T3392] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.466543][ T3392] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.869523][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3987'. [ 416.629560][T18779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.781812][T18841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.881024][T18847] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3992'. [ 416.907317][T18847] tipc: Enabled bearer , priority 0 [ 416.923566][T18845] tipc: Disabling bearer [ 417.314216][T18865] netlink: Unknown NAT attribute (type=12336, max=9) [ 417.314262][T18865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.404131][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 417.453134][T18876] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4001'. [ 417.467490][T18882] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 417.591583][T18891] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4005'. [ 417.613059][T18891] tipc: Enabled bearer , priority 0 [ 417.692087][T18890] tipc: Disabling bearer [ 417.941178][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4009'. [ 417.941204][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4009'. [ 417.971815][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4009'. [ 417.971842][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4009'. [ 417.984970][T17816] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.985030][T17816] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.985063][T17816] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.985575][T17816] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.513568][T18921] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4017'. [ 418.527072][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4018'. [ 418.534284][T18921] 0·: renamed from hsr0 (while UP) [ 418.559337][T18921] 0·: entered allmulticast mode [ 418.559362][T18921] hsr_slave_0: entered allmulticast mode [ 418.559377][T18921] hsr_slave_1: entered allmulticast mode [ 418.561758][T18921] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 418.614134][T18931] 1·: renamed from c0· (while UP) [ 418.639089][T18931] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 419.085779][T18946] tipc: Enabled bearer , priority 0 [ 419.107144][T18943] tipc: Disabling bearer [ 419.506428][T18974] syzkaller0: entered allmulticast mode [ 419.535873][T18974] syzkaller0: left allmulticast mode [ 420.686050][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 420.689137][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 420.706609][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 421.466211][T19036] infiniband syz1: set active [ 421.470499][T19036] infiniband syz1: added netdevsim0 [ 421.473907][T18807] netdevsim0 speed is unknown, defaulting to 1000 [ 421.551987][T19036] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 421.552031][T19036] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 421.552078][T19036] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 421.732069][T19036] RDS/IB: syz1: added [ 421.732131][T19036] smc: adding ib device syz1 with port count 1 [ 421.733837][T19036] smc: ib device syz1 port 1 has no pnetid [ 421.780690][T19085] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 421.793998][T19092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.802285][ T5710] netdevsim0 speed is unknown, defaulting to 1000 [ 421.814250][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 421.902018][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 422.260488][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 422.737740][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 422.958266][T19135] __nla_validate_parse: 8 callbacks suppressed [ 422.958288][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 423.194252][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 423.568164][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 423.820243][T19160] bond0: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 424.202431][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 424.772270][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 424.893209][T19198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4132'. [ 425.358974][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 425.578781][ T3392] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.793892][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 425.894256][T19228] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4142'. [ 426.114170][T19229] syzkaller0: entered promiscuous mode [ 426.114201][T19229] syzkaller0: entered allmulticast mode [ 426.195084][T19036] netdevsim0 speed is unknown, defaulting to 1000 [ 428.621004][T19217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.733836][T19257] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4155'. [ 428.938149][T19266] netlink: 'syz.6.4158': attribute type 10 has an invalid length. [ 429.462386][T19265] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4159'. [ 429.480229][T19266] team0: Port device dummy0 added [ 429.587906][T19271] syzkaller0: entered promiscuous mode [ 429.587933][T19271] syzkaller0: entered allmulticast mode [ 429.669466][T19279] netlink: 'syz.0.4164': attribute type 1 has an invalid length. [ 429.811838][T19279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.822912][T19279] bond2: (slave bond3): making interface the new active one [ 429.823461][T19279] bond2: (slave bond3): Enslaving as an active interface with an up link [ 429.866317][T19279] syzkaller1: entered promiscuous mode [ 429.866342][T19279] syzkaller1: entered allmulticast mode [ 430.456760][T19313] netlink: Conntrack attr has 1 unknown bytes [ 430.456785][T19313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.605199][T19320] netlink: 13 bytes leftover after parsing attributes in process `syz.6.4173'. [ 432.921072][T19286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.085884][T19323] syzkaller0: entered promiscuous mode [ 433.085910][T19323] syzkaller0: entered allmulticast mode [ 433.194297][T19333] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4178'. [ 433.339412][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 433.365477][T19336] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4181'. [ 433.390323][T19343] netlink: 'syz.5.4183': attribute type 1 has an invalid length. [ 433.568232][T19350] netlink: 13 bytes leftover after parsing attributes in process `syz.5.4186'. [ 433.600793][T19350] tipc: Enabled bearer , priority 0 [ 433.615563][T19349] tipc: Disabling bearer [ 433.637950][T19355] netlink: 'syz.0.4187': attribute type 34 has an invalid length. [ 433.637975][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'. [ 433.681501][T19355] openvswitch: netlink: IPv4 tun info is not correct [ 434.106912][T19384] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4194'. [ 434.374268][T19402] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4200'. [ 434.535313][T19413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4204'. [ 434.535346][T19413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4204'. [ 434.535377][T19413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4204'. [ 434.632435][T19417] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4206'. [ 436.374668][ T5632] Bluetooth: hci1: command tx timeout [ 436.686754][T19358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.979031][T19448] netlink: 'syz.6.4211': attribute type 4 has an invalid length. [ 436.979058][T19448] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4211'. [ 436.981837][T19448] .`: renamed from bond0 [ 436.991065][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4214'. [ 437.048766][T19448] team0: Device gtp0 is up. Set it down before adding it as a team port [ 437.096753][T19449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4213'. [ 437.222599][T19454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4217'. [ 437.734791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.675860][T19524] __nla_validate_parse: 5 callbacks suppressed [ 439.675882][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.676142][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.676377][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.676604][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.676844][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.677077][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.677308][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.677590][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.677863][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.678148][T19524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4231'. [ 439.847714][T19530] netlink: 'syz.6.4233': attribute type 10 has an invalid length. [ 439.854037][T19530] .`: (slave bridge0): Enslaving as an active interface with an up link [ 439.888218][T19530] .