last executing test programs: 3m18.993394517s ago: executing program 4 (id=3311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0200001900010025bd700000000000ac1414030000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 3m18.895924312s ago: executing program 4 (id=3312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x15c}}, 0x24008050) 3m18.633633464s ago: executing program 4 (id=3315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x100000, 0x0, 0x0, 0xfffffffffffffffd}, {0x2, 0x4000000000000}, 0x2, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040060}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r6, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c00108004000e8004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001840)='GPL\x00', 0x0, 0xfe, &(0x7f0000001a40)=""/254, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0x2, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001bc0)=[0x1], &(0x7f0000001c00)=[{0x5, 0x5, 0x2, 0x2}, {0x3, 0x3, 0x10, 0x4}, {0x3, 0x4, 0xb, 0x7}, {0x5, 0x2, 0x0, 0x5}, {0x4, 0x1, 0x8, 0x6}, {0x4, 0x5, 0x1, 0xc}, {0x4, 0x3, 0x1, 0x1}], 0x10, 0xe}, 0x94) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001d40)=@generic={&(0x7f0000000080)='./file0\x00', r9}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r11}, 0x38) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r12}, 0x38) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x50e}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000100)={0x2c, 0x5, r4, 0x4}, 0x10, &(0x7f0000001980)=[{&(0x7f00000001c0)="82e12c2b48049b8c1b31a68f794796be2e0bbfb2aa1339ff5b573b1b4c7b9e9891c33a33a4d41765c96ab71e0c2ba1054041c5fc288108536319dce96999ba78515cb536e319028465744133569e44bf16b512dd62a796adace9aa230ee85f46d88cf85e989231e98d9472", 0x6b}, {&(0x7f0000000240)="1e6a4370a5f1d3ae92ced1753eed3fd1c4b5d4cbad6382328baa1f846f443af0afd56db7c90d35cad10c1f0c8ca8fb3815712931dba077f59e6b9c18e9c080bb3f8d115fd2a4792c37142d4e029023995ebf695a8b0c915d5ae5f2df1dfba0e7bd49c3b3bba32a11ed776ff3eca5aade27774948f2be2e06b349080cea40bc96e1110147667f0c97", 0x88}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="6c6860bc32b5241d6a4fa14e5accdec31e030bfa53d4d1f75dd1f9c5627cec42721e1ad29ceaa3c915a3e67129695f48d882448cc78c84e0eb4080af77bbbea91ccf42e6b447c053576a4910bd9b7cf52af904abb2d88f402fd57f2353f06a30b5574542e424289193553288342bbcc4099cab5020ecdb7b07e1f6497aee6a0c0893dcbfa6e6cb4cc5236af7dfba785b9a1e5c7b0520606d56dce9fbbd4ac005d5ac26651f290554c3bfd917b7970b8279c81bdf937e4641d62d614429ebc0202794a3d0999539dd2dbf4aeb3b6414b62cb3bfcabedb1c8320a380f1e636888f1b11989e51", 0xe5}, {&(0x7f0000001680)="164e3cb8cbcc100d2ba5c95464b1efb6dae690e9245c47224e89e1b7a2f0aeae650ee7a0a682cac8eaaaa6c5d544b09d92617e9368ea1660cfe31a55157cd5a1e1d4915cc34d33d0997f52eb25701fa7e6b430c1ecb231f30b38910854d9c6548fe546f323a7cc4fd66cb6462ad47d6dcbac534a43668e41be9bc84cefd186fd817681669a4da5e1d09e5b5bc4c068e191bb0bbe89", 0x95}, {&(0x7f0000001740)="a9b8f7049a972e4dae024b3f40b6e153ba751ecc9e871a1a4eb55932ddfacf205d76c66cc980d82cfda0ad9989649670454d3289365f107249a4f233b236af7b72ecca633cd70555362558cf80a3a468bd3f2d066a642cb4c610000a318a16e160a535856f943bfd019b396c39958e2b382c273545ee60f71ba35d319bd0e08621aec654e263f4c94d58a071ebb3ca7a54650fbd4f8ee12c12470bb435965947be13ff90dabf5f611d73e7098bbe9f2b1ed71f22ebe356d344748f88c7a7c9faaaae04d540cddaf5056b81c5e335572124ca50397dfde1cc38aea5374f758c39b73728e9fc4ef2e8bc6cfbad17222aac45", 0xf1}, {&(0x7f0000000040)="21c0c9e4cf7b3be4e3879017ffeb70f846688a7d85772c3427e90f", 0x1b}, {&(0x7f0000001880)="45bf911f781a8d2fb1c2fafe5ffe23fc5cd2145edb718498c517ce5af0f91a6121784558c008017dc3018af3954cc78b8f17ad5ef0a4c87b2d265f6ffbb9181d3ceb5017530d362d6ed3bdeaafacfb9affd4ed35b0f2d83007e0c4a9e5b0ffbc213aa5d00292d9ea96f7b7fa9b63d85e92465f4a4224b6f5ba15c9a7525a4f3d8d59d328a4cbf6af9cca5dacd3f20ff736a953896c0fec5c324618494c86fb7eddbe6bf74280049d65cd40134eba3cb67571a192786d22812d5a55d7b4f4a0730269863084b5dc9654a6212b57a5aa0581f22a2bac47db1f4e4bba1a3d76e45efdfe2dacec844a3a0064972d83", 0xed}], 0x8, 0x0, 0x0, 0x4800}, 0x20000000) 3m18.248704767s ago: executing program 4 (id=3318): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r0, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c044}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) (async) shutdown(r0, 0x2) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c044}, 0x40) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 3m17.754967301s ago: executing program 4 (id=3323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a806008100050086dd608ab7f200142c0000000000000000000000000000000000fe8000000000000000000000000000aa3a040005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="509078fffe000000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) 3m17.400830907s ago: executing program 4 (id=3327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "d74e6d560177ff4d", "83382ca56d7207481d0fb59d12726293", "f2632a19", "00002d4c00000002"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x703d28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24004910) 3m2.319305137s ago: executing program 32 (id=3327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "d74e6d560177ff4d", "83382ca56d7207481d0fb59d12726293", "f2632a19", "00002d4c00000002"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x703d28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24004910) 2.432574345s ago: executing program 1 (id=5467): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 2.263809155s ago: executing program 0 (id=5469): write(0xffffffffffffffff, &(0x7f0000000140)='&\x00\x00\x00\"', 0x5) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100001002ab970000000000000000000", @ANYRES32=0x0, @ANYBLOB="802104000000000014000300776c616e31000000000000000000000008000400d40000000a0001"], 0x48}}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x20044051) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000014000108000000000000004f1fda22766b3fd1b8eff48ddcf3"], 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010025bd7000fddbdf251f000000", @ANYRES32=r4, @ANYBLOB="102a050000000000280012800b00010062726964676500001800028005002c"], 0x48}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000000) 2.254779051s ago: executing program 3 (id=5470): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r2, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd700000f900000400000004000e0004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r2, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd700000f900000400000004000e0004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 2.240251873s ago: executing program 1 (id=5471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff2, 0x6}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200410d0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x800fe, {{@in=@multicast2, @in=@broadcast, 0x6, 0x794, 0x4e23, 0x20, 0x2, 0x20, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x4, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1001ff}, {0x2, 0x2, 0x9}, 0x70bd2c, 0x3504, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff1}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f0001"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) r5 = socket(0x2d, 0x2, 0x0) connect$netlink(r5, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfc, 0x40000}, 0xc) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fddbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300aa470e5ecd18007234fb394ecea829ba4dc89789bcb4a3f00fbb70a9e4521558dc0763b9a4aee1dd73b282553d451a5541dbc556cd975f9d241f26c9e99ab9210b53e2ef7554e0cb7594ef8d686ff01cd32613afa6"], 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x48000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r7) close(r6) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.812937703s ago: executing program 3 (id=5476): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c3", 0x6e}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) listen(r3, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x5a0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4d0, 0xffffffff, 0xffffffff, 0x4d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x2f0, 0x310, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bond_slave_0\x00', {0x0, 0x0, 0x9, 0x0, 0xffff4c47, 0x3ff, 0x101, 0x8, 0x18}, {0x6}}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) r6 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.812609312s ago: executing program 0 (id=5477): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x24004884) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef000000240012800b0001006d00000005000d000100000008000500"/48, @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x200c0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000000)=0x402, 0x4) 1.808905064s ago: executing program 1 (id=5478): r0 = socket$inet_sctp(0x2, 0x3, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0xffc8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x0, 0x7, 0x8c, 0x430, 0x8, 0x58000, 0xb}, 0x9c) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004, 0x2406}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000040)="630b0086", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000280)=0xb9) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe80000000000000000000a6109ce800000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x20980}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, 0x0, 0x0) tee(r11, r10, 0x9, 0x1) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000001e0002022bbd7000fcdbdf2500000000000000000000ffff7f000001000004d502003c00ac1e0001000000000000000000000000c9af00000635000000001e006230ff4500001c00", @ANYRES32=r12, @ANYBLOB='\x00\\\x00\x00'], 0xa3f}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x3, 0x0, 0x0, 0x400000, 0x3ff}}, 0xe8) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.575283509s ago: executing program 5 (id=5479): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x146}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a2", 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674", 0x6d}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x46d) 1.370779744s ago: executing program 0 (id=5482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r1, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000003888fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d53c000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c0014"], 0x158}}, 0x0) unshare(0x400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0) tee(r3, r4, 0x2, 0x100000000000003) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f0000000b00)={0x0, 0xffffffffffffff6d, &(0x7f0000000c00)={&(0x7f0000000280)={0x2c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3de}]}, 0x2c}}, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000000)={{r7}, 0x2a, 0x80000007ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000220000000000000080000006b1189000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x2010000) 1.369920152s ago: executing program 3 (id=5483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b91f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xf}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r3, &(0x7f0000000140)="fad33075218151db00316f3a277f", 0xe, 0x6008092, 0x0, 0x0) 1.349437344s ago: executing program 5 (id=5484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.051248862s ago: executing program 3 (id=5486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_emit_ethernet(0x78eeed60d5151aa5, &(0x7f0000000940)={@multicast, @random="88a0bc295012", @void, {@mpls_mc={0x8848, {[{0x3}, {0x7f}], @generic="8306394b8d47962bc9f449d6cd8f487afd432bb2693ff3ad6d8b3d8d8d26baa57678986c3189909c343595ee3fd6d0034ca05f3c6f80ba098b2972f690741d075a85"}}}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x4008800) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x7, 0x5, 0xfffd, 0x6, 0x7, {0x0, @in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x8, 0x8, 0x6fbd, 0x27d, 0x19b1}}, &(0x7f0000000280)=0xb0) 1.029009132s ago: executing program 0 (id=5487): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x0, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffc8) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000440)={{@_ha_fsid={[0x10, 0xd399]}, {0xec00, 0xa2, 0xc000000, 0x8}}, {{[0xfff, 0x5, 0xffffff6d, 0x6]}, 0x0, 0x0, 0x6d, 0x0, &(0x7f00000003c0)=[{{@align=0x4, {0x0, 0x5, 0x1, 0x3}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0x1ff, 0x80000000]}, {0x4, 0x7, 0xfffffffd}}, 0x8, 0x0, '/dev/ppp\x00'}, {{@align=0xf24a, {0xffff, 0x3, 0x4, 0xfff}}, 0x8, 0x0, '/dev/net/tun\x00'}]}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001680)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x5761, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x5, [@restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @datasec={0x9, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x5, 0x9}, {0x4, 0x8000, 0x6}], "dc55"}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x4, 0x9}, {0x5, 0x18a6}, {0xe, 0x8}, {0xf, 0x2}, {0x4, 0x1000}, {0x10, 0x400}, {0x5, 0x4}, {0xd, 0x9}, {0x9, 0x5}, {0x3, 0xc}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0xe}, {0xf}, {0x4, 0x5}, {0x5, 0x2}, {0xd, 0x3}]}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f0000001840)=""/9, 0xe9, 0x9, 0x1, 0xf}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0x5, 0x2, 0x4, 0xaa50, 0xffffffffffffffff, 0x7fffffff, '\x00', r5, r6, 0x2, 0x4, 0x5, 0xb, @value=r7}, 0x50) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x240, 0x1000000, 0xffffffff, 0x240, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010101, 0x0, 0xffffffff, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1e0, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e24], [0x4e22, 0x4e22], [0xa0b4, 0x80000001, 0x9, 0xfffffff7, 0x2, 0x9, 0x0, 0x839, 0x0, 0x6, 0x118e, 0x401, 0x1f0, 0x4c, 0x6, 0x5, 0x7, 0x0, 0xa34, 0x5, 0x7, 0x4, 0x7fffffff, 0x1, 0x40, 0x6, 0x5, 0x3ff, 0x5, 0x2, 0x7, 0x9, 0x100, 0x9, 0x0, 0x7, 0x101, 0x5, 0x7, 0x4, 0x7fffffff, 0x1, 0x7, 0x3e, 0x6, 0x8, 0xff, 0x3, 0x0, 0x6, 0xb99, 0x5, 0x1, 0x7, 0xe, 0xcc5, 0x3, 0x4, 0x8, 0x3ff, 0x5, 0x5, 0x6d, 0x1], 0x1, [{0x9e, 0x8, 0xf}, {0x3, 0x0, 0x6}, {0x0, 0x40, 0x7}, {0x40, 0x80, 0x4}], 0x1, 0x4, 0xa}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3c8) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230005) close(r0) pwritev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)="6a5b337ff05a61eb8dd5440668b38dd5fa37499cb4340fece43904c8036ce166b673649a6a96528bbce5877d89c7a30c8fd5f82ff70355f7ff935c8df78b65ae5b49a98dbce8adbfe24ffa3ba532d26e157876e68533ac96bc46bac4ea905f176d", 0x61}, {&(0x7f0000000140)="99dd0a3827f967c7c6196a313008ff87a9f0524fe3484b345ff1112b5dfed38a20671f7a75526c3cae33bdf6140120b924d333a3e388ca912dba374040b3fb22865315ce313113465ddbfb6e6ed81f8cce7852202ab73b98e0f66137c206afcc3baa6bb604fe29f5239a15cd0b", 0x6d}, {&(0x7f0000000200)="7f832c3d682610dd0e027476e1331056a2d957c9630fdf43d5685bb98d62fb846e8c775b5a54ce3e6649d230a83633d8ffbaf61186ca4d0d8179b126d917912a52b56fdcfcfe6505b50d5e951e2ddf0e28526ad42f1021815b1742ec90ae19fd59088cfa1c7c65c52fb88d6f5118824c8537d9c5e49356ea0a525f47630e4ffe7dc3498a8c7b205aef30b44f3bf145d8ff1fe72d07a8", 0x96}, {&(0x7f00000002c0)="1a32a97ef4f7f5bea705736f", 0xc}, {&(0x7f00000005c0)="943ad8f768fdd6dd7abaa703b2b7c036f01e45c9cf375d54249bb90a8fd0ddd04e0c232951af5c742aba5cb1e41a584e4d78d5ad9e72cd0d721d7c25109de01bc3b505531a59fa461670d549be264b7319b2eb6e2c3a3fb8e099e8a08e72eaf33baa74c2beea0ebc193042709fd1aac4adeff781916d517f1b62ae03a52f8631bdf7c85d9b183661f8fa9651a6aadf039416a2d4d866b8d382a496ba3cd2ea28e8e10a2d9eb0be334d07192f3f1993099cdf889989be1f38862656c1d916dd858f64bda6155a8acc3c1e80d843045c1c3dff3e45e48bcb8b8eb40a07dc938ea66b1cb3caa2968d4058deaed760d081880e7c05ae86858efa0c0f0ccb660b70ba19ed81e91ce28e618c1132c158f6356bcf384668cd602ccde0d0b1a6960f44b8c156cca11379c4193cd15b9c59890c8202217b39a1c795e1a7d65019f79ede43deac9042e13adf67ea7c56a31f7764a6352ee7365b19e0a33669c0b991095baa652bde496cffc45f1f00135ef2faae9926f8a188c3dea4328f4cd426f96a63d87fe43037348d90d8d23031df35b876e30cb8653636bba504d94a1bc109e142bffaf54e65db8833f47ded5b9bb866c70ec2feaf16b5fc473eb7794482564ff6a20b10556acd9a15c112ddefb9d1b95ab3eeeb1e4a0811dff859b479db2d1143c366102fe77b1764cb4585c691d229a1101f1c438de134c0e0f6c8baabd5c6d637966c1124dc6693b74c77e33cdb888dcbd15bd9119736dfe86a180c4e3ebebc64235da798804facb105ba95963aedf94f0a219e30af637741dd865ce7177ae4fbb3b670b62be69f94008e0457c1af4bea5d11550e37d82f9e0eefefc55c0180f9e10e254f3331f65b5edd6c727052404cc8aaf4ad80ca53e9fbd90aa22fd0cafda64a21f2371f52cfececfeb84052b8b0515592ceaa029a02f54e56417d15d43999110c7f8f3001bc74af94d9e854555c72e6647a9f1b41148d658de90da35903b836c06d00c4b9606ff9eae4540114a4920292e7d81f193024c0e195e957ea17aab649ba633e72d7f3f00620850c15d7da09e4084e34eae76fdb3f0363bd518af22a4ae13ea0680ee710f8f9c469cf73171e069be2fc9e19dda238bc53b90d1d308e02ef6c21031c07eaf14f539bdbf96362a38b244cda3b6610c1722ac994656bbeeb41c63da4cf208c5dbdb79903f278b865f63cb9e0aca30d5a6b63316964d8defa72f1c63abcb041b148bc916d4f312876f2b05fffd72b10840382b50a02a2954b082744e390ba5675642c3b53cd1e2184c3bacc00faa53c05f6571e95975de19774088a69847f4bf276b9e1bc09678148679970d43725346926e343ffba87502fd079637b6014a1c480e3bc3c80fc59bf834ca4f648ad431fe44eb7da9388c23ac77469f7ec6155a0164d5f3bf6d010ec7f7508424c220eb10f01c8cc0fcd286ec091812868d4ca76f7692bcb1488a14000dd86de1f882c934f49ba0cdb846d89d335f7beb0f7cd5b0a75ae6cfc084ed90a004c1a5cd180c51e61965f410a93491fa3891720c02ca1949bcbd9b482ae4ccd75871e9a98da3733838dd1995f8adc425cd0712c23864a36f3f0fd3ac0b1f091a8d1aea4d4bc8ff00778f690add8c1f7425c110491c1a6bff17b04152340c5fb6b9e86c017173e8dde113606848ed8afaa5a610189aa94c6a5a309f3a9b3f0cf4c382978746f114e7739db9e188dd17b9990cb321592a7da782490c7657bfeaf9bcd4c773a1e43f350aeb9e2cb1e4cf6a29e73e335acfc5f3607682be91b90e4c90f6ced3bb8971d2c2299d508dd8f7caf76c4b7fbb7e89a6357243ef531a20ddbd295b6ce62b4849ac32f834a480f40c596e64d197310e7505d5e9ede165561f34f28e371d96245615fc617b251083c4972240d4dd7a04a2b776e394aee9c97548d7087fbff2f0551ed56ccdecc8f8a6dde9606aa90d4fb9c5300e9b76526be3ffae94ecf5c439def010d2dc9c2a15db3abeeb68ec60ce38be2715af35164e6431d9877145333d08885e06fd30f828c390f6ea64c74d4f627e203afbeea8414698b06050ee315f7f80f08e2d1a325e29586f4d9b925b8cde0e4890cc78e8081db9867f7429a95298f8326325db08425f47e5d07ceaf83702ea37bd8044fe107c3a399191f3aa2547ecb9fc50d808f996f3393eb392d2e50ffe92c0156514428ed84aeeaec65ddcbde6211ab8f25021c715733a95792e29741d7442bdd0acc5be5bbdf949139575f9e2bf1e76018ddc9caeb3b893811f0b0a59d5697279fd17e448cbe471bfee7a213f8873b61b9af2e187cf6455272f799301d01de6e1ecd6d104cfe1f323ddf1db6a92f855641395bb6fdabe11b2b66b84b5cfd167ca2cda1a9cd08bf3654e46e7aeb237bee3c70076f5b3d59a4b6e8cf9c6239621e20dcf81357aa068184a85884f97b62399b2de0e4dab72a8c591a09e7f54ac894c235ceb3442bc9964916bf45d77536e58985c3deec9df8b8e95986a59398497322acf0c47b3f741e0c3c618165aa0066dcff8b6225a422c3b30148f788bf4878fe4fdcd198ab075a4a7ca689da87448e27ccdeb9b9b6c37c933f55ef6e2a76278ed49de9bece6dc89b853346fbb9104929006ff9589e14408d998d660757da03f0fda7d936d97642d02f1cd23e725e74b71c80f40943bafe04994af937367d6c04c78b01ad33c4a706f7915d5fa14c277d5f9203f79a18924324307b15470d9baba22cabdee01dbb7e70c7171273b06885de1614cedb5597d79f10e6e8246e6a8bd4c495e0e33959d4bb3abcf22e182faeab4ad6aa5d5497568045ac85e233c85f596cdbce298686cff6090af523138b351fe87aa1faba8fa32ca2a1b73269874a6fc9e07664b24cecb9e10c86036c59f5afe50032228ce9f3026444851468eaebf16916682ab306d9abfa57ff6a90ec9ee0e463c672642d12185c8b12e74fd30fa9a87720b0f95e11bdced916a08827abb4c91b47c69c1d4b0bb3d7c1d3be5f2b31c4129372be4fe3e2185906cc655b938a6cda6c2212a470202e06ff40c8b0b8e00905a2f32f1fdbcf77ad0be3c6a26e2038e235578a56899e3968a28b7e56f4d8444ee38b2c51e9a2c35b6cfca72679756d17e668192eab2e16656ea99a50390323a3d215f7547e7ab2086d2386271ab9ec418b2535ac506eec57bed19d36fd1bbc97d5c99092777436eedb0a397401bb106987b045b2ec874265080b9fb659d6c9b68261310e7411a78dc53320a5f851de251ed0096834bb564446e8228c36edc33caa39a310914c865dbfe84d0318cbd644ce92b60c20e292efa2c8ff53216d94298e8f08ad43d25d330149cdd858d28795141969e2b7986262715f14aad39b78445abce5a85aad8d1881c23a9a5fb793e9b6b53672502cd9a0184e4563aa6f5b0586747d5d2017aa098d44cef07c9799c2bb666fc35f31bfe5d8820a54770b0af7b0a31f26dbbce43422b2d5a85763d29decf7ccb9ea7709cab247009823204ea3f05dabe95dc80155d7cd1d526cbaf82ce68d13fbedc973e93fea8f8befa5bb9a754fcc3ca3e2cb4bf80bf91a958f1fb332ed5cd3b7a7ef4b35e8a5e4172e66ef4aa46bc322b49f54d9b874259570eb9792d8f808ad84f88fb2349eac79bde7be085829dd236e7849725e18d03880c46d9affd0fa90d7f80b3ff3b0ac5d84a7a56d551985032aed8813b55334730ae73623491facdae57414656ad1174722b2fefac665559b99a5e865deb90a59