last executing test programs: 2.29063763s ago: executing program 1 (id=2429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='f2fs_direct_IO_exit\x00', r3}, 0x11) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="2e025ca010df32b7fd6ea110a1ed18e091d82377173dbf023978f86bcd4fcb1d2ae9745bdb5b44a358e80af1847ab802de93d37c208893ff3ffc6675eeba4a6a11c3af80bebd2397e4f0a7e9ed482d6be3bae7424b4ff87e9de1243845d5abddae081c06911f580372de6d5956b3bda1a096086dfae1a2d30410fa573fd9792b45c742d7eb5e292d82e1fbd4526e90b2f40000", @ANYRES16=r5, @ANYBLOB="010000000000000000000d000000050007001200000006000a000300000006000800000000000500170000000000"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) listen(r2, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0xc) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x10000000, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf3, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7ffffeff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x8, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x1, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xa, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x7, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x10001, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0xb}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xfffffffb, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0x8001, 0xfff, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0xffffffff, 0xfff}, {0xc2ea, 0xd, 0x1, 0xff, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x8001, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x80, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x4, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x344, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x2, 0x8, 0x800, 0x3}, {0x4, 0xed22, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0xb, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x100}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x0, 0x8, 0x4, 0x7}, {0x10010, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0x8, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0xfff, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x45a, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x20000002, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x4, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x80022c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x5, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x3ff, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x4, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18b, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffdfffc, 0x9, 0x5, 0x4, 0xca, 0xffffffe2}, {0x0, 0x3, 0x8, 0x4f2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x80, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x7fff, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0x2, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x45, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0xe, 0x4, 0x8, 0x4, 0x9, 0x2}, {0x9, 0x1, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0x0, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x2, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x6}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x4}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x2}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x6}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.883014131s ago: executing program 0 (id=2434): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @empty}}}, 0x90) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000000)=0x8000007, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x53, 0x1, 0x5, [{@multicast2, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x34, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {@rand_addr=0x64010102}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast}, {@dev, 0x4}]}]}}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x0, 0x40}, {}, {0x6, 0x0, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.704691295s ago: executing program 3 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.640688028s ago: executing program 0 (id=2437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095f33200000000006916000000000000bf67000000000000350605000fff07206706000002000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d39d25991b085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e5671c888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e17417a249a2cd8ff62aa6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a122822bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c6310121ecb9029e7f835420f8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc12b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35349fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d3743a0be77b64961753faba6131c136fb14b1963960f2f7f118bc451a18b216bf26c3cec2575a059da60baede629711a5f11c347fcbca73440d27b1147b44fb15106c00669da23964fd9de079d1a9077848100f6e75d29b2d60016abc6ef1542bd3062f599676bb04e64decb6c843a407f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 1.612283214s ago: executing program 2 (id=2438): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x140a, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20001000}, 0xc050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31f11f1c00010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x35}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) 1.603579194s ago: executing program 4 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_simple={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2}}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x49a}}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) 1.487525056s ago: executing program 4 (id=2440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x9a9, 0x9, 0xff, 0x4, 0x1fffffd}, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x3}, 0x1c) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001a00)="ec5946a3efa0d521f9198c86b098f490b7faac62f08585040ecaa665f5c17c1a5ab5c748c93c7847fe", 0x29}], 0x1}}], 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000100001", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005001d00010000000500200000000000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 1.481696435s ago: executing program 2 (id=2441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7, 0xb64, 0x8c}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r2}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4000) r5 = socket(0x8, 0x2, 0x401) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x9, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x810) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0x18, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x406, 0x1, 0x1, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r9}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0xfffffffffffffdc9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.475685561s ago: executing program 3 (id=2442): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000002c40)=[{{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000180)}, 0x6}, {{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x78}, 0x19}, {{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/42, 0x2a}, {&(0x7f00000007c0)}], 0x7, &(0x7f0000000a00)=""/239, 0xef}, 0x6}, {{&(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/166, 0xa6}, {&(0x7f0000001bc0)}], 0x3, &(0x7f0000001c40)=""/4096, 0x1000}, 0x4}], 0x4, 0x100, &(0x7f0000002d40)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r4, @ANYRESOCT], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r4, @ANYRESOCT], 0xfc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1.418131551s ago: executing program 4 (id=2443): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x9, [@struct={0xe, 0x7, 0x0, 0x4, 0x0, 0x8, [{0x3, 0x2, 0x3}, {0x10, 0x5, 0x7}, {0xb, 0x4, 0x4}, {0xd, 0x1, 0xc23}, {0xf, 0x3}, {0x0, 0x1, 0x32db210d}, {0x9, 0x2, 0x3}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @union={0xd, 0x1, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x4}}]}, {0x0, [0x30, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x0]}}, &(0x7f00000006c0)=""/95, 0xd5, 0x5f, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000004c0)=@raw=[@generic={0x25, 0x7, 0x1, 0x1, 0x29f}, @ldst={0x0, 0x0, 0x3, 0x8, 0x8, 0xfffffffffffffff8, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x79}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0x9a, 0x75, &(0x7f0000000540)=""/117, 0x41000, 0x62, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0x10, 0xfffffff8, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[r1], &(0x7f0000000840)=[{0x2, 0x5, 0x100, 0xa}, {0x4, 0x3, 0x1, 0x8}, {0x2, 0x4, 0x6, 0x9}, {0x2, 0x5, 0x2, 0x4}, {0x1, 0x5, 0x2, 0xa}, {0x2, 0x4, 0x4, 0x3}, {0x5, 0x2, 0x1, 0x3}, {0x2, 0x3, 0x9}, {0x1, 0x1, 0x10, 0x6}], 0x10, 0xc}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0xc5, &(0x7f0000000340)="b6a57c64900c18a8cde1e57fbe26ad215c9ff2d49e6bfa130691c611704c84d543e2c5ec5adce5f2e93fdf7a5e33d2f1e12c3c612864ad9b6c385d51e7bc82bbc04515c14f2a9cff92b902ee52494569799d7e81df458cc94a6098d02616c3a8f63bc9df96600e81032a6c19189c7ba5d2e6a90ea650a1594c0e1b686a01edaa96061dbc5fe830de63db3d7a4442cb2f1b626b768b0228c9e16301b849fcf253218007748e7b4e46d0fe32a76be45a26fd2741a3082d4754f908c7e9bfd323889ebe572d4a", 0x7, 0x0, &(0x7f0000000180)="f71bfa1e7369b6"}) sendmsg$sock(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="41cc26ba1052449e5a9244d388cddacc36513c4fd286ff2e982706a914fe0e9b5d9bfaddea67", 0x26}], 0x1}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 1.230280327s ago: executing program 1 (id=2444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090700000020000000001c140000fe00000100000000080003"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x300}]}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x60}}, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r10 = socket$rds(0x15, 0x5, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=@newchain={0x3c, 0x64, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0xffd5}, {0x6, 0x10}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x80}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7e}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) bind$rds(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000000008a500000086000000bf0900000000000055090100000000409500000000000000bf91000000000000b702000003000000850000002a000000b70000010000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 1.222280686s ago: executing program 3 (id=2445): r0 = socket(0x28, 0x80000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa47a}]}}]}, 0x44}}, 0x8014) (async) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x52}}], 0x1, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000040)=0x40) 1.206230824s ago: executing program 2 (id=2446): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000000000070000603a00000000"], 0x30}}], 0x1, 0xc080) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x8, 0x7ff, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) 1.083339935s ago: executing program 3 (id=2447): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="3508c5df02f30000"], &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x5, &(0x7f0000000d00)=""/5, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x7, 0x700, 0x0, 0x3, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0xc1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty}}}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r5, r4, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r9 = gettid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r9, r10, 0x0, 0x0, 0x0}, 0x30) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000500b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x1a, &(0x7f0000000a00)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000300000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0xbe, &(0x7f0000000340)=""/190, 0x40f00, 0xf, '\x00', r2, @fallback=0x11, r4, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x10, 0x1, 0xfffeffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000680)=[r6, r7, r8, r10, 0x1, r11], &(0x7f00000006c0)=[{0x3, 0x3, 0x2, 0x2}, {0x4, 0x2, 0x3, 0x3}, {0x3, 0x2, 0x3}, {0x2, 0x4, 0xb, 0x7}, {0x5, 0x2, 0xd, 0x6}, {0x4, 0x1, 0xc, 0xa}, {0x2, 0x4, 0xc, 0x3}], 0x10, 0x5}, 0x94) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}], 0x48}, 0x0) 1.043421013s ago: executing program 4 (id=2448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x238}}], 0x2, 0x24000045) 1.0030731s ago: executing program 1 (id=2449): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x42090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x3}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_RAW={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 933.471908ms ago: executing program 3 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc4b47ba62f8", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x30000095}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040800) 932.495065ms ago: executing program 4 (id=2451): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) select(0x300, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000000}) 809.992275ms ago: executing program 3 (id=2452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x31}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000003c0)=0x401, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x250, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_EXPRESSIONS={0x11c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x6c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x36, 0x3, "091d698667ff4d8d2640d4bc65e24a0183e18373fc5364b3c7eed26452fd88f6ae26a3002ae819adfb58b946d635c86af682"}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0xec, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x457db44bf574c909}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x1c8, 0x3, 0xa, 0x601, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xc6, 0xc, "cf15d3e318d623b6db35e22d74ce2c915dfbdba05fdb4061c9daddcd8f44a1c0bf573fc058fadf37171e5004672a23de966a09726fb6d565eedbd6b9450b9a83427ad880b22989ae0c588ee771737daf5ec64ef1f77549c5afdd7b62c54754f7ce28fcdd707e1f4f3bdf00abe565630ee3dfc2d9196788f96bea43127831818b795788f0266a36d5eb8b769524d1a7a52eb4b3c3f5c201896953e5c8d423dc7035a4f73a68e45628558fd3ec7d418043e45eb5cdddca1f5b4e9bfb78fda4683452d8"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x7c, 0xc, "0fcea78a45bec2652866b8322c667a1dcb831cea4015480620bd2c51a762ddd5aeb6a0ec4d27e79932af8bf202abc68708b28d89d8626dfcdc7f70f313b221392b0756c554b645006c5e98175f8ba7e623674e1f4fb2ff54e3afb3ff7896422d66a5bf8ed8d784b5e5e8115dfdb1ecfa24692bcb55003acc"}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x49f32902}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xcdd8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0xe90, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe5c, 0x3, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xf}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3fe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "f25bcfd852328734d2060ed1b0bb2f5bebefb80714b3ac7dfeed863366f59b76d7e060483541c9458dafd617e322a437dc874da9802df881ad96abcf38baabd26ee493ac59e07aa8c1adf48c85b3898d9d999fb5eda7f583a645124b333ae98d087df2ec38703a1bf6fc57cfc94e70df2c53f13ca22069a193c7e0b1a9f9fa9aff53152a045c3d236d34314c09fcb56b3c13b10c680d4099832de4c661f9"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, {0x690, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x204, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x40}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1a4, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x194, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xa3}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_EXPR={0x180, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x16c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x83, 0x1, "c68d393eaea1b0c072e980581717f72b00c17c537cc6a983eea89ec19dabb181a65ee149b1372a0e0e9271de16c52c6f0826c3fbb94495e2f11884a26f404c0067a1b3208d3b03d6c4e4702da7c76313b3db90134f240707003f9e51cddfe42290fb48edcb6200a265156defd4560ec1f52cb21cede8734a37ee95a0707b1b"}]}, @NFTA_IMMEDIATE_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ec346f287e5c714936b35bf45df1167b95"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x3a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "3abb1433a0592248dc8ac2923e3b3e512017bf71313c6483e527ec397c1fedd7ab09503c9e541fd91f256a684ddb1bd8e6aafd841b4ce9b463f512a75861cae1d412b491872b803472ff8aeafb813f5a6b1dae793ea551fe8211c2fe4dfc1dd46162d2b7cb1f17b779faaca642c709f59d7e962c6fb03640b1753e70525b415ccf11944791f9015373c25f109a35f260337218c48e374a19812100d50691b65881b613021de2cf7a0ea5ac8df9fc89a25cac249c4be2c5bfc3001af19340841992b41059035834c7cceef1529671046599d17361e767e90bea7d5f65adb05bc279db0f6c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "042f343dfe525fa5425ff42a3d0c0ff057818ade94c904989cbcd7766eaa689a785e65f2833d5938"}, @NFTA_DATA_VALUE={0x8b, 0x1, "04edb729efdbffb7d383b4dc1ce1e5ea4732e733be23266cd3a2db850755c227af693388dced14eb22a11fbc1f3f485778f1300a727fe644ccb3a86393c95edc28ddfde790bf0cec339ed476de5a453fb890053aae3ee53d31443f5b5952b6fa06699226610c5fb90384609346b995caf597636c2894a78add0bf0ce80d179c98dba068aeb9a5a"}, @NFTA_DATA_VALUE={0xd8, 0x1, "16553a66fb1c920c9ad9573b93a229f7e696c4d0727e0bbd12cfd4b33e9f3da87df700184a655303857a84352d2f2fa69e1e88fd100dcb83e0dd3169c945bab10fd6d35340e62622a174d639bf55b4a8871146cd809be9569c6f254fa296a0822dcbe2c82bf7c4f80dbb3f012f18d02bb65ec639608961c9a4136050ee6acdee25c137b2fdcdfa9634457bee9af7cfc5d228910e909e42a870c22e4a484dfc391f7225a41231dd46ef8e3a7cc2edaeeb8d46cfa96f62ddd638576261f9e0ad597f43bf03a69b444778c69688deba8fb03a131e86"}]}]}, {0x4ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "85adc26f98f0298741ebb7e6f5abb0b3d21417555cc58d2198bb5c881474852f1dbc6896f97abdfd0e14a2264126642529a5754d8e9baededb"}, @NFTA_DATA_VALUE={0xb6, 0x1, "3447979069162e5bb90678103156b6a56cca7f3b5ed813819498a0eb78f9e8d27a7967aec3a0651697e3d6a277f08c4428a477630aa7c92bebebfa2e14f50d5b29a5c6b913bfd280a6c221d38ca84227762b8215fc93bbbbdab993d3187fc5255938af6922cdc7cf5a76b09a8c0495795a0647acbacf8b1f463099193cbad67096255b516e861661bc0f677f5750d2dc2af88f90d9478c86f164ac25be38e01e36ebcd5f30828d29c38c5d4ef385927624b1"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "fcf8b74930ca6a9fc225ba84c99d946c6f724754fc166ff0cb12c4"}, @NFTA_DATA_VALUE={0x5d, 0x1, "f4ad0dc08cc9771abac2ebe9ab7b8320710ff283976ce3bbc69f0559f2ba3b91b9447ab465bf65c11e33110c7fa8992734ebefb12e8623ea59afcd5489f14f509ca1c2b78d7c152ce16f126c236e6406943cc10d59c68026ed"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x6, 0x1, "a66b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "537465d834329df812159eba8613afc3544d6259481fe81d577042191b0c4c93539a6a2cd0e66b3f02fe42d9c39cfdd38db31d763138e3377ed448b3910d101d9cfc279cc7875d1ae7bf6430cf5d00f9abc075a8a67dc2ae76d52bc84f24db2f574b62a0f1a45603f74c502855610225e21a67de5d67f8f64e9ec4cbf30e0e5032c4835c301f8cb119556f041d3d360562b93e392fe421da5c5bad296c6389c3d39e8df89d59457131"}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "051e4acf70b3d4e92185324c34a54b57912f3dcea4ba867bb00dee8f469aa1d0cbe7d0cb5b218955639c4660e9f5ae85c6b1072bff5a957ad6c00ff5f29564103b5308f9f37a889cb024d45ff3b81fc9239278998fd7189c06b89c90a68b7d9e2349e41abbe2ef6405949ce2a901882227c09ec048006b4ed4bad3d1447acd4360597169dd08c095334e022c8951a8b2b28ad2383ddadb7e3d1cd97c78583abf344bb0bca6"}, @NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x132c}}, 0x4004084) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 734.358162ms ago: executing program 0 (id=2453): socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x83}, &(0x7f0000000040)=0x8) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000faffff"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x7, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x745}, {0x12, 0x2, 0x2584, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c0}, 0x44080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000000114010027bd7000fddbdf2508000100010000003714becfb9a4936b5808901070aadf4ef1970cb76d6ff7b12c9d722ec8d6abe15e078187dab39120f03de454bf5d241c4607efde63e36ae4b23bc31353796ae4befac3451013ccecd7f23f8748d3e72ee54c2ac00c00b63d98155449e8212a8cdb27bf4ba01d1d29ab5bfa5f45e3ab5f98401cbc47c884aa8e6005f43e4ff091373e5ea5c2801a829fc485e2"], 0x18}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x44884) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c0039004ef1f011ffffffff0c0001000300000000feffff0c00010005000000f7ffffff0c004100080000000000000008000500", @ANYRES32=r7], 0x78}}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) 613.887069ms ago: executing program 1 (id=2454): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000200)=0x10) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/time_for_children\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000480)=0x981, 0x4) sendmmsg(r3, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r3, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1, &(0x7f0000001740)=""/107, 0x6b}, 0x8}], 0x1, 0x20, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000003c0)={r7, 0x80000000}, 0x8) pread64(r4, 