`: (slave bridge0): Releasing backup interface [ 440.017383][T19536] netlink: Unknown nat attribute (0) [ 440.017425][T19536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.297890][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.298450][ T1312] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 440.683041][T19478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.951119][T19552] syzkaller0: entered promiscuous mode [ 440.951145][T19552] syzkaller0: entered allmulticast mode [ 441.141470][T19563] dvmrp0: entered allmulticast mode [ 441.280494][T19573] netlink: Unknown nat attribute (0) [ 441.280535][T19573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.616649][T19598] syzkaller0: entered promiscuous mode [ 441.616674][T19598] syzkaller0: entered allmulticast mode [ 441.931057][T19613] syzkaller0: entered promiscuous mode [ 441.931083][T19613] syzkaller0: entered allmulticast mode [ 442.080236][T19617] netlink: Unknown nat attribute (0) [ 442.080277][T19617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.308645][T19652] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 444.393581][T19579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.651811][T19712] __nla_validate_parse: 35 callbacks suppressed [ 445.651837][T19712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4288'. [ 445.651866][T19712] netlink: 'syz.4.4288': attribute type 7 has an invalid length. [ 445.651880][T19712] netlink: 'syz.4.4288': attribute type 8 has an invalid length. [ 445.651892][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4288'. [ 445.778928][T19715] netlink: Failed to add helper -22 [ 445.778995][T19715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.891529][T19715] netlink: Failed to add helper -22 [ 445.891665][T19715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.961128][T19715] netlink: Failed to add helper -22 [ 445.961190][T19715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.069014][T19741] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4296'. [ 446.069064][T19741] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4296'. [ 446.069082][T19741] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4296'. [ 446.171209][T19715] netlink: Failed to add helper -22 [ 446.171273][T19715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.299800][T19753] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4299'. [ 446.346379][T19715] netlink: Failed to add helper -22 [ 446.690382][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4303'. [ 446.789630][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4305'. [ 446.917655][T19771] bond2: option fail_over_mac: invalid value (16) [ 446.929539][T19771] bond2 (unregistering): Released all slaves [ 447.611156][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 447.828632][T19825] syzkaller0: entered promiscuous mode [ 447.828659][T19825] syzkaller0: entered allmulticast mode [ 449.012328][T19857] syzkaller0: entered promiscuous mode [ 449.012355][T19857] syzkaller0: entered allmulticast mode [ 449.120329][T19862] netlink: 'syz.3.4326': attribute type 1 has an invalid length. [ 449.213572][T19862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.340649][T19869] bond4: (slave veth3): Enslaving as an active interface with a down link [ 449.633875][T19888] netlink: 'syz.6.4337': attribute type 4 has an invalid length. [ 449.633901][T19888] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4337'. [ 449.754124][T19896] netlink: 'syz.6.4339': attribute type 3 has an invalid length. [ 449.859655][T19899] syzkaller0: entered promiscuous mode [ 449.859682][T19899] syzkaller0: entered allmulticast mode [ 450.237621][T19915] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 450.237806][T19915] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 450.237959][T19915] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 450.238115][T19915] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 450.238268][T19915] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 450.663490][T19936] FAULT_INJECTION: forcing a failure. [ 450.663490][T19936] name failslab, interval 1, probability 0, space 0, times 0 [ 450.663528][T19936] CPU: 0 UID: 0 PID: 19936 Comm: syz.0.4349 Not tainted syzkaller #0 PREEMPT(full) [ 450.663551][T19936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 450.663564][T19936] Call Trace: [ 450.663574][T19936] [ 450.663584][T19936] dump_stack_lvl+0xe8/0x150 [ 450.663620][T19936] should_fail_ex+0x410/0x560 [ 450.663651][T19936] should_failslab+0xa8/0x100 [ 450.663677][T19936] ? skb_clone+0x212/0x3a0 [ 450.663709][T19936] kmem_cache_alloc_noprof+0xa1/0x600 [ 450.663733][T19936] ? skb_clone+0x212/0x3a0 [ 450.663793][T19936] skb_clone+0x212/0x3a0 [ 450.663827][T19936] __netlink_deliver_tap+0x413/0x860 [ 450.663863][T19936] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.663886][T19936] netlink_deliver_tap+0x19c/0x1b0 [ 450.663910][T19936] netlink_sendskb+0x68/0x140 [ 450.663945][T19936] netlink_rcv_skb+0x2a4/0x4a0 [ 450.663968][T19936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.664002][T19936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.664042][T19936] ? down_read+0x2be/0x330 [ 450.664078][T19936] genl_rcv+0x28/0x40 [ 450.664102][T19936] netlink_unicast+0x7bd/0x940 [ 450.664153][T19936] netlink_sendmsg+0x813/0xb40 [ 450.664186][T19936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.664218][T19936] ? apparmor_socket_sendmsg+0x98/0x360 [ 450.664246][T19936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.664267][T19936] sock_sendmsg_nosec+0x13a/0x180 [ 450.664295][T19936] __sys_sendto+0x408/0x5a0 [ 450.664323][T19936] ? ksys_write+0x1e6/0x270 [ 450.664346][T19936] ? __pfx___sys_sendto+0x10/0x10 [ 450.664369][T19936] ? __mutex_unlock_slowpath+0x731/0x900 [ 450.664427][T19936] ? __pfx_ksys_write+0x10/0x10 [ 450.664455][T19936] __x64_sys_sendto+0xde/0x100 [ 450.664486][T19936] do_syscall_64+0x166/0x520 [ 450.664514][T19936] ? trace_irq_disable+0x3b/0x140 [ 450.664537][T19936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.664560][T19936] ? clear_bhb_loop+0x70/0xc0 [ 450.664587][T19936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.664608][T19936] RIP: 0033:0x7fd29499e159 [ 450.664629][T19936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.664648][T19936] RSP: 002b:00007fd295824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 450.664672][T19936] RAX: ffffffffffffffda RBX: 00007fd294c25fa0 RCX: 00007fd29499e159 [ 450.664687][T19936] RDX: 00000000000000a8 RSI: 0000200000000600 RDI: 0000000000000003 [ 450.664701][T19936] RBP: 00007fd295824090 R08: 0000000000000000 R09: 0000000000000000 [ 450.664715][T19936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.664727][T19936] R13: 00007fd294c26038 R14: 00007fd294c25fa0 R15: 00007ffea8796d58 [ 450.664765][T19936] [ 451.038626][T19942] __nla_validate_parse: 65 callbacks suppressed [ 451.038649][T19942] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4351'. [ 451.038671][T19942] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4351'. [ 451.038688][T19942] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4351'. [ 451.115112][T19947] syzkaller0: entered promiscuous mode [ 451.115139][T19947] syzkaller0: entered allmulticast mode [ 451.158209][T19951] net_ratelimit: 4 callbacks suppressed [ 451.158234][T19951] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 451.181567][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4356'. [ 451.234080][T19949] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 451.237063][T19949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.237486][T19949] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4356'. [ 451.399559][T19955] netlink: 3604 bytes leftover after parsing attributes in process `syz.5.4358'. [ 451.530355][T19967] syzkaller0: entered promiscuous mode [ 451.530382][T19967] syzkaller0: entered allmulticast mode [ 451.722269][T19977] validate_nla: 61 callbacks suppressed [ 451.722315][T19977] netlink: 'syz.6.4365': attribute type 2 has an invalid length. [ 451.722331][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4365'. [ 452.011490][T19982] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 452.013490][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4366'. [ 452.247781][T19998] syzkaller0: entered promiscuous mode [ 452.247808][T19998] syzkaller0: entered allmulticast mode [ 452.794189][T20025] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 452.821700][T20025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.882754][T20031] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 452.903843][T20031] syzkaller0: entered promiscuous mode [ 452.903867][T20031] syzkaller0: entered allmulticast mode [ 453.108652][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'. [ 453.182778][T20044] syzkaller0: entered promiscuous mode [ 453.182801][T20044] syzkaller0: entered allmulticast mode [ 453.252201][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 453.374685][T20054] netlink: zone id is out of range [ 453.374707][T20054] netlink: del zone limit has 4 unknown bytes [ 453.521897][T20058] team0: Port device dummy0 removed [ 453.537560][T20058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.937009][T20077] syzkaller0: entered promiscuous mode [ 453.937035][T20077] syzkaller0: entered allmulticast mode [ 454.158436][T20091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.303417][T20092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.193927][T20138] syzkaller0: entered promiscuous mode [ 455.193954][T20138] syzkaller0: entered allmulticast mode [ 455.522475][T20155] FAULT_INJECTION: forcing a failure. [ 455.522475][T20155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.522513][T20155] CPU: 1 UID: 0 PID: 20155 Comm: syz.4.4424 Not tainted syzkaller #0 PREEMPT(full) [ 455.522537][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 455.522551][T20155] Call Trace: [ 455.522560][T20155] [ 455.522570][T20155] dump_stack_lvl+0xe8/0x150 [ 455.522607][T20155] should_fail_ex+0x410/0x560 [ 455.522641][T20155] _copy_to_user+0x31/0xb0 [ 455.522683][T20155] simple_read_from_buffer+0xe1/0x170 [ 455.522721][T20155] proc_fail_nth_read+0x1bb/0x230 [ 455.522742][T20155] ? common_file_perm+0x20e/0x2b0 [ 455.522796][T20155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.522824][T20155] ? rw_verify_area+0x24a/0x4c0 [ 455.522858][T20155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.522880][T20155] vfs_read+0x213/0xa80 [ 455.522919][T20155] ? __pfx___mutex_lock+0x10/0x10 [ 455.522951][T20155] ? __pfx_vfs_read+0x10/0x10 [ 455.522985][T20155] ? __fget_files+0x2a/0x420 [ 455.523020][T20155] ? __fget_files+0x3a2/0x420 [ 455.523049][T20155] ? __fget_files+0x2a/0x420 [ 455.523090][T20155] ksys_read+0x150/0x270 [ 455.523114][T20155] ? __pfx_ksys_read+0x10/0x10 [ 455.523149][T20155] do_syscall_64+0x166/0x520 [ 455.523177][T20155] ? trace_irq_disable+0x3b/0x140 [ 455.523198][T20155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.523218][T20155] ? clear_bhb_loop+0x70/0xc0 [ 455.523244][T20155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.523264][T20155] RIP: 0033:0x7f27ed75e98e [ 455.523285][T20155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.523304][T20155] RSP: 002b:00007f27eb9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.523328][T20155] RAX: ffffffffffffffda RBX: 00007f27eb9f66c0 RCX: 00007f27ed75e98e [ 455.523344][T20155] RDX: 000000000000000f RSI: 00007f27eb9f60a0 RDI: 0000000000000003 [ 455.523358][T20155] RBP: 00007f27eb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.523372][T20155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.523385][T20155] R13: 00007f27eda26038 R14: 00007f27eda25fa0 R15: 00007ffc4e24e9e8 [ 455.523423][T20155] [ 455.965430][T20159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.143183][T20170] __nla_validate_parse: 4 callbacks suppressed [ 456.143207][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4430'. [ 456.452714][T20189] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4434'. [ 456.471378][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'. [ 456.471405][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 456.620097][T20191] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4435'. [ 456.620125][T20191] netlink: 27072 bytes leftover after parsing attributes in process `syz.3.4435'. [ 456.628266][T20191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4435'. [ 456.640901][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4437'. [ 456.738210][T20203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.775036][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4440'. [ 456.775076][T20205] block nbd6: Unsupported socket: should be TCP or UNIX. [ 456.837413][T20207] netlink: 13 bytes leftover after parsing attributes in process `syz.5.4441'. [ 456.899842][ T5625] Bluetooth: hci2: link tx timeout [ 456.899865][ T5625] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 456.914785][ T5625] Bluetooth: hci2: link tx timeout [ 456.914808][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 456.983327][T20210] tipc: Enabling of bearer rejected, failed to enable media [ 457.258341][T20223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 457.579427][T16116] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.735293][ T5625] Bluetooth: hci3: command 0x041b tx timeout [ 457.759228][T20254] FAULT_INJECTION: forcing a failure. [ 457.759228][T20254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.759261][T20254] CPU: 0 UID: 0 PID: 20254 Comm: syz.3.4457 Not tainted syzkaller #0 PREEMPT(full) [ 457.759283][T20254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.759294][T20254] Call Trace: [ 457.759302][T20254] [ 457.759311][T20254] dump_stack_lvl+0xe8/0x150 [ 457.759344][T20254] should_fail_ex+0x410/0x560 [ 457.759377][T20254] _copy_from_user+0x2d/0xb0 [ 457.759401][T20254] ___sys_sendmsg+0x1c6/0x360 [ 457.759426][T20254] ? __lock_acquire+0x747/0x2de0 [ 457.759449][T20254] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.759511][T20254] ? __fget_files+0x2a/0x420 [ 457.759535][T20254] ? __fget_files+0x3a2/0x420 [ 457.759571][T20254] __x64_sys_sendmsg+0x1b1/0x290 [ 457.759598][T20254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.759647][T20254] do_syscall_64+0x166/0x520 [ 457.759671][T20254] ? trace_irq_disable+0x3b/0x140 [ 457.759689][T20254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.759706][T20254] ? clear_bhb_loop+0x70/0xc0 [ 457.759729][T20254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.759746][T20254] RIP: 0033:0x7fb03b79e159 [ 457.759764][T20254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.759779][T20254] RSP: 002b:00007fb03c603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.759801][T20254] RAX: ffffffffffffffda RBX: 00007fb03ba25fa0 RCX: 00007fb03b79e159 [ 457.759814][T20254] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 457.759827][T20254] RBP: 00007fb03c603090 R08: 0000000000000000 R09: 0000000000000000 [ 457.759838][T20254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.759849][T20254] R13: 00007fb03ba26038 R14: 00007fb03ba25fa0 R15: 00007ffcbfa43428 [ 457.759881][T20254] [ 458.162613][T20270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 458.646146][T20304] netlink: 'syz.0.4471': attribute type 3 has an invalid length. [ 458.753590][T20310] vlan0: entered promiscuous mode [ 458.942987][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 459.259118][T20329] netlink: Failed to add helper -22 [ 459.259183][T20329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.570542][T20346] netlink: 'syz.4.4484': attribute type 83 has an invalid length. [ 460.349387][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.349656][T20383] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 460.349830][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.349988][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.350130][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.350277][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.350429][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.350585][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.350738][T20375] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 460.510013][T20393] FAULT_INJECTION: forcing a failure. [ 460.510013][T20393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.510040][T20393] CPU: 1 UID: 0 PID: 20393 Comm: syz.4.4494 Not tainted syzkaller #0 PREEMPT(full) [ 460.510055][T20393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.510063][T20393] Call Trace: [ 460.510068][T20393] [ 460.510074][T20393] dump_stack_lvl+0xe8/0x150 [ 460.510098][T20393] should_fail_ex+0x410/0x560 [ 460.510116][T20393] _copy_from_iter+0x1d3/0x1660 [ 460.510132][T20393] ? __alloc_skb+0x27a/0x7a0 [ 460.510149][T20393] ? __alloc_skb+0x27a/0x7a0 [ 460.510165][T20393] ? __alloc_skb+0x27a/0x7a0 [ 460.510180][T20393] ? __pfx__copy_from_iter+0x10/0x10 [ 460.510193][T20393] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 460.510206][T20393] ? __alloc_skb+0x27a/0x7a0 [ 460.510219][T20393] ? __alloc_skb+0x27a/0x7a0 [ 460.510238][T20393] ? netlink_sendmsg+0x650/0xb40 [ 460.510250][T20393] ? skb_put+0x112/0x210 [ 460.510268][T20393] netlink_sendmsg+0x6c0/0xb40 [ 460.510286][T20393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.510303][T20393] ? apparmor_socket_sendmsg+0x98/0x360 [ 460.510319][T20393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.510331][T20393] sock_sendmsg_nosec+0x13a/0x180 [ 460.510347][T20393] ____sys_sendmsg+0x54e/0x850 [ 460.510367][T20393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.510390][T20393] ? import_iovec+0x73/0xa0 [ 460.510408][T20393] ___sys_sendmsg+0x2a5/0x360 [ 460.510424][T20393] ? __lock_acquire+0x747/0x2de0 [ 460.510440][T20393] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.510484][T20393] ? __fget_files+0x2a/0x420 [ 460.510501][T20393] ? __fget_files+0x3a2/0x420 [ 460.510524][T20393] __x64_sys_sendmsg+0x1b1/0x290 [ 460.510543][T20393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.510573][T20393] do_syscall_64+0x166/0x520 [ 460.510589][T20393] ? trace_irq_disable+0x3b/0x140 [ 460.510602][T20393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.510615][T20393] ? clear_bhb_loop+0x70/0xc0 [ 460.510638][T20393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.510650][T20393] RIP: 0033:0x7f27ed79e159 [ 460.510663][T20393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.510676][T20393] RSP: 002b:00007f27eb9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.510699][T20393] RAX: ffffffffffffffda RBX: 00007f27eda25fa0 RCX: 00007f27ed79e159 [ 460.510714][T20393] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 460.510727][T20393] RBP: 00007f27eb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.510739][T20393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.510752][T20393] R13: 00007f27eda26038 R14: 00007f27eda25fa0 R15: 00007ffc4e24e9e8 [ 460.510791][T20393] [ 460.991172][T16121] tipc: Resetting bearer [ 461.017652][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 461.270721][T20414] __nla_validate_parse: 16 callbacks suppressed [ 461.270748][T20414] netlink: 13 bytes leftover after parsing attributes in process `syz.6.4498'. [ 461.632772][T20425] netlink: Failed to add helper -22 [ 461.632843][T20425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.632927][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4503'. [ 461.632953][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4503'. [ 461.659834][T20432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4503'. [ 461.659874][T20432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4503'. [ 461.859917][T20448] ipt_REJECT: TCP_RESET invalid for non-tcp [ 462.222490][T16121] tipc: Disabling bearer [ 462.338704][T16121]  (unregistering): (slave 30): Releasing backup interface [ 462.352683][T16121] : left allmulticast mode [ 462.362856][T16121]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.364101][T16121] bond_slave_1: left allmulticast mode [ 462.386814][T16121]  (unregistering): Released all slaves [ 462.437554][T16121] bond1 (unregistering): Released all slaves [ 462.525880][T16121] bond0 (unregistering): Released all slaves [ 462.581399][T16121] bond2 (unregistering): Released all slaves [ 462.641068][T16121] bond3 (unregistering): Released all slaves [ 463.086764][T20449] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 463.122086][T16121] tipc: Disabling bearer [ 463.122508][T16121] tipc: Left network mode [ 463.225243][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4512'. [ 463.498540][T16121] IPVS: stopping master sync thread 5915 ... [ 463.501671][T20492] netlink: Failed to add helper -22 [ 463.501728][T20492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.433289][T20552] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4523'. [ 465.871849][T20571] gtp0: entered promiscuous mode [ 465.871876][T20571] gtp0: entered allmulticast mode [ 466.452095][T20600] openvswitch: netlink: IP tunnel dst address not specified [ 466.452134][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.756905][T16121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.756933][T16121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.782913][T16121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.782940][T16121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.819048][T16121] veth1_macvtap: left promiscuous