b99bab66e6a6d8abbef1122ceaad258cc8cefc136abc101d4b83d90ba93be4448fd32177eaa28f757ca2bcf1dc17dd9a250eb973b4c581812e0ad58660a9b509402651bd4cc06a328e93a608e01200da1b766610ab47af9b02d1109718a2932290fbbbc603011b0a8cce0095a07dd63276bf9a2016adefcb64767ecc058dfdab2787f0f100a556dadd4b6ed67762eef3dade033f5e3e46767a035c48dd0f1f5a84464d5763d317f139190dfd7409ad28b813bead892c7783608c65b3395cb86566ff72e33d047a4b0fc6371b0f9515ecf41899372b91476ec7c5d3167867b1676dee2f55b307050d458ff593b36bad0b3dc16a97545793be82733a478610ca692547d1ce032f9a10f2ddebd1886beff81cf646e50af73824321cb0fa7aeec5f1620c9d8fc976ddf3b03b25a10afd5c51d9b862b17f98e562d2b0a306beb570b022ba22d3dc967d1ae4907c359a0b7d518185810ea2f51b17bfa71568427b71b76d042d1b461d98db75a3ea5fdd7b4d037e95813043612132b4965c446491fa6dcb397a018fda0c218b494f01d75a0408b51f379310268112be126e20ab20ba52c678cbfb0c1829bd8045b6a348753240a92837aa024d30dff28ef0da1bc6756820e5fa4bc1841a40f649cb5043c44b5d210074c2b079a85c175bbe43142a2aa50ca84a8693ff48ef5e13fabcbb5d7edfce5d38d3c0762ab9ac9a68ae08d8011df6d55343905d0517b612256ee532898750e44f29f8e05308893b5049e958a370bd8a9045b504880f1d3e5ca3aa274b4998077af2a84f7a07e0384edbf53f7067390fdcabd02c73cbd6e7160ed7d6fc926220b4e938313216bfccf65aeea56437ed2deb68b47ba0da08d1d4ff1567073a86691797d8563ae35f4eaf949ac1c0dcd6a00c6cd2d3d69ed57187395b422b1f7b84ac2fc7115b3a2b60d0afab8d63442f07dd84547a580fa6641a4e32acfad5c82c887642bbb32c8f90ddce46dc98c33b65ee3aab1e58bdaef3239058f1f8ec27bb0510f8b0507fb77516d1dd406f73e511f17468065485a8853236a5031e05830fe8a8c5d975c3f2bb5bd7cbdbb802261bb49ca6d86863d3ba98dcb7b500b930b482dc6f07e065a41bc55eca9e98f087c2c88d2e722c63cfc15660deff45988856c1bbd6fd7350d4f154d40b5c8eb937c75d2dfaad5cbf96d6cc0147a24aad28a4a6300364eaf53e102f9c1ea13f22d934efb719d34224f4aa9e7ec5de9d812d3412f660eca0d2f6b9cc4eeddb596a4723f9e10eb549eb1e85f0b991f613999538528c04b835a94e797845eecbf24dd99e5788c6442b3fcba7966bbb28dee5c9b1167f796f9117b7bbcd5dcaa46467daf548ce94da9729cf7aefba4a93df1659bd95319bcd510c530a388822525ec326a2bd94eb04d2dbc80776ed2ce14925921da4019ae918129716a5de566055e47d4e0af4c0ef97f608a95fa44dfe1b612b5dc6b7ead7b75bf2c495b3a32d1d219e2a0043618a48d7af706b082215fbb9f0fb857806d6ce43be8e046b8b09a45140d2dd54bb1fedd263cfad10328a3c5d16709b1ea42567095aff84d4d948bf41827ce7368e087ca007647f15cfa8298f06285ee7986cdccc6045f388d7684e5b0cbd79c8fae8fbbd10525d77753924f172c116a13088bc2a236c61e6f9025e4da872e422b977840c9164874f1cea5e556e8e8890baf85bea0cc10285102060cc13b519cafb1a499ae98bbae2c5d2dfead1f18d2025cfbdf7787e0e8a7c0b70b6b766296704726b277eda4493ca4d71da48d2d284a5473ffd3c99b6227b8f26792d6fa1f87cf3f9bf77b265d88b51351d1005c54db0741b2687e577a580e5c257c6199772d64294664e1555eda49b1a45dda33bf8f4b109004dc64248499288e0cae26fed7e5b5c76c8f1c4aa6fa90f2861287ba32e30e2df8dbfa679ebea8c6279cb0d42f60c893bc3f2dc3b89da02f0f60559573e6f6e20bbccc349b36798b052cfb58c59c4cfab8db7a6d2871c00d6b1cd7950c66e38d0ae642769d404", 0x1000}], 0x5, 0xf64d, 0x2) 1.027383141s ago: executing program 2 (id=5488): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 936.334545ms ago: executing program 5 (id=5489): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbb7, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000045) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x8, 0x3, 0x2, 0x0, 0x1d, @empty, @mcast1, 0xe20, 0x80, 0x9, 0x8}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48020000", @ANYRES16=r2, @ANYBLOB="d40025bd7001238a4d7f3ad7e803e6494090d02afe22cd90c088689d2a4f2ee971d9675077041ba4d40585cd6c38155e630e9bddee6be34ef2780caf9a1802a7c5d89702a63bf0ccd1b0db5a8cd89b61cfd13383d64f55b3f028cf1190aa8bb9c24001b5ca06b5", @ANYRES32, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000010003000300000008000400ff03000008000100", @ANYRES32, @ANYBLOB="e80102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000f00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="08000700fcffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="030007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="00000100000001006e6f746966795f70656572735f696e74657276616c000000000000000000000000000300030000000000040009000000"], 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) unshare(0x28000600) 884.375012ms ago: executing program 2 (id=5490): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e26f6f0edc4", 0xda}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda", 0x4c}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(0xffffffffffffffff, &(0x7f0000001e00)="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", 0x449) 765.158849ms ago: executing program 1 (id=5491): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r4, 0x78967656d0a78869, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x6}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x100000000000001}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b4000000140001040000000000000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a0010000000000055c058e6e6f22c816219350fff7e331145c712a96078ea9925df04baa0511f94530714f231d0f4d7e20ad603f0e4374bf0a1b487d63b41b0cf03aa4f7242550ab5533d0b243df5e95e90e5d10cb2859b8e30a5230405", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb4}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 764.639572ms ago: executing program 3 (id=5492): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x24004884) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef000000240012800b0001006d00000005000d000100000008000500"/48, @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x200c0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000000)=0x402, 0x4) 726.031293ms ago: executing program 2 (id=5493): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c3", 0x6e}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) listen(r3, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x5a0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4d0, 0xffffffff, 0xffffffff, 0x4d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x2f0, 0x310, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bond_slave_0\x00', {0x0, 0x0, 0x9, 0x0, 0xffff4c47, 0x3ff, 0x101, 0x8, 0x18}, {0x6}}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) r6 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 678.491991ms ago: executing program 5 (id=5494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3000000}, @NFC_ATTR_VENDOR_DATA={0x2d, 0x1f, "67faefcc6bb1f92c5bb5c70f54837c2c4848738f8fb704dd55ca8f857075223cddd1ed9070c1220fdd"}, @NFC_ATTR_VENDOR_DATA={0x82, 0x1f, "74109f017331e7d9e2c03ae70c403103f7c9e17424196400c7b36304b30d5527f804dbb07417e3ce6b426de838b9e476ca5cfe5b72adbd0f817a32b461700f16b81ef01c5ec5d99a8ff23456bdd5658ede3a3234a46be132af6ba068c295c73a05266ed26ea891fa74983f1d5589249c14cb519fb1530e69be2fd45d15b9"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0x7f, 0x1f, "10950a1a15ce91aebcef39e54885e3a6eb548010e6ceebfaf6c7694bcc14b6b2e853eae270d667df95ad0d2cb5028f680180755687de11f04cc6c059e79963bceff2a5c966a985a67bd0f3532883a4aa8d5f59c7df47c44d6ab0dd32ec4a7d1a68a38bc8a9cfa098efb9c4482a0f15ee88b2330135da287078bc70"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0xd0}, 0x8400) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newchain={0x3c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xb}, {0xffff, 0x3}, {0xe, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c844}, 0x104) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', r4, 0x29, 0xc, 0x2d, 0x8, 0x4, @mcast1, @private2, 0x80, 0x700, 0x5, 0x30000}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000000880)={0xc5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x200, 0x1, 0x0, 0x5}, {0x40, 0x80}, {0x15, 0x6a, 0x3, 0x7fffffff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8d8a}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe2ea}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0xaa, 0xa, 0xc}, {0x1, 0xd, 0xde, 0x9}, {0x8, 0x88, 0x0, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x0, 0xe2, 0x9}, {0x3, 0x6, 0x2, 0x6}, {0xb, 0x6, 0x9, 0xb}, {0x4, 0x81, 0x5d, 0x9}, {0x10, 0xc9, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe72}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf41f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r12}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r15}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000024c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0xd68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd08, 0x3, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7f}]}}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x40000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "3337b1dfe72bc3c6827725e603d90b73e9464cee7bc0718525e386cfb201ff731645e72c9d61075ab21bc10d204bbdac3284b121ce0f9ab195e63a772fa42a"}, @NFTA_DATA_VALUE={0x9, 0x1, "087b7e4fd0"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "8c262a8b73d7510d332164673463d368c756e1069aa9323334576a54b740c2cb2349a51881b22fe78b685828a5d05db0754bff3e18a59cb28dd2a4d4ce13578b18a9bef76e86c2b00150fe142dd6e0dc59cd2031ac85462344cbbc8d5c43b1e4a363ab7bc1d80af101ac7fa76d4ece82f38c3621e566b3331f02d47558282d544f9258734689945e5ae2319680038de45b29f53723b68274bf17a639aff1009e666a1cd2925b9bed9eb35f4f636bdeec3ced45efb797ce409154648ea8823a5f3071f66709192c5dbe7ea0f8f84b0f8938b66f143b5a5bd0cb6f77642f"}]}, @NFTA_SET_ELEM_EXPR={0x11c, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'comment\x00'}, @NFTA_MATCH_INFO={0xd5, 0x3, "7d68ff009f7d4f0d9532d79b2b235ac8c833d3ebda8a65b1a75af9b0b40890d5e62265d744e7603041ba00e1271abc715a8ad8910dbf227a8bbeeb08a79b39ebc4df3998abd50400ab317a5914d583a36faca5bc35010c83ad9814715fccd3939e4bc0c0139fd8e5cdd846e445a68086a473b0985619c9cb9a9c407a06e2a2a6749d69fe0a94e47e14f21ebe53ca32cb4a50e1d09afe83db02ae43d43926efbff666852ca9f8891bfc9c26373029be652d751268f5953e4071d429725f3262c38df7d0d91239e0704df4bbc96e22bc17e8"}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}]}}}]}, {0x4d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "bc82444712bfc7efe9dc40ed19d6c5e5fe4ff8f4497470258eb5b86df218d9445a777528e69e422f756f8c1c97f8ddcb6b54ff3ce0ba17414cced1fe57693dd693080a8a887f618f54d27373bd2f56bd53248f79a8f1fd86f65f06759ccef33403401931acaeac9c88"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "3275d2f2b92fb846ed34085ffebdce024f43f9c1012ee033f480d2cc79fcae8039bb49af800924925572743a653f62c753e62cee434fd4ce4a2ac68172f038e551e5591a77954486f7474303d3ac2795a2f113c8c3e348bbbea6db6b482e56ed74cd34d20971dd55dd19"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_USERDATA={0x14, 