0x0, 0x0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r4, 0x0, 0x2, &(0x7f0000000000)='#\x00'}, 0x30) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r9, &(0x7f0000000940), 0x10) close(0x3) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r10, 0x1) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r11, 0x4}, 0x38) 491.052747ms ago: executing program 0 (id=2455): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async, rerun: 64) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r6, 0x8) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0), 0x0) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async, rerun: 64) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) (async, rerun: 64) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 395.24642ms ago: executing program 2 (id=2456): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0x172}], 0x2) readv(r0, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x28, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 366.296268ms ago: executing program 0 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x844) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x535}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}]}]}, 0x84}}, 0x10008000) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001b40)={&(0x7f00000004c0)=@phonet={0x23, 0xf, 0x80, 0x5}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000540)="c26ceff83fa377451c16afb7d37381f40b59f13ee22e3e9e4e94eff7255e29e7a5d796b4caab33d7a0d5553bac79b5f9724be0ba64f46637ae5fa2cc8ed1d4d8b6b28d40ec8dffc5ebe9ba0c64a39936dc81da6e725f2a605bf09fbe6a7997364f75561b9fa95e35643a941c0f5d3bd1ab69f92842de4ca0136768adce7c7899d27a0655a8e4fe9af0b7c1a49fa28c825ef9ec429b49b0238b1a9ff868b7c398696df2b919acf051dbe10d97966699f4977a8e85cd5cb6e495a423b3", 0xbc}, {&(0x7f0000000600)="26731cbc458c06719a9f920da7d5b234ab51940bb89a8f8719e589f679b6761b544a610d3ad98576bd4f2a8f0ec282ca7a2a2cebaa88ddc2359dc9a49c57339b48408f9c4759544ee0304dd1a38e793490b8935546d6586e85b585226207518a5bad497e77c009a4f9b2d9bece6e993bca08847b3a5a1284227863d924cadc7316d06d23e0e1b6045dd92b88c0e479f4186cba7c54df08cbeb2022b0515c6b33be1755fdd30d065e", 0xa8}, {&(0x7f00000006c0)="2de91876d850f40aac1caab6fc579233aaf1a3f1114d9b81ee15c901f8c64dbac65b3ba5f08efb798901a1fafff9708eb02214fe0d1749f35dc239f8d4d81c9cf9c6e482ec29ddba13dd9803d225040b41fd043223231c67c11769a28e720ba4bbca9cb5982becfaebaedc062d5d49d0ceb8e7f81b947a7234c83499b6802844a49d7ce51e21ab88ad65742b89158cab17f1fec3d0671adc7813b123eb7e7e5d67e952e35dee4aa5beef49928417c9c50427c37fafb61388a5", 0xb9}, {&(0x7f0000000780)="9ec0d41e8f25a298c712f90025ec925d1cbed7d66974be0621b85f0214b7926971953d4f9b7cdd55d8306a064e650ede05352ba348be23a536b6845bb3bbf8574ee801d0da84c5dd603f170894df024ca5aca264b05247425d7d288abf76c7dd8d9c2de76e576b58ea84987b3b530a2f39a726f086542d0f7ea64088b9768ea1c0ebe32b9a15c5ae34e9982362cf2164582fc9bb5b643f7cb93c9e34d6b287f638375f9828505a3f04cf8d159003f5b543a1d973528947154e6ba6f34f9393dba11d140a756d5b747b798d66b5d012e5bc429bc83c0c543f7e878e9d41c611657c64f79a43ad5797b768e2a961466f67088023a110070ffb0ad00a06eb4af6bb2d24a9d66ddadaf82b014a1f403f1f62628449ca98459cbdec1173073bfe71081a6ce966e42cf789814ce54aac9c94559e0e5fe2ebf3b0789e19bf074ea7ba5dbe3683fd46d7385736ef4adaa1891467dd046d2432e1d54f390d89957f55e8a645578661321fec820c6602a3c519894b0005ff060c3833de6fbbf2bc5c1c090e8d12d3afb16ace2227ea61bcdd987f5a8de10d947df781f96c4b3f95f770d67f72cee9f6a574da18ccad474a508068834eca6a0a8acb416c8da0507c2b5905ee7c905ba0cf8d2f37a34ae42ff5f18d92d511abc52c8a6c688bc46ceb29eec8e7bdd9df958e208e41685b42a17bdac9e48a8070389747e07bbbd4cfa3c0cbe9fdda1325de6bacbca726f7cbf5b5c850231876f4788f54d2f58ca5747ee875d9d6e28ac8ee68142bbadf9899216db029fb1ea6170058e2efc7f19c295e5e5ec07fd41c6bc7cb3ed60d67e8bf7df7983a3e7487fb87250a57e80d4977ef697cd3b327b122fd4ad5799d62330eae8212b204651d2df0d6f1260e3b6b69165a5882fae13d559b83e98e0c0fdac140226afb0f44b9b61b6dd41004d8ac451578d6f0cd428eb1e71942d5e1388454d375f9bc7c2c14329948ecb63896f43806c1185ef51f7bb2d862f6242cf0251b8ccf35893e96a280e2f4fd9daddee3d39da684934d7eb93d46dbf138a05224e8cfbb4b53211686943bf9ce9c487d0790185403d0021cea199989f287e44a48e95fa7b6812c9fb4867768b3c10b12ccea1a8948a3f2412c806ae6eac94d6f1a0c294ffa5a95187e5205fabd54a9426d35dbe87f15a65f16415aaeaf7aa730d4458aa4cdc6c800f7be7cceda3ae1de72eeaac7ed5367631d5e6961ff0282e95869b72f89de3537717bbb42e69365aed53a4aadf41bcc714e84111ccd7aa85a20b616b3efae2109411f418e33622c26cee210e8dcc8ba45c7b6fcf3a52c46f32386e79f8d3dcdd2b0b2e4c9ee920fefc21ad4285ea002d3b37664b9356fc29f9898fe1f4b645efb1f82be1196d594e7e2e278a9d94417516951324dc31fc4973fa0b13625de202e8b4dba3d5deaa5ec91b9df3f92cac5ef007c3aafd4e669f5c452e198bd861fcc86f5a465ca5e14859bc415b9ada5fdbdfa55560597ea6556f7fce00c16da7904edf2adf452535412dc06361817e1186ef713e02689febd05850fb1b5b2639f27d04ed8a28e2b357cff7805558ecba1db25d62a288b8161d8a968a37218116bde5796eebd33f58f285dd7512d085fc1bf005fe4d06da172fe48f6a8fad7f03a73884edcf40c956c44837f1474746f823e7508ea806540c915e54cd9a8221b3c41414edb074a8d39906a12f0647240657ef4adfcb9428bf442fe709de6da63052000a34c55df43ab2d08aef357a246459b51ba05a8a0a2e46ea82204e3a5e888d00785bf065dc7f871dd55198726f321aee07366fd123f232940652fd9fc0ef7da229ac527650d7d5e2dcb13f9f7b3a69b7e5f579a89f64e3aa028944b43ec3ca03edc4a53a245c8482994a2649f6459324133cd9f2cf2a578faabc1816b39f89f03330cafc2d17cc4969d64b586b480894169d8ca2973757e655f20bcd6ba6b56629d3eddea97942ec3c4f1ec160b52985ec27cd9868165aa3486264b879e773f12065aa12417e4df3324df270f7d5050b4e3fd8b6fb4c541890e23e23b3c6f7afcf1d7c4ba461f3b039013c7fb8a7e59a0aab0db09cd7792fa22417a43a778d6fab0efe34ca83aca7d481d9202a6d454a412c019d0879ecce41e62e205c35087bb9248380accc9b250b80be0ab5f2e508704796532a4bb1bf8c5f4a7c5f3c5d161c53c558f212fe544158d8d79ffe1aa508653fa9628ac15f62cea5f5d55aec61e3d71ed6f1ede311c19d16d8f5a3da5f2702a0d7367dc08e9dbcac843bf93e47ffb712a89d2df3732daeb534c3029f81c3de2e1962cc741177736213ba681067fe5cea2283ef810437b19cd61d47765abb9a3d5c74fed8b2ba3d108c68f0f408b0bb6ce2cdb9341b06a9e3e2da00d6f53f32ce49fe21d69efe5da918bafa5209f8c868bb6a530c5b98f64b2aedc189550261a63461b1ec8a4a7032cd86768d6f08f68e4d199f5d4694b4f4ad905677936de805d84bea683c12543f4823c1a5ca38007cdaf3dcc214bf893d6518801c58fa612ad79d4e1aefe2a602dfce7a16f9e630bc3f36c34262ee92967e82a72ba7e5e7e7fe184642d56e1fb68f07f1fe24e9cdc333d4256b4c4e9838da5a3f1ff8023e51190548d865320fc7756182a442bb27687d56cd9ba5d0262f1bb646e7458e6f9836aadfc209c61b3e761430a4b92e16448ee138af50c2b702dd4e2410066d680589977789939d7c65cba9d75b542f50d451a90981720ce07706d20c1517358abe3c1d2548eec71ec0977253f11a25fa2efb61ba7b306539a60450b39e68a7757affe2c239625da4b3b6c19327b338e0405fadb4ae18d959319372b00c7986c68ee6536432a5b8f97d7e851457a7f9080a575689edaa7a04c5272d28cce40a00c7681757e56306fdbce13c102feb7676bcdf4980fe53f12f15cb87b4141194f3e14916aff2e4970636d0f61016d6a6e41cb281c4ee1767373fe0fc4d3c3f50eb6adbbdb0e3ad326cc8850f52aac92c95cf0dd5a06de3f5e01a7d68468b249a417a92b9188d18052a927e58135cf39953c88a5999340352aef2de643ee5ad1e6dcfb709a288121f78acd8283a85f3dd7c4f07677a894b20a4556b6f74367256c0281adf79881f3eb964b300105414ce48334b5a0098768d7c5383aa01d5b4e8540391b7d5cbe2a3d74d607c712b8cc581a80edf73d67113ea7ad10e47fdd34d664cb55e86675855e9e5aa9466b8bd34f3b94caf977f395f9cec478f5c1986eac751f8892d28dc08131d80117f22b5bc62bc31bb23a38e5942189aa2c565224d2cab1e91361b48d423fcac4215131d1813310ae863f687a98ba3c7276da374cebcbc68acf9f1007b968f53a29217644fcdb66eb87fd5a3367fd1d1152bbba52a477d6c4bf080508a08cfe8f77f4071554680b1660b7b6baa9b99252583bb32eb8141d0d09c7e9213192dfac06263cf7ae1a193ec74fed6aa48430717382288323e8554404fefcb4af819c6fe13c6f199cf4d8ed86b2f68455dc52af9e755d274668ede2b2c1a6e91cbf277c44ecb03db3ce2e4ca57369e99b6a49b948c7788e4cb1b3f86590763ed89a614b859ac2d3421c7f5ced0086438dcf0b7a6b97dfe47e32fc661f876464810346eab70664f8119b2b3b3046d8e05be277e33afe7ca3b2762aef3f485f1231d08ea3dda789e128d8c48d33f5ee49215b76f6c4e9ea9e39709946f1b09af81270a38eb7f15ac8cc91412f28aa46b0540cdbc7c7f7611650725ddb6add2ec90e3510de13507321be726b6fd4a54718fafd4579d1b90e575469f976158f00261e17c8f353c5a52170833d395ceb3d5d952fa1a37fca1b4bae5cd5f54c012213372dd5259b2014f2e014c6af4be23e5bb6575820d793851331462069755832482e7dc1d3e46eaef264cf0e8775f2f6d0d849a66a6a9fbd9719af3fc9752794607469edcc61a8054f533d282ba0fa4381842e51598fecc02fd6c3c977f46ff371d9d8ff0c80ace4c468b3e89d70a6f03c29b93de6081355e9384ab6a998ee71165532e93ef5f2cad5bd3264222ca65a9ebadfe07222badc6045f42dadf3a87a4de87c04bd624fbc39d9ce3b92bee44694c6d7e8984f4f5f063dec19d301b56ac8e22c0ef3baf3522842138e0f15a2c3c2eb98e03c35667545ec705b7ed088338957c4c167cb028a908a641780b57e0a99e15a893fcd8b1291ed360d0cd96cf3f7c68a6acbc4f60e172714475df3a7348910543e27e15673b969b6d886b851ebdfe8b4e6cf15dfa9d97c3c5c81212c13dc02c0d01a0e989c670781dc184e5f142763b7f6ac90a7976cb133ee0618629139e4a4da614e8a2c2937a8812c299daff203209d3295fe065d23aeb05029ebf4494e2c879e82ddd42a2d56969a5e178f0dfb503682d3b85009b867965c1c01d80c809eeb32066d811686702ac9b2a3e532381c2a650de58d1e7cc5501bad7aeb071cf3f76f5541343b6cd6355a1a2349c7980cc1a09fb34770a26828491ada96c6ab591048f13796059e6d03cd5775b5f493793bbde3bf479e1db0fd8e73bfd254e5cebb8550b5a0c40024ab083150761d0a84e940302853de222e6636b61f1c4804a15231c2260d5e8a84efb13a217043bf213352785478312bd425ac2b0069e5dc2d2db7882336fd4275b27210225231f3cbb323dfb4ba0dea44bb38048cbca956055b7576abf245c887283b083a76c966baca7681637c0c3dfe58cd0e68f865495b4175c61b1137a3441725a95c3422c610ff6c0c31d038fa3bdd0c8c54e86857a1bba122905069b9f7300b83b0614d756e6a4cdb0bbdd453ae9ccbc4f62469618a75b951cd1463e1463c458ba1ebc5df1b00771c3a069cee5473a6010a5f7381d5f3c9b3f59d80ba5811c0388bf0ebf89498053bbb0d5338028f3073b1136fd373eb5e78c01f8d934b5ef037ee0cbad1ea8b1dd50cef79923cb76aed77e43cf4f21d3890902f90cb3c0268eb21e8ff7512940d25154f507218930454fee45bdb9f5d69b8ed9a64a18753f6355f89c1aa9e94f9ba13b3c1625af568f01bbb348c7d0a81aff246a744f85194a5f7848234c1d0206c85c31a5910e41ce23dc4871da5e2abccf41de6c21584101ef947e11a302a56556ff58e7400c53952bc3936e2962a0e05a998d7bad6532b6ba17c4c204d4e4c48b9fd019ca7fe496d15e946f14fcfb8d70735f57dd5dbc66973e9278afebc0bb8582a3712929666317fea39f267b98254f06533f285eed2bd91175ac4b758c68204ff55e851b52ec211977189e3c79f73bdd294c463cc42d359e44c8cfed8f94306de9b52e3670c6a23f529adc859e15e09485b4fc897d18e363e7c48b692bdebd801d1f9f3861c4282e89358855b8545bb1beebd75e5eb7909f277d5175d4128008cb8159e16c7b507b36f8f6523e4af5ad7b4e60e6227b86638c6b875bd3ba902d168d5aa2e08b4c140882486f2934779e34d9e48c21f3d538083a851f75a00442649bae8c2b01088df240e47e7b37a8c6d37032672d55ba4ee2d0196ba0ac3bfb6821b750f57b7284ad3517bc3c5f83bfec688c5e20683e3de5000bbc5511c541472f3d5a2e92e62d93282cc748326ca8fce7c2ab840c265a1b14af1d4c6b424295f6ecf917b27a5f96efc7f597a57d26db84d195c39df245e0ddff330a3ab31922643602e9138f7c245d601b82ac6576ac0e28f29f2ad56e9d545ae3f761b65a537afc36e98dceda9c0523c7f46b28958bb290ab4bea7336de028f18a9741520f53f14da5599d8d79c6eac075d50247", 0x1000}, {&(0x7f0000001780)="738f4d", 0x3}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="82f9f19ed46af09d79509e9da32cb8d6ad4ecbd8939ca5d8121a29", 0x1b}, {&(0x7f0000001840)="9ab89417a996c95665324d161d22af5c2306bab0489aa8c7d00edef70f9a4a89c2a340a2c62d4dd092f98e63f117d97aaa0c176afc0967fb7b6c0ab44f3bab7e94229b2f4abb5558d66de1c544486afcf5e2679245393ad68878e6c1e37643f363ad23c9f31b5803ce41630afcfc9c84487400d9704cfce335c1fbfc1ca3f119bc4bcca13354d40a604b62ca4ec96a505cafac08aae0260ffb1e269704221e4d43920d7082f18f7c5279f55a719790db3dff319467", 0xb5}], 0x8, &(0x7f0000001980)=[{0xc0, 0x10c, 0x2, "02024ab1de410cdf3976cf3fa4f6c4f091fe5413e6d4b6bd8f78b281d905c4c3bab8dce0e3e1036a7ffa71abec6f4db3fce1023afa2432876e0786dc1aece34b939926ccaa8c902bf4559c1230193af63ed9d3c48486cc4b1dc720109984738047e3b0d452bd66e6d594ffc309daeee688effc9ee134dff52047ca29dd92f06847c16ccd723da5a974bf768fc4cf0586b5e2a82e08f4a0988c1f18c5cb134eec3d67d66b83f5bf4b28f64a"}, {0x40, 0x104, 0x7f, "4117beafea299e1b037ec39927cf17594518b225677743957f10c4dd321b5dd04352e5ad2d196b0c2200"}, {0x30, 0x111, 0xd94e, "b816333a12bf0ba70ab9b8c01349dacd11c5e5b990e006674d"}, {0x70, 0x102, 0x2, "d4b86a2c5a6918189a2e4c84eaf5933c2fe6392934e44ec87075c6af077ced801046a1c5702c5c2d505a81311d8c291746a871aae8a0204af4309c6d28629245227f88d49644e99b8809f3580bc58d7f2ce21775d471a5ba54"}], 0x1a0}, 0x404c080) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000001b80)={0x4, 0x80, 0x9213, 0x10}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1b8, 0xa, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xc778}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9948}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x78, 0x0, 0x820, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0xf, &(0x7f0000001f80)=@raw=[@map_fd={0x18, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x89e8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x866}], &(0x7f0000002000)='syzkaller\x00', 0xc, 0xa5, &(0x7f0000002040)=""/165, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x1, 0xe, 0x4, 0x100}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002140)=[0x1, 0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000002180)=[{0x5, 0x3, 0x9, 0x2}, {0x5, 0x1, 0x5, 0xd}, {0x0, 0x5, 0x3, 0x2}, {0x2, 0x3, 0xc, 0x4}, {0x2, 0x1, 0x1, 0x5}, {0x0, 0x1, 0x8, 0x8}, {0x0, 0x5, 0x0, 0x8}, {0x5, 0x3, 0xa, 0x9}], 0x10, 0x935b}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000022c0)={r7, r8}) syz_genetlink_get_family_id$ipvs(&(0x7f0000002300), r6) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000002340), &(0x7f0000002380)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f00000023c0)='ip6_vti0\x00') r10 = socket(0x5, 0xa, 0x7) sendmsg$tipc(r2, &(0x7f0000002a00)={&(0x7f0000002400)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002440)="9d68b642f014c9f6e2d46f7bc908f3a703a56e937efa5b81272b1e39b26bb79d5fb71810c40edbdaafbd20e5a5c997eb09989968c4edd405c9de25546243123620bdc40cb3ad963fd82576b75cd781aab0c22e39b8b83251cf480f85ce8cef1c9345f5aaaebe400a10755a094e9b8914d99be7c3e4f61ed4bae7974651e80a04c736ad87a90c7d947539a9dd29286a8d59631d3ec72e0e30caa5a834785bd5b225c8454aa6733feafe74f31948356a4a830124b0620f351474a0df4ccee31a3e220211582732ee8c183cb18158d2665feff8e1484eb77ce2a982e8e8491f5105", 0xe0}, {&(0x7f0000002540)="03e1a6c2cfcbca137c78f452b11725ab200146d68a996c77e007fe6ae22bab724875a7e6e170c3c3f9e8c86879af833b1cee8870570d2be0693431f6eb4aa23031f2308c2b8be21951", 0x49}, {&(0x7f00000025c0)="2484cce8618ed978ff859babcf1babcd8c", 0x11}, {&(0x7f0000002600)="ed1628a9cfe968328daf50dbec12b1598655f2f8eb0618dd5625d260984f3549da7affdf4a878c1235bbd3d9c829be2f73931f7caae9fa589e194acc7d31a5d6909d74535dad0998367385c06b44529d09eb939c9ec9aab0135b88dc2e377c60052a029d8645916975251475b6b63d2d01e37b48379106cb0e8817ad6d78ac252258221c4a074151bd86167dea5c141d70caf60f89d34ba6c6a68c949799d5936a7f4c4e573077295e3c522a25009bb038fb9dcf1fd85206292cbed161848ac7a75f6acfd349aec3b65f0251ca7bb87f28da5afb590057ce11b3466727fedbd327a6d84c717c8c19", 0xe8}, {&(0x7f0000002700)="7c2982427b2fc214431c06ff2e6615dd2861a9f789c4189b5d47ac33cb96e3fed2cb7b5c14b7eb2dad9bafab90ce76fe30", 0x31}, {&(0x7f0000002740)="f3499a1ee9dac07593a65e187a643ebec8c7d4d6810675a6c5c4a07271397f42cff3816ef92c670adffd67b135d515cb0e9a7e72791d3cd35efb7a85bbe129085e51b682d375c340610ceadc328cf065b519be5d536dcf54163702143108fcace8dcbf248558adeb101aaa112b87085f700a1876f7d6329e87a2a5911b44200a9bc67d478a85c27c29d0ef1119eefbb6135a998d7d19fcd9aba2ba110450ed46e656ac3a87ce94cb6c4f5f97095463a93a29b7957f437328fb919a794174cc8d10a75ac8e71496b1d9", 0xc9}, {&(0x7f0000002840)="a5561fdf2321de22bbf6f3647562f113368b35cc465dd684e4", 0x19}, {&(0x7f0000002880)="7ca65b688f3f8754188a0bee26f6b42414d2954ee0fd77eda58a", 0x1a}, {&(0x7f00000028c0)="1d5e72a57896de77dffb90e5e1d2", 0xe}], 0x9, &(0x7f00000029c0)="a0dfc8d85504", 0x6, 0x4000805}, 0x80) r11 = accept4$x25(r10, &(0x7f0000002a40), &(0x7f0000002a80)=0x12, 0xc0400) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000002ac0)=r8, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r10, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r12, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004800) sendmsg$nl_route(r10, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)=@getroute={0x14, 0x1a, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x40000) 247.462995ms ago: executing program 1 (id=2458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) 192.941271ms ago: executing program 2 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="fffffff800000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 183.48209ms ago: executing program 1 (id=2460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000047006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100802020782500000000002020207b1a00fe00000000bfa1dd229d6c80f16c7821e71500000000000007010000f8ffffffb702000008000000b50a0000000000008500000006"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 95.378184ms ago: executing program 0 (id=2461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000815}, 0x4000800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x23, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0xea99cde45e5d8a63, 0x1, 0x2, 0x6, 0xb, 0x6, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0x0, 0x9, 0x2, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xaf}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x1, 0x5, 0x9, 0x40, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xae}, @call={0x85, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x8000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r3], &(0x7f00000005c0)=[{0x2, 0x2, 0x3, 0x2}, {0x4, 0x5, 0x0, 0x9}, {0x2, 0x3, 0x1, 0x2}, {0x0, 0x3, 0x0, 0x5}, {0x2, 0x1, 0x9, 0x7}, {0x4, 0x2, 0x8, 0xc}, {0x2, 0x1, 0xb, 0x5}, {0x0, 0x5, 0x6, 0x2}], 0x10, 0xffffffff}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25010000000800040004000000080006000100000008000500400000000c000280060002004e210000080005000300000014000280080009008002000006000b000a000000080004000300000070000380060007004e2300001400026622c53b407783d3000000000000000000080005007f00000106000400000000001400020076657468315f746f5f6272696467650008000100020000001400020076657468305f746f5f68737200000000060007004e210000060007004e210000"], 0xcc}, 0x1, 0x0, 0x0, 0x488d0}, 0x44) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000001d00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000780)={0x1524, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "e1ebf1ab84a6046070eb4b74cbfdbc211cf8a0abbaf92d819a862239ab26be83d5a6763301c5015992e6b3adad680589df728e2650a0d173f2991466375f96969d84b17877d5231b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x218, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "45bbe2136cd02c1e35550bcdb127539643bfac3863975a666d7ccf2728d4a56eefb1e7be6471ee7922e4e8d83a1639184cfc7a82e33ed80f61fa6aa3b914f64a2f23d1d21b791cd2849dc58e38c23041a42ce00ffc936a0723d253578ac84b717cf4f0faa0bca08b04a72a53f77712652ce6551cdfb4a4e9bb3425e2e4c9295e387cca5ea3a79009e988919e56a7dde95f9f0853a369f453dc02d11595f7bc1e36540d1651dbd3eaf6f98381523549947801bbc3e4d7ed504af4b76559d1a152b6fcfc0c1826ab0bfa2f416f83e2c4a315959a7874213fd657e3554e2d95b2fb514ee2f2164a7191a6ad01aa589bbd5e77ea5f4cc1763c7062"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb2b2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb5700000}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "89e24d626546cfe6dbe7c5cc26"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "112f3f260437b8addc30809b8b85f01e66fb0ebde06cc353f015b188f2bc8074aa58323bbb9846a1e14e0b62263f7d98cd920238c3f0da820096c851e4b4acfd8bbe0753734b9f0c1e442cc6c49a9e3a475fc3aab6e65b10180db725fd0d7f4caea163223f2e20fcba8739f0bbd19e2bc2127245b05cbe9514dc55b2f58c9adf256cede88280fad2c6b83120c1c1f97f708b66b75a6912382ee0854e5faa0f81fb6584dbe56b11e412c0b08f2aaf30b376769decfdd288f776ba5ddc1a78fe677ab8b6ff22a458794311c3929b5cc78c587e55b9bb980bd77c4c582102736c"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "e2f99f72b30369434a804b24cc8a2c9cef549cb2ff4019e384d79e79d0238414c8de3be455a199598a2cf82555d0fe1938f4bbcf1d30cf500c810f88b95e9d430e2cc276f793f1e65ceb2382c063e4455ccf5c3b2d2283b76d10656627b351d73aa7c2816b952416bc32160c614cc46c3d80e9f11523279e6149f2657968e3d481f47cad4b6004c7169420c513e5199d27845991d3d9e5c5b8384c541ddb137629914a1e2739514c49e0429f857dd7e0bdec573fbdcd3b07906b273720e7d5437070cd07ec71cd69bb03b12c0371979c39b379d22a80044c08329784386d4422746ca95bac3b323ba0283aa3d8eb5ad9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x436}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "fa837b0bf1acc8b85c9f140fa7cb9fc41f42d3a26899cb47ccb161007a239a81607b12c6654932b228b9823ed1b80c9b56d59c81559d9ef18032c3"}, @ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "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"}]}]}, 0x1524}, 0x1, 0x0, 0x0, 0x1}, 0x4008054) 93.648424ms ago: executing program 2 (id=2462): socket$inet(0xa, 0x801, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r4, 0x8, 0x40, 0x1, 0x7, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @private=0xa010101, {[@timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x7, [{@broadcast, 0x6}]}]}}}}}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r1}) (async) socket$netlink(0x10, 0x3, 0xf) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000300)={@broadcast, @local, @void, {@generic={0x2}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 4 (id=2463): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1000}, {0xc}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49b0}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x756}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0x9c}}, 