mode [ 466.822309][T16121] veth0_macvtap: left promiscuous mode [ 466.822484][T16121] veth1_vlan: left promiscuous mode [ 466.822531][T16121] veth0_vlan: left promiscuous mode [ 467.982177][ T4935] Bluetooth: hci1: command 0x0406 tx timeout [ 467.982270][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 468.077299][T16121] team_slave_1 (unregistering): left allmulticast mode [ 468.078200][T16121] team0 (unregistering): Port device team_slave_1 removed [ 468.115639][T16121] team_slave_0 (unregistering): left allmulticast mode [ 468.119401][T16121] team0 (unregistering): Port device team_slave_0 removed [ 468.369188][T20612] geneve2: entered promiscuous mode [ 468.369213][T20612] geneve2: entered allmulticast mode [ 468.445831][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4544'. [ 468.454712][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4544'. [ 468.982033][T20692] syzkaller0: entered promiscuous mode [ 468.982062][T20692] syzkaller0: entered allmulticast mode [ 470.072618][T20736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4564'. [ 470.283543][T20749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.679872][T20772] validate_nla: 58 callbacks suppressed [ 470.679897][T20772] netlink: 'syz.4.4576': attribute type 1 has an invalid length. [ 470.682562][T20774] netlink: 'syz.4.4576': attribute type 1 has an invalid length. [ 470.718371][T20770] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4572'. [ 470.737610][T20778] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 470.962605][T20791] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4578'. [ 471.197499][T20801] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 471.443394][T20807] netlink: 404 bytes leftover after parsing attributes in process `syz.5.4585'. [ 471.443416][T20807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4585'. [ 471.443430][T20807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4585'. [ 471.443440][T20807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4585'. [ 471.470603][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4585'. [ 471.590423][T20814] openvswitch: netlink: Key 6 has unexpected len 18 expected 2 [ 472.437995][T20863] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 472.501815][T20855] can: request_module (can-proto-0) failed. [ 472.532708][T20865] netlink: 'syz.3.4602': attribute type 30 has an invalid length. [ 472.622613][T20865] bond5: option arp_missed_max: invalid value (0) [ 472.622641][T20865] bond5: option arp_missed_max: allowed values 1 - 255 [ 472.651683][T20865] bond5 (unregistering): Released all slaves [ 472.784139][T20881] FAULT_INJECTION: forcing a failure. [ 472.784139][T20881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.784176][T20881] CPU: 0 UID: 0 PID: 20881 Comm: syz.0.4606 Not tainted syzkaller #0 PREEMPT(full) [ 472.784201][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.784214][T20881] Call Trace: [ 472.784224][T20881] [ 472.784233][T20881] dump_stack_lvl+0xe8/0x150 [ 472.784275][T20881] should_fail_ex+0x410/0x560 [ 472.784311][T20881] _copy_from_user+0x2d/0xb0 [ 472.784347][T20881] ___sys_recvmsg+0x173/0x5a0 [ 472.784388][T20881] ? __pfx____sys_recvmsg+0x10/0x10 [ 472.784423][T20881] ? lock_acquire+0x115/0x350 [ 472.784467][T20881] ? __fget_files+0x3a2/0x420 [ 472.784512][T20881] do_recvmmsg+0x31a/0x7f0 [ 472.784556][T20881] ? __pfx_do_recvmmsg+0x10/0x10 [ 472.784603][T20881] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.784640][T20881] ? __fget_files+0x3a2/0x420 [ 472.784683][T20881] __x64_sys_recvmmsg+0x198/0x250 [ 472.784719][T20881] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 472.784766][T20881] do_syscall_64+0x166/0x520 [ 472.784796][T20881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.784820][T20881] ? clear_bhb_loop+0x70/0xc0 [ 472.784846][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.784878][T20881] RIP: 0033:0x7fd29499e159 [ 472.784900][T20881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.784920][T20881] RSP: 002b:00007fd295824028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 472.784945][T20881] RAX: ffffffffffffffda RBX: 00007fd294c25fa0 RCX: 00007fd29499e159 [ 472.784962][T20881] RDX: 0000000000000001 RSI: 0000200000002900 RDI: 0000000000000004 [ 472.784977][T20881] RBP: 00007fd295824090 R08: 0000000000000000 R09: 0000000000000000 [ 472.784992][T20881] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000001 [ 472.785007][T20881] R13: 00007fd294c26038 R14: 00007fd294c25fa0 R15: 00007ffea8796d58 [ 472.785044][T20881] [ 473.085292][T20893] FAULT_INJECTION: forcing a failure. [ 473.085292][T20893] name failslab, interval 1, probability 0, space 0, times 0 [ 473.085317][T20893] CPU: 0 UID: 0 PID: 20893 Comm: syz.3.4610 Not tainted syzkaller #0 PREEMPT(full) [ 473.085331][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.085339][T20893] Call Trace: [ 473.085345][T20893] [ 473.085351][T20893] dump_stack_lvl+0xe8/0x150 [ 473.085374][T20893] should_fail_ex+0x410/0x560 [ 473.085392][T20893] should_failslab+0xa8/0x100 [ 473.085411][T20893] __kmalloc_noprof+0xfe/0x720 [ 473.085425][T20893] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 473.085442][T20893] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 473.085463][T20893] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 473.085484][T20893] genl_family_rcv_msg_doit+0xda/0x340 [ 473.085504][T20893] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 473.085524][T20893] ? apparmor_capable+0x126/0x170 [ 473.085540][T20893] ? bpf_lsm_capable+0x9/0x20 [ 473.085552][T20893] ? security_capable+0x7e/0x2c0 [ 473.085573][T20893] genl_rcv_msg+0x614/0x7a0 [ 473.085592][T20893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.085611][T20893] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 473.085743][T20893] ? __pfx_nl80211_probe_mesh_link+0x10/0x10 [ 473.085800][T20893] ? __pfx_nl80211_post_doit+0x10/0x10 [ 473.085840][T20893] netlink_rcv_skb+0x226/0x4a0 [ 473.085854][T20893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.085871][T20893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.085893][T20893] ? down_read+0x2be/0x330 [ 473.085914][T20893] genl_rcv+0x28/0x40 [ 473.085929][T20893] netlink_unicast+0x7bd/0x940 [ 473.085955][T20893] netlink_sendmsg+0x813/0xb40 [ 473.085974][T20893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.085992][T20893] ? apparmor_socket_sendmsg+0x18b/0x360 [ 473.086008][T20893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.086020][T20893] sock_sendmsg_nosec+0x13a/0x180 [ 473.086036][T20893] ____sys_sendmsg+0x54e/0x850 [ 473.086057][T20893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.086080][T20893] ? import_iovec+0x73/0xa0 [ 473.086100][T20893] ___sys_sendmsg+0x2a5/0x360 [ 473.086116][T20893] ? __lock_acquire+0x747/0x2de0 [ 473.086133][T20893] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.086172][T20893] ? __fget_files+0x2a/0x420 [ 473.086189][T20893] ? __fget_files+0x3a2/0x420 [ 473.086212][T20893] __x64_sys_sendmsg+0x1b1/0x290 [ 473.086231][T20893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.086265][T20893] do_syscall_64+0x166/0x520 [ 473.086281][T20893] ? trace_irq_disable+0x3b/0x140 [ 473.086295][T20893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.086307][T20893] ? clear_bhb_loop+0x70/0xc0 [ 473.086322][T20893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.086335][T20893] RIP: 0033:0x7fb03b79e159 [ 473.086348][T20893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.086359][T20893] RSP: 002b:00007fb03c5e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.086374][T20893] RAX: ffffffffffffffda RBX: 00007fb03ba26090 RCX: 00007fb03b79e159 [ 473.086383][T20893] RDX: 0000000020008888 RSI: 00002000000007c0 RDI: 0000000000000003 [ 473.086391][T20893] RBP: 00007fb03c5e2090 R08: 0000000000000000 R09: 0000000000000000 [ 473.086399][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.086407][T20893] R13: 00007fb03ba26128 R14: 00007fb03ba26090 R15: 00007ffcbfa43428 [ 473.086427][T20893] [ 473.334311][T20900] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 473.600170][T20913] __nla_validate_parse: 4 callbacks suppressed [ 473.600193][T20913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4618'. [ 473.600427][T20914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4618'. [ 473.718348][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 473.807026][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'. [ 473.811251][T20920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4620'. [ 473.811284][T20920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4620'. [ 473.811301][T20920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4620'. [ 473.930374][T20927] xt_cgroup: path and classid specified [ 474.061536][T20931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.846839][T20985] batman_adv: batadv0: Adding interface: veth0 [ 474.846860][T20985] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.847246][T20985] batman_adv: batadv0: Interface activated: veth0 [ 474.851749][T20985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4643'. [ 474.851767][T20985] batman_adv: batadv0: Interface deactivated: veth0 [ 474.851779][T20985] batman_adv: batadv0: Removing interface: veth0 [ 475.165975][T20992] IPVS: ip_vs_edit_dest(): server weight less than zero [ 475.167138][T16116] IPVS: starting estimator thread 0... [ 475.267330][T20993] IPVS: using max 24 ests per chain, 57600 per kthread [ 475.500793][T21008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4650'. [ 475.501152][T21008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4650'. [ 477.497489][T20959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.782072][T21024] syzkaller0: entered promiscuous mode [ 477.782100][T21024] syzkaller0: entered allmulticast mode [ 478.006629][T21038] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 478.613103][T21068] __nla_validate_parse: 5 callbacks suppressed [ 478.613131][T21068] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4668'. [ 478.613153][T21068] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4668'. [ 