0x6, 0x1, 0x0, "fa1a12d3c9680de310f9dfb3a3ee280e"}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "4d9a61c078268e73973e9e3e63a4b741391d8aad22966af050f1be87669bc0758332ef3d3cd606dec4778eb6c2a91184ee63c14b124f778cec67de2f8df1b769527ced640d55be3dcd7afc591508efc6a3"}, @NFTA_SET_ELEM_DATA={0x258, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "a4ca6f6facafe46198fbfe9bb1b9d3438a5a3f8f277c342fc45662b6966c21a4c9aa452cab5f720e318c22c2b9e994e04a2d3ea888fb7ab0c3c93131cfcf033f535c371384ae662eaf412eef8cebf88bc961a5a9e0c447d8e17e8290509e199c8b82"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "4bbd28fb47f4a50c4cf1cafd4fb9977d22c71d9ff3f88ab5acdbba03e0ea8f7fc99aaf85ec9220"}, @NFTA_DATA_VALUE={0x74, 0x1, "d946f8f5233d625f3297a53c09a518c0d2950fc7c6eaccdd79729279493eee8041cb62b2cacb8db4d260aa931c727e2cb701ca79ab995c52919613dec1312c94a8581b15075ed18d716c45e2818c0f77e837be5a50b85bef893df674344dfc817272737b0c6bfba3e1d976ffe8df5577"}, @NFTA_DATA_VALUE={0xe7, 0x1, "f838efe0dc00a1fb5ea7d3d82c93295f6278e2138ad2a27fb07183939a6f58fc6e5f2dcf3b2437e0a868cecc5ed473f855554ff802d5d77edf532ded3beff1c0912588dd7df12497b26804b053aaf39ba9c1182a35281237686fe1cf72b5d929e7abf0b3a5cfd2b06299d4ec5c3ac9c369e75abedddc4be7b18a33e1d25f487bc05a4b1490fc0b7374bf50e60e08f3f7a9144770a2e946b07485d51f401308f707cb6d15a79e1bbd4906e8e1727daacc91a318c60df33ac2647df3d90900f12d6f45f60c7e35403e08e81c07f2890011351dc714c8021bfe0732736dcfaacbca07e212"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "12d8e03459161c92285d44b484a8cdd13b01c847fa9a91fdae178b121c8050cfffbbcb06094dae576d41972704453f8cb78cbe2013249e608f7ab5509c7b6e08f00bb3aaa38707897e5af42789d67d2ccc3b056e16ecd9863326ef4fbc"}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "512001351f4cf1e41eb0192ef22ecbb7d5d7058d7a31585bba166e6ed58451ae8c21cc5dfa46a207154f8fd73c584a102d30a6a61486492412febe37111e1471fcd11e902168cfabb85aef441ff2789cd18c3886fdc73d440d97c1"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0xde, 0x6, 0x1, 0x0, "8d83cd4ed6ddb753c364654bb409ebfa48d6e7fff2711044a74af6f3108e6e4427015ee66fc24500e6d1444ddeeb6c7c5fa7c3ce64046fd887a4c484e29a4537df2d544735d14400ba7f6bebeff996502155b696f64c3c908e90463218fad2ea93de90c58844b6bf9022e4e4aba8cd51cb495862ce86f0b3f1eb0c2724c2123507324a390f5f45c33f40f834ed8758591bfa22ed48cad5d3f4ed0b8ba722cc0ec4ad8878b9fe3b4df0e000466af928e6319a1e4b9f5a180ede3890c30ac85985993fb76a6795350fda13f75c9c91c0705b74f6084976a733f868"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x198, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "58d3b265ef1d578267402d71d5de6735aeb78bee223135b7354d44feeccbf7446a969ab23e1e9172ec3f6d282ec35da15106d2796c2bdd509b0fc1f2c092cf27ae5eaa52fe13f2a0f2f69bc21db923f38cdb4cc8e5369c9d6570e58ed34e974dbdbe36ed469f43f7fd919cc8d7a75927bb614075051378780a25399d81c1fe8c847e249224"}, @NFTA_DATA_VALUE={0xf7, 0x1, "96a8f1d8b1273329265d270110f4f5a76841f7e6e86f5a746246caa8b764c7d14f3b9e855c41a71b631daf453cfe5461bc1f4b597b19f427360f2b0689b4d448e43bbd05cc3b44f99ba396ddb365b5e13ad947cbf8b5a665b2aaca6d82ee85457ce88dabee94e1672875c91f2899667c3b095f6e582a4ee891845bf24f17e3e7741164e184a9fce865794da0eb4515738886e0798b2360a820d6257f9da9a8325b7ea772db4b047d3fc4d825974a6bd5b847a30633ec93e764d414544c26de578d89b671ee8a77d259a1906f7f24c04472a0d40de657f12700d1d131e4744c70d8ffe3933e98b3b2477bb5e36af85b780c8a1c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "9231921e1820f4772366ab8c9eb57e877478b68d8d5c19b53b96f58c5a94f15d157f268bc70cea01108657b62f420ffe4b67261b4bf822"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4c5}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x33}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf4}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x9c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x88, 0x6, "7e2e3df801c7399d00801c43eaf9458166dbaea52473d168ef9d8841b8f2211f60669561d7b3890b1014af00913cfc1bd4ed23b04176f704ca26ca195879410bf1135453135efe40aee9a611b38e30ae54cf0b4fe564fd182015b1d88af05f692a0a8bee61914727da05e6c6aba2570f17e459eb33dab7fbca922d1c4603b76fb1a4320f"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8c}}, 0xc0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r16, 0x891b, &(0x7f0000002500)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) r17 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002540)=0xffffffffffffffff, 0x4) r18 = bpf$ITER_CREATE(0x21, &(0x7f0000002580)={r17}, 0x8) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x364cc8d6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x40885) setsockopt$inet_sctp_SCTP_NODELAY(r18, 0x84, 0x3, &(0x7f00000026c0), 0x4) sendmsg$inet6(r18, &(0x7f0000002e80)={&(0x7f0000002700)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000002740)="345de7d2bf7561c8306a7f5e985ed75c2ab1dfb56e91ed0f303ea074de91412a3ac59743659adf8d0843d4abaa68cdae06b472ae1e9598bc8a82b91de1969a9e375c62dbbfcadae0f12fed94bfe37c1420a13e87f9f0e95c4945138dbfde5f8c8a948fad21fa9345f67eea0690679d3ce3bc231cd2292579133c34cd573e50858405eebdef9b378e673caaa468afc33ccce7221b44928cafdba2378da3347e0617aa0b4ab637d36aeabd0faf5e5e0b9d", 0xb0}, {&(0x7f0000002800)="18710ec5bcaba249972fc31c4b6e7ff1c3860c00f4a30cd956de6cf693785b28d385732457c6afbb57d368eee4fca147c4f3ff2d4ff19e823848f8c7a692142f996697872842d08e32cd82f488c51afe4c945bbf31af940fc9571d074e62d88ff737d33f66de03dd82af0a89a1e8cf231b348c5d38e64de82da20fdf71cac4afa282d5e44a2e68e79561e0a55f38a7e348c9b28f70adfcb929b35fc36f1fd8638ce0e3031d617b94e67ab50206242baa4ccd3938690476582bb29fdb62f7e61869d77e91bed1bd4cb7d3234e4798bcba5fb1ab28c8b5c2a06f64a7b91b0bcb78", 0xe0}, {&(0x7f0000002900)="409b37c84bea4c502f55c986ad54a19feeb7aaf1a17a5c5439af8a8e0c11a60aedb5d126c1be0c62494e1d1ac67487a105cf4801c42c11a62214563c1a9c16f388a6132e1a65a244bbaf789b9ef426974d46721067f7905818be41a2340bc6f5fa4dd65f45ef22c64204f049ae8ad5173316c3d96e1551fd1c8656d85f94558434a540ec1a037ddfa54f23e14aa41d4fea047b2522b740e5b25bdd5ddcbf4b6b5de50a460bf094df77e81575c9b5e3843daff3998bc732da8ddb0598076450ff9690535a0cd3799210f7cd07ab220241ac3387e1d92d4452122db704e018ddbb4969", 0xe2}, {&(0x7f0000002a00)="36bcf4ca15288e2a7d03b60c9901a568f61fa0d255fc0a6bd9f44968b24a6edf8105fe46f0786ea7374812c331cb255c0acec9654ff6070da6458afc38fcbd7e6159bbe0c443193b2e0b3950e434bc2c5225a99e2d0b4137999ead1b190b7dce1b6b612ca71945fa09374d81f0e2bed38214668187969ab6e287b24729e8aa9e0b2b0f5f2f694decea429a60e40ae50ea34e2d63eda7d0611f999ad3deb90c709dd86d498a06479be6a15579d8b11a42f96f73731dab4cb5cf1741a6b0b3377cf51f2fcaaffc2521cfbe79bb4f848c7f54e85c8509fd440e2f4c6aad807f81cc584a276253f604e49cbf0f", 0xeb}, {&(0x7f0000002b00)="622364f181e173cf5cffe2f641a88b3765638937cdf3fbfcdb1f14a53bf42fb790d28d469c", 0x25}, {&(0x7f0000002b40)="d731ac53e7003a02e93bcad6c5000afcdf53358b83ba15ae049893e1c86d65c9dbfa871b4c3025ad5f0bd6c0d0cf8a7aa154dbdf7ef400af54e93100341ed8aa5b8212ad9cf821a18073ff7673f037eac6a0e844c676d0dbacec33c3247d387292c432ec78e9b9b82ea820d344bb4a0e44ef5882766af11a8a25fb5f65bfe9bd755e92f52f4f320acca31a06987c80076e45e9c09f691ce07d398244fa82a0c720e4b1d92afb8d06cc80e43d2a22ebb84940db66648719c11b2e0d4e37ed0b513030e7c5b8c691aec97ca11b2a607652abcfe3467f817059ee96", 0xda}, {&(0x7f0000002c40)="aeb92b56983a21f4b471323f65a14396d1045519011c31e04523b0591da46fea28d159d89a6b800221fe76c280676dbe857a09a38c14319097f4d48db16da464a106a20444a33422140d70bbd71125f2bf3a6d74fdfcc9c880b806878c5028d3fd868f5bb932", 0x66}], 0x7, &(0x7f0000002d40)=[@dstopts={{0x20, 0x29, 0x37, {0x11, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x5e, 0x1e, '\x00', [@generic={0x2, 0x9f, "9432ad79c03eba2df1310915f5a61aca0d45b0aab4de143877e93993b2521ceb34e27eae67af99ec7eb740290203f8a46acc451384ee371ec9c3a5c688c13e07e397dcb87599ae99a4e470a19ce6c12a1cff5a1ade4bd94f954bbeb2b9866f2cc78eae8e70c460265a1dad6756593e1b7381269dd177bc6dcacf7e180747b4cb687d1a5e3a7dca8b6e8ba0f0b400c73c3a8f9acd668c7538d515b7b37c500a"}, @generic={0xd, 0x4f, "3cd3399925f67aa859e43b51a58af51668c3f3c782bf18d3d87fde111775a0e5fb9507b7980a87a004b3646839709420c89307658f976c57f33d7153b71d6911c41d1ccffa62af6f5e6d8b589f2d79"}]}}}], 0x130}, 0x4008050) (async) select(0x40, &(0x7f0000002ec0)={0x678f, 0x6, 0xfbf, 0x2, 0x100000001, 0xfffffffffffffffd, 0x8, 0x788}, &(0x7f0000002f00)={0xfffffffffffffff9, 0x7fff, 0x0, 0x53, 0x8, 0x400, 0x5, 0x1}, &(0x7f0000002f40)={0x5, 0x35, 0x1, 0x0, 0x293, 0x0, 0x9, 0x7f}, &(0x7f0000002f80)={0x0, 0x2710}) sendmmsg$inet6(r18, &(0x7f0000003180)=[{{&(0x7f0000002fc0)={0xa, 0x4e23, 0xfffffd3c, @local, 0x1}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000003000)="6e12aacdff6f07973193236a1a2d8ffb1a58014f6b050cbe3c6143c0e3eea3c1c1f868d69a78d635645e640cbaa8998989d4839504113b0d80af46ed28d2fd1aef618e89ce61ade19690c70669c9aaadb2be05bdc9c5947079b3f9a7f5c91039be4d", 0x62}, {&(0x7f0000003080)="e39ce8730179dadc53cf9d6badda2ddbdfa13a14cd453f54690cd88ef39b7425f8483ff0b8fd1b80a8380dd30c3dbf2fbf7cf4", 0x33}], 0x2, &(0x7f0000003100)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x48}}], 0x1, 0x20000000) 553.241732ms ago: executing program 0 (id=5495): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 458.235704ms ago: executing program 3 (id=5496): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r7, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000805) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0x4d, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x7ddd2854, @private2, 0x9}, @in={0x2, 0x4e21, @multicast1}], 0x78) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5723516f567cce2d2495e51c086d32d9785857a426", 0x15}], 0x1}}], 0x3, 0x0) shutdown(r9, 0x1) 434.811061ms ago: executing program 5 (id=5497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x5, 0x0, 0x800}) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}, {&(0x7f0000000240)="8ca8867f06cc57c2fb641ab20f0db96781d3a0937a340326877b116de0cebf851ab0d70502d033339b73941b85c324f27cec216ec166176fd9c024f65b4a7a2652c4819e9272529343b61651676786ec7736d93f0b1ccab5a475976fd65398305ebc1eec47bb17041c4e89573423ed6862ab4e58003b3266adf3bb7242a880227644cae1f51a06e8", 