0x20048805) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000980)=@nat={'nat\x00', 0x19, 0x3, 0x58a, [0x2000000003c0, 0x0, 0x0, 0x20000000055e, 0x20000000058e], 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x20, 0x600, 'bridge_slave_1\x00', 'pim6reg\x00', 'gretap0\x00', 'ip6gre0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xfe, 0x136, 0x16e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xc, 0x9, 0xffff6f1e, 0x3}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x1000000fe, 0xffffffff, 0xff000000], 0x4e20, 0x6, 0x5, 0x4e24, 0x8, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 0xf60f69537ffb63f2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x3a5aab9dfea89431, 0x40, 0x0, 'veth0_macvtap\x00', 'pim6reg\x00', 'ip6gre0\x00', 'hsr0\x00', @local, [0xff, 0xff, 0xff, 0x101, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff], 0xf6, 0x17e, 0x1b6, [@ip={{'ip\x00', 0x0, 0x20}, {{@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 0x6, 0x6c, 0x0, 0xc, 0x4e23, 0x4e23, 0x4e21, 0x4e21}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x5, 0xce6c, 0x5, 0x9, 0x2}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0xfffffffffffffffc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffffc, 'syz1\x00', {0x7}}}}], @snat={'snat\x00', 0x10, {{@random="bd695e362053", 0x10}}}}, {0x11, 0x31, 0xf5, 'team0\x00', 'bridge_slave_1\x00', 'veth1_to_hsr\x00', 'batadv_slave_0\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xae, 0x15e, 0x1d6, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x7, {0x6}}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xd08ab72b2fc8a880}}}, @common=@nflog={'nflog\x00', 0x50, {{0x80, 0x0, 0xa3b, 0x0, 0x0, "8fa1df87ef4bef6e24d78a7fc254ac4e06d115a88bb50ab33e639f71f20e5ee30aacf3e1fe2a4dd3a82a852f51d45548f71f8b0a3af51e34d30932d6436ea0a1"}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x7, 0x6, 0x1, 0x0, "51cb58e474b81f10762da90af5830a4bcefa81affd74c495ad366f14634b2db662435f3e33da894d6dfba6775f803d5da2c02ed2b2e47a2ab6c573b6e1fd0e0d"}}}}]}]}, 0x602) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000980)=@nat={'nat\x00', 0x19, 0x3, 0x58a, [0x2000000003c0, 0x0, 0x0, 0x20000000055e, 0x20000000058e], 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x20, 0x600, 'bridge_slave_1\x00', 'pim6reg\x00', 'gretap0\x00', 'ip6gre0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xfe, 0x136, 0x16e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xc, 0x9, 0xffff6f1e, 0x3}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x1000000fe, 0xffffffff, 0xff000000], 0x4e20, 0x6, 0x5, 0x4e24, 0x8, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 0xf60f69537ffb63f2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x3a5aab9dfea89431, 0x40, 0x0, 'veth0_macvtap\x00', 'pim6reg\x00', 'ip6gre0\x00', 'hsr0\x00', @local, [0xff, 0xff, 0xff, 0x101, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff], 0xf6, 0x17e, 0x1b6, [@ip={{'ip\x00', 0x0, 0x20}, {{@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 0x6, 0x6c, 0x0, 0xc, 0x4e23, 0x4e23, 0x4e21, 0x4e21}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x5, 0xce6c, 0x5, 0x9, 0x2}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0xfffffffffffffffc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffffc, 'syz1\x00', {0x7}}}}], @snat={'snat\x00', 0x10, {{@random="bd695e362053", 0x10}}}}, {0x11, 0x31, 0xf5, 'team0\x00', 'bridge_slave_1\x00', 'veth1_to_hsr\x00', 'batadv_slave_0\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xae, 0x15e, 0x1d6, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x7, {0x6}}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xd08ab72b2fc8a880}}}, @common=@nflog={'nflog\x00', 0x50, {{0x80, 0x0, 0xa3b, 0x0, 0x0, "8fa1df87ef4bef6e24d78a7fc254ac4e06d115a88bb50ab33e639f71f20e5ee30aacf3e1fe2a4dd3a82a852f51d45548f71f8b0a3af51e34d30932d6436ea0a1"}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x7, 0x6, 0x1, 0x0, "51cb58e474b81f10762da90af5830a4bcefa81affd74c495ad366f14634b2db662435f3e33da894d6dfba6775f803d5da2c02ed2b2e47a2ab6c573b6e1fd0e0d"}}}}]}]}, 0x602) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xc, 0x856, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x64, 0x0, 0x25, 0x29, 0x0, @private=0xa010102, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0xd, [{@multicast2, 0x6}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x1, [{@remote}, {@private=0xa010101, 0x2}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}, @generic={0x89, 0x8, "51c8ca6b1870"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xc, 0x856, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x64, 0x0, 0x25, 0x29, 0x0, @private=0xa010102, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0xd, [{@multicast2, 0x6}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x1, [{@remote}, {@private=0xa010101, 0x2}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}, @generic={0x89, 0x8, "51c8ca6b1870"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x8, &(0x7f0000000d00)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x92aa}}], &(0x7f0000000d40)='syzkaller\x00', 0xfffffffb, 0x81, &(0x7f0000000d80)=""/129, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x2, 0x2, 0xfffffff7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80)=[0x1, 0x1], &(0x7f0000000ec0)=[{0x1, 0x2, 0xe, 0x9}, {0x4, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x9, 0x7}, {0x2, 0x4, 0x1, 0x1}, {0x5, 0x4, 0xd, 0x3}], 0x10, 0x7}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x8, &(0x7f0000000d00)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x92aa}}], &(0x7f0000000d40)='syzkaller\x00', 0xfffffffb, 0x81, &(0x7f0000000d80)=""/129, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x2, 0x2, 0xfffffff7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80)=[0x1, 0x1], &(0x7f0000000ec0)=[{0x1, 0x2, 0xe, 0x9}, {0x4, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x9, 0x7}, {0x2, 0x4, 0x1, 0x1}, {0x5, 0x4, 0xd, 0x3}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x10, 0xe, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3284, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb17}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xc, 0xa, 0x9, 0xfffffffffffffff4, 0x10}]}, &(0x7f0000000ac0)='GPL\x00', 0xab4, 0x8d, &(0x7f0000000b00)=""/141, 0x41100, 0xa, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000010c0)={0x2, 0x0, @multicast2, 0x4}, 0x10) (async) connect$l2tp(r5, &(0x7f00000010c0)={0x2, 0x0, @multicast2, 0x4}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x19, 0x4, 0x4, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001140)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001140)='xfrm0\x00', 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r7) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x46e7, 0x4}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001300), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}}, 0x20000010) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001400)='veth1_to_hsr\x00', 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000001440)={0x0, 0x6}, &(0x7f0000001480)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000001440)={0x0, 0x6}, &(0x7f0000001480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000014c0)={0x8, 0x8009, 0x8, 0x779, r11}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000014c0)={0x8, 0x8009, 0x8, 0x779, r11}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001640)={'pim6reg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x10, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001580)='syzkaller\x00', 0x3, 0x5e, &(0x7f00000015c0)=""/94, 0x41000, 0x24, '\x00', r12, 0x0, r2, 0x8, &(0x7f0000001680)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x792d}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x10, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001580)='syzkaller\x00', 0x3, 0x5e, &(0x7f00000015c0)=""/94, 0x41000, 0x24, '\x00', r12, 0x0, r2, 0x8, &(0x7f0000001680)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x792d}, 0x94) socket$inet(0x2, 0x6, 0x7fffffff) recvmsg$can_j1939(r7, &(0x7f0000001e00)={&(0x7f0000001780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/40, 0x28}, {&(0x7f0000001840)=""/224, 0xe0}, {&(0x7f0000001940)=""/114, 0x72}, {&(0x7f00000019c0)=""/84, 0x54}, {&(0x7f0000001a40)=""/76, 0x4c}, {&(0x7f0000001ac0)=""/34, 0x22}, {&(0x7f0000001b00)=""/70, 0x46}, {&(0x7f0000001b80)=""/12, 0xc}, {&(0x7f0000001bc0)=""/111, 0x6f}, {&(0x7f0000001c40)=""/48, 0x30}], 0xa, &(0x7f0000001d40)=""/172, 0xac}, 0x80002001) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001e40)) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000002140)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002100)={&(0x7f0000001ec0)={0x238, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x7b, 0x5b, "af851d868bd67b2b35c27501111d92b49873a7e70b44f9b22eaf1765eae8512270cd8e736496c7af96e27d1dbb39b3634ced13d212aa304ccc9cee2f9f9a79278eb35ac9bd7fafe6018b7f1ed04e675911b8cd3dd4ed2887c2658a4dedbab70439219f575c7567ab9351687408d0db3593a90dd4a3ccdd"}, @NL80211_ATTR_FRAME_MATCH={0xa9, 0x5b, "c0bdbb084e859f7d809dbc7999a27ac10279cfc00bb14844c809d4bc9be212d37cd064b0dee5e8e140c953c35982f4ed5a0b295f79dd504b47329ecc5804413f2f19a3601448f40648aa19970037c4e4566e18d95a9102cf70c9cbcafacbbd139f5e7e851fbbe26f3e7e37713c3904fa0d17b80e4348c6158e2a1379b7a9c18f1e65ad432c5befa9b2cc50e6e18d54aba936917029d212a1c8e1502cc5cc026ca5e5499b18"}, @NL80211_ATTR_FRAME_MATCH={0xf2, 0x5b, "f63fd4a8b8a105bb8b0fe875adbe3d7331d814cc2139c08de3ed4e1fea7a77d35958b4c4e33ac58018f21275d74f1a72a49cfa535c0d2bd68f0bbfb708632de62f56feb906fe6152784e938ac03ffdae7a9171663d1775cd48f8253a0d9ed199061a04e078297e464f928479379cd8393948852663f285747501aadba0b82ffd6e70a651bb99f3045838980d655577e66f8de40d345fafdb02124894fbb5119369acd81f413560d4abe5498f02717a0e5fd991578e78669789253ab84441e0591f2638175071c239fbcb3250efeb4fed20226cbb19f9ba7f6440d8aeefe527f3d5819df69563e68c1ef5e5503ebf"}]}, 0x238}, 0x1, 0x0, 0x0, 0x20040800}, 0x40010) socket$inet6(0xa, 0x4, 0x1) (async) socket$inet6(0xa, 0x4, 0x1) write$nci(r2, &(0x7f0000002180)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x4}, 0x4) kernel console output (not intermixed with test programs): o: entered allmulticast mode [ 277.771969][T10446] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.861463][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1133'. [ 278.113912][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 278.145079][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 278.217621][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 278.325106][T10479] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 278.406206][T10481] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 278.741811][T10489] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 279.262095][T10512] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1145'. [ 279.703799][T10531] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 279.800582][T10535] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 279.847063][T10531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.200778][T10555] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 280.238224][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.695172][T10573] netlink: 'syz.2.1162': attribute type 12 has an invalid length. [ 280.801737][T10574] netlink: 'syz.1.1163': attribute type 29 has an invalid length. [ 280.865473][T10581] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1163'. [ 280.878799][T10574] netlink: 'syz.1.1163': attribute type 29 has an invalid length. [ 281.078978][T10584] syzkaller1: entered promiscuous mode [ 281.098111][T10584] syzkaller1: entered allmulticast mode [ 281.511433][T10594] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 281.729158][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 281.749504][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 281.785985][T10606] netlink: 'syz.1.1172': attribute type 39 has an invalid length. [ 282.092063][T10621] netlink: 'syz.1.1176': attribute type 9 has an invalid length. [ 282.272570][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 282.789942][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 282.808935][T10644] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 283.060735][T10666] tipc: Enabled bearer , priority 0 [ 283.077812][T10666] syzkaller0: entered promiscuous mode [ 283.100583][T10666] syzkaller0: entered allmulticast mode [ 283.162416][T10666] tipc: Resetting bearer [ 283.203465][T10664] tipc: Resetting bearer [ 283.247784][T10664] tipc: Disabling bearer [ 284.180666][T10691] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 284.510463][T10711] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 284.613369][T10711] bond1 (unregistering): Released all slaves [ 285.386584][T10740] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 285.809911][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 285.868601][T10763] macvlan0: left promiscuous mode [ 285.907929][T10763] geneve2: left promiscuous mode [ 285.926454][T10763] bridge1: left promiscuous mode [ 285.937315][T10763] bridge1: left allmulticast mode [ 285.946003][T10763] macsec1: left promiscuous mode [ 285.951978][T10763] macsec1: left allmulticast mode [ 285.968532][T10763] vlan2: left promiscuous mode [ 285.986744][T10763] vlan2: left allmulticast mode [ 286.013590][T10763] hsr_slave_1: left allmulticast mode [ 286.131955][T10766] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 286.158379][T10766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1217'. [ 286.166885][T10777] bridge7: entered promiscuous mode [ 286.200803][T10777] bridge7: entered allmulticast mode [ 286.229213][T10777] team0: Port device bridge7 added [ 286.536687][T10785] dvmrp0: entered allmulticast mode [ 288.421398][ T96] block nbd1: Possible stuck request ffff8880249ae000: control (read@0,1024B). Runtime 120 seconds [ 288.432253][ T96] block nbd1: Possible stuck request ffff8880249ae1c0: control (read@1024,1024B). Runtime 120 seconds [ 288.443374][ T96] block nbd1: Possible stuck request ffff8880249ae380: control (read@2048,1024B). Runtime 120 seconds [ 288.454615][ T96] block nbd1: Possible stuck request ffff8880249ae540: control (read@3072,1024B). Runtime 120 seconds [ 299.941352][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.503758][ T96] block nbd1: Possible stuck request ffff8880249ae000: control (read@0,1024B). Runtime 150 seconds [ 318.514601][ T96] block nbd1: Possible stuck request ffff8880249ae1c0: control (read@1024,1024B). Runtime 150 seconds [ 318.525721][ T96] block nbd1: Possible stuck request ffff8880249ae380: control (read@2048,1024B). Runtime 150 seconds [ 318.536808][ T96] block nbd1: Possible stuck request ffff8880249ae540: control (read@3072,1024B). Runtime 150 seconds [ 328.658858][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 328.736955][T10795] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 328.771230][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.865281][T10803] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 329.223974][T10816] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 329.708490][T10831] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 330.313912][T10852] netlink: 3672 bytes leftover after parsing attributes in process `syz.3.1239'. [ 330.673092][T10861] syzkaller0: entered promiscuous mode [ 330.685560][T10861] syzkaller0: entered allmulticast mode [ 330.849124][T10864] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1244'. [ 331.095511][T10878] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1250'. [ 332.142102][T10914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1259'. [ 332.273300][T10918] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1261'. [ 332.427857][T10924] xt_hashlimit: max too large, truncated to 1048576 [ 332.689479][T10929] netlink: 'syz.4.1266': attribute type 3 has an invalid length. [ 333.155039][T10944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1271'. [ 333.188920][T10924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'. [ 333.445579][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 333.850048][ T5912] IPVS: starting estimator thread 0... [ 334.304558][T10977] IPVS: using max 24 ests per chain, 57600 per kthread [ 334.535069][T10994] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1282'. [ 334.719978][T11006] netlink: 'syz.1.1283': attribute type 12 has an invalid length. [ 334.752815][T11006] netlink: 'syz.1.1283': attribute type 4 has an invalid length. [ 334.886130][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 335.228729][T11018] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1288'. [ 335.530318][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 336.063069][T11048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1295'. [ 336.072427][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 336.394359][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 336.545936][T11071] FAULT_INJECTION: forcing a failure. [ 336.545936][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 336.583534][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.2.1302 Not tainted syzkaller #0 PREEMPT(full) [ 336.583562][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.583589][T11071] Call Trace: [ 336.583597][T11071] [ 336.583606][T11071] dump_stack_lvl+0x189/0x250 [ 336.583642][T11071] ? __pfx____ratelimit+0x10/0x10 [ 336.583683][T11071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.583711][T11071] ? __pfx__printk+0x10/0x10 [ 336.583738][T11071] ? __pfx___might_resched+0x10/0x10 [ 336.583760][T11071] ? fs_reclaim_acquire+0x7d/0x100 [ 336.583795][T11071] should_fail_ex+0x414/0x560 [ 336.583831][T11071] should_failslab+0xa8/0x100 [ 336.583853][T11071] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 336.583884][T11071] ? __request_module+0x2d1/0x5e0 [ 336.583904][T11071] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 336.583945][T11071] kstrdup+0x42/0x100 [ 336.583969][T11071] __request_module+0x2d1/0x5e0 [ 336.583996][T11071] ? __pfx___request_module+0x10/0x10 [ 336.584051][T11071] ? security_capable+0x7e/0x2e0 [ 336.584084][T11071] ? dev_load+0x21/0x1f0 [ 336.584103][T11071] dev_load+0x190/0x1f0 [ 336.584122][T11071] dev_ioctl+0x79f/0x1150 [ 336.584146][T11071] sock_do_ioctl+0x22c/0x300 [ 336.584177][T11071] ? __pfx_sock_do_ioctl+0x10/0x10 [ 336.584226][T11071] sock_ioctl+0x576/0x790 [ 336.584256][T11071] ? __pfx_sock_ioctl+0x10/0x10 [ 336.584287][T11071] ? __fget_files+0x3a0/0x420 [ 336.584306][T11071] ? __fget_files+0x2a/0x420 [ 336.584329][T11071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 336.584353][T11071] ? __pfx_sock_ioctl+0x10/0x10 [ 336.584379][T11071] __se_sys_ioctl+0xfc/0x170 [ 336.584408][T11071] do_syscall_64+0xfa/0xfa0 [ 336.584438][T11071] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.584468][T11071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.584489][T11071] ? clear_bhb_loop+0x60/0xb0 [ 336.584514][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.584533][T11071] RIP: 0033:0x7f1bbd58f6c9 [ 336.584552][T11071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.584570][T11071] RSP: 002b:00007f1bbe3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.584592][T11071] RAX: ffffffffffffffda RBX: 00007f1bbd7e5fa0 RCX: 00007f1bbd58f6c9 [ 336.584607][T11071] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 336.584621][T11071] RBP: 00007f1bbe3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 336.584633][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.584645][T11071] R13: 00007f1bbd7e6038 R14: 00007f1bbd7e5fa0 R15: 00007ffe070984f8 [ 336.584681][T11071] [ 337.056396][T11078] syzkaller0: entered promiscuous mode [ 337.077686][T11078] syzkaller0: entered allmulticast mode [ 337.370936][T11096] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1307'. [ 337.898786][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 338.148351][T11128] netlink: 'syz.4.1314': attribute type 23 has an invalid length. [ 338.422383][T11135] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 338.610375][T11145] syzkaller0: entered promiscuous mode [ 338.611002][T11155] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 338.616254][T11145] syzkaller0: entered allmulticast mode [ 338.838093][T11171] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 338.930253][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 339.196900][T11185] bond2: entered promiscuous mode [ 339.202169][T11185] bond2: entered allmulticast mode [ 339.207731][T11185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.357538][T11185] bond2 (unregistering): Released all slaves [ 339.390818][T11196] syzkaller0: entered promiscuous mode [ 339.396530][T11196] syzkaller0: entered allmulticast mode [ 339.963808][T11212] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 340.077466][T11218] __nla_validate_parse: 1 callbacks suppressed [ 340.077486][T11218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1340'. [ 340.139507][T11207] netlink: 'syz.1.1337': attribute type 5 has an invalid length. [ 340.258439][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 340.358297][T11226] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 