478.613180][T21068] netlink: 'syz.0.4668': attribute type 5 has an invalid length. [ 478.613194][T21068] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4668'. [ 479.255704][T21089] syzkaller0: entered promiscuous mode [ 479.255731][T21089] syzkaller0: entered allmulticast mode [ 479.371786][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 479.372637][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4676'. [ 479.372652][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4676'. [ 479.431230][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4676'. [ 479.431260][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4676'. [ 481.228493][T21053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.493064][T21127] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4683'. [ 481.520532][T21130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4684'. [ 481.613425][T21130] veth5: entered promiscuous mode [ 481.699939][T21131] veth7: entered promiscuous mode [ 481.760869][T21144] syzkaller0: entered promiscuous mode [ 481.760896][T21144] syzkaller0: entered allmulticast mode [ 482.125600][T21153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.345730][T21162] wg1 speed is unknown, defaulting to 1000 [ 482.777615][T21162] syzkaller0 speed is unknown, defaulting to 1000 [ 482.777669][T21153] wg1 speed is unknown, defaulting to 1000 [ 482.780094][T21162] netdevsim0 speed is unknown, defaulting to 1000 [ 483.429225][T21153] syzkaller0 speed is unknown, defaulting to 1000 [ 483.432835][T21153] netdevsim0 speed is unknown, defaulting to 1000 [ 483.829307][T21199] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 484.852079][T21203] syzkaller0: entered promiscuous mode [ 484.852096][T21203] syzkaller0: entered allmulticast mode [ 485.519005][T21168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.754304][T21216] __nla_validate_parse: 13 callbacks suppressed [ 485.754328][T21216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4706'. [ 485.893373][T16121] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 485.920352][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4712'. [ 485.920379][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4712'. [ 486.010462][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4712'. [ 486.010489][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4712'. [ 486.256875][T21250] syzkaller0: entered promiscuous mode [ 486.256902][T21250] syzkaller0: entered allmulticast mode [ 486.332604][T21258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4718'. [ 486.701192][T21280] netlink: 'syz.0.4726': attribute type 1 has an invalid length. [ 486.701255][T21280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.819405][T21289] netlink: 'syz.4.4728': attribute type 10 has an invalid length. [ 486.951999][T21280] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 486.953023][T21287] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 488.456672][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 488.739654][T21219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.920664][T21300] syzkaller0: entered promiscuous mode [ 488.920692][T21300] syzkaller0: entered allmulticast mode [ 488.955117][T21308] ieee802154 phy0 wpan0: encryption failed: -126 [ 488.969777][T21309] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4733'. [ 489.004936][T21310] ip_tables: iptables: counters copy to user failed while replacing table [ 489.100898][T21316] IPVS: length: 8 != 1152 [ 489.108820][T21309] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 489.187923][T21316] IPVS: length: 8 != 1152 [ 489.668107][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4743'. [ 489.748942][T21357] x_tables: unsorted underflow at hook 3 [ 489.941005][T21370] syzkaller0: entered promiscuous mode [ 489.941032][T21370] syzkaller0: entered allmulticast mode [ 490.205290][T21390] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4753'. [ 490.206309][T21390] gretap0: entered promiscuous mode [ 490.209698][T21390] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4753'. [ 490.209773][T21390] 0ªî{X¹¦: renamed from gretap0 [ 490.211924][T21390] 0ªî{X¹¦: left promiscuous mode [ 490.211938][T21390] 0ªî{X¹¦: entered allmulticast mode [ 490.221473][T21390] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 492.558664][T21342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.781664][T21401] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4756'. [ 492.829671][T21401] tipc: Enabling of bearer rejected, failed to enable media [ 493.270259][T21429] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 493.389442][T21432] syzkaller0: entered promiscuous mode [ 493.389466][T21432] syzkaller0: entered allmulticast mode [ 493.492311][T21435] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4764'. [ 493.718137][T21445] sctp: [Deprecated]: syz.4.4767 (pid 21445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.718137][T21445] Use struct sctp_sack_info instead [ 493.719036][T21445] sctp: [Deprecated]: syz.4.4767 (pid 21445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.719036][T21445] Use struct sctp_sack_info instead [ 493.802245][T21446] syzkaller0: entered promiscuous mode [ 493.802272][T21446] syzkaller0: entered allmulticast mode [ 493.840188][T21446] syzkaller0: left promiscuous mode [ 493.840214][T21446] syzkaller0: left allmulticast mode [ 493.915576][T21455] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4768'. [ 494.266393][T21477] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4777'. [ 494.330950][T21475] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4774'. [ 494.530357][T21491] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4781'. [ 494.581842][T21493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.600365][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 495.237419][T21515] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 495.577165][T21530] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4793'. [ 495.835376][T21544] bond5: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 495.843994][T21547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4797'. [ 496.031890][T21544] bond5 (unregistering): Released all slaves [ 496.189327][T21559] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4804'. [ 496.216359][T21558] syzkaller0: entered promiscuous mode [ 496.216385][T21558] syzkaller0: entered allmulticast mode [ 496.621777][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.903431][T21594] Bluetooth: MGMT ver 1.23 [ 496.982830][T21601] bridge8: entered promiscuous mode [ 496.982883][T21601] bridge8: entered allmulticast mode [ 497.048983][T21601] bridge9: entered promiscuous mode [ 497.050045][T21601] bridge9: entered allmulticast mode [ 497.069583][T21604] netlink: 'syz.6.4821': attribute type 1 has an invalid length. [ 497.133361][T21607] netlink: 'syz.5.4822': attribute type 1 has an invalid length. [ 497.175247][T21607] bond2: entered promiscuous mode [ 497.175678][T21607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.202652][T21609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.208334][T21609] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 497.208362][T21609] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 497.237569][T21609] bond2: (slave ip6gre1): making interface the new active one [ 497.241977][T21609] ip6gre1: entered promiscuous mode [ 497.259709][T21609] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 497.591385][T21604] veth3: entered allmulticast mode [ 497.758763][T21604] bond0: (slave veth3): Enslaving as an active interface with a down link [ 497.789399][T21611] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 498.029734][T21637] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 498.034262][T21637] __nla_validate_parse: 5 callbacks suppressed [ 498.034283][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4830'. [ 498.168275][T21646] netlink: 'syz.6.4831': attribute type 2 has an invalid length. [ 498.181278][T21651] netlink: 'syz.6.4831': attribute type 2 has an invalid length. [ 498.294531][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 498.346202][T21654] x_tables: unsorted underflow at hook 4 [ 499.449014][T21571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.449211][T21615] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4823'. [ 499.650671][T21659] netlink: 'syz.6.4835': attribute type 2 has an invalid length. [ 499.663065][T21659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4835'. [ 499.842914][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4839'. [ 499.952710][T21682] netlink: 'syz.6.4843': attribute type 2 has an invalid length. [ 499.952740][T21682] netlink: 'syz.6.4843': attribute type 2 has an invalid length. [ 500.327739][T21696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.673739][T21709] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4850'. [ 500.673868][T21709] 0·: renamed from c1· (while UP) [ 500.703128][T21709] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 501.042916][T21719] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4855'. [ 501.108054][T21724] netlink: 'syz.4.4857': attribute type 3 has an invalid length. [ 501.108081][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 501.123045][T21722] pimreg3: entered allmulticast mode [ 501.163659][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4857'. [ 501.215703][T21729] netlink: 'syz.5.4858': attribute type 3 has an invalid length. [ 501.292141][T21727] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4856'. [ 501.381075][T21737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4861'. [ 501.515057][T21742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.581721][T21742] team0: Port device xfrm0 added [ 501.592047][T21742] tipc: Started in network mode [ 501.592082][T21742] tipc: Node identity 16d56e04c0f6, cluster identity 4711 [ 501.592401][T21742] tipc: Enabled bearer , priority 0 [ 501.738559][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.739071][ T1312] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 501.741425][T21753] netlink: 'syz.3.4866': attribute