0x88}, {&(0x7f0000000380)="d1f86069e2f86eccdfd7f8cbf37f4f81a8d450156878ae262b4ab82226d1bece844dd6f7fb8d73e245b41212c530365080f7e5f65dadf1f9ac1c51da2f206bae9497c33e2a647b0c3da0f05b7432f117fec12cf3afed21b250019d26ed200c9da8da1de54926e15af321417440b3e0696cbcbefc709fb37ebcabcb010e51976a6cc0c695ae7a4f24be3bae6ca2133147af1321f68a4d1372682759b07a347d54f2692a8055028ef24cc88288339f694507c492bd09c723ef3e345f4ef606253e502c8772a5007f9fd57aec9a54a3f50d1c8895c372f2f2166ce21f472902a840d23701346b7d05339b265027894b5ff86a195f98e71ef7fd80", 0xf9}, {&(0x7f0000000480)="9f286317a5", 0x5}], 0x4}}], 0x1, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xdf4c6f9e8d8e7460, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 400.91064ms ago: executing program 2 (id=5498): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0", 0x7f}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000110000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000200000025000000080026008009000008002700020000000800a000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) (fail_nth: 3) 346.7893ms ago: executing program 0 (id=5499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 260.953512ms ago: executing program 1 (id=5500): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000b000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = socket(0x18, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0xca, 0x0, 0x0, 0x1, 0xffffffff}}) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x44) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) (async) sendmsg$sock(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) (async) sendmsg$sock(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x10}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500090026bd7000ffdb00250f8d6991df95000008"], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 260.556363ms ago: executing program 2 (id=5501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x800fe, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x20, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x4, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0x2, 0x9}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff1}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3a00, 0x8000000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 152.275165ms ago: executing program 2 (id=5502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000000000200ffff540004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000108000180fffffffd140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 73.811641ms ago: executing program 1 (id=5503): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x2, 0x7b, 0x2, 0x0, 0x55, 0x3, 0x2, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x1, 0xa, 0x101, 0x902, 0x9}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0xa, 0x8201, 0x5271, 0x800, r4}, &(0x7f0000000480)=0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd020077673200000000000010000000000000080007000900"/42], 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @empty=0xe0000000}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0xffffffffffffff5c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}], 0x20}, 0x2400c880) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x4, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c0c8}, 0x4040000) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x6, 0xfffffffc}, {0x9, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0xfffffff7}, {0x0, 0xff}]}]}, {0x0, [0x2e, 0x5f, 0x2e]}}, 0x0, 0x61, 0x0, 0x1, 0x3}, 0x28) r10 = accept4$x25(r9, &(0x7f00000000c0)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x80800) ioctl$SIOCX25SCALLUSERDATA(r10, 0x89e5, &(0x7f0000000500)={0x73, "e797e7705eac116c6a490827b46c9be60b217f2626a71d7ab1b52c93722f1bf22ddb4765a1027e1a1506ce6faa6c332a38ac10b9d6e5c106a5467df89a78d4c439d95810af82de142cda4a0084f42970a95639b44dae056081df27a3f6e0fe2138571bc8c0e8a2341c07402efb31ceee74f4971399c74c505f2c26942504aff6"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wg0\x00', 0x8000}) 0s ago: executing program 5 (id=5504): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbb7, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000045) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x8, 0x3, 0x2, 0x0, 0x1d, @empty, @mcast1, 0xe20, 0x80, 0x9, 0x8}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="48020000", @ANYRES16=r2, @ANYBLOB="d40025bd7001238a4d7f3ad7e803e6494090d02afe22cd90c088689d2a4f2ee971d9675077041ba4d40585cd6c38155e630e9bddee6be34ef2780caf9a1802a7c5d89702a63bf0ccd1b0db5a8cd89b61cfd13383d64f55b3f028cf1190aa8bb9c24001b5ca06b5", @ANYRES32, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000010003000300000008000400ff03000008000100", @ANYRES32, @ANYBLOB="e80102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000f00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="08000700fcffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="030007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="00000100000001006e6f746966795f70656572735f696e74657276616c000000000000000000000000000300030000000000040009000000"], 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) unshare(0x28000600) kernel console output (not intermixed with test programs): 1121] should_fail_ex+0x40c/0x560 [ 596.467899][T21121] should_failslab+0xa8/0x100 [ 596.467927][T21121] __kmalloc_cache_noprof+0xa8/0x660 [ 596.467953][T21121] ? nft_pernet+0x23/0x240 [ 596.468039][T21121] ? nf_tables_newtable+0x43e/0x1990 [ 596.468089][T21121] ? nf_tables_newtable+0x43e/0x1990 [ 596.468135][T21121] nf_tables_newtable+0x43e/0x1990 [ 596.468185][T21121] nfnetlink_rcv+0x1288/0x28c0 [ 596.468244][T21121] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 596.468283][T21121] ? ref_tracker_free+0x689/0x830 [ 596.468332][T21121] ? skb_clone+0x246/0x3a0 [ 596.468368][T21121] ? __netlink_deliver_tap+0x811/0x860 [ 596.468401][T21121] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.468422][T21121] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.468451][T21121] netlink_unicast+0x7bb/0x940 [ 596.468484][T21121] netlink_sendmsg+0x813/0xb40 [ 596.468518][T21121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.468546][T21121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.468579][T21121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.468600][T21121] sock_sendmsg_nosec+0x13a/0x180 [ 596.468630][T21121] ____sys_sendmsg+0x54e/0x850 [ 596.468658][T21121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.468690][T21121] ? import_iovec+0x73/0xa0 [ 596.468721][T21121] ___sys_sendmsg+0x2a5/0x360 [ 596.468741][T21121] ? __lock_acquire+0x683/0x2cf0 [ 596.468772][T21121] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.468832][T21121] ? __fget_files+0x2a/0x420 [ 596.468856][T21121] ? __fget_files+0x3a2/0x420 [ 596.468891][T21121] __x64_sys_sendmsg+0x1b1/0x290 [ 596.468917][T21121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.468959][T21121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.468998][T21121] do_syscall_64+0x174/0x580 [ 596.469026][T21121] ? trace_irq_disable+0x3b/0x140 [ 596.469050][T21121] ? clear_bhb_loop+0x70/0xc0 [ 596.469074][T21121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.469093][T21121] RIP: 0033:0x7f494079e0d9 [ 596.469121][T21121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.469137][T21121] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.469159][T21121] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 596.469174][T21121] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 596.469186][T21121] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 596.469198][T21121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.469209][T21121] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 596.469242][T21121] [ 597.269893][T21129] netlink: 'syz.5.4617': attribute type 1 has an invalid length. [ 597.369349][T21145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4623'. [ 597.396229][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 597.405442][T21150] netlink: 'syz.1.4625': attribute type 30 has an invalid length. [ 597.412569][T21143] macvtap2: entered allmulticast mode [ 597.430163][T21151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 597.448652][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 597.459950][T21154] netlink: 'syz.1.4625': attribute type 30 has an invalid length. [ 597.463375][T21148] macvtap3: entered allmulticast mode [ 598.035646][T21185] FAULT_INJECTION: forcing a failure. [ 598.035646][T21185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.049480][T21185] CPU: 1 UID: 0 PID: 21185 Comm: syz.5.4636 Not tainted syzkaller #0 PREEMPT(full) [ 598.049508][T21185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.049519][T21185] Call Trace: [ 598.049528][T21185] [ 598.049537][T21185] dump_stack_lvl+0xe8/0x150 [ 598.049572][T21185] should_fail_ex+0x40c/0x560 [ 598.049609][T21185] _copy_from_iter+0x1d3/0x1660 [ 598.049632][T21185] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 598.049658][T21185] ? rcu_is_watching+0x15/0xb0 [ 598.049688][T21185] ? trace_kmem_cache_alloc+0x29/0xe0 [ 598.049713][T21185] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 598.049736][T21185] ? __pfx__copy_from_iter+0x10/0x10 [ 598.049759][T21185] ? __alloc_skb+0x276/0x7a0 [ 598.049776][T21185] ? __alloc_skb+0x276/0x7a0 [ 598.049801][T21185] ? netlink_sendmsg+0x650/0xb40 [ 598.049824][T21185] ? skb_put+0x112/0x210 [ 598.049846][T21185] netlink_sendmsg+0x6c0/0xb40 [ 598.049880][T21185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.049908][T21185] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.049943][T21185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.049965][T21185] sock_sendmsg_nosec+0x13a/0x180 [ 598.049996][T21185] ____sys_sendmsg+0x54e/0x850 [ 598.050025][T21185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.050057][T21185] ? import_iovec+0x73/0xa0 [ 598.050086][T21185] ___sys_sendmsg+0x2a5/0x360 [ 598.050108][T21185] ? __lock_acquire+0x683/0x2cf0 [ 598.050139][T21185] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.050199][T21185] ? __fget_files+0x2a/0x420 [ 598.050224][T21185] ? __fget_files+0x3a2/0x420 [ 598.050259][T21185] __x64_sys_sendmsg+0x1b1/0x290 [ 598.050285][T21185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.050327][T21185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.050350][T21185] do_syscall_64+0x174/0x580 [ 598.050383][T21185] ? trace_irq_disable+0x3b/0x140 [ 598.050407][T21185] ? clear_bhb_loop+0x70/0xc0 [ 598.050433][T21185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.050453][T21185] RIP: 