340.385773][T11230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.443528][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1343'. [ 340.523232][T11234] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1345'. [ 340.629234][T11238] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1348'. [ 340.640868][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 340.661290][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 340.883155][T11253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1349'. [ 340.894531][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 341.152287][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 341.490384][T11259] netlink: 'syz.3.1352': attribute type 23 has an invalid length. [ 341.918050][T11281] FAULT_INJECTION: forcing a failure. [ 341.918050][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.953337][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.4.1358 Not tainted syzkaller #0 PREEMPT(full) [ 341.953367][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.953379][T11281] Call Trace: [ 341.953387][T11281] [ 341.953396][T11281] dump_stack_lvl+0x189/0x250 [ 341.953429][T11281] ? __pfx____ratelimit+0x10/0x10 [ 341.953458][T11281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.953486][T11281] ? __pfx__printk+0x10/0x10 [ 341.953506][T11281] ? __might_fault+0xb0/0x130 [ 341.953547][T11281] should_fail_ex+0x414/0x560 [ 341.953583][T11281] _copy_from_user+0x2d/0xb0 [ 341.953610][T11281] __sys_bpf+0x1e3/0x860 [ 341.953632][T11281] ? __pfx___sys_bpf+0x10/0x10 [ 341.953670][T11281] ? ksys_write+0x22a/0x250 [ 341.953708][T11281] ? __pfx_ksys_write+0x10/0x10 [ 341.953743][T11281] __x64_sys_bpf+0x7c/0x90 [ 341.953771][T11281] do_syscall_64+0xfa/0xfa0 [ 341.953798][T11281] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.953828][T11281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.953847][T11281] ? clear_bhb_loop+0x60/0xb0 [ 341.953870][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.953890][T11281] RIP: 0033:0x7f567478f6c9 [ 341.953907][T11281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.953950][T11281] RSP: 002b:00007f5675708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.953971][T11281] RAX: ffffffffffffffda RBX: 00007f56749e5fa0 RCX: 00007f567478f6c9 [ 341.953986][T11281] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 341.954012][T11281] RBP: 00007f5675708090 R08: 0000000000000000 R09: 0000000000000000 [ 341.954024][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.954036][T11281] R13: 00007f56749e6038 R14: 00007f56749e5fa0 R15: 00007ffe6bb17fe8 [ 341.954070][T11281] [ 342.293710][T11290] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 342.799799][T11310] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 342.829861][T11310] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 343.742033][T11343] v: renamed from vlan0 (while UP) [ 343.806040][T11349] netlink: 'syz.1.1379': attribute type 2 has an invalid length. [ 343.871156][T11349] netlink: 'syz.1.1379': attribute type 9 has an invalid length. [ 344.710263][T11390] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 344.749196][T11391] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 344.762521][T11391] bond5 (unregistering): Released all slaves [ 344.825001][T11390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.014140][T11386] netlink: 'syz.2.1388': attribute type 4 has an invalid length. [ 345.456519][T11413] netlink: 'syz.0.1397': attribute type 4 has an invalid length. [ 345.530238][T11420] ip6tnl2: entered promiscuous mode [ 345.535628][T11420] ip6tnl2: entered allmulticast mode [ 345.564695][T11417] __nla_validate_parse: 8 callbacks suppressed [ 345.564714][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1398'. [ 345.632679][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 345.667641][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 345.784620][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 345.790278][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1402'. [ 345.851281][T11433] netlink: 'syz.3.1402': attribute type 7 has an invalid length. [ 345.869315][T11433] netlink: 'syz.3.1402': attribute type 8 has an invalid length. [ 345.906454][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 346.415113][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1415'. [ 346.471176][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 346.559828][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1416'. [ 346.674727][T11472] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1418'. [ 346.697966][T11472] ksmbd: Unknown IPC event: 1, ignore. [ 347.003264][T11480] sctp: [Deprecated]: syz.0.1422 (pid 11480) Use of int in max_burst socket option. [ 347.003264][T11480] Use struct sctp_assoc_value instead [ 347.212976][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.261731][T11489] netlink: 'syz.2.1424': attribute type 2 has an invalid length. [ 347.462120][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 347.544029][T11501] dvmrp0: entered allmulticast mode [ 347.610312][T11503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.699653][T11503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.778579][T11503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.834615][T11503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.854549][T11508] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 347.916868][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.949464][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.973684][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.985814][T11513] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 347.996273][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.372932][T11525] syzkaller1: entered promiscuous mode [ 348.378750][T11525] syzkaller1: entered allmulticast mode [ 348.583514][ T96] block nbd1: Possible stuck request ffff8880249ae000: control (read@0,1024B). Runtime 180 seconds [ 348.594582][ T96] block nbd1: Possible stuck request ffff8880249ae1c0: control (read@1024,1024B). Runtime 180 seconds [ 348.605782][ T96] block nbd1: Possible stuck request ffff8880249ae380: control (read@2048,1024B). Runtime 180 seconds [ 348.616887][ T96] block nbd1: Possible stuck request ffff8880249ae540: control (read@3072,1024B). Runtime 180 seconds [ 349.088141][T11553] FAULT_INJECTION: forcing a failure. [ 349.088141][T11553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.164981][T11553] CPU: 0 UID: 0 PID: 11553 Comm: syz.1.1440 Not tainted syzkaller #0 PREEMPT(full) [ 349.165011][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.165023][T11553] Call Trace: [ 349.165032][T11553] [ 349.165040][T11553] dump_stack_lvl+0x189/0x250 [ 349.165073][T11553] ? __pfx____ratelimit+0x10/0x10 [ 349.165110][T11553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.165137][T11553] ? __pfx__printk+0x10/0x10 [ 349.165160][T11553] ? fs_reclaim_acquire+0x7d/0x100 [ 349.165202][T11553] should_fail_ex+0x414/0x560 [ 349.165238][T11553] prepare_alloc_pages+0x213/0x610 [ 349.165266][T11553] __alloc_frozen_pages_noprof+0x123/0x370 [ 349.165292][T11553] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.165311][T11553] ? count_memcg_event_mm+0x21/0x260 [ 349.165346][T11553] ? policy_nodemask+0x27c/0x720 [ 349.165372][T11553] alloc_pages_mpol+0x232/0x4a0 [ 349.165399][T11553] ___kmalloc_large_node+0x5f/0x1b0 [ 349.165433][T11553] __kmalloc_large_node_noprof+0x18/0x90 [ 349.165465][T11553] __kmalloc_noprof+0x4bd/0x7f0 [ 349.165493][T11553] ? rds_info_getsockopt+0x1db/0x470 [ 349.165519][T11553] ? __might_fault+0xb0/0x130 [ 349.165552][T11553] rds_info_getsockopt+0x1db/0x470 [ 349.165586][T11553] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 349.165617][T11553] ? __might_fault+0xb0/0x130 [ 349.165649][T11553] ? rds_getsockopt+0x2d4/0x500 [ 349.165669][T11553] ? __pfx_rds_getsockopt+0x10/0x10 [ 349.165692][T11553] do_sock_getsockopt+0x372/0x450 [ 349.165719][T11553] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 349.165740][T11553] ? do_syscall_64+0xa0/0xfa0 [ 349.165768][T11553] ? __fget_files+0x2a/0x420 [ 349.165787][T11553] ? __fget_files+0x3a0/0x420 [ 349.165805][T11553] ? __fget_files+0x2a/0x420 [ 349.165832][T11553] __x64_sys_getsockopt+0x1a5/0x250 [ 349.165853][T11553] ? do_syscall_64+0xa0/0xfa0 [ 349.165885][T11553] ? do_syscall_64+0xa0/0xfa0 [ 349.165918][T11553] do_syscall_64+0xfa/0xfa0 [ 349.165946][T11553] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.165975][T11553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.165999][T11553] ? clear_bhb_loop+0x60/0xb0 [ 349.166024][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.166044][T11553] RIP: 0033:0x7f4ced78f6c9 [ 349.166062][T11553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.166080][T11553] RSP: 002b:00007f4cee6ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 349.166126][T11553] RAX: ffffffffffffffda RBX: 00007f4ced9e6090 RCX: 00007f4ced78f6c9 [ 349.166141][T11553] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 349.166154][T11553] RBP: 00007f4cee6ca090 R08: 0000200000000000 R09: 0000000000000000 [ 349.166168][T11553] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 349.166181][T11553] R13: 00007f4ced9e6128 R14: 00007f4ced9e6090 R15: 00007ffcb89680a8 [ 349.166215][T11553] [ 349.613771][T11556] tipc: Enabled bearer , priority 0 [ 349.621603][T11556] syzkaller0: entered promiscuous mode [ 349.627115][T11556] syzkaller0: entered allmulticast mode [ 349.665358][T11556] tipc: Resetting bearer [ 349.675078][T11555] tipc: Resetting bearer [ 349.733219][T11555] tipc: Disabling bearer [ 349.747184][T11561] 0ªX¹¦À: renamed from caif0 [ 349.755250][T11561] 0ªX¹¦À: entered allmulticast mode [ 349.760500][T11561] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 349.994339][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.712873][T11603] syzkaller1: entered promiscuous mode [ 350.718463][T11603] syzkaller1: entered allmulticast mode [ 351.193475][T11617] __nla_validate_parse: 6 callbacks suppressed [ 351.193492][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 351.237998][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 351.431657][T11630] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 351.526417][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 351.889282][T11643] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 351.940183][T11641] FAULT_INJECTION: forcing a failure. [ 351.940183][T11641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.963242][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.3.1466 Not tainted syzkaller #0 PREEMPT(full) [ 351.963286][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.963307][T11641] Call Trace: [ 351.963315][T11641] [ 351.963326][T11641] dump_stack_lvl+0x189/0x250 [ 351.963360][T11641] ? __pfx____ratelimit+0x10/0x10 [ 351.963389][T11641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.963417][T11641] ? __pfx__printk+0x10/0x10 [ 351.963438][T11641] ? __might_fault+0xb0/0x130 [ 351.963478][T11641] should_fail_ex+0x414/0x560 [ 351.963515][T11641] _copy_from_user+0x2d/0xb0 [ 351.963543][T11641] sctp_getsockopt_associnfo+0xc7/0x710 [ 351.963577][T11641] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.963607][T11641] ? __pfx_sctp_getsockopt_associnfo+0x10/0x10 [ 351.963635][T11641] ? __local_bh_enable_ip+0x12d/0x1c0 [ 351.963690][T11641] sctp_getsockopt+0x7d0/0xb60 [ 351.963710][T11641] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 351.963743][T11641] do_sock_getsockopt+0x372/0x450 [ 351.963770][T11641] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 351.963812][T11641] ? do_syscall_64+0xa0/0xfa0 [ 351.963875][T11641] ? __fget_files+0x2a/0x420 [ 351.963894][T11641] ? __fget_files+0x3a0/0x420 [ 351.963911][T11641] ? __fget_files+0x2a/0x420 [ 351.963940][T11641] __x64_sys_getsockopt+0x1a5/0x250 [ 351.963962][T11641] ? do_syscall_64+0xa0/0xfa0 [ 351.963994][T11641] ? do_syscall_64+0xa0/0xfa0 [ 351.964029][T11641] do_syscall_64+0xfa/0xfa0 [ 351.964059][T11641] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.964089][T11641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.964110][T11641] ? clear_bhb_loop+0x60/0xb0 [ 351.964135][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.964156][T11641] RIP: 0033:0x7fcb0a18f6c9 [ 351.964175][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.964193][T11641] RSP: 002b:00007fcb0af43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 351.964216][T11641] RAX: ffffffffffffffda RBX: 00007fcb0a3e6090 RCX: 00007fcb0a18f6c9 [ 351.964231][T11641] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 351.964243][T11641] RBP: 00007fcb0af43090 R08: 0000200000000440 R09: 0000000000000000 [ 351.964257][T11641] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 351.964270][T11641] R13: 00007fcb0a3e6128 R14: 00007fcb0a3e6090 R15: 00007ffe23c85d88 [ 351.964304][T11641] [ 352.513774][T11655] macsec0: entered promiscuous mode [ 352.519254][T11655] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 352.584349][T11660] tipc: Enabled bearer , priority 0 [ 352.610100][T11660] syzkaller0: entered promiscuous mode [ 352.621159][T11660] syzkaller0: entered allmulticast mode [ 352.653969][T11660] tipc: Resetting bearer [ 352.675994][T11658] tipc: Resetting bearer [ 352.708660][T11658] tipc: Disabling bearer [ 352.829917][T11671] syzkaller1: entered promiscuous mode [ 352.845063][T11671] syzkaller1: entered allmulticast mode [ 353.216804][T11687] tipc: Enabled bearer , priority 0 [ 353.264280][T11687] syzkaller0: entered promiscuous mode [ 353.337131][T11687] syzkaller0: entered allmulticast mode [ 353.399909][T11687] tipc: Resetting bearer [ 353.445328][T11685] tipc: Resetting bearer [ 353.498939][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1487'. [ 353.509045][T11685] tipc: Disabling bearer [ 353.788773][T11706] FAULT_INJECTION: forcing a failure. [ 353.788773][T11706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.842698][T11706] CPU: 0 UID: 0 PID: 11706 Comm: syz.2.1489 Not tainted syzkaller #0 PREEMPT(full) [ 353.842729][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.842743][T11706] Call Trace: [ 353.842751][T11706] [ 353.842761][T11706] dump_stack_lvl+0x189/0x250 [ 353.842795][T11706] ? __pfx____ratelimit+0x10/0x10 [ 353.842824][T11706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.842852][T11706] ? __pfx__printk+0x10/0x10 [ 353.842876][T11706] ? fs_reclaim_acquire+0x7d/0x100 [ 353.842919][T11706] should_fail_ex+0x414/0x560 [ 353.842957][T11706] prepare_alloc_pages+0x213/0x610 [ 353.842986][T11706] __alloc_frozen_pages_noprof+0x123/0x370 [ 353.843013][T11706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.843046][T11706] ? policy_nodemask+0x27c/0x720 [ 353.843072][T11706] alloc_pages_mpol+0x232/0x4a0 [ 353.843099][T11706] vma_alloc_folio_noprof+0xe4/0x200 [ 353.843125][T11706] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 353.843150][T11706] ? do_raw_spin_unlock+0x122/0x240 [ 353.843188][T11706] folio_prealloc+0x30/0x180 [ 353.843220][T11706] __handle_mm_fault+0x2a8b/0x5400 [ 353.843268][T11706] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.843320][T11706] ? __pfx___might_resched+0x10/0x10 [ 353.843348][T11706] handle_mm_fault+0x40a/0x8e0 [ 353.843390][T11706] __get_user_pages+0x165c/0x2a00 [ 353.843456][T11706] __gup_longterm_locked+0xde4/0x1660 [ 353.843499][T11706] ? sanity_check_pinned_pages+0x1241/0x1300 [ 353.843529][T11706] ? gup_fast_fallback+0x1b86/0x22d0 [ 353.843561][T11706] gup_fast_fallback+0x1d65/0x22d0 [ 353.843595][T11706] ? __lock_acquire+0xab9/0xd20 [ 353.843649][T11706] ? __phys_addr+0xd3/0x180 [ 353.843681][T11706] ? __pfx_gup_fast_fallback+0x10/0x10 [ 353.843710][T11706] ? rcu_is_watching+0x15/0xb0 [ 353.843737][T11706] ? rcu_is_watching+0x15/0xb0 [ 353.843761][T11706] ? is_valid_gup_args+0x11f/0x200 [ 353.843791][T11706] ? pin_user_pages_fast+0x4d/0xb0 [ 353.843821][T11706] rds_info_getsockopt+0x1fb/0x470 [ 353.843858][T11706] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 353.843890][T11706] ? __might_fault+0xb0/0x130 [ 353.843923][T11706] ? rds_getsockopt+0x2d4/0x500 [ 353.843945][T11706] ? __pfx_rds_getsockopt+0x10/0x10 [ 353.843969][T11706] do_sock_getsockopt+0x372/0x450 [ 353.843996][T11706] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 353.844019][T11706] ? do_syscall_64+0xa0/0xfa0 [ 353.844048][T11706] ? __fget_files+0x2a/0x420 [ 353.844067][T11706] ? __fget_files+0x3a0/0x420 [ 353.844086][T11706] ? __fget_files+0x2a/0x420 [ 353.844114][T11706] __x64_sys_getsockopt+0x1a5/0x250 [ 353.844136][T11706] ? do_syscall_64+0xa0/0xfa0 [ 353.844169][T11706] ? do_syscall_64+0xa0/0xfa0 [ 353.844204][T11706] do_syscall_64+0xfa/0xfa0 [ 353.844232][T11706] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.844274][T11706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.844295][T11706] ? clear_bhb_loop+0x60/0xb0 [ 353.844320][T11706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.844339][T11706] RIP: 0033:0x7f1bbd58f6c9 [ 353.844358][T11706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.844375][T11706] RSP: 002b:00007f1bbe393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 353.844417][T11706] RAX: ffffffffffffffda RBX: 00007f1bbd7e6090 RCX: 00007f1bbd58f6c9 [ 353.844432][T11706] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 353.844445][T11706] RBP: 00007f1bbe393090 R08: 0000200000000000 R09: 0000000000000000 [ 353.844459][T11706] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 353.844472][T11706] R13: 00007f1bbd7e6128 R14: 00007f1bbd7e6090 R15: 00007ffe070984f8 [ 353.844509][T11706] [ 354.343137][T11712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1492'. [ 354.640787][ T30] audit: type=1800 audit(1762554660.468:3): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1496" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1541 res=0 errno=0 [ 354.695627][ T30] audit: type=1804 audit(1762554660.468:4): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1496" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1541 res=1 errno=0 [ 354.899225][T11736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.910674][T11736] bond0: (slave bond1): Enslaving as an active interface with an up link [ 355.107828][T11749] geneve2: entered promiscuous mode [ 355.115434][ T772] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.117576][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 355.133241][ T772] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.159022][ T772] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.183620][ T772] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.195609][T11751] syzkaller1: entered promiscuous mode [ 355.202340][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 355.211481][T11751] syzkaller1: entered allmulticast mode [ 355.901260][T11767] FAULT_INJECTION: forcing a failure. [ 355.901260][T11767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.986961][T11767] CPU: 0 UID: 0 PID: 11767 Comm: syz.3.1508 Not tainted syzkaller #0 PREEMPT(full) [ 355.986992][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.987005][T11767] Call Trace: [ 355.987014][T11767] [ 355.987023][T11767] dump_stack_lvl+0x189/0x250 [ 355.987057][T11767] ? __pfx____ratelimit+0x10/0x10 [ 355.987088][T11767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.987116][T11767] ? __pfx__printk+0x10/0x10 [ 355.987139][T11767] ? fs_reclaim_acquire+0x7d/0x100 [ 355.987182][T11767] should_fail_ex+0x414/0x560 [ 355.987219][T11767] prepare_alloc_pages+0x213/0x610 [ 355.987248][T11767] __alloc_frozen_pages_noprof+0x123/0x370 [ 355.987286][T11767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.987317][T11767] ? policy_nodemask+0x27c/0x720 [ 355.987334][T11767] ? __lock_acquire+0xab9/0xd20 [ 355.987360][T11767] alloc_pages_mpol+0x232/0x4a0 [ 355.987386][T11767] vma_alloc_folio_noprof+0xe4/0x200 [ 355.987406][T11767] ? page_table_check_set+0x18d/0x730 [ 355.987436][T11767] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 355.987477][T11767] folio_prealloc+0x30/0x180 [ 355.987509][T11767] __handle_mm_fault+0x2a8b/0x5400 [ 355.987555][T11767] ? __pfx___handle_mm_fault+0x10/0x10 [ 355.987598][T11767] ? follow_page_pte+0x7ef/0x13e0 [ 355.987634][T11767] handle_mm_fault+0x40a/0x8e0 [ 355.987674][T11767] __get_user_pages+0x165c/0x2a00 [ 355.987737][T11767] __gup_longterm_locked+0xde4/0x1660 [ 355.987779][T11767] ? sanity_check_pinned_pages+0x1241/0x1300 [ 355.987808][T11767] ? gup_fast_fallback+0x1b86/0x22d0 [ 355.987837][T11767] gup_fast_fallback+0x1d65/0x22d0 [ 355.987861][T11767] ? __lock_acquire+0xab9/0xd20 [ 355.987907][T11767] ? __phys_addr+0xd3/0x180 [ 355.987937][T11767] ? __pfx_gup_fast_fallback+0x10/0x10 [ 355.987963][T11767] ? rcu_is_watching+0x15/0xb0 [ 355.987990][T11767] ? rcu_is_watching+0x15/0xb0 [ 355.988013][T11767] ? is_valid_gup_args+0x11f/0x200 [ 355.988041][T11767] ? pin_user_pages_fast+0x4d/0xb0 [ 355.988070][T11767] rds_info_getsockopt+0x1fb/0x470 [ 355.988106][T11767] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 355.988136][T11767] ? __might_fault+0xb0/0x130 [ 355.988168][T11767] ? rds_getsockopt+0x2d4/0x500 [ 355.988189][T11767] ? __pfx_rds_getsockopt+0x10/0x10 [ 355.988212][T11767] do_sock_getsockopt+0x372/0x450 [ 355.988238][T11767] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 