type 1 has an invalid length. [ 501.821389][T21753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.870291][T16121] IPVS: starting estimator thread 0... [ 501.909536][T21753] bond5: (slave geneve3): making interface the new active one [ 501.913521][T21753] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 501.929214][T21764] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 501.956579][T21760] IPVS: using max 28 ests per chain, 67200 per kthread [ 502.140180][T21773] netlink: Unknown nat attribute (0) [ 502.140223][T21773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.193163][T21753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.279932][T21753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.304277][T21753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.427528][T18817] netdevsim0 speed is unknown, defaulting to 1000 [ 502.448350][T17579] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.448404][T17579] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.448441][T17579] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.516368][T17580] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.521349][T17580] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 502.521669][T17580] bond4: (slave veth3): making interface the new active one [ 502.634238][T16120] IPVS: starting estimator thread 0... [ 502.664271][T17580] bond4: active interface up! [ 502.731561][T18793] tipc: Node number set to 3592646148 [ 502.746836][T21799] IPVS: using max 27 ests per chain, 64800 per kthread [ 502.976179][T21812] netlink: Unknown nat attribute (0) [ 502.976220][T21812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.203804][T21827] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 503.408980][T21832] __nla_validate_parse: 3 callbacks suppressed [ 503.409004][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4892'. [ 503.447580][T21832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4892'. [ 503.447766][T21832] ipip0: entered allmulticast mode [ 503.501826][T21829] validate_nla: 2 callbacks suppressed [ 503.501850][T21829] netlink: 'syz.3.4891': attribute type 30 has an invalid length. [ 504.370180][T21874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4902'. [ 504.400803][T21876] IPVS: set_ctl: invalid protocol: 238 255.255.255.255:20003 [ 504.549502][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4902'. [ 504.549543][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4902'. [ 504.641930][T21890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4902'. [ 504.648534][T21890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4902'. [ 504.787465][T21874] bond3: entered promiscuous mode [ 504.789458][T21889] sctp: [Deprecated]: syz.5.4903 (pid 21889) Use of int in max_burst socket option. [ 504.789458][T21889] Use struct sctp_assoc_value instead [ 504.792379][T21874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.804022][T21876] dvmrp0: left allmulticast mode [ 504.932279][T21882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.936741][T21882] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 504.942469][T21882] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 505.075782][ T5280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.673940][T21927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4913'. [ 505.700254][T21933] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 505.702291][T21933] bond4 (unregistering): Released all slaves [ 506.085940][T21961] sctp: [Deprecated]: syz.0.4915 (pid 21961) Use of int in max_burst socket option. [ 506.085940][T21961] Use struct sctp_assoc_value instead [ 506.854921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.900384][T21997] Bluetooth: hci0: unsupported parameter 5135 [ 506.900412][T21997] Bluetooth: hci0: unsupported parameter 8192 [ 506.900426][T21997] Bluetooth: hci0: unsupported parameter 5135 [ 506.900439][T21997] Bluetooth: hci0: unsupported parameter 8192 [ 507.190630][T22009] bridge_slave_1: entered promiscuous mode [ 507.298693][T22013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4932'. [ 507.444599][T22018] netlink: 'syz.5.4933': attribute type 1 has an invalid length. [ 507.448366][T22018] netlink: 'syz.5.4933': attribute type 30 has an invalid length. [ 507.542125][T22018] bond3: option arp_missed_max: invalid value (0) [ 507.542155][T22018] bond3: option arp_missed_max: allowed values 1 - 255 [ 507.547148][T22018] bond3 (unregistering): Released all slaves [ 507.619279][T22023] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4934'. [ 507.715450][T22027] vlan2: entered promiscuous mode [ 507.715475][T22027] bond0: entered promiscuous mode [ 507.946235][T22047] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.138635][T22055] FAULT_INJECTION: forcing a failure. [ 508.138635][T22055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.138671][T22055] CPU: 1 UID: 0 PID: 22055 Comm: syz.5.4943 Not tainted syzkaller #0 PREEMPT(full) [ 508.138705][T22055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 508.138717][T22055] Call Trace: [ 508.138726][T22055] [ 508.138735][T22055] dump_stack_lvl+0xe8/0x150 [ 508.138772][T22055] should_fail_ex+0x410/0x560 [ 508.138800][T22055] _copy_from_user+0x2d/0xb0 [ 508.138828][T22055] kstrtouint_from_user+0xd6/0x180 [ 508.138857][T22055] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 508.138892][T22055] ? lock_acquire+0x115/0x350 [ 508.138921][T22055] proc_fail_nth_write+0x8e/0x210 [ 508.138946][T22055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.138978][T22055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.138998][T22055] vfs_write+0x296/0xba0 [ 508.139030][T22055] ? __pfx_vfs_write+0x10/0x10 [ 508.139050][T22055] ? __fget_files+0x2a/0x420 [ 508.139082][T22055] ? __fget_files+0x3a2/0x420 [ 508.139111][T22055] ? __fget_files+0x2a/0x420 [ 508.139148][T22055] ksys_write+0x150/0x270 [ 508.139167][T22055] ? __pfx_ksys_write+0x10/0x10 [ 508.139194][T22055] do_syscall_64+0x166/0x520 [ 508.139215][T22055] ? trace_irq_disable+0x3b/0x140 [ 508.139235][T22055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.139255][T22055] ? clear_bhb_loop+0x70/0xc0 [ 508.139280][T22055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.139302][T22055] RIP: 0033:0x7f462115e98e [ 508.139322][T22055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.139341][T22055] RSP: 002b:00007f4621ff7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 508.139364][T22055] RAX: ffffffffffffffda RBX: 00007f4621ff86c0 RCX: 00007f462115e98e [ 508.139380][T22055] RDX: 0000000000000001 RSI: 00007f4621ff80a0 RDI: 0000000000000005 [ 508.139393][T22055] RBP: 00007f4621ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 508.139406][T22055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.139419][T22055] R13: 00007f4621426038 R14: 00007f4621425fa0 R15: 00007fff41c88cc8 [ 508.139455][T22055] [ 508.395851][T22061] netlink: 'syz.3.4945': attribute type 97 has an invalid length. [ 508.395878][T22061] netlink: 'syz.3.4945': attribute type 97 has an invalid length. [ 508.437794][T22063] __nla_validate_parse: 6 callbacks suppressed [ 508.437818][T22063] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4946'. [ 508.437858][T22063] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4946'. [ 508.437874][T22063] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4946'. [ 508.967351][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 508.967744][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 508.972032][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 508.972390][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 508.972816][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 509.030081][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 509.034002][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 509.034549][T22085] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 509.046471][T22089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4953'. [ 509.312842][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4955'. [ 509.823153][T22107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4957'. [ 509.826868][T22110] 8021q: VLANs not supported on ip6gre0 [ 510.419874][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4970'. [ 510.524169][T22146] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 510.687462][T22156] nftables ruleset with unbound set [ 510.893609][T22170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4981'. [ 510.903892][T22171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4981'. [ 510.962588][T22175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4982'. [ 510.995817][T22170] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 511.049126][T22171] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 513.339269][T22244] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.339395][T17579] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.393497][T22246] netlink: 'syz.5.5002': attribute type 10 has an invalid length. [ 513.393517][T22246] net_ratelimit: 22 callbacks suppressed [ 513.393525][T22246] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.519748][T22250] sock: sock_set_timeout: `syz.6.5004' (pid 22250) tries to set negative timeout [ 513.520301][T22252] __nla_validate_parse: 1 callbacks suppressed [ 513.520313][T22252] netlink: 13 bytes leftover after parsing attributes in process `syz.5.5005'. [ 513.759383][T22258] tipc: Enabled bearer , priority 1 [ 513.760876][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. [ 513.760900][T22258] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5008'. [ 513.810679][T22257] tipc: Resetting bearer [ 513.871386][T22262] netlink: 'syz.4.5011': attribute type 10 has an invalid length. [ 513.910070][T22257] tipc: Disabling bearer [ 513.928218][T22265] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5011'. [ 513.940686][T22262] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.942818][T22262] team0: entered promiscuous mode [ 513.943568][T22262] bond0: (slave team0): Enslaving as an active interface with a down link [ 