0033:0x7f6353d9e0d9 [ 598.050474][T21185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.050492][T21185] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.050515][T21185] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 598.050530][T21185] RDX: 0000000000008410 RSI: 0000200000000000 RDI: 0000000000000003 [ 598.050544][T21185] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 598.050558][T21185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.050570][T21185] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 598.050633][T21185] [ 598.490694][T21191] FAULT_INJECTION: forcing a failure. [ 598.490694][T21191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.511716][T21187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.528889][T21191] CPU: 1 UID: 0 PID: 21191 Comm: syz.5.4637 Not tainted syzkaller #0 PREEMPT(full) [ 598.528918][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.528930][T21191] Call Trace: [ 598.528938][T21191] [ 598.528946][T21191] dump_stack_lvl+0xe8/0x150 [ 598.529002][T21191] should_fail_ex+0x40c/0x560 [ 598.529037][T21191] _copy_from_iter+0x1d3/0x1660 [ 598.529058][T21191] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 598.529082][T21191] ? rcu_is_watching+0x15/0xb0 [ 598.529108][T21191] ? trace_kmem_cache_alloc+0x29/0xe0 [ 598.529130][T21191] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 598.529151][T21191] ? __pfx__copy_from_iter+0x10/0x10 [ 598.529171][T21191] ? __alloc_skb+0x276/0x7a0 [ 598.529189][T21191] ? __alloc_skb+0x276/0x7a0 [ 598.529213][T21191] ? netlink_sendmsg+0x650/0xb40 [ 598.529234][T21191] ? skb_put+0x112/0x210 [ 598.529256][T21191] netlink_sendmsg+0x6c0/0xb40 [ 598.529287][T21191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.529313][T21191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.529345][T21191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.529366][T21191] sock_sendmsg_nosec+0x13a/0x180 [ 598.529393][T21191] ____sys_sendmsg+0x54e/0x850 [ 598.529419][T21191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.529449][T21191] ? import_iovec+0x73/0xa0 [ 598.529475][T21191] ___sys_sendmsg+0x2a5/0x360 [ 598.529494][T21191] ? __lock_acquire+0x683/0x2cf0 [ 598.529522][T21191] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.529578][T21191] ? __fget_files+0x2a/0x420 [ 598.529600][T21191] ? __fget_files+0x3a2/0x420 [ 598.529631][T21191] __x64_sys_sendmsg+0x1b1/0x290 [ 598.529655][T21191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.529694][T21191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.529714][T21191] do_syscall_64+0x174/0x580 [ 598.529740][T21191] ? clear_bhb_loop+0x70/0xc0 [ 598.529762][T21191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.529781][T21191] RIP: 0033:0x7f6353d9e0d9 [ 598.529800][T21191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.529818][T21191] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.529841][T21191] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 598.529856][T21191] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 598.529869][T21191] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 598.529880][T21191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.529891][T21191] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 598.529922][T21191] [ 599.017151][T21201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 599.170219][T21209] FAULT_INJECTION: forcing a failure. [ 599.170219][T21209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.230862][T21209] CPU: 1 UID: 0 PID: 21209 Comm: syz.1.4648 Not tainted syzkaller #0 PREEMPT(full) [ 599.230890][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.230902][T21209] Call Trace: [ 599.230910][T21209] [ 599.230918][T21209] dump_stack_lvl+0xe8/0x150 [ 599.230951][T21209] should_fail_ex+0x40c/0x560 [ 599.230976][T21209] _copy_from_user+0x2d/0xb0 [ 599.231002][T21209] ___sys_sendmsg+0x1c6/0x360 [ 599.231024][T21209] ? __lock_acquire+0x683/0x2cf0 [ 599.231055][T21209] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.231112][T21209] ? __fget_files+0x2a/0x420 [ 599.231136][T21209] ? __fget_files+0x3a2/0x420 [ 599.231170][T21209] __x64_sys_sendmsg+0x1b1/0x290 [ 599.231195][T21209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.231235][T21209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.231258][T21209] do_syscall_64+0x174/0x580 [ 599.231287][T21209] ? trace_irq_disable+0x3b/0x140 [ 599.231311][T21209] ? clear_bhb_loop+0x70/0xc0 [ 599.231336][T21209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.231356][T21209] RIP: 0033:0x7f4c4b59e0d9 [ 599.231375][T21209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.231393][T21209] RSP: 002b:00007f4c4c495028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.231416][T21209] RAX: ffffffffffffffda RBX: 00007f4c4b825fa0 RCX: 00007f4c4b59e0d9 [ 599.231431][T21209] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 599.231444][T21209] RBP: 00007f4c4c495090 R08: 0000000000000000 R09: 0000000000000000 [ 599.231457][T21209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.231469][T21209] R13: 00007f4c4b826038 R14: 00007f4c4b825fa0 R15: 00007fff50c1b368 [ 599.231502][T21209] [ 599.791870][T21216] lo speed is unknown, defaulting to 1000 [ 599.875035][T21234] netlink: 'syz.5.4656': attribute type 4 has an invalid length. [ 600.061468][T21239] __nla_validate_parse: 1 callbacks suppressed [ 600.061489][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4658'. [ 600.191193][T21249] xt_hashlimit: size too large, truncated to 1048576 [ 600.851784][T21262] lo speed is unknown, defaulting to 1000 [ 600.878253][T18879] Bluetooth: hci0: command 0x0406 tx timeout [ 600.935348][T21277] FAULT_INJECTION: forcing a failure. [ 600.935348][T21277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.952246][T21277] CPU: 1 UID: 0 PID: 21277 Comm: syz.3.4668 Not tainted syzkaller #0 PREEMPT(full) [ 600.952280][T21277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.952293][T21277] Call Trace: [ 600.952302][T21277] [ 600.952311][T21277] dump_stack_lvl+0xe8/0x150 [ 600.952343][T21277] should_fail_ex+0x40c/0x560 [ 600.952370][T21277] _copy_from_user+0x2d/0xb0 [ 600.952396][T21277] core_sys_select+0x509/0xb40 [ 600.952417][T21277] ? get_pid_task+0x20/0x1f0 [ 600.952480][T21277] ? __pfx_core_sys_select+0x10/0x10 [ 600.952528][T21277] ? __pfx_set_user_sigmask+0x10/0x10 [ 600.952550][T21277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 600.952586][T21277] __se_sys_pselect6+0x267/0x320 [ 600.952615][T21277] ? __pfx___se_sys_pselect6+0x10/0x10 [ 600.952637][T21277] ? __pfx_ksys_write+0x10/0x10 [ 600.952672][T21277] ? __x64_sys_pselect6+0x21/0xf0 [ 600.952694][T21277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.952716][T21277] do_syscall_64+0x174/0x580 [ 600.952743][T21277] ? trace_irq_disable+0x3b/0x140 [ 600.952765][T21277] ? clear_bhb_loop+0x70/0xc0 [ 600.952788][T21277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.952807][T21277] RIP: 0033:0x7f3e2a19e0d9 [ 600.952826][T21277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.952843][T21277] RSP: 002b:00007f3e2b10d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 600.952865][T21277] RAX: ffffffffffffffda RBX: 00007f3e2a425fa0 RCX: 00007f3e2a19e0d9 [ 600.952880][T21277] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000040 [ 600.952893][T21277] RBP: 00007f3e2b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 600.952905][T21277] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 600.952917][T21277] R13: 00007f3e2a426038 R14: 00007f3e2a425fa0 R15: 00007ffd81292d58 [ 600.952948][T21277] [ 601.345890][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'. [ 601.361809][T21284] netlink: 'syz.5.4671': attribute type 4 has an invalid length. [ 601.593452][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4674'. [ 601.603902][T21291] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4674'. [ 601.972908][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 602.199354][T21318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4686'. [ 602.241693][T21318] netlink: 'syz.1.4686': attribute type 13 has an invalid length. [ 602.250871][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 602.260261][T21318] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 602.327657][T21324] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4687'. [ 602.547350][T21338] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4693'. [ 602.601433][T21338] bond2: option packets_per_slave: invalid value (875837489) [ 602.609324][T21338] bond2: option packets_per_slave: allowed values 0 - 65535 [ 602.619417][T21338] bond2 (unregistering): Released all slaves [ 602.660578][T21346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'. [ 602.770222][T21350] nbd: socks must be embedded in a SOCK_ITEM attr [ 602.785709][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.797366][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.822861][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.834193][T21350] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 602.851805][T21350] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 602.871486][T21350] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 602.900146][T21350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 602.935590][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.944680][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.954649][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.964242][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.974626][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.984133][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.993837][T21350] virt_wifi0 speed is unknown, defaulting to 1000 [ 603.236385][T21371] netlink: 'syz.1.4702': attribute type 2 has an invalid length. [ 603.293263][T21373] lo speed is unknown, defaulting to 1000 [ 603.302292][T21373] virt_wifi0 speed is unknown, defaulting to 1000 [ 603.734827][T21394] netlink: 'syz.2.4710': attribute type 1 has an invalid length. [ 603.753766][T21388] lo speed is unknown, defaulting to 1000 [ 603.788208][T21388] virt_wifi0 speed is unknown, defaulting to 1000 [ 604.108817][T21406] netlink: 'syz.0.4716': attribute type 4 has an invalid length. [ 604.665613][T21426] netlink: 'syz.0.4724': attribute