355.988259][T11767] ? do_syscall_64+0xa0/0xfa0 [ 355.988288][T11767] ? __fget_files+0x2a/0x420 [ 355.988306][T11767] ? __fget_files+0x3a0/0x420 [ 355.988323][T11767] ? __fget_files+0x2a/0x420 [ 355.988351][T11767] __x64_sys_getsockopt+0x1a5/0x250 [ 355.988372][T11767] ? do_syscall_64+0xa0/0xfa0 [ 355.988402][T11767] ? do_syscall_64+0xa0/0xfa0 [ 355.988435][T11767] do_syscall_64+0xfa/0xfa0 [ 355.988471][T11767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.988490][T11767] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.988510][T11767] ? clear_bhb_loop+0x60/0xb0 [ 355.988535][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.988554][T11767] RIP: 0033:0x7fcb0a18f6c9 [ 355.988573][T11767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.988590][T11767] RSP: 002b:00007fcb0af43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 355.988611][T11767] RAX: ffffffffffffffda RBX: 00007fcb0a3e6090 RCX: 00007fcb0a18f6c9 [ 355.988626][T11767] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 355.988638][T11767] RBP: 00007fcb0af43090 R08: 0000200000000000 R09: 0000000000000000 [ 355.988652][T11767] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 355.988664][T11767] R13: 00007fcb0a3e6128 R14: 00007fcb0a3e6090 R15: 00007ffe23c85d88 [ 355.988698][T11767] [ 357.134552][T11794] syzkaller0: entered promiscuous mode [ 357.140232][T11794] syzkaller0: entered allmulticast mode [ 357.278343][T11791] netlink: 'syz.0.1516': attribute type 5 has an invalid length. [ 357.447763][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 357.517253][T11810] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1525'. [ 357.801522][T11826] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 357.839798][T11828] syzkaller0: entered promiscuous mode [ 357.845523][T11828] syzkaller0: entered allmulticast mode [ 358.070922][T11835] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 358.254666][T11848] vxcan3: entered allmulticast mode [ 358.478934][T11864] FAULT_INJECTION: forcing a failure. [ 358.478934][T11864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.493180][T11864] CPU: 1 UID: 0 PID: 11864 Comm: syz.4.1542 Not tainted syzkaller #0 PREEMPT(full) [ 358.493209][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.493230][T11864] Call Trace: [ 358.493239][T11864] [ 358.493247][T11864] dump_stack_lvl+0x189/0x250 [ 358.493281][T11864] ? __pfx____ratelimit+0x10/0x10 [ 358.493310][T11864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.493339][T11864] ? __pfx__printk+0x10/0x10 [ 358.493374][T11864] should_fail_ex+0x414/0x560 [ 358.493412][T11864] _copy_to_user+0x31/0xb0 [ 358.493441][T11864] simple_read_from_buffer+0xe1/0x170 [ 358.493477][T11864] proc_fail_nth_read+0x1b3/0x220 [ 358.493506][T11864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.493532][T11864] ? rw_verify_area+0x2a6/0x4d0 [ 358.493556][T11864] ? __lock_acquire+0xab9/0xd20 [ 358.493573][T11864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.493595][T11864] vfs_read+0x200/0xa30 [ 358.493621][T11864] ? fdget_pos+0x247/0x320 [ 358.493645][T11864] ? __pfx___mutex_lock+0x10/0x10 [ 358.493665][T11864] ? __pfx_vfs_read+0x10/0x10 [ 358.493675][T11853] veth3: entered promiscuous mode [ 358.493695][T11864] ? __fget_files+0x2a/0x420 [ 358.493719][T11864] ? __fget_files+0x3a0/0x420 [ 358.493736][T11864] ? __fget_files+0x2a/0x420 [ 358.493766][T11864] ksys_read+0x145/0x250 [ 358.493833][T11864] ? __pfx_ksys_read+0x10/0x10 [ 358.493870][T11864] ? do_syscall_64+0xbe/0xfa0 [ 358.493917][T11864] do_syscall_64+0xfa/0xfa0 [ 358.493949][T11864] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.493981][T11864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.494005][T11864] ? clear_bhb_loop+0x60/0xb0 [ 358.494034][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.494056][T11864] RIP: 0033:0x7f567478e0dc [ 358.494079][T11864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.494099][T11864] RSP: 002b:00007f5675708030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.494124][T11864] RAX: ffffffffffffffda RBX: 00007f56749e5fa0 RCX: 00007f567478e0dc [ 358.494142][T11864] RDX: 000000000000000f RSI: 00007f56757080a0 RDI: 0000000000000004 [ 358.494155][T11864] RBP: 00007f5675708090 R08: 0000000000000000 R09: 0000000000000000 [ 358.494171][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.494183][T11864] R13: 00007f56749e6038 R14: 00007f56749e5fa0 R15: 00007ffe6bb17fe8 [ 358.494234][T11864] [ 358.931411][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 358.941209][T11879] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 359.102604][T11890] tipc: Enabling of bearer rejected, failed to enable media [ 359.123806][T11890] syzkaller0: entered promiscuous mode [ 359.129359][T11890] syzkaller0: entered allmulticast mode [ 359.282805][T11899] FAULT_INJECTION: forcing a failure. [ 359.282805][T11899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 359.328943][T11899] CPU: 0 UID: 0 PID: 11899 Comm: syz.0.1552 Not tainted syzkaller #0 PREEMPT(full) [ 359.328972][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.328985][T11899] Call Trace: [ 359.328993][T11899] [ 359.329002][T11899] dump_stack_lvl+0x189/0x250 [ 359.329036][T11899] ? __pfx____ratelimit+0x10/0x10 [ 359.329067][T11899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.329096][T11899] ? __pfx__printk+0x10/0x10 [ 359.329120][T11899] ? fs_reclaim_acquire+0x7d/0x100 [ 359.329163][T11899] should_fail_ex+0x414/0x560 [ 359.329202][T11899] prepare_alloc_pages+0x213/0x610 [ 359.329232][T11899] __alloc_frozen_pages_noprof+0x123/0x370 [ 359.329259][T11899] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 359.329291][T11899] ? policy_nodemask+0x27c/0x720 [ 359.329309][T11899] ? __lock_acquire+0xab9/0xd20 [ 359.329336][T11899] alloc_pages_mpol+0x232/0x4a0 [ 359.329375][T11899] vma_alloc_folio_noprof+0xe4/0x200 [ 359.329394][T11899] ? page_table_check_set+0x18d/0x730 [ 359.329423][T11899] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 359.329457][T11899] folio_prealloc+0x30/0x180 [ 359.329489][T11899] __handle_mm_fault+0x2a8b/0x5400 [ 359.329535][T11899] ? __pfx___handle_mm_fault+0x10/0x10 [ 359.329579][T11899] ? follow_page_pte+0x7ef/0x13e0 [ 359.329617][T11899] handle_mm_fault+0x40a/0x8e0 [ 359.329655][T11899] __get_user_pages+0x165c/0x2a00 [ 359.329714][T11899] __gup_longterm_locked+0xde4/0x1660 [ 359.329752][T11899] ? sanity_check_pinned_pages+0x1241/0x1300 [ 359.329779][T11899] ? gup_fast_fallback+0x1b86/0x22d0 [ 359.329809][T11899] gup_fast_fallback+0x1d65/0x22d0 [ 359.329834][T11899] ? __lock_acquire+0xab9/0xd20 [ 359.329892][T11899] ? __phys_addr+0xd3/0x180 [ 359.329923][T11899] ? __pfx_gup_fast_fallback+0x10/0x10 [ 359.329951][T11899] ? rcu_is_watching+0x15/0xb0 [ 359.329981][T11899] ? rcu_is_watching+0x15/0xb0 [ 359.330004][T11899] ? is_valid_gup_args+0x11f/0x200 [ 359.330032][T11899] ? pin_user_pages_fast+0x4d/0xb0 [ 359.330061][T11899] rds_info_getsockopt+0x1fb/0x470 [ 359.330098][T11899] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 359.330129][T11899] ? __might_fault+0xb0/0x130 [ 359.330161][T11899] ? rds_getsockopt+0x2d4/0x500 [ 359.330182][T11899] ? __pfx_rds_getsockopt+0x10/0x10 [ 359.330205][T11899] do_sock_getsockopt+0x372/0x450 [ 359.330256][T11899] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 359.330278][T11899] ? do_syscall_64+0xa0/0xfa0 [ 359.330307][T11899] ? __fget_files+0x2a/0x420 [ 359.330326][T11899] ? __fget_files+0x3a0/0x420 [ 359.330343][T11899] ? __fget_files+0x2a/0x420 [ 359.330369][T11899] __x64_sys_getsockopt+0x1a5/0x250 [ 359.330391][T11899] ? do_syscall_64+0xa0/0xfa0 [ 359.330422][T11899] ? do_syscall_64+0xa0/0xfa0 [ 359.330457][T11899] do_syscall_64+0xfa/0xfa0 [ 359.330485][T11899] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.330515][T11899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.330535][T11899] ? clear_bhb_loop+0x60/0xb0 [ 359.330562][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.330582][T11899] RIP: 0033:0x7f37c7f8f6c9 [ 359.330601][T11899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.330619][T11899] RSP: 002b:00007f37c8d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 359.330641][T11899] RAX: ffffffffffffffda RBX: 00007f37c81e6090 RCX: 00007f37c7f8f6c9 [ 359.330657][T11899] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 359.330670][T11899] RBP: 00007f37c8d43090 R08: 0000200000000000 R09: 0000000000000000 [ 359.330684][T11899] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 359.330696][T11899] R13: 00007f37c81e6128 R14: 00007f37c81e6090 R15: 00007ffe37d07aa8 [ 359.330756][T11899] [ 359.705134][T11901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.000087][T11907] syzkaller0: entered promiscuous mode [ 360.005722][T11907] syzkaller0: entered allmulticast mode [ 360.018744][T11907] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1555'. [ 360.162852][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 360.407672][T11927] tipc: Enabling of bearer rejected, failed to enable media [ 360.424037][T11927] syzkaller0: entered promiscuous mode [ 360.430367][T11927] syzkaller0: entered allmulticast mode [ 360.464300][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 360.488936][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 360.562723][T11936] FAULT_INJECTION: forcing a failure. [ 360.562723][T11936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.605048][T11937] syzkaller1: entered promiscuous mode [ 360.606211][T11936] CPU: 0 UID: 0 PID: 11936 Comm: syz.1.1565 Not tainted syzkaller #0 PREEMPT(full) [ 360.606244][T11936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.606258][T11936] Call Trace: [ 360.606268][T11936] [ 360.606278][T11936] dump_stack_lvl+0x189/0x250 [ 360.606319][T11936] ? __pfx____ratelimit+0x10/0x10 [ 360.606352][T11936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.606383][T11936] ? __pfx__printk+0x10/0x10 [ 360.606411][T11936] ? fs_reclaim_acquire+0x7d/0x100 [ 360.606458][T11936] should_fail_ex+0x414/0x560 [ 360.606501][T11936] prepare_alloc_pages+0x213/0x610 [ 360.606534][T11936] __alloc_frozen_pages_noprof+0x123/0x370 [ 360.606564][T11936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.606603][T11936] ? policy_nodemask+0x27c/0x720 [ 360.606622][T11936] ? __lock_acquire+0xab9/0xd20 [ 360.606653][T11936] alloc_pages_mpol+0x232/0x4a0 [ 360.606685][T11936] vma_alloc_folio_noprof+0xe4/0x200 [ 360.606708][T11936] ? page_table_check_set+0x18d/0x730 [ 360.606742][T11936] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 360.606782][T11936] folio_prealloc+0x30/0x180 [ 360.606818][T11936] __handle_mm_fault+0x2a8b/0x5400 [ 360.606871][T11936] ? __pfx___handle_mm_fault+0x10/0x10 [ 360.606921][T11936] ? follow_page_pte+0x7ef/0x13e0 [ 360.606962][T11936] handle_mm_fault+0x40a/0x8e0 [ 360.607008][T11936] __get_user_pages+0x165c/0x2a00 [ 360.607089][T11936] __gup_longterm_locked+0xde4/0x1660 [ 360.607136][T11936] ? sanity_check_pinned_pages+0x1241/0x1300 [ 360.607168][T11936] ? gup_fast_fallback+0x1b86/0x22d0 [ 360.607204][T11936] gup_fast_fallback+0x1d65/0x22d0 [ 360.607232][T11936] ? __lock_acquire+0xab9/0xd20 [ 360.607292][T11936] ? __phys_addr+0xd3/0x180 [ 360.607328][T11936] ? __pfx_gup_fast_fallback+0x10/0x10 [ 360.607359][T11936] ? rcu_is_watching+0x15/0xb0 [ 360.607389][T11936] ? rcu_is_watching+0x15/0xb0 [ 360.607416][T11936] ? is_valid_gup_args+0x11f/0x200 [ 360.607450][T11936] ? pin_user_pages_fast+0x4d/0xb0 [ 360.607484][T11936] rds_info_getsockopt+0x1fb/0x470 [ 360.607525][T11936] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 360.607561][T11936] ? __might_fault+0xb0/0x130 [ 360.607600][T11936] ? rds_getsockopt+0x2d4/0x500 [ 360.607623][T11936] ? __pfx_rds_getsockopt+0x10/0x10 [ 360.607650][T11936] do_sock_getsockopt+0x372/0x450 [ 360.607680][T11936] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 360.607706][T11936] ? do_syscall_64+0xa0/0xfa0 [ 360.607737][T11936] ? __fget_files+0x2a/0x420 [ 360.607760][T11936] ? __fget_files+0x3a0/0x420 [ 360.607780][T11936] ? __fget_files+0x2a/0x420 [ 360.607809][T11936] __x64_sys_getsockopt+0x1a5/0x250 [ 360.607834][T11936] ? do_syscall_64+0xa0/0xfa0 [ 360.607870][T11936] ? do_syscall_64+0xa0/0xfa0 [ 360.607909][T11936] do_syscall_64+0xfa/0xfa0 [ 360.607941][T11936] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.607976][T11936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.608000][T11936] ? clear_bhb_loop+0x60/0xb0 [ 360.608037][T11936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.608060][T11936] RIP: 0033:0x7f4ced78f6c9 [ 360.608083][T11936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.608105][T11936] RSP: 002b:00007f4cee6ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 360.608129][T11936] RAX: ffffffffffffffda RBX: 00007f4ced9e6090 RCX: 00007f4ced78f6c9 [ 360.608146][T11936] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 360.608162][T11936] RBP: 00007f4cee6ca090 R08: 0000200000000000 R09: 0000000000000000 [ 360.608177][T11936] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 360.608191][T11936] R13: 00007f4ced9e6128 R14: 00007f4ced9e6090 R15: 00007ffcb89680a8 [ 360.608230][T11936] [ 361.029503][T11937] syzkaller1: entered allmulticast mode [ 361.117410][T11943] pim6reg1: entered promiscuous mode [ 361.130919][T11943] pim6reg1: entered allmulticast mode [ 361.256357][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1569'. [ 361.780539][T11960] syzkaller0: entered promiscuous mode [ 361.787167][T11960] syzkaller0: entered allmulticast mode [ 361.849999][T11977] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 363.097664][T11977] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 363.157706][T11986] vlan2: entered allmulticast mode [ 363.164716][T11986] team0: entered allmulticast mode [ 363.216913][T11989] bond2: entered promiscuous mode [ 363.222711][T11989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.236777][T11992] syzkaller0: entered promiscuous mode [ 363.251524][T11992] syzkaller0: entered allmulticast mode [ 363.317615][T12009] ip6t_srh: unknown srh match flags C404 [ 363.442677][T12014] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 363.513538][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 363.553859][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 363.623394][T12014] tipc: Resetting bearer [ 364.376543][T12014] ip6erspan0: left promiscuous mode [ 364.404516][T12014] ip6tnl2: left promiscuous mode [ 364.409539][T12014] ip6tnl2: left allmulticast mode [ 364.441911][T12014] geneve2: left promiscuous mode [ 364.450419][T12014] bond2: left promiscuous mode [ 364.478544][T12017] macvtap1: entered promiscuous mode [ 364.490792][T12017] team0: entered promiscuous mode [ 364.501812][T12017] macvtap1: entered allmulticast mode [ 364.514570][T12017] team0: entered allmulticast mode [ 364.528062][T12017] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 364.549416][T12020] macvtap1: left promiscuous mode [ 364.566796][T12020] team0: left promiscuous mode [ 364.572638][T12020] macvtap1: left allmulticast mode [ 364.577933][T12020] team0: left allmulticast mode [ 364.596274][T12030] dvmrp0: entered allmulticast mode [ 364.615636][T12021] syzkaller1: entered promiscuous mode [ 364.625907][T12021] syzkaller1: entered allmulticast mode [ 364.664880][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.684246][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.861694][T12042] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 364.869739][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.912063][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.941677][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.950091][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.995931][T12056] tipc: Enabled bearer , priority 0 [ 365.023153][T12056] syzkaller0: entered promiscuous mode [ 365.028699][T12056] syzkaller0: entered allmulticast mode [ 365.067410][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.076636][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.116304][T12056] tipc: Resetting bearer [ 365.131738][T12054] tipc: Resetting bearer [ 365.168169][T12054] tipc: Disabling bearer [ 365.397272][T12081] ip6t_srh: unknown srh invflags 4000 [ 365.403118][T12080] ip6t_srh: unknown srh invflags 4000 [ 365.438462][T12074] syzkaller0: entered promiscuous mode [ 365.444074][T12074] syzkaller0: entered allmulticast mode [ 365.501519][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 365.528999][T12089] ip6gretap1: entered promiscuous mode [ 365.547843][T12089] ip6gretap1: entered allmulticast mode [ 365.755886][T12101] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1608'. [ 366.920402][T12138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1617'. [ 368.024748][T12146] trusted_key: syz.4.1621 sent an empty control message without MSG_MORE. [ 368.226488][T12150] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1623'. [ 368.423236][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.664484][T12097] syzkaller1: entered promiscuous mode [ 368.670196][T12097] syzkaller1: entered allmulticast mode [ 368.979949][T12160] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 369.104008][T12164] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1625'. [ 369.717622][T12181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1632'. [ 369.742908][T12181] FAULT_INJECTION: forcing a failure. [ 369.742908][T12181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.778495][T12181] CPU: 0 UID: 0 PID: 12181 Comm: syz.2.1632 Not tainted syzkaller #0 PREEMPT(full) [ 369.778525][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.778544][T12181] Call Trace: [ 369.778553][T12181] [ 369.778563][T12181] dump_stack_lvl+0x189/0x250 [ 369.778598][T12181] ? __pfx____ratelimit+0x10/0x10 [ 369.778628][T12181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.778655][T12181] ? __pfx__printk+0x10/0x10 [ 369.778676][T12181] ? __might_fault+0xb0/0x130 [ 369.778717][T12181] should_fail_ex+0x414/0x560 [ 369.778753][T12181] _copy_from_user+0x2d/0xb0 [ 369.778780][T12181] kstrtouint_from_user+0xc4/0x170 [ 369.778804][T12181] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 369.778844][T12181] proc_fail_nth_write+0x88/0x200 [ 369.778870][T12181] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.778902][T12181] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.778929][T12181] vfs_write+0x27e/0xb30 [ 369.778967][T12181] ? __pfx_vfs_write+0x10/0x10 [ 369.778997][T12181] ? __fget_files+0x2a/0x420 [ 369.779021][T12181] ? __fget_files+0x3a0/0x420 [ 369.779044][T12181] ? __fget_files+0x2a/0x420 [ 369.779073][T12181] ksys_write+0x145/0x250 [ 369.779103][T12181] ? __pfx_ksys_write+0x10/0x10 [ 369.779135][T12181] ? do_syscall_64+0xbe/0xfa0 [ 369.779169][T12181] do_syscall_64+0xfa/0xfa0 [ 369.779195][T12181] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.779232][T12181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.779252][T12181] ? clear_bhb_loop+0x60/0xb0 [ 369.779275][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.779299][T12181] RIP: 0033:0x7f1bbd58e17f [ 369.779317][T12181] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 369.779335][T12181] RSP: 002b:00007f1bbe3b4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 369.779357][T12181] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bbd58e17f [ 369.779371][T12181] RDX: 0000000000000001 RSI: 00007f1bbe3b40a0 RDI: 0000000000000008 [ 369.779387][T12181] RBP: 00007f1bbe3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 369.779399][T12181] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 369.779411][T12181] R13: 00007f1bbd7e6038 R14: 00007f1bbd7e5fa0 R15: 00007ffe070984f8 [ 369.779446][T12181] [ 370.337636][T12183] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1633'. [ 370.451720][T12193] syzkaller1: entered promiscuous mode [ 370.467307][T12193] syzkaller1: entered allmulticast mode [ 371.297238][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 371.774456][T12228] netlink: 'syz.1.1642': attribute type 21 has an invalid length. [ 371.782741][T12228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1642'. [ 371.792024][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 372.033218][T12237] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1646'. [ 372.145793][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 372.193356][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 372.411327][T12253] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1651'. [ 372.496230][T12257] syzkaller1: entered promiscuous mode [ 372.503352][T12257] syzkaller1: entered allmulticast mode [ 373.535065][T12281] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 373.545723][T12281] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 373.553622][T12281] NCSI netlink: No device for ifindex 813332851 [ 374.030918][T12298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 374.628309][T12317] syzkaller1: entered promiscuous mode [ 374.634125][T12317] syzkaller1: entered allmulticast mode [ 374.793360][T12319] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 375.057298][T12330] __nla_validate_parse: 6 callbacks suppressed [ 375.057319][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 375.138396][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 375.272097][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 