514.131426][T22274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.468405][T22297] netlink: 'syz.5.5020': attribute type 1 has an invalid length. [ 514.554537][T22297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.590023][T22297] netlink: 'syz.5.5020': attribute type 1 has an invalid length. [ 514.590048][T22297] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5020'. [ 514.590063][T22297] netlink: 'syz.5.5020': attribute type 2 has an invalid length. [ 514.590076][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5020'. [ 514.606792][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5021'. [ 514.606821][T22302] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5021'. [ 514.666982][T22300] bond3: (slave veth5): Enslaving as an active interface with a down link [ 514.679994][T22297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 514.683595][T22297] bond3: (slave batadv1): making interface the new active one [ 514.688391][T22297] batadv1: entered promiscuous mode [ 514.690531][T22297] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 515.009492][T22316] netlink: 'syz.3.5024': attribute type 4 has an invalid length. [ 515.012309][T22316] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5024'. [ 515.112795][T22324] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5027'. [ 515.193379][T22326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.425450][T22338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.168202][T22372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.873230][T22414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.655044][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 517.910582][T22465] netlink: 'syz.0.5068': attribute type 1 has an invalid length. [ 517.958507][T22465] bond5: entered promiscuous mode [ 517.959087][T22465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.015982][T22465] macvtap1: entered allmulticast mode [ 518.034862][T22465] bond5: (slave bridge1): making interface the new active one [ 518.034891][T22465] bridge1: entered promiscuous mode [ 518.036500][T22465] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 518.681351][T22505] __nla_validate_parse: 19 callbacks suppressed [ 518.681376][T22505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5082'. [ 518.973380][T22521] netlink: 'syz.3.5087': attribute type 7 has an invalid length. [ 518.986486][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5087'. [ 519.070111][T22521] hsr_slave_1 (unregistering): left promiscuous mode [ 519.077275][T22523] FAULT_INJECTION: forcing a failure. [ 519.077275][T22523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.077307][T22523] CPU: 0 UID: 0 PID: 22523 Comm: syz.5.5088 Not tainted syzkaller #0 PREEMPT(full) [ 519.077329][T22523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.077341][T22523] Call Trace: [ 519.077349][T22523] [ 519.077358][T22523] dump_stack_lvl+0xe8/0x150 [ 519.077392][T22523] should_fail_ex+0x410/0x560 [ 519.077421][T22523] _copy_to_user+0x31/0xb0 [ 519.077452][T22523] simple_read_from_buffer+0xe1/0x170 [ 519.077485][T22523] proc_fail_nth_read+0x1bb/0x230 [ 519.077504][T22523] ? common_file_perm+0x20e/0x2b0 [ 519.077530][T22523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.077553][T22523] ? rw_verify_area+0x24a/0x4c0 [ 519.077583][T22523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.077602][T22523] vfs_read+0x213/0xa80 [ 519.077634][T22523] ? __pfx___mutex_lock+0x10/0x10 [ 519.077661][T22523] ? __pfx_vfs_read+0x10/0x10 [ 519.077689][T22523] ? __fget_files+0x2a/0x420 [ 519.077719][T22523] ? __fget_files+0x3a2/0x420 [ 519.077743][T22523] ? __fget_files+0x2a/0x420 [ 519.077777][T22523] ksys_read+0x150/0x270 [ 519.077798][T22523] ? __pfx_ksys_read+0x10/0x10 [ 519.077829][T22523] do_syscall_64+0x166/0x520 [ 519.077853][T22523] ? trace_irq_disable+0x3b/0x140 [ 519.077871][T22523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.077891][T22523] ? clear_bhb_loop+0x70/0xc0 [ 519.077914][T22523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.077932][T22523] RIP: 0033:0x7f462115e98e [ 519.077950][T22523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.077966][T22523] RSP: 002b:00007f4621ff7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.077987][T22523] RAX: ffffffffffffffda RBX: 00007f4621ff86c0 RCX: 00007f462115e98e [ 519.078001][T22523] RDX: 000000000000000f RSI: 00007f4621ff80a0 RDI: 0000000000000003 [ 519.078013][T22523] RBP: 00007f4621ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 519.078024][T22523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.078036][T22523] R13: 00007f4621426038 R14: 00007f4621425fa0 R15: 00007fff41c88cc8 [ 519.078068][T22523] [ 519.452181][T22539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5091'. [ 519.452476][T22539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5091'. [ 519.465196][T22537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5092'. [ 519.597001][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5093'. [ 519.623459][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5094'. [ 519.623497][T22549] netlink: 'syz.3.5094': attribute type 5 has an invalid length. [ 519.623514][T22549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5094'. [ 519.657871][T22549] geneve4: entered promiscuous mode [ 519.657897][T22549] geneve4: entered allmulticast mode [ 519.685339][T16121] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 519.685438][T16121] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 519.685575][T16121] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 519.685717][T16121] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 519.798127][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5097'. [ 519.853205][T22554] hsr_slave_1 (unregistering): left promiscuous mode [ 519.916026][T22562] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5098'. [ 520.053154][T22570] netlink: 'syz.6.5100': attribute type 21 has an invalid length. [ 520.053184][T22570] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.053273][T22570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.053284][T22570] IPv6: NLM_F_CREATE should be set when creating new route [ 520.053326][T22570] IPv6: NLM_F_CREATE should be set when creating new route [ 520.053341][T22570] IPv6: NLM_F_CREATE should be set when creating new route [ 520.229110][T22578] syzkaller0: entered promiscuous mode [ 520.229135][T22578] syzkaller0: entered allmulticast mode [ 520.592182][T22585] netlink: 'syz.6.5106': attribute type 1 has an invalid length. [ 520.669255][T22596] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 520.700556][T22596] syzkaller1: entered promiscuous mode [ 520.700583][T22596] syzkaller1: entered allmulticast mode [ 520.728402][T22596] netlink: 'syz.4.5108': attribute type 10 has an invalid length. [ 520.728435][T22596] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 520.728449][T22596] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 520.732403][T22596] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 520.747451][T22596] team0: Port device wlan0 added [ 520.886344][T22603] netlink: Conntrack attr has 12 unknown bytes [ 520.886388][T22603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.546047][T22636] netlink: 'syz.3.5123': attribute type 21 has an invalid length. [ 521.664716][T22641] netlink: 'syz.5.5128': attribute type 1 has an invalid length. [ 521.670404][T22639] No such timeout policy "" [ 521.670426][T22639] netlink: Failed to associated timeout policy '' [ 521.703300][T22644] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 521.703340][T22644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.752846][T22645] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20001 [ 522.003717][T22651] netlink: Failed to add helper -22 [ 522.003780][T22651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.017041][T22657] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 522.022712][T22657] wireguard: wg2: Could not create IPv4 socket [ 522.238936][T22675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.481253][T22684] netlink: Unknown conntrack attr (type=22, max=9) [ 523.060421][T22717] sctp: [Deprecated]: syz.5.5152 (pid 22717) Use of int in max_burst socket option deprecated. [ 523.060421][T22717] Use struct sctp_assoc_value instead [ 523.099346][T22721] sctp: [Deprecated]: syz.5.5152 (pid 22721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.099346][T22721] Use struct sctp_sack_info instead [ 523.426457][T22743] netlink: 'syz.4.5159': attribute type 1 has an invalid length. [ 523.483114][T22743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.577420][T22743] netlink: 'syz.4.5159': attribute type 10 has an invalid length. [ 523.577683][T22744] netlink: 'syz.4.5159': attribute type 10 has an invalid length. [ 524.135612][ T32] INFO: task syz.1.3421:16913 blocked for more than 143 seconds. [ 524.135643][ T32] Not tainted syzkall ** replaying previous printk message ** [ 524.135643][ T32] Not tainted syzkaller #0 [ 524.135655][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.135666][ T32] task:syz.1.3421 state:D stack:25872 pid:16913 tgid:16910 ppid:15567 task_flags:0x400140 flags:0x00080002 [ 524.135735][ T32] Call Trace: [ 524.135743][ T32] [ 524.135778][ T32] __schedule+0x17db/0x58f0 [ 524.135846][ T32] ? __pfx___schedule+0x10/0x10 [ 524.135885][ T32] ? schedule+0x90/0x2b0 [ 524.135917][ T32] schedule+0x164/0x2b0 [ 524.135947][ T32] schedule_preempt_disabled+0x13/0x30 [ 524.135973][ T32] __mutex_lock+0x7c1/0x1550 [ 524.136018][ T32] ? __mutex_lock+0x5d4/0x1550 [ 524.136051][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 524.136178][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 524.136217][ T32] ? net_generic+0x1e/0x240 [ 524.136242][ T32] ? net_generic+0x1e/0x240 [ 524.136275][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 524.136302][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 524.136365][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 524.136503][ T32] ? do_syscall_64+0x166/0x520 [ 524.136532][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.136559][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 