type 3 has an invalid length. [ 604.883522][T21436] netlink: 'syz.3.4728': attribute type 4 has an invalid length. [ 605.099241][T21447] __nla_validate_parse: 7 callbacks suppressed [ 605.099263][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4730'. [ 605.376690][T21467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4733'. [ 605.389930][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4736'. [ 605.477761][T21458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4733'. [ 605.858858][T21481] FAULT_INJECTION: forcing a failure. [ 605.858858][T21481] name failslab, interval 1, probability 0, space 0, times 0 [ 605.871652][T21481] CPU: 1 UID: 0 PID: 21481 Comm: syz.5.4740 Not tainted syzkaller #0 PREEMPT(full) [ 605.871680][T21481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.871693][T21481] Call Trace: [ 605.871701][T21481] [ 605.871711][T21481] dump_stack_lvl+0xe8/0x150 [ 605.871746][T21481] should_fail_ex+0x40c/0x560 [ 605.871774][T21481] should_failslab+0xa8/0x100 [ 605.871804][T21481] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 605.871830][T21481] ? skb_clone+0x212/0x3a0 [ 605.871851][T21481] ? skb_clone+0x212/0x3a0 [ 605.871878][T21481] skb_clone+0x212/0x3a0 [ 605.871904][T21481] bpf_clone_redirect+0x170/0x4b0 [ 605.871995][T21481] ? bpf_test_run+0x1d1/0x830 [ 605.872029][T21481] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 605.872054][T21481] ? __kernel_text_address+0xd/0x30 [ 605.872082][T21481] ? unwind_get_return_address+0x4d/0x90 [ 605.872112][T21481] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 605.872146][T21481] ? arch_stack_walk+0xfb/0x150 [ 605.872196][T21481] ? ktime_get+0x45/0x220 [ 605.872228][T21481] ? ktime_get+0x45/0x220 [ 605.872254][T21481] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 605.872279][T21481] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.872308][T21481] ? ktime_get+0x45/0x220 [ 605.872328][T21481] ? seqcount_lockdep_reader_access+0xea/0x100 [ 605.872354][T21481] ? ktime_get+0x1f5/0x220 [ 605.872386][T21481] bpf_test_run+0x354/0x830 [ 605.872432][T21481] ? __pfx_bpf_test_run+0x10/0x10 [ 605.872468][T21481] ? csum_partial+0x239/0x2c0 [ 605.872505][T21481] ? __asan_memcpy+0x40/0x70 [ 605.872527][T21481] ? convert___skb_to_skb+0x319/0x5b0 [ 605.872553][T21481] bpf_prog_test_run_skb+0xe35/0x2230 [ 605.872598][T21481] ? __fget_files+0x3a2/0x420 [ 605.872622][T21481] ? __fget_files+0x2a/0x420 [ 605.872653][T21481] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 605.872676][T21481] bpf_prog_test_run+0x2c5/0x340 [ 605.872708][T21481] __sys_bpf+0xa22/0xd90 [ 605.872741][T21481] ? __pfx___sys_bpf+0x10/0x10 [ 605.872779][T21481] ? __fget_files+0x2a/0x420 [ 605.872822][T21481] ? ksys_write+0x242/0x270 [ 605.872855][T21481] ? __pfx_ksys_write+0x10/0x10 [ 605.872890][T21481] __x64_sys_bpf+0xba/0xd0 [ 605.872913][T21481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.872935][T21481] do_syscall_64+0x174/0x580 [ 605.872964][T21481] ? trace_irq_disable+0x3b/0x140 [ 605.872988][T21481] ? clear_bhb_loop+0x70/0xc0 [ 605.873021][T21481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.873041][T21481] RIP: 0033:0x7f6353d9e0d9 [ 605.873062][T21481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.873079][T21481] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.873103][T21481] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 605.873117][T21481] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 605.873129][T21481] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 605.873142][T21481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.873158][T21481] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 605.873191][T21481] [ 605.937045][T21488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4743'. [ 606.390293][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'. [ 606.648306][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4751'. [ 606.674872][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4750'. [ 607.096320][T21530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4757'. [ 607.154777][T21531] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 607.183584][T21531] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 607.269904][T21540] netlink: 'syz.1.4761': attribute type 4 has an invalid length. [ 607.324076][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4756'. [ 607.887987][T21563] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 608.003353][T21574] netlink: 'syz.2.4774': attribute type 4 has an invalid length. [ 608.474358][T21593] netlink: 'syz.1.4778': attribute type 4 has an invalid length. [ 608.911067][T21623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.915283][T21675] netlink: 'syz.2.4813': attribute type 3 has an invalid length. [ 610.005507][T21675] xt_CT: No such helper "snmp_trap" [ 610.108115][T21683] netlink: 'syz.3.4816': attribute type 1 has an invalid length. [ 610.173703][T21683] bond4: entered promiscuous mode [ 610.179502][T21683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 610.237567][T21690] netlink: 'syz.2.4818': attribute type 2 has an invalid length. [ 610.278434][T21690] __nla_validate_parse: 5 callbacks suppressed [ 610.278458][T21690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4818'. [ 610.296752][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4817'. [ 610.352945][T21684] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 610.437486][T21690] : entered promiscuous mode [ 610.485199][T21685] lo speed is unknown, defaulting to 1000 [ 610.512679][T21685] virt_wifi0 speed is unknown, defaulting to 1000 [ 610.965025][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4821'. [ 613.103321][T21693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.249364][T21732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4826'. [ 613.694603][T21756] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4838'. [ 613.779010][T21762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4839'. [ 613.802316][T21762] bridge0: entered allmulticast mode [ 613.909394][T21763] block nbd1: server does not support multiple connections per device. [ 613.928010][T21756] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4838'. [ 613.959145][T21763] block nbd1: shutting down sockets [ 614.095276][T21779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4843'. [ 614.134229][T21773] netlink: 'syz.1.4841': attribute type 12 has an invalid length. [ 614.501710][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4849'. [ 614.897229][T21825] netlink: 'syz.2.4855': attribute type 4 has an invalid length. [ 615.157827][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4860'. [ 615.460380][T21852] lo speed is unknown, defaulting to 1000 [ 615.470578][T21852] virt_wifi0 speed is unknown, defaulting to 1000 [ 615.670690][T21864] netlink: 'syz.1.4872': attribute type 4 has an invalid length. [ 615.998187][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4874'. [ 616.055391][T21879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4876'. [ 616.100052][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4876'. [ 616.263398][T21881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4877'. [ 616.316678][T21881] sctp: [Deprecated]: syz.3.4877 (pid 21881) Use of int in maxseg socket option. [ 616.316678][T21881] Use struct sctp_assoc_value instead [ 616.349240][T21881] IPVS: length: 66 != 8 [ 616.592586][T21902] netlink: 'syz.0.4886': attribute type 4 has an invalid length. [ 616.652632][T21904] FAULT_INJECTION: forcing a failure. [ 616.652632][T21904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.686252][T21909] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4889'. [ 616.689900][T21904] CPU: 1 UID: 0 PID: 21904 Comm: syz.2.4890 Not tainted syzkaller #0 PREEMPT(full) [ 616.689926][T21904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.689937][T21904] Call Trace: [ 616.689945][T21904] [ 616.689953][T21904] dump_stack_lvl+0xe8/0x150 [ 616.689989][T21904] should_fail_ex+0x40c/0x560 [ 616.690013][T21904] _copy_from_iter+0x1d3/0x1660 [ 616.690033][T21904] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 616.690111][T21904] ? rcu_is_watching+0x15/0xb0 [ 616.690136][T21904] ? trace_kmem_cache_alloc+0x29/0xe0 [ 616.690158][T21904] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 616.690178][T21904] ? __pfx__copy_from_iter+0x10/0x10 [ 616.690197][T21904] ? __alloc_skb+0x276/0x7a0 [ 616.690213][T21904] ? __alloc_skb+0x276/0x7a0 [ 616.690234][T21904] ? netlink_sendmsg+0x650/0xb40 [ 616.690256][T21904] ? skb_put+0x112/0x210 [ 616.690276][T21904] netlink_sendmsg+0x6c0/0xb40 [ 616.690304][T21904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.690328][T21904] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.690359][T21904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.690378][T21904] sock_sendmsg_nosec+0x13a/0x180 [ 616.690404][T21904] ____sys_sendmsg+0x54e/0x850 [ 616.690429][T21904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.690456][T21904] ? import_iovec+0x73/0xa0 [ 616.690481][T21904] ___sys_sendmsg+0x2a5/0x360 [ 616.690499][T21904] ? __lock_acquire+0x683/0x2cf0 [ 616.690525][T21904] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.690577][T21904] ? __fget_files+0x2a/0x420 [ 616.690598][T21904] ? __fget_files+0x3a2/0x420 [ 616.690628][T21904] __x64_sys_sendmsg+0x1b1/0x290 [ 616.690650][T21904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.690685][T21904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.690705][T21904] do_syscall_64+0x174/0x580 [ 616.690730][T21904] ? trace_irq_disable+0x3b/0x140 [ 616.690751][T21904] ? clear_bhb_loop+0x70/0xc0 [ 616.690773][T21904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.690791][T21904] RIP: 0033:0x7f494079e0d9 [ 616.690808][T21904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.690822][T21904] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.690843][T21904] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 616.690856][T21904] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 616.690868][T21904] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 616.690879][T21904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.690890][T21904] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 616.690918][T21904] [ 616.773931][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4889'. [ 