375.388553][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 375.404172][T12340] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 375.456720][T12345] smc: net device bond0 applied user defined pnetid SYZ0 [ 375.465703][T12345] smc: net device bond0 erased user defined pnetid SYZ0 [ 375.602978][T12347] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1680'. [ 375.763818][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 375.802892][T12356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.008536][T12366] FAULT_INJECTION: forcing a failure. [ 376.008536][T12366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.025982][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.1.1688 Not tainted syzkaller #0 PREEMPT(full) [ 376.026013][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.026025][T12366] Call Trace: [ 376.026039][T12366] [ 376.026048][T12366] dump_stack_lvl+0x189/0x250 [ 376.026084][T12366] ? __pfx____ratelimit+0x10/0x10 [ 376.026115][T12366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.026144][T12366] ? __pfx__printk+0x10/0x10 [ 376.026182][T12366] should_fail_ex+0x414/0x560 [ 376.026219][T12366] _copy_from_user+0x2d/0xb0 [ 376.026249][T12366] bpf_test_init+0xd8/0x150 [ 376.026274][T12366] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 376.026313][T12366] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 376.026340][T12366] ? __fget_files+0x2a/0x420 [ 376.026373][T12366] ? __fget_files+0x2a/0x420 [ 376.026391][T12366] ? __fget_files+0x3a0/0x420 [ 376.026410][T12366] ? __fget_files+0x2a/0x420 [ 376.026435][T12366] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 376.026460][T12366] bpf_prog_test_run+0x2c7/0x340 [ 376.026489][T12366] __sys_bpf+0x562/0x860 [ 376.026511][T12366] ? __pfx___sys_bpf+0x10/0x10 [ 376.026550][T12366] ? ksys_write+0x22a/0x250 [ 376.026583][T12366] ? __pfx_ksys_write+0x10/0x10 [ 376.026619][T12366] __x64_sys_bpf+0x7c/0x90 [ 376.026649][T12366] do_syscall_64+0xfa/0xfa0 [ 376.026679][T12366] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.026709][T12366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.026730][T12366] ? clear_bhb_loop+0x60/0xb0 [ 376.026755][T12366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.026775][T12366] RIP: 0033:0x7f4ced78f6c9 [ 376.026795][T12366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.026813][T12366] RSP: 002b:00007f4cee6eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.026835][T12366] RAX: ffffffffffffffda RBX: 00007f4ced9e5fa0 RCX: 00007f4ced78f6c9 [ 376.026850][T12366] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 376.026863][T12366] RBP: 00007f4cee6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 376.026875][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.026887][T12366] R13: 00007f4ced9e6038 R14: 00007f4ced9e5fa0 R15: 00007ffcb89680a8 [ 376.026923][T12366] [ 376.422519][T12374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.432065][T12374] bond0: (slave bond3): Enslaving as an active interface with an up link [ 376.469091][T12378] syzkaller1: entered promiscuous mode [ 376.482426][T12374] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1689'. [ 376.494323][T12378] syzkaller1: entered allmulticast mode [ 376.737327][T12374] bond0 (unregistering): (slave bond1): Releasing backup interface [ 376.749567][T12374] bond0 (unregistering): (slave bond3): Releasing backup interface [ 376.772340][T12374] bond0 (unregistering): Released all slaves [ 377.112197][T12397] syzkaller0: entered promiscuous mode [ 377.117827][T12397] syzkaller0: entered allmulticast mode [ 378.182390][T12451] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1716'. [ 378.691913][ T96] block nbd1: Possible stuck request ffff8880249ae000: control (read@0,1024B). Runtime 210 seconds [ 378.702842][ T96] block nbd1: Possible stuck request ffff8880249ae1c0: control (read@1024,1024B). Runtime 210 seconds [ 378.713909][ T96] block nbd1: Possible stuck request ffff8880249ae380: control (read@2048,1024B). Runtime 210 seconds [ 378.724962][ T96] block nbd1: Possible stuck request ffff8880249ae540: control (read@3072,1024B). Runtime 210 seconds [ 378.774894][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 378.814410][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 379.228435][T12494] smc: net device bond0 applied user defined pnetid SYZ0 [ 379.275944][T12494] smc: net device bond0 erased user defined pnetid SYZ0 [ 380.032775][T12521] syzkaller0: entered promiscuous mode [ 380.038441][T12521] syzkaller0: entered allmulticast mode [ 380.974936][T12551] __nla_validate_parse: 5 callbacks suppressed [ 380.974959][T12551] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1740'. [ 381.030561][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 381.081391][T12550] macvtap0: entered promiscuous mode [ 381.090093][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 381.091463][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 381.115931][T12550] syz_tun: entered promiscuous mode [ 381.121608][T12550] macvtap0: entered allmulticast mode [ 381.129923][T12557] syz_tun: left promiscuous mode [ 381.340107][T12567] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1744'. [ 381.596182][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'. [ 381.607748][T12576] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 382.049197][T12593] openvswitch: netlink: Message has 592 unknown bytes. [ 382.078912][T12593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.204506][T12601] xt_recent: Unsupported userspace flags (000000b1) [ 382.223957][T12588] netlink: 'syz.4.1753': attribute type 13 has an invalid length. [ 382.232140][ T9487] IPVS: starting estimator thread 0... [ 382.321231][T12603] IPVS: using max 27 ests per chain, 64800 per kthread [ 382.458858][T12588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.702626][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 382.740670][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 383.287148][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.304049][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.324218][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.345363][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.361601][T12620] smc: net device bond0 applied user defined pnetid SYZ0 [ 383.361596][ T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.378060][T12621] smc: net device bond0 erased user defined pnetid SYZ0 [ 383.388529][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.413273][ T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.434136][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.459451][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 383.793015][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 383.863012][T12648] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 384.142844][T12665] FAULT_INJECTION: forcing a failure. [ 384.142844][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.156791][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.1.1774 Not tainted syzkaller #0 PREEMPT(full) [ 384.156820][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.156831][T12665] Call Trace: [ 384.156840][T12665] [ 384.156849][T12665] dump_stack_lvl+0x189/0x250 [ 384.156883][T12665] ? __pfx____ratelimit+0x10/0x10 [ 384.156914][T12665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.156951][T12665] ? __pfx__printk+0x10/0x10 [ 384.156985][T12665] should_fail_ex+0x414/0x560 [ 384.157022][T12665] _copy_to_user+0x31/0xb0 [ 384.157050][T12665] simple_read_from_buffer+0xe1/0x170 [ 384.157086][T12665] proc_fail_nth_read+0x1b3/0x220 [ 384.157117][T12665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.157146][T12665] ? rw_verify_area+0x2a6/0x4d0 [ 384.157173][T12665] ? __lock_acquire+0xab9/0xd20 [ 384.157192][T12665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.157218][T12665] vfs_read+0x200/0xa30 [ 384.157245][T12665] ? fdget_pos+0x247/0x320 [ 384.157270][T12665] ? __pfx___mutex_lock+0x10/0x10 [ 384.157290][T12665] ? __pfx_vfs_read+0x10/0x10 [ 384.157322][T12665] ? __fget_files+0x2a/0x420 [ 384.157346][T12665] ? __fget_files+0x3a0/0x420 [ 384.157364][T12665] ? __fget_files+0x2a/0x420 [ 384.157393][T12665] ksys_read+0x145/0x250 [ 384.157429][T12665] ? __pfx_ksys_read+0x10/0x10 [ 384.157462][T12665] ? do_syscall_64+0xbe/0xfa0 [ 384.157497][T12665] do_syscall_64+0xfa/0xfa0 [ 384.157526][T12665] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.157556][T12665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.157577][T12665] ? clear_bhb_loop+0x60/0xb0 [ 384.157602][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.157622][T12665] RIP: 0033:0x7f4ced78e0dc [ 384.157641][T12665] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 384.157658][T12665] RSP: 002b:00007f4cee6eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.157681][T12665] RAX: ffffffffffffffda RBX: 00007f4ced9e5fa0 RCX: 00007f4ced78e0dc [ 384.157696][T12665] RDX: 000000000000000f RSI: 00007f4cee6eb0a0 RDI: 0000000000000005 [ 384.157709][T12665] RBP: 00007f4cee6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 384.157721][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.157734][T12665] R13: 00007f4ced9e6038 R14: 00007f4ced9e5fa0 R15: 00007ffcb89680a8 [ 384.157767][T12665] [ 385.024546][T12692] macvtap1: entered promiscuous mode [ 385.036412][T12692] erspan0: entered promiscuous mode [ 385.043233][T12692] macvtap1: entered allmulticast mode [ 385.048990][T12692] erspan0: entered allmulticast mode [ 385.083457][T12692] erspan0: left allmulticast mode [ 385.088972][T12692] erspan0: left promiscuous mode [ 385.189085][T12691] bond1 (unregistering): Released all slaves [ 385.257510][T12697] tipc: Enabled bearer , priority 0 [ 385.278328][T12697] syzkaller0: entered promiscuous mode [ 385.284153][T12697] syzkaller0: entered allmulticast mode [ 385.294476][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.335556][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.347066][T12697] tipc: Resetting bearer [ 385.358226][T12696] tipc: Resetting bearer [ 385.385636][T12696] tipc: Disabling bearer [ 385.413271][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.621519][T12714] syzkaller0: entered promiscuous mode [ 385.627362][T12714] syzkaller0: entered allmulticast mode [ 385.870809][T12724] syzkaller0: entered promiscuous mode [ 385.886708][T12724] syzkaller0: entered allmulticast mode [ 385.917356][T12701] infiniband syz2: set down [ 385.925730][T12701] infiniband syz2: added ip6_vti0 [ 385.952567][ T9487] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.012541][T12701] RDS/IB: syz2: added [ 386.055017][T12701] smc: adding ib device syz2 with port count 1 [ 386.081655][T12701] smc: ib device syz2 port 1 has no pnetid [ 386.107256][ T5912] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.114359][T12734] __nla_validate_parse: 9 callbacks suppressed [ 386.114380][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 386.133974][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.289209][T12741] x_tables: duplicate entry at hook 3 [ 386.297434][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 386.331582][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1800'. [ 386.504433][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1801'. [ 386.754905][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 386.784602][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.866257][T12770] æÿîÿ: entered promiscuous mode [ 387.237208][T12784] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 387.500827][T12782] bond0: option lacp_rate: invalid value (255) [ 387.521447][T12782] bond0 (unregistering): Released all slaves [ 387.598529][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.865927][T12801] tipc: Enabled bearer , priority 0 [ 388.029282][T12801] syzkaller0: entered promiscuous mode [ 388.035137][T12801] syzkaller0: entered allmulticast mode [ 388.042114][T12801] tipc: Resetting bearer [ 388.062902][T12800] tipc: Resetting bearer [ 388.915306][ T5940] tipc: Node number set to 3627991014 [ 389.422099][T12800] tipc: Disabling bearer [ 389.440804][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.689935][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.694975][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 389.709047][T12829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1827'. [ 389.777433][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 389.929617][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.149738][T12701] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.158406][T12833] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1828'. [ 390.352810][T12811] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 390.991621][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 391.231502][T12858] syzkaller0: entered promiscuous mode [ 391.254428][T12858] syzkaller0: entered allmulticast mode [ 391.808318][T12867] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.858836][T12873] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1843'. [ 391.874907][T12874] tipc: Enabled bearer , priority 0 [ 391.899585][T12874] syzkaller0: entered promiscuous mode [ 391.911185][T12874] syzkaller0: entered allmulticast mode [ 391.932387][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 391.936289][T12874] tipc: Resetting bearer [ 392.002085][T12874] tipc: Resetting bearer [ 392.043977][T12874] tipc: Disabling bearer [ 392.082568][T12876] [†’Ì: entered promiscuous mode [ 392.251660][T12887] netlink: 'syz.3.1849': attribute type 3 has an invalid length. [ 392.269722][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 392.282861][T12884] tipc: Enabled bearer , priority 0 [ 392.312427][T12884] syzkaller0: entered promiscuous mode [ 392.317979][T12884] syzkaller0: entered allmulticast mode [ 392.459506][T12884] tipc: Resetting bearer [ 392.521863][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 392.531561][T12882] tipc: Resetting bearer [ 392.543665][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 392.568954][T12882] tipc: Disabling bearer [ 392.631713][T12868] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.840095][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 392.878327][T12908] macvtap1: entered promiscuous mode [ 392.897440][T12908] ip6gretap0: entered promiscuous mode [ 392.904849][T12914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1855'. [ 392.911637][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 392.915150][T12908] macvtap1: entered allmulticast mode [ 392.930817][T12908] ip6gretap0: entered allmulticast mode [ 392.979135][T12881] netlink: 'syz.1.1846': attribute type 5 has an invalid length. [ 392.993744][T12913] ip6gretap0: left allmulticast mode [ 392.999198][T12913] ip6gretap0: left promiscuous mode [ 393.283710][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 393.287173][T12926] FAULT_INJECTION: forcing a failure. [ 393.287173][T12926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.308757][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 393.319803][T12926] CPU: 1 UID: 0 PID: 12926 Comm: syz.2.1859 Not tainted syzkaller #0 PREEMPT(full) [ 393.319841][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.319853][T12926] Call Trace: [ 393.319861][T12926] [ 393.319870][T12926] dump_stack_lvl+0x189/0x250 [ 393.319910][T12926] ? __pfx____ratelimit+0x10/0x10 [ 393.319938][T12926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.319965][T12926] ? __pfx__printk+0x10/0x10 [ 393.319985][T12926] ? __might_fault+0xb0/0x130 [ 393.320026][T12926] should_fail_ex+0x414/0x560 [ 393.320062][T12926] _copy_from_user+0x2d/0xb0 [ 393.320090][T12926] ___sys_recvmsg+0x12e/0x510 [ 393.320120][T12926] ? __pfx____sys_recvmsg+0x10/0x10 [ 393.320170][T12926] ? __fget_files+0x3a0/0x420 [ 393.320203][T12926] do_recvmmsg+0x307/0x770 [ 393.320236][T12926] ? __pfx_do_recvmmsg+0x10/0x10 [ 393.320272][T12926] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.320325][T12926] __x64_sys_recvmmsg+0x190/0x240 [ 393.320352][T12926] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 393.320381][T12926] ? do_syscall_64+0xbe/0xfa0 [ 393.320414][T12926] do_syscall_64+0xfa/0xfa0 [ 393.320441][T12926] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.320468][T12926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.320487][T12926] ? clear_bhb_loop+0x60/0xb0 [ 393.320512][T12926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.320531][T12926] RIP: 0033:0x7f1bbd58f6c9 [ 393.320549][T12926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.320566][T12926] RSP: 002b:00007f1bbe3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 393.320588][T12926] RAX: ffffffffffffffda RBX: 00007f1bbd7e5fa0 RCX: 00007f1bbd58f6c9 [ 393.320603][T12926] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: 0000000000000004 [ 393.320615][T12926] RBP: 00007f1bbe3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 393.320627][T12926] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 393.320639][T12926] R13: 00007f1bbd7e6038 R14: 00007f1bbd7e5fa0 R15: 00007ffe070984f8 [ 393.320673][T12926] [ 394.117184][T12954] tun0: tun_chr_ioctl cmd 1074025681 [ 394.354166][T12964] macvtap2: entered promiscuous mode [ 394.362461][T12964] ip6gretap0: entered promiscuous mode [ 394.369413][T12964] macvtap2: entered allmulticast mode [ 394.374988][T12964] ip6gretap0: entered allmulticast mode [ 394.403728][T12966] ip6gretap0: left allmulticast mode [ 394.414237][T12966] ip6gretap0: left promiscuous mode [ 394.628806][T12974] netlink: 'syz.4.1870': attribute type 12 has an invalid length. [ 394.832236][T12980] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 395.300007][T13000] batadv7: entered promiscuous mode [ 395.328195][T13000] batadv7: entered allmulticast mode [ 395.474502][T13006] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.258021][T13011] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.337387][T13039] FAULT_INJECTION: forcing a failure. [ 396.337387][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 396.355453][T13039] CPU: 1 UID: 0 PID: 13039 Comm: syz.3.1886 Not tainted syzkaller #0 PREEMPT(full) [ 396.355482][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.355495][T13039] Call Trace: [ 396.355503][T13039] [ 396.355512][T13039] dump_stack_lvl+0x189/0x250 [ 396.355547][T13039] ? __pfx____ratelimit+0x10/0x10 [ 396.355576][T13039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.355605][T13039] ? __pfx__printk+0x10/0x10 [ 396.355630][T13039] ? __pfx___might_resched+0x10/0x10 [ 396.355654][T13039] ? fs_reclaim_acquire+0x7d/0x100 [ 396.355692][T13039] should_fail_ex+0x414/0x560 [ 396.355730][T13039] should_failslab+0xa8/0x100 [ 396.355753][T13039] __kmalloc_noprof+0xcb/0x7f0 [ 396.355781][T13039] ? bpf_test_init+0x9f/0x150 [ 396.355817][T13039] bpf_test_init+0x9f/0x150 [ 396.355841][T13039] bpf_prog_test_run_xdp+0x503/0x10e0 [ 396.355881][T13039] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 396.355909][T13039] ? __fget_files+0x2a/0x420 [ 396.355935][T13039] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 396.355957][T13039] bpf_prog_test_run+0x2c7/0x340 [ 396.355985][T13039] __sys_bpf+0x562/0x860 [ 396.356007][T13039] ? __pfx___sys_bpf+0x10/0x10 [ 396.356047][T13039] ? ksys_write+0x22a/0x250 [ 396.356078][T13039] ? __pfx_ksys_write+0x10/0x10 [ 396.356114][T13039] __x64_sys_bpf+0x7c/0x90 [ 396.356146][T13039] do_syscall_64+0xfa/0xfa0 [ 396.356175][T13039] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.356205][T13039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.356225][T13039] ? clear_bhb_loop+0x60/0xb0 [ 396.356250][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.356270][T13039] RIP: 0033:0x7fcb0a18f6c9 [ 396.356289][T13039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.356307][T13039] RSP: 002b:00007fcb0af64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.356330][T13039] RAX: ffffffffffffffda RBX: 00007fcb0a3e5fa0 RCX: 00007fcb0a18f6c9 [ 396.356345][T13039] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 396.356358][T13039] RBP: 00007fcb0af64090 R08: 0000000000000000 R09: 0000000000000000 [ 396.356370][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.356382][T13039] R13: 00007fcb0a3e6038 R14: 00007fcb0a3e5fa0 R15: 00007ffe23c85d88 [ 396.356418][T13039] [ 396.902336][T13044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.291198][T13052] __nla_validate_parse: 20 callbacks suppressed [ 397.291217][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 397.573204][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 398.022924][T13074] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 398.130880][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 398.225143][T13079] IPVS: Error connecting to the multicast addr [ 398.424589][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 398.616825][T13103] FAULT_INJECTION: forcing a failure. [ 398.616825][T13103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.646374][T13096] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 398.658835][T13103] CPU: 1 UID: 0 PID: 13103 Comm: syz.2.1905 Not tainted syzkaller #0 PREEMPT(full) [ 398.658866][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.658880][T13103] Call Trace: [ 398.658888][T13103] [ 398.658897][T13103] dump_stack_lvl+0x189/0x250 [ 