524.136603][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 524.136652][ T32] ? rcu_is_watching+0x16/0xb0 [ 524.136681][ T32] ? trace_kmalloc+0x2a/0xf0 [ 524.136706][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 524.136733][ T32] ? __nla_parse+0x40/0x60 [ 524.136766][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 524.136796][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 524.136834][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 524.136871][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.136915][ T32] ? bpf_lsm_capable+0x9/0x20 [ 524.136936][ T32] ? security_capable+0x7e/0x2c0 [ 524.136971][ T32] genl_rcv_msg+0x614/0x7a0 [ 524.137016][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.137043][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 524.137089][ T32] netlink_rcv_skb+0x226/0x4a0 [ 524.137113][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.137141][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.137180][ T32] ? down_read+0x2be/0x330 [ 524.137214][ T32] genl_rcv+0x28/0x40 [ 524.137239][ T32] netlink_unicast+0x7bd/0x940 [ 524.137282][ T32] netlink_sendmsg+0x813/0xb40 [ 524.137316][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.137346][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 524.137375][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.137423][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 524.137453][ T32] ____sys_sendmsg+0x54e/0x850 [ 524.137488][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.141146][ T32] ? import_iovec+0x73/0xa0 [ 524.141191][ T32] ___sys_sendmsg+0x2a5/0x360 [ 524.141221][ T32] ? __lock_acquire+0x747/0x2de0 [ 524.141250][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.141284][ T32] ? futex_wait+0x2a2/0x390 [ 524.141370][ T32] ? __fget_files+0x2a/0x420 [ 524.141400][ T32] ? __fget_files+0x3a2/0x420 [ 524.141441][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 524.141474][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.141528][ T32] do_syscall_64+0x166/0x520 [ 524.141557][ T32] ? trace_irq_disable+0x3b/0x140 [ 524.141579][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.141601][ T32] ? clear_bhb_loop+0x70/0xc0 [ 524.141644][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.141667][ T32] RIP: 0033:0x7f7d2d19e159 [ 524.141687][ T32] RSP: 002b:00007f7d2df92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.142442][ T32] RAX: ffffffffffffffda RBX: 00007f7d2d425fa0 RCX: 00007f7d2d19e159 [ 524.142463][ T32] RDX: 0000000004008090 RSI: 0000200000000040 RDI: 0000000000000004 [ 524.142478][ T32] RBP: 00007f7d2d23506b R08: 0000000000000000 R09: 0000000000000000 [ 524.142491][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.142504][ T32] R13: 00007f7d2d426038 R14: 00007f7d2d425fa0 R15: 00007ffd01cdfe88 [ 524.142539][ T32] [ 524.142584][ T32] [ 524.142584][ T32] Showing all locks held in the system: [ 524.142647][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 524.144116][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 524.145044][ T32] locks held by kworker/u8:11/3392: 2, on CPU#0: [ 524.145060][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 524.145242][ T32] #1: ffffc9000e0f7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 524.145300][ T32] locks held by getty/5375: 2, on CPU#0: [ 524.145313][ T32] #0: ffff888035d7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 524.145424][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 524.145506][ T32] locks held by syz.2.3039/15466: 2, on CPU#0: [ 524.145520][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.145569][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 524.145647][ T32] locks held by syz.1.3421/16913: 2, on CPU#0: [ 524.145661][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.145708][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 524.145768][ T32] locks held by syz.3.5162/22753: 2, on CPU#1: [ 524.145782][ T32] #0: ffff8880362a4490 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: pfkey_sendmsg+0x495/0x11d0 [ 524.145855][ T32] #1: ffffffff903a6ee0 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_register+0x110/0x890 [ 524.145900][ T32] locks held by syz.0.5165/22763: 1, on CPU#0: [ 524.145913][ T32] #0: ffffffff903a6ee0 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_create+0x1d3/0x570 [ 524.145973][ T32] locks held by syz.5.5164/22762: 4, on CPU#1: [ 524.145986][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.146033][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 524.146080][ T32] #2: ffff8880253ff140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 524.146177][ T32] #3: ffff8880558ae348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 524.146241][ T32] locks held by modprobe/22778: 1, last CPU#0: [ 524.149452][ T32] #0: ffff88807bfb4cc0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 524.149511][ T32] locks held by syz.4.5168/22781: 2, last CPU#1: [ 524.149524][ T32] #0: ffff888050920f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 524.149634][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 524.149688][ T32] locks held by syz.6.5169/22780: 2, last CPU#0: [ 524.149701][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500 [ 524.149744][ T32] #1: ffff888063d356c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 524.149807][ T32] [ 524.149813][ T32] ============================================= [ 524.149813][ T32] [ 524.149822][ T32] NMI backtrace for cpu 1 [ 524.149835][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.149855][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 524.149865][ T32] Call Trace: [ 524.149873][ T32] [ 524.149882][ T32] dump_stack_lvl+0xe8/0x150 [ 524.149909][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 524.149982][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 524.150019][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 524.150043][ T32] sys_info+0x135/0x170 [ 524.150062][ T32] watchdog+0xfd7/0x1030 [ 524.150090][ T32] ? watchdog+0x1c7/0x1030 [ 524.150116][ T32] kthread+0x38b/0x480 [ 524.150135][ T32] ? __pfx_watchdog+0x10/0x10 [ 524.150152][ T32] ? __pfx_kthread+0x10/0x10 [ 524.150172][ T32] ret_from_fork+0x514/0xb70 [ 524.150204][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 524.150222][ T32] ? __switch_to+0xc89/0x1420 [ 524.150262][ T32] ? __pfx_kthread+0x10/0x10 [ 524.150282][ T32] ret_from_fork_asm+0x1a/0x30 [ 524.150323][ T32] [ 524.150357][ T32] Sending NMI from CPU 1 to CPUs 0: [ 524.150386][ C0] NMI backtrace for cpu 0 [ 524.150401][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 524.150423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 524.150433][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 524.150513][ C0] Code: e8 7e 83 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 7f 76 06 cc 44 89 f9 80 e1 07 [ 524.150530][ C0] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 524.150547][ C0] RAX: 1ffffffff35a8800 RBX: 00000000000003fd RCX: 0000000000000000 [ 524.150561][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 524.150574][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 524.150587][ C0] R10: dffffc0000000000 R11: ffffffff85736a40 R12: dffffc0000000000 [ 524.150601][ C0] R13: 0000000000000000 R14: ffffffff9ad44300 R15: 0000000000000000 [ 524.150614][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 524.150630][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.150644][ C0] CR2: 00007efdb2ddbbc0 CR3: 000000005a508000 CR4: 00000000003526f0 [ 524.150662][ C0] Call Trace: [ 524.150670][ C0] [ 524.150679][ C0] wait_for_lsr+0x184/0x2f0 [ 524.150707][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 524.150738][ C0] serial8250_console_write+0xaa1/0x1200 [ 524.150764][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 524.150785][ C0] ? rcu_is_watching+0x16/0xb0 [ 524.150815][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 524.150854][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 524.150878][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 524.150905][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 524.150930][ C0] nbcon_kthread_func+0x679/0x880 [ 524.150953][ C0] ? nbcon_kthread_func+0x163/0x880 [ 524.150973][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 524.150996][ C0] ? __kthread_parkme+0x71/0x1f0 [ 524.151022][ C0] ? __kthread_parkme+0x199/0x1f0 [ 524.151050][ C0] kthread+0x38b/0x480 [ 524.151067][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 524.151086][ C0] ? __pfx_kthread+0x10/0x10 [ 524.151105][ C0] ret_from_fork+0x514/0xb70 [ 524.151124][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 524.151142][ C0] ? __switch_to+0xc89/0x1420 [ 524.151166][ C0] ? __pfx_kthread+0x10/0x10 [ 524.151184][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.151218][ C0] [ 524.158551][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 525.191549][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.200683][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 525.210841][ T32] Call Trace: [ 525.214221][ T32] [ 525.217160][ T32] vpanic+0x56d/0xa60 [ 525.221200][ T32] ? __pfx___schedule+0x10/0x10 [ 525.226086][ T32] ? __pfx_vpanic+0x10/0x10 [ 525.230609][ T32] panic+0xc5/0xd0 [ 525.234343][ T32] ? __pfx_panic+0x10/0x10 [ 525.238770][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 525.244256][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 525.249639][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 525.255803][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 525.261971][ T32] watchdog+0x1030/0x1030 [ 525.266320][ T32] ? watchdog+0x1c7/0x1030 [ 525.270759][ T32] kthread+0x38b/0x480 [ 525.274833][ T32] ? __pfx_watchdog+0x10/0x10 [ 525.279526][ T32] ? __pfx_kthread+0x10/0x10 [ 525.284129][ T32] ret_from_fork+0x514/0xb70 [ 525.288837][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 525.293956][ T32] ? __switch_to+0xc89/0x1420 [ 525.298744][ T32] ? __pfx_kthread+0x10/0x10 [ 525.303339][ T32] ret_from_fork_asm+0x1a/0x30 [ 525.308128][ T32] [ 525.311464][ T32] Kernel Offset: disabled [ 525.315786][ T32] Rebooting in 86400 seconds..