398.658933][T13103] ? __pfx____ratelimit+0x10/0x10 [ 398.658964][T13103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.658993][T13103] ? __pfx__printk+0x10/0x10 [ 398.659030][T13103] should_fail_ex+0x414/0x560 [ 398.659069][T13103] _copy_to_user+0x31/0xb0 [ 398.659099][T13103] simple_read_from_buffer+0xe1/0x170 [ 398.659137][T13103] proc_fail_nth_read+0x1b3/0x220 [ 398.659168][T13103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.659198][T13103] ? rw_verify_area+0x2a6/0x4d0 [ 398.659225][T13103] ? __lock_acquire+0xab9/0xd20 [ 398.659243][T13103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.659272][T13103] vfs_read+0x200/0xa30 [ 398.659299][T13103] ? fdget_pos+0x247/0x320 [ 398.659332][T13103] ? __pfx___mutex_lock+0x10/0x10 [ 398.659351][T13103] ? __pfx_vfs_read+0x10/0x10 [ 398.659382][T13103] ? __fget_files+0x2a/0x420 [ 398.659407][T13103] ? __fget_files+0x3a0/0x420 [ 398.659425][T13103] ? __fget_files+0x2a/0x420 [ 398.659455][T13103] ksys_read+0x145/0x250 [ 398.659487][T13103] ? __pfx_ksys_read+0x10/0x10 [ 398.659520][T13103] ? do_syscall_64+0xbe/0xfa0 [ 398.659555][T13103] do_syscall_64+0xfa/0xfa0 [ 398.659585][T13103] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.659615][T13103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.659636][T13103] ? clear_bhb_loop+0x60/0xb0 [ 398.659662][T13103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.659681][T13103] RIP: 0033:0x7f1bbd58e0dc [ 398.659700][T13103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.659720][T13103] RSP: 002b:00007f1bbe3b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.659743][T13103] RAX: ffffffffffffffda RBX: 00007f1bbd7e5fa0 RCX: 00007f1bbd58e0dc [ 398.659758][T13103] RDX: 000000000000000f RSI: 00007f1bbe3b40a0 RDI: 0000000000000005 [ 398.659771][T13103] RBP: 00007f1bbe3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 398.659783][T13103] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 398.659795][T13103] R13: 00007f1bbd7e6038 R14: 00007f1bbd7e5fa0 R15: 00007ffe070984f8 [ 398.659832][T13103] [ 398.949140][T13105] pim6reg1: entered promiscuous mode [ 398.971318][T13105] pim6reg1: entered allmulticast mode [ 399.119595][T13116] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 399.247107][T13110] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.262298][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1903'. [ 399.439712][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 399.690216][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 399.885793][T13133] IPVS: Error connecting to the multicast addr [ 400.124886][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 400.305971][T13154] gtp0: entered promiscuous mode [ 400.336224][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 400.556923][T13163] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 400.690221][T13172] tipc: Enabled bearer , priority 0 [ 400.711951][T13172] syzkaller0: entered promiscuous mode [ 400.717471][T13172] syzkaller0: entered allmulticast mode [ 400.749963][T13172] tipc: Resetting bearer [ 400.775511][T13170] tipc: Resetting bearer [ 400.807094][T13170] tipc: Disabling bearer [ 400.970863][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 401.027159][T13180] IPVS: Error connecting to the multicast addr [ 401.065502][T13184] IPVS: Error connecting to the multicast addr [ 401.318393][T13171] netlink: 'syz.0.1923': attribute type 5 has an invalid length. [ 401.448194][T13192] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 401.528140][T13199] FAULT_INJECTION: forcing a failure. [ 401.528140][T13199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.570358][T13199] CPU: 1 UID: 0 PID: 13199 Comm: syz.4.1933 Not tainted syzkaller #0 PREEMPT(full) [ 401.570389][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.570402][T13199] Call Trace: [ 401.570410][T13199] [ 401.570420][T13199] dump_stack_lvl+0x189/0x250 [ 401.570453][T13199] ? __pfx____ratelimit+0x10/0x10 [ 401.570484][T13199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.570513][T13199] ? __pfx__printk+0x10/0x10 [ 401.570536][T13199] ? __might_fault+0xb0/0x130 [ 401.570577][T13199] should_fail_ex+0x414/0x560 [ 401.570615][T13199] _copy_from_user+0x2d/0xb0 [ 401.570643][T13199] ___sys_sendmsg+0x158/0x2a0 [ 401.570671][T13199] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.570735][T13199] ? __fget_files+0x2a/0x420 [ 401.570754][T13199] ? __fget_files+0x3a0/0x420 [ 401.570785][T13199] __x64_sys_sendmsg+0x19b/0x260 [ 401.570812][T13199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.570847][T13199] ? __pfx_ksys_write+0x10/0x10 [ 401.570880][T13199] ? do_syscall_64+0xbe/0xfa0 [ 401.570915][T13199] do_syscall_64+0xfa/0xfa0 [ 401.570944][T13199] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.570974][T13199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.570998][T13199] ? clear_bhb_loop+0x60/0xb0 [ 401.571023][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.571042][T13199] RIP: 0033:0x7f567478f6c9 [ 401.571060][T13199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.571078][T13199] RSP: 002b:00007f56756e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.571099][T13199] RAX: ffffffffffffffda RBX: 00007f56749e6090 RCX: 00007f567478f6c9 [ 401.571114][T13199] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 401.571127][T13199] RBP: 00007f56756e7090 R08: 0000000000000000 R09: 0000000000000000 [ 401.571139][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.571159][T13199] R13: 00007f56749e6128 R14: 00007f56749e6090 R15: 00007ffe6bb17fe8 [ 401.571193][T13199] [ 401.966731][T13212] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.283209][T13215] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.899430][T13220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.307200][T13251] __nla_validate_parse: 5 callbacks suppressed [ 403.307229][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 403.428641][T13256] FAULT_INJECTION: forcing a failure. [ 403.428641][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 403.466143][T13256] CPU: 1 UID: 0 PID: 13256 Comm: syz.2.1948 Not tainted syzkaller #0 PREEMPT(full) [ 403.466175][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.466189][T13256] Call Trace: [ 403.466197][T13256] [ 403.466231][T13256] dump_stack_lvl+0x189/0x250 [ 403.466265][T13256] ? __pfx____ratelimit+0x10/0x10 [ 403.466296][T13256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.466325][T13256] ? __pfx__printk+0x10/0x10 [ 403.466354][T13256] ? __pfx___might_resched+0x10/0x10 [ 403.466377][T13256] ? fs_reclaim_acquire+0x7d/0x100 [ 403.466415][T13256] should_fail_ex+0x414/0x560 [ 403.466452][T13256] should_failslab+0xa8/0x100 [ 403.466475][T13256] kmem_cache_alloc_node_noprof+0x77/0x710 [ 403.466504][T13256] ? __alloc_skb+0x112/0x2d0 [ 403.466523][T13256] ? netlink_autobind+0xdb/0x300 [ 403.466551][T13256] __alloc_skb+0x112/0x2d0 [ 403.466577][T13256] netlink_sendmsg+0x5c6/0xb30 [ 403.466609][T13256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.466636][T13256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.466669][T13256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.466690][T13256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.466713][T13256] __sock_sendmsg+0x21c/0x270 [ 403.466746][T13256] ____sys_sendmsg+0x505/0x830 [ 403.466799][T13256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.466834][T13256] ? import_iovec+0x74/0xa0 [ 403.466864][T13256] ___sys_sendmsg+0x21f/0x2a0 [ 403.466890][T13256] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.466952][T13256] ? __fget_files+0x2a/0x420 [ 403.466971][T13256] ? __fget_files+0x3a0/0x420 [ 403.467003][T13256] __x64_sys_sendmsg+0x19b/0x260 [ 403.467029][T13256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.467064][T13256] ? __pfx_ksys_write+0x10/0x10 [ 403.467099][T13256] ? do_syscall_64+0xbe/0xfa0 [ 403.467135][T13256] do_syscall_64+0xfa/0xfa0 [ 403.467164][T13256] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.467194][T13256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.467222][T13256] ? clear_bhb_loop+0x60/0xb0 [ 403.467247][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.467267][T13256] RIP: 0033:0x7f1bbd58f6c9 [ 403.467287][T13256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.467305][T13256] RSP: 002b:00007f1bbe393038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.467327][T13256] RAX: ffffffffffffffda RBX: 00007f1bbd7e6090 RCX: 00007f1bbd58f6c9 [ 403.467343][T13256] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 403.467356][T13256] RBP: 00007f1bbe393090 R08: 0000000000000000 R09: 0000000000000000 [ 403.467368][T13256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.467381][T13256] R13: 00007f1bbd7e6128 R14: 00007f1bbd7e6090 R15: 00007ffe070984f8 [ 403.467417][T13256] [ 403.848056][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 403.905035][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 404.143458][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'. [ 404.215792][T13288] ip6_vti0 speed is unknown, defaulting to 1000 [ 404.316578][T13298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1959'. [ 404.498740][T13304] bond0: (slave bond_slave_1): Device is not bonding slave [ 404.512562][T13304] bond0: option active_slave: invalid value (bond_slave_1) [ 404.525746][T13304] bond0 (unregistering): Released all slaves [ 404.628841][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1963'. [ 404.755685][T13286] ip6_vti0 speed is unknown, defaulting to 1000 [ 404.864485][T13316] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 405.501186][T13330] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 406.270148][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 406.720669][T13381] tipc: Enabled bearer , priority 0 [ 406.731622][T13383] netlink: 'syz.1.1980': attribute type 11 has an invalid length. [ 406.740483][T13381] syzkaller0: entered promiscuous mode [ 406.746881][T13383] netlink: 'syz.1.1980': attribute type 11 has an invalid length. [ 406.755769][T13381] syzkaller0: entered allmulticast mode [ 406.762885][T13383] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1980'. [ 406.816491][T13381] tipc: Resetting bearer [ 406.836812][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'. [ 406.851437][T13380] tipc: Resetting bearer [ 406.894022][T13380] tipc: Disabling bearer [ 406.977356][T13392] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 407.198146][T13405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'. [ 407.815737][T13442] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 407.838836][T13442] ip6t_rpfilter: unknown options [ 408.491326][T13477] __nla_validate_parse: 5 callbacks suppressed [ 408.491348][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 408.553064][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2009'. [ 408.734208][T13488] sctp: [Deprecated]: syz.3.2012 (pid 13488) Use of int in maxseg socket option. [ 408.734208][T13488] Use struct sctp_assoc_value instead [ 408.751670][ T96] block nbd1: Possible stuck request ffff8880249ae000: control (read@0,1024B). Runtime 240 seconds [ 408.763046][ T96] block nbd1: Possible stuck request ffff8880249ae1c0: control (read@1024,1024B). Runtime 240 seconds [ 408.774598][ T96] block nbd1: Possible stuck request ffff8880249ae380: control (read@2048,1024B). Runtime 240 seconds [ 408.785652][ T96] block nbd1: Possible stuck request ffff8880249ae540: control (read@3072,1024B). Runtime 240 seconds [ 409.089865][T13497] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 409.111810][T13497] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2014'. [ 409.197354][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 409.470872][T13516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.787408][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 410.776482][T13562] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 410.883791][T13567] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 411.043428][T13573] tipc: Enabled bearer , priority 0 [ 411.063305][T13573] syzkaller0: entered promiscuous mode [ 411.068836][T13573] syzkaller0: entered allmulticast mode [ 411.114599][T13573] syzkaller0: mtu greater than device maximum [ 411.128843][T13572] tipc: Resetting bearer [ 411.163977][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'. [ 411.192147][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 411.204021][T13572] tipc: Disabling bearer [ 411.216195][T13575] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 411.229207][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 411.233000][T13579] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 411.260414][T13577] macvtap3: entered promiscuous mode [ 411.266121][T13577] syz_tun: entered promiscuous mode [ 411.271903][T13577] macvtap3: entered allmulticast mode [ 411.277488][T13577] syz_tun: entered allmulticast mode [ 411.300027][T13584] syz_tun: left allmulticast mode [ 411.314221][T13584] syz_tun: left promiscuous mode [ 411.342478][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 411.354007][T13587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'. [ 411.605788][T13605] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 412.030077][T13627] macvtap1: entered promiscuous mode [ 412.036054][T13627] syz_tun: entered promiscuous mode [ 412.041733][T13627] macvtap1: entered allmulticast mode [ 412.054881][T13627] syz_tun: entered allmulticast mode [ 412.070904][T13627] syz_tun: left allmulticast mode [ 412.079558][T13627] syz_tun: left promiscuous mode [ 412.259636][T13635] tipc: Enabled bearer , priority 0 [ 412.268105][T13635] syzkaller0: entered promiscuous mode [ 412.281329][T13635] syzkaller0: entered allmulticast mode [ 412.348651][T13635] tipc: Resetting bearer [ 412.375322][T13634] tipc: Resetting bearer [ 412.439364][T13634] tipc: Disabling bearer [ 412.520322][T13655] tipc: Enabled bearer , priority 0 [ 412.528116][T13655] syzkaller0: entered promiscuous mode [ 412.533935][T13655] syzkaller0: entered allmulticast mode [ 412.553960][T13655] tipc: Resetting bearer [ 412.594594][T13654] tipc: Resetting bearer [ 412.639217][T13654] tipc: Disabling bearer [ 412.664599][T13659] geneve3: entered promiscuous mode [ 412.671588][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.690355][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.701267][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.709515][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.748894][T13664] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 412.830181][T13665] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.583766][T13706] tipc: Enabled bearer , priority 0 [ 413.599773][T13710] netlink: 'syz.4.2082': attribute type 11 has an invalid length. [ 413.611105][T13706] syzkaller0: entered promiscuous mode [ 413.616622][T13706] syzkaller0: entered allmulticast mode [ 413.680400][T13706] tipc: Resetting bearer [ 413.689195][T13705] tipc: Resetting bearer [ 413.721942][T13705] tipc: Disabling bearer [ 413.876840][T13723] tipc: Enabled bearer , priority 0 [ 413.884563][T13723] syzkaller0: entered promiscuous mode [ 413.890124][T13723] syzkaller0: entered allmulticast mode [ 413.923494][T13723] FAULT_INJECTION: forcing a failure. [ 413.923494][T13723] name failslab, interval 1, probability 0, space 0, times 0 [ 413.936594][T13723] CPU: 1 UID: 0 PID: 13723 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) [ 413.936621][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.936634][T13723] Call Trace: [ 413.936642][T13723] [ 413.936651][T13723] dump_stack_lvl+0x189/0x250 [ 413.936687][T13723] ? __pfx____ratelimit+0x10/0x10 [ 413.936717][T13723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.936744][T13723] ? __pfx__printk+0x10/0x10 [ 413.936783][T13723] should_fail_ex+0x414/0x560 [ 413.936822][T13723] should_failslab+0xa8/0x100 [ 413.936845][T13723] __kmalloc_noprof+0xcb/0x7f0 [ 413.936875][T13723] ? nsim_fib_event_nb+0x295/0x1080 [ 413.936902][T13723] ? __lock_acquire+0xab9/0xd20 [ 413.936928][T13723] nsim_fib_event_nb+0x295/0x1080 [ 413.936968][T13723] notifier_call_chain+0x1b6/0x3e0 [ 413.936999][T13723] ? atomic_notifier_call_chain+0x26/0x180 [ 413.937027][T13723] atomic_notifier_call_chain+0xda/0x180 [ 413.937064][T13723] call_fib_notifiers+0x31/0x60 [ 413.937089][T13723] fib6_del+0x104d/0x1550 [ 413.937123][T13723] ? fib6_del+0x601/0x1550 [ 413.937172][T13723] ? __pfx_fib6_del+0x10/0x10 [ 413.937198][T13723] ? is_bpf_text_address+0x26/0x2b0 [ 413.937226][T13723] ? kernel_text_address+0xa5/0xe0 [ 413.937273][T13723] fib6_clean_node+0x29f/0x590 [ 413.937309][T13723] ? __pfx_fib6_clean_node+0x10/0x10 [ 413.937337][T13723] ? __lock_acquire+0xab9/0xd20 [ 413.937365][T13723] ? __local_bh_enable_ip+0x12d/0x1c0 [ 413.937393][T13723] fib6_walk_continue+0x67b/0x910 [ 413.937440][T13723] fib6_walk+0x149/0x290 [ 413.937472][T13723] __fib6_clean_all+0x234/0x380 [ 413.937501][T13723] ? __fib6_clean_all+0x9b/0x380 [ 413.937531][T13723] ? __pfx_fib6_ifdown+0x10/0x10 [ 413.937563][T13723] ? __pfx___fib6_clean_all+0x10/0x10 [ 413.937599][T13723] ? __pfx_fib6_clean_node+0x10/0x10 [ 413.937629][T13723] ? __pfx_fib6_ifdown+0x10/0x10 [ 413.937668][T13723] ? __mutex_trylock_common+0x153/0x260 [ 413.937699][T13723] rt6_disable_ip+0x120/0x720 [ 413.937724][T13723] ? rcu_is_watching+0x15/0xb0 [ 413.937748][T13723] ? trace_contention_end+0x39/0x120 [ 413.937774][T13723] ? __pfx_rt6_disable_ip+0x10/0x10 [ 413.937819][T13723] addrconf_ifdown+0x15d/0x1880 [ 413.937847][T13723] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 413.937889][T13723] ? tls_dev_event+0x717/0xec0 [ 413.937910][T13723] ? __pfx_addrconf_ifdown+0x10/0x10 [ 413.937954][T13723] addrconf_notify+0x1bc/0x1010 [ 413.937992][T13723] notifier_call_chain+0x1b6/0x3e0 [ 413.938027][T13723] netif_set_mtu_ext+0x594/0x7d0 [ 413.938066][T13723] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 413.938086][T13723] ? __mutex_trylock_common+0x153/0x260 [ 413.938115][T13723] ? __pfx___mutex_trylock_common+0x10/0x10 [ 413.938147][T13723] ? rcu_is_watching+0x15/0xb0 [ 413.938171][T13723] ? trace_contention_end+0x39/0x120 [ 413.938205][T13723] netif_set_mtu+0xa4/0x150 [ 413.938227][T13723] ? __pfx_netif_set_mtu+0x10/0x10 [ 413.938247][T13723] ? __lock_acquire+0xab9/0xd20 [ 413.938282][T13723] ? netdev_name_node_lookup+0xdf/0x120 [ 413.938320][T13723] dev_set_mtu+0x126/0x260 [ 413.938347][T13723] dev_ioctl+0x7b4/0x1150 [ 413.938372][T13723] sock_do_ioctl+0x22c/0x300 [ 413.938404][T13723] ? __pfx_sock_do_ioctl+0x10/0x10 [ 413.938452][T13723] sock_ioctl+0x576/0x790 [ 413.938482][T13723] ? __pfx_sock_ioctl+0x10/0x10 [ 413.938513][T13723] ? __fget_files+0x3a0/0x420 [ 413.938532][T13723] ? __fget_files+0x2a/0x420 [ 413.938556][T13723] ? bpf_lsm_file_ioctl+0x9/0x20 [ 413.938580][T13723] ? __pfx_sock_ioctl+0x10/0x10 [ 413.938606][T13723] __se_sys_ioctl+0xfc/0x170 [ 413.938636][T13723] do_syscall_64+0xfa/0xfa0 [ 413.938665][T13723] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.938696][T13723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.938716][T13723] ? clear_bhb_loop+0x60/0xb0 [ 413.938742][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.938762][T13723] RIP: 0033:0x7fcb0a18f6c9 [ 413.938781][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.938799][T13723] RSP: 002b:00007fcb0af64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.938821][T13723] RAX: ffffffffffffffda RBX: 00007fcb0a3e5fa0 RCX: 00007fcb0a18f6c9 [ 413.938836][T13723] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 413.938850][T13723] RBP: 00007fcb0af64090 R08: 0000000000000000 R09: 0000000000000000 [ 413.938863][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.938875][T13723] R13: 00007fcb0a3e6038 R14: 00007fcb0a3e5fa0 R15: 00007ffe23c85d88 [ 413.938912][T13723] [ 414.387027][T13723] tipc: Resetting bearer [ 414.399577][T13722] tipc: Resetting bearer [ 414.426714][T13722] tipc: Disabling bearer [ 414.477767][T13728] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.605380][T13737] __nla_validate_parse: 10 callbacks suppressed [ 414.605399][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 414.794708][T13727] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.944939][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 414.955243][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 414.974011][T13748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2094'. [ 415.292218][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'. [ 415.334630][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 415.620554][T13765] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.075220][T13767] xt_CT: No such helper "netbios-ns" [ 416.539662][T13788] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2103'. [ 417.105460][T13796] tipc: Enabled bearer , priority 10 [ 417.505431][T13809] tipc: Enabling of bearer rejected, failed to enable media [ 417.646367][T13816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2110'. [ 417.829933][T13824] tipc: Enabled bearer , priority 0 [ 417.852857][T13824] syzkaller0: entered promiscuous mode [ 417.858413][T13824] syzkaller0: entered allmulticast mode [ 417.896033][T13824] tipc: Resetting bearer [ 417.914971][T13821] tipc: Resetting bearer [ 417.939881][T13832] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2114'. [ 418.017868][T13821] tipc: Disabling bearer [ 418.212378][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2118'. [ 418.231135][ T5912] tipc: Node number set to 4227858433 [ 418.256511][T13840] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 418.283291][T13840] bond3 (unregistering): Released all slaves [ 418.319101][T13843] netlink: 'syz.4.2117': attribute type 12 has an invalid length. [ 418.642826][T13872] tipc: Enabling of bearer rejected, already enabled [ 419.241679][T13902] netlink: 'syz.4.2137': attribute type 9 has an invalid length. [ 419.249709][T13902] netlink: 'syz.4.2137': attribute type 11 has an invalid length. [ 419.257804][T13902] netlink: 'syz.4.2137': attribute type 12 has an invalid length. [ 419.267573][T13902] netlink: 'syz.4.2137': attribute type 4 has an invalid length. [ 419.387990][T13910] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.722370][T13927] __nla_validate_parse: 11 callbacks suppressed [ 419.722390][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 419.784124][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 420.070016][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 420.096870][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 420.243640][T13958] tipc: Enabled bearer , priority 0 [ 420.268537][T13958] syzkaller0: entered promiscuous mode [ 420.291069][T13958] syzkaller0: entered allmulticast mode [ 420.392284][T13968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.399741][T13968] IPv6: NLM_F_CREATE should be set when creating new route [ 420.407259][T13968] IPv6: NLM_F_CREATE should be set when creating new route [ 420.456558][T13968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.503781][T13973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.543887][T13973] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2154'. [ 420.914879][T13958] veth0_to_bond: entered allmulticast mode [ 420.980533][T13967] tipc: Enabled bearer , priority 0 [ 421.042079][T13971] syzkaller0: entered promiscuous mode [ 421.048226][T13971] syzkaller0: entered allmulticast mode [ 421.144732][T13974] tipc: Resetting bearer [ 421.160731][T13968] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 421.216886][T13979] tipc: Resetting bearer [ 421.256635][T13949] tipc: Resetting bearer [ 421.287718][T13949] tipc: Disabling bearer [ 421.293791][ T8835] tipc: Node number set to 2515503712 [ 421.312861][T13952] tipc: Resetting bearer [ 421.336962][T13952] tipc: Disabling bearer [ 421.354283][T13983] syzkaller0: entered promiscuous mode [ 421.359925][T13983] syzkaller0: entered allmulticast mode [ 421.442825][T13999] ip6_vti0 speed is unknown, defaulting to 1000 [ 421.772241][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'. [ 421.811682][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 421.820783][T14020] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 422.444361][T14053] tipc: Enabled bearer , priority 0 [ 422.454927][T14053] syzkaller0: entered promiscuous mode [ 422.471223][T14053] syzkaller0: entered allmulticast mode [ 422.529618][T14053] tipc: Resetting bearer [ 422.559399][T14052] tipc: Resetting bearer [ 422.642730][T14052] tipc: Disabling bearer [ 422.920211][T14063] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 423.670767][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 423.680583][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 423.888788][T14107] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2187'. [ 424.064549][T14122] tipc: Enabled bearer , priority 0 [ 424.082186][T14122] syzkaller0: entered promiscuous mode [ 424.087927][T14122] syzkaller0: entered allmulticast mode [ 424.142077][T14122] syzkaller0: mtu greater than device maximum [ 424.164211][T14125] vlan2: entered promiscuous mode [ 424.169640][T14125] vlan2: entered allmulticast mode [ 424.175173][T14125] hsr_slave_1: entered allmulticast mode [ 424.186478][T14121] tipc: Resetting bearer [ 424.229416][T14121] tipc: Disabling bearer [ 424.334709][T14138] openvswitch: netlink: Flow actions attr not present in new flow. [ 424.740960][T14155] __nla_validate_parse: 3 callbacks suppressed [ 424.761083][T14155] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2204'. [ 424.781821][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 424.802999][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 424.858402][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 424.897599][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 424.951352][T14175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2211'. [ 425.150492][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 425.170338][T14177] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.191860][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 425.217602][T14184] tipc: Enabled bearer , priority 0 [ 425.225349][T14190] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 425.232876][T14184] syzkaller0: entered promiscuous mode [ 425.255060][T14184] syzkaller0: entered allmulticast mode [ 425.278568][T14196] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2218'. [ 425.308172][T14184] tipc: Resetting bearer [ 425.347461][T14183] tipc: Resetting bearer [ 425.369227][T14183] tipc: Disabling bearer [ 425.419394][T14201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2219'. [ 426.518772][T14244] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.528415][T14288] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.656887][T14298] Cannot find del_set index 1 as target [ 427.880666][T14299] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.472415][T14314] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.379865][T14329] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.065400][T14342] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.411743][T14362] __nla_validate_parse: 13 callbacks suppressed [ 430.411770][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2264'. [ 430.752327][T14365] Bluetooth: MGMT ver 1.23 [ 430.934238][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'. [ 431.293084][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2273'. [ 431.500818][T14396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2277'. [ 431.658033][T14401] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.740007][T14411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2282'. [ 432.186750][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2288'. [ 432.377911][T14436] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2288'. [ 432.411568][T14436] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 432.468651][T14440] 8021q: VLANs not supported on ip_vti0 [ 432.489254][T14440] sctp: [Deprecated]: syz.1.2291 (pid 14440) Use of int in max_burst socket option deprecated. [ 432.489254][T14440] Use struct sctp_assoc_value instead [ 432.646015][T14445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2293'. [ 432.823080][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 432.824701][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 433.222285][T14469] netlink: 'syz.2.2298': attribute type 3 has an invalid length. [ 433.264867][T14462] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.403032][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 433.560977][T14473] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 434.054441][T14470] syzkaller1: entered promiscuous mode [ 434.090511][T14470] syzkaller1: entered allmulticast mode [ 434.238481][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 434.797477][T14500] netlink: 'syz.2.2308': attribute type 4 has an invalid length. [ 434.861240][T14501] nbd: couldn't find a device at index 0 [ 435.005827][T14499] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20000 [ 435.032328][T14504] netlink: 'syz.3.2311': attribute type 11 has an invalid length. [ 435.074469][T14504] netlink: 'syz.3.2311': attribute type 11 has an invalid length. [ 435.082837][ T3499] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.103389][ T3499] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.141164][ T3499] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.178192][ T3499] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.470537][T14522] tipc: Enabled bearer , priority 0 [ 435.490539][T14522] syzkaller0: entered promiscuous mode [ 435.519649][T14522] syzkaller0: entered allmulticast mode [ 435.556269][T14522] tipc: Resetting bearer [ 435.569842][T14521] tipc: Resetting bearer [ 435.639570][T14536] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 435.648687][T14521] tipc: Disabling bearer [ 435.720977][T14544] __nla_validate_parse: 7 callbacks suppressed [ 435.728406][T14536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.749534][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 435.804476][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 435.832734][T14545] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.046618][T14536] veth7: entered promiscuous mode [ 436.159255][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 436.187916][T14559] bond3: entered promiscuous mode [ 436.202049][T14559] bond3: entered allmulticast mode [ 436.222869][T14559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.859959][T14591] tipc: Enabled bearer , priority 0 [ 436.902942][T14591] syzkaller0: entered promiscuous mode [ 436.908475][T14591] syzkaller0: entered allmulticast mode [ 437.039201][T14591] tipc: Resetting bearer [ 437.051369][T14589] tipc: Resetting bearer [ 437.114582][T14589] tipc: Disabling bearer [ 437.170051][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 437.201403][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 437.210523][T14601] netlink: 'syz.4.2338': attribute type 11 has an invalid length. [ 437.252534][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.261851][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 437.270759][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 437.280053][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.322998][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.341352][T14601] netlink: 'syz.4.2338': attribute type 11 has an invalid length. [ 437.346152][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.404797][T14606] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.443245][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 437.648182][T14618] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 437.976834][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 437.990823][T14632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2347'. [ 438.331265][T14651] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 438.821508][ T96] block nbd1: Possible stuck request ffff8880249ae000: control (read@0,1024B). Runtime 270 seconds [ 438.832558][ T96] block nbd1: Possible stuck request ffff8880249ae1c0: control (read@1024,1024B). Runtime 270 seconds [ 438.843890][ T96] block nbd1: Possible stuck request ffff8880249ae380: control (read@2048,1024B). Runtime 270 seconds [ 438.856907][ T96] block nbd1: Possible stuck request ffff8880249ae540: control (read@3072,1024B). Runtime 270 seconds [ 439.035714][T14677] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.059761][T14687] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 439.418496][T14696] netlink: 'syz.1.2366': attribute type 11 has an invalid length. [ 439.482086][ T75] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.490608][ T75] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.500259][T14696] netlink: 'syz.1.2366': attribute type 11 has an invalid length. [ 439.517628][T14698] delete_channel: no stack [ 439.522914][ T75] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.538354][ T75] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.708464][T14707] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 440.068628][T14722] netlink: 'syz.2.2375': attribute type 18 has an invalid length. [ 440.252457][T14726] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 440.309710][T14733] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 440.519195][T14736] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 440.527183][T14744] netlink: 'syz.2.2379': attribute type 4 has an invalid length. [ 440.532840][T14736] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 440.754079][T14744] netlink: 'syz.2.2379': attribute type 29 has an invalid length. [ 440.779406][T14748] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.792113][T14752] __nla_validate_parse: 24 callbacks suppressed [ 440.792132][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2380'. [ 440.814034][T14746] netlink: 'syz.2.2379': attribute type 29 has an invalid length. [ 441.236298][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 441.283762][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 441.334051][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 441.350771][T14776] syzkaller0: entered promiscuous mode [ 441.367103][T14776] syzkaller0: entered allmulticast mode [ 441.615207][T14767] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.625255][T14786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'. [ 442.192551][T14781] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.466939][T14801] wg1 speed is unknown, defaulting to 1000 [ 442.466997][T14805] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.507625][T14801] wg1 speed is unknown, defaulting to 1000 [ 442.546178][T14801] wg1 speed is unknown, defaulting to 1000 [ 442.867438][T14801] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 442.938048][T14801] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 443.092124][T14801] wg1 speed is unknown, defaulting to 1000 [ 443.148106][T14801] wg1 speed is unknown, defaulting to 1000 [ 443.221672][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 443.233425][T14801] wg1 speed is unknown, defaulting to 1000 [ 443.358130][T14801] wg1 speed is unknown, defaulting to 1000 [ 443.396251][T14801] wg1 speed is unknown, defaulting to 1000 [ 443.406903][T14801] wg1 speed is unknown, defaulting to 1000 [ 443.765395][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 443.791850][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 444.080409][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2404'. [ 444.294296][T14847] tipc: Enabling of bearer rejected, failed to enable media [ 444.556215][T14860] ip6_vti0 speed is unknown, defaulting to 1000 [ 444.902459][T14870] macvtap2: entered promiscuous mode [ 444.925340][T14870] veth1_to_hsr: entered promiscuous mode [ 444.954079][T14870] macvtap2: entered allmulticast mode [ 444.968267][T14870] veth1_to_hsr: entered allmulticast mode [ 445.014592][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2417'. [ 445.101699][T14851] netlink: 'syz.1.2410': attribute type 5 has an invalid length. [ 445.198010][T14860] wg1 speed is unknown, defaulting to 1000 [ 445.256939][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 445.958542][T14923] __nla_validate_parse: 2 callbacks suppressed [ 445.958560][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 446.006420][T14923] bond3 (unregistering): Released all slaves [ 446.041448][T14921] tipc: Enabled bearer , priority 0 [ 446.058656][T14925] syzkaller0: entered promiscuous mode [ 446.066059][T14925] syzkaller0: entered allmulticast mode [ 446.130782][T14921] tipc: Resetting bearer [ 446.147994][T14919] tipc: Resetting bearer [ 446.180534][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 446.201700][T14919] tipc: Disabling bearer [ 446.225104][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 446.301859][T14936] netlink: 'syz.3.2436': attribute type 30 has an invalid length. [ 446.425764][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 446.497780][T14948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2440'. [ 446.702365][T14957] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 446.785109][T14963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2444'. [ 446.829173][T14963] ªªªªª: renamed from hsr0 [ 446.938826][T14965] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.094356][T14977] tipc: Enabled bearer , priority 0 [ 447.119953][T14977] syzkaller0: entered promiscuous mode [ 447.133663][T14977] syzkaller0: entered allmulticast mode [ 447.168972][T14977] tipc: Resetting bearer [ 447.178223][T14976] tipc: Resetting bearer [ 447.229572][T14976] tipc: Disabling bearer [ 447.326103][T14965] wg1 speed is unknown, defaulting to 1000 [ 447.343288][T14989] vlan2: entered promiscuous mode [ 447.348726][T14989] bond0: entered promiscuous mode [ 447.354235][T14989] bond_slave_0: entered promiscuous mode [ 447.360411][T14989] bond_slave_1: entered promiscuous mode [ 447.366618][T14989] vlan2: entered allmulticast mode [ 447.374488][T14989] bond0: entered allmulticast mode [ 447.379737][T14989] bond_slave_0: entered allmulticast mode [ 447.386062][T14989] bond_slave_1: entered allmulticast mode [ 447.960518][T14982] slab net_namespace start ffff888031c22540 pointer offset 4344 size 9280 [ 447.969660][T14982] list_del corruption. prev->next should be ffff88807ca37708, but was ffff8880274a3f88. (prev=ffff888031c23638) [ 447.982040][T14982] ------------[ cut here ]------------ [ 447.987516][T14982] kernel BUG at lib/list_debug.c:64! [ 447.992873][T14982] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 447.999121][T14982] CPU: 1 UID: 0 PID: 14982 Comm: syz.3.2452 Not tainted syzkaller #0 PREEMPT(full) [ 448.008484][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.018535][T14982] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 448.025572][T14982] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 448.045187][T14982] RSP: 0018:ffffc9001b1c7ad8 EFLAGS: 00010246 [ 448.051267][T14982] RAX: 000000000000006d RBX: ffff88807ca37708 RCX: 503fe0d7df9db100 [ 448.059244][T14982] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 448.067216][T14982] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 448.075187][T14982] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff110063846c7 [ 448.083187][T14982] R13: dffffc0000000000 R14: ffff888031c23638 R15: ffff888031c23638 [ 448.091166][T14982] FS: 000055558e390500(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 448.100100][T14982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.106679][T14982] CR2: 0000200000001d00 CR3: 0000000078fe4000 CR4: 00000000003526f0 [ 448.114654][T14982] Call Trace: [ 448.117935][T14982] [ 448.120876][T14982] sctp_destroy_sock+0xb4/0x370 [ 448.125731][T14982] ? sk_common_release+0x69/0x310 [ 448.130766][T14982] ? __pfx_sctp_destroy_sock+0x10/0x10 [ 448.136248][T14982] sk_common_release+0x75/0x310 [ 448.141117][T14982] sctp_close+0x77e/0x900 [ 448.145459][T14982] ? __pfx_sctp_close+0x10/0x10 [ 448.150311][T14982] ? down_write+0x162/0x1f0 [ 448.154842][T14982] ? __pfx_down_write+0x10/0x10 [ 448.159694][T14982] ? ip_mc_drop_socket+0x25a/0x270 [ 448.164812][T14982] inet_release+0x144/0x190 [ 448.169320][T14982] sock_close+0xc3/0x240 [ 448.173569][T14982] ? __pfx_sock_close+0x10/0x10 [ 448.178422][T14982] __fput+0x44c/0xa70 [ 448.182414][T14982] task_work_run+0x1d4/0x260 [ 448.187020][T14982] ? __pfx_task_work_run+0x10/0x10 [ 448.192144][T14982] ? exit_to_user_mode_loop+0x40/0x130 [ 448.197612][T14982] exit_to_user_mode_loop+0xe9/0x130 [ 448.202897][T14982] do_syscall_64+0x2bd/0xfa0 [ 448.207537][T14982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.213615][T14982] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.219771][T14982] ? clear_bhb_loop+0x60/0xb0 [ 448.224450][T14982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.230354][T14982] RIP: 0033:0x7fcb0a18f6c9 [ 448.234781][T14982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.254398][T14982] RSP: 002b:00007ffe23c85ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 448.262912][T14982] RAX: 0000000000000000 RBX: 00007fcb0a3e7da0 RCX: 00007fcb0a18f6c9 [ 448.270894][T14982] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 448.278898][T14982] RBP: 00007fcb0a3e7da0 R08: 0000000000000130 R09: 0000001223c861df [ 448.287220][T14982] R10: 00007fcb0a3e7cb0 R11: 0000000000000246 R12: 000000000006d5ac [ 448.295197][T14982] R13: 00007fcb0a3e6090 R14: ffffffffffffffff R15: 00007ffe23c86000 [ 448.303190][T14982] [ 448.306225][T14982] Modules linked in: [ 448.310216][T14982] ---[ end trace 0000000000000000 ]--- [ 448.315693][T14982] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 448.322768][T14982] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 448.342454][T14982] RSP: 0018:ffffc9001b1c7ad8 EFLAGS: 00010246 [ 448.348536][T14982] RAX: 000000000000006d RBX: ffff88807ca37708 RCX: 503fe0d7df9db100 [ 448.356528][T14982] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 448.364531][T14982] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 448.372527][T14982] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff110063846c7 [ 448.380521][T14982] R13: dffffc0000000000 R14: ffff888031c23638 R15: ffff888031c23638 [ 448.388544][T14982] FS: 000055558e390500(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 448.397501][T14982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.404108][T14982] CR2: 0000200000001d00 CR3: 0000000078fe4000 CR4: 00000000003526f0 [ 448.412109][T14982] Kernel panic - not syncing: Fatal exception in interrupt [ 448.419582][T14982] Kernel Offset: disabled [ 448.423916][T14982] Rebooting in 86400 seconds..