616.790655][T21914] FAULT_INJECTION: forcing a failure. [ 616.790655][T21914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.857336][T21917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4892'. [ 616.864688][T21914] CPU: 0 UID: 0 PID: 21914 Comm: syz.2.4891 Not tainted syzkaller #0 PREEMPT(full) [ 616.864715][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.864726][T21914] Call Trace: [ 616.864734][T21914] [ 616.864742][T21914] dump_stack_lvl+0xe8/0x150 [ 616.864773][T21914] should_fail_ex+0x40c/0x560 [ 616.864796][T21914] _copy_from_user+0x2d/0xb0 [ 616.864820][T21914] ___sys_sendmsg+0x1c6/0x360 [ 616.864840][T21914] ? __lock_acquire+0x683/0x2cf0 [ 616.864866][T21914] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.864890][T21914] ? kstrtouint+0x6e/0xe0 [ 616.864932][T21914] ? __fget_files+0x2a/0x420 [ 616.864953][T21914] ? __fget_files+0x3a2/0x420 [ 616.864989][T21914] __sys_sendmmsg+0x273/0x4d0 [ 616.865014][T21914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 616.865041][T21914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.865080][T21914] ? ksys_write+0x242/0x270 [ 616.865107][T21914] ? __pfx_ksys_write+0x10/0x10 [ 616.865137][T21914] __x64_sys_sendmmsg+0xa0/0xc0 [ 616.865156][T21914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.865176][T21914] do_syscall_64+0x174/0x580 [ 616.865200][T21914] ? trace_irq_disable+0x3b/0x140 [ 616.865221][T21914] ? clear_bhb_loop+0x70/0xc0 [ 616.865243][T21914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.865260][T21914] RIP: 0033:0x7f494079e0d9 [ 616.865279][T21914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.865295][T21914] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 616.865318][T21914] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 616.865334][T21914] RDX: 0000000000000001 RSI: 0000200000005800 RDI: 0000000000000003 [ 616.865346][T21914] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 616.865357][T21914] R10: 0000000000004005 R11: 0000000000000246 R12: 0000000000000001 [ 616.865369][T21914] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 616.865397][T21914] [ 617.290543][T21928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.509972][T21910] FAULT_INJECTION: forcing a failure. [ 617.509972][T21910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.536916][T21910] CPU: 0 UID: 0 PID: 21910 Comm: syz.5.4888 Not tainted syzkaller #0 PREEMPT(full) [ 617.536944][T21910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.536957][T21910] Call Trace: [ 617.536965][T21910] [ 617.536974][T21910] dump_stack_lvl+0xe8/0x150 [ 617.537007][T21910] should_fail_ex+0x40c/0x560 [ 617.537033][T21910] core_sys_select+0x8be/0xb40 [ 617.537056][T21910] ? get_pid_task+0x20/0x1f0 [ 617.537095][T21910] ? __pfx_core_sys_select+0x10/0x10 [ 617.537142][T21910] ? __pfx_set_user_sigmask+0x10/0x10 [ 617.537164][T21910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.537202][T21910] __se_sys_pselect6+0x267/0x320 [ 617.537231][T21910] ? __pfx___se_sys_pselect6+0x10/0x10 [ 617.537253][T21910] ? __pfx_ksys_write+0x10/0x10 [ 617.537286][T21910] ? __x64_sys_pselect6+0x21/0xf0 [ 617.537305][T21910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.537327][T21910] do_syscall_64+0x174/0x580 [ 617.537351][T21910] ? trace_irq_disable+0x3b/0x140 [ 617.537371][T21910] ? clear_bhb_loop+0x70/0xc0 [ 617.537393][T21910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.537411][T21910] RIP: 0033:0x7f6353d9e0d9 [ 617.537428][T21910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.537444][T21910] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 617.537466][T21910] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 617.537481][T21910] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000040 [ 617.537492][T21910] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 617.537504][T21910] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 617.537514][T21910] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 617.537555][T21910] [ 618.135218][T21960] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4901'. [ 618.387667][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4904'. [ 618.426456][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4904'. [ 618.590774][T21984] netlink: 'syz.2.4909': attribute type 1 has an invalid length. [ 618.945593][T22004] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 619.397766][T22031] netlink: 'syz.3.4927': attribute type 1 has an invalid length. [ 619.663291][T22046] FAULT_INJECTION: forcing a failure. [ 619.663291][T22046] name failslab, interval 1, probability 0, space 0, times 0 [ 619.676725][T22046] CPU: 1 UID: 0 PID: 22046 Comm: syz.3.4934 Not tainted syzkaller #0 PREEMPT(full) [ 619.676753][T22046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.676764][T22046] Call Trace: [ 619.676773][T22046] [ 619.676781][T22046] dump_stack_lvl+0xe8/0x150 [ 619.676813][T22046] should_fail_ex+0x40c/0x560 [ 619.676837][T22046] ? alloc_netdev_mqs+0xadd/0x12b0 [ 619.676862][T22046] should_failslab+0xa8/0x100 [ 619.676895][T22046] __kvmalloc_node_noprof+0x176/0x860 [ 619.676927][T22046] ? alloc_netdev_mqs+0xadd/0x12b0 [ 619.676957][T22046] alloc_netdev_mqs+0xadd/0x12b0 [ 619.676988][T22046] rtnl_create_link+0x321/0xd70 [ 619.677084][T22046] rtnl_newlink_create+0x258/0x7b0 [ 619.677115][T22046] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 619.677143][T22046] ? __pfx___mutex_lock+0x10/0x10 [ 619.677185][T22046] ? ns_capable+0x89/0xe0 [ 619.677213][T22046] rtnl_newlink+0x166d/0x1c30 [ 619.677251][T22046] ? __pfx_rtnl_newlink+0x10/0x10 [ 619.677269][T22046] ? clockevents_program_event+0x491/0x630 [ 619.677298][T22046] ? __hrtimer_rearm_deferred+0x99/0x420 [ 619.677322][T22046] ? __pfx_clockevents_program_event+0x10/0x10 [ 619.677355][T22046] ? __lock_acquire+0x683/0x2cf0 [ 619.677386][T22046] ? irqentry_exit+0x218/0x8f0 [ 619.677415][T22046] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.677443][T22046] ? irqentry_exit+0x218/0x8f0 [ 619.677470][T22046] ? trace_irq_disable+0x3b/0x140 [ 619.677516][T22046] ? is_bpf_text_address+0x26/0x2b0 [ 619.677556][T22046] ? is_bpf_text_address+0x26/0x2b0 [ 619.677588][T22046] ? __lock_acquire+0x683/0x2cf0 [ 619.677618][T22046] ? kernel_text_address+0xa5/0xe0 [ 619.677647][T22046] ? __kernel_text_address+0xd/0x30 [ 619.677675][T22046] ? unwind_get_return_address+0x4d/0x90 [ 619.677704][T22046] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 619.677728][T22046] ? arch_stack_walk+0xfb/0x150 [ 619.677770][T22046] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 619.677826][T22046] ? __pfx_rtnl_newlink+0x10/0x10 [ 619.677844][T22046] rtnetlink_rcv_msg+0x802/0xc00 [ 619.677863][T22046] ? netlink_sendmsg+0x5d4/0xb40 [ 619.677890][T22046] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 619.677909][T22046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.677932][T22046] ? __lock_acquire+0x683/0x2cf0 [ 619.677972][T22046] netlink_rcv_skb+0x226/0x4a0 [ 619.677997][T22046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.678019][T22046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.678058][T22046] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.678081][T22046] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.678123][T22046] netlink_unicast+0x7bb/0x940 [ 619.678157][T22046] netlink_sendmsg+0x813/0xb40 [ 619.678192][T22046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.678222][T22046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.678258][T22046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.678281][T22046] sock_sendmsg_nosec+0x13a/0x180 [ 619.678325][T22046] ____sys_sendmsg+0x54e/0x850 [ 619.678355][T22046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.678389][T22046] ? import_iovec+0x73/0xa0 [ 619.678420][T22046] ___sys_sendmsg+0x2a5/0x360 [ 619.678442][T22046] ? __lock_acquire+0x683/0x2cf0 [ 619.678473][T22046] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.678539][T22046] ? __fget_files+0x2a/0x420 [ 619.678563][T22046] ? __fget_files+0x3a2/0x420 [ 619.678597][T22046] __x64_sys_sendmsg+0x1b1/0x290 [ 619.678622][T22046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.678665][T22046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.678687][T22046] do_syscall_64+0x174/0x580 [ 619.678713][T22046] ? trace_irq_disable+0x3b/0x140 [ 619.678736][T22046] ? clear_bhb_loop+0x70/0xc0 [ 619.678758][T22046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.678778][T22046] RIP: 0033:0x7f3e2a19e0d9 [ 619.678799][T22046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.678815][T22046] RSP: 002b:00007f3e2b10d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.678836][T22046] RAX: ffffffffffffffda RBX: 00007f3e2a425fa0 RCX: 00007f3e2a19e0d9 [ 619.678849][T22046] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 619.678862][T22046] RBP: 00007f3e2b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 619.678874][T22046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.678885][T22046] R13: 00007f3e2a426038 R14: 00007f3e2a425fa0 R15: 00007ffd81292d58 [ 619.678920][T22046] [ 619.744266][T22053] FAULT_INJECTION: forcing a failure. [ 619.744266][T22053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.188313][T22053] CPU: 0 UID: 0 PID: 22053 Comm: syz.1.4936 Not tainted syzkaller #0 PREEMPT(full) [ 620.188342][T22053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.188354][T22053] Call Trace: [ 620.188363][T22053] [ 620.188371][T22053] dump_stack_lvl+0xe8/0x150 [ 620.188404][T22053] should_fail_ex+0x40c/0x560 [ 620.188429][T22053] _copy_from_user+0x2d/0xb0 [ 620.188456][T22053] ___sys_sendmsg+0x1c6/0x360 [ 620.188477][T22053] ? __lock_acquire+0x683/0x2cf0 [ 620.188506][T22053] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.188563][T22053] ? __fget_files+0x2a/0x420 [ 620.188586][T22053] ? __fget_files+0x3a2/0x420 [ 620.188620][T22053] __x64_sys_sendmsg+0x1b1/0x290 [ 620.188644][T22053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.188683][T22053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.188704][T22053] do_syscall_64+0x174/0x580 [ 620.188732][T22053] ? trace_irq_disable+0x3b/0x140 [ 620.188755][T22053] ? clear_bhb_loop+0x70/0xc0 [ 620.188778][T22053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.188796][T22053] RIP: 0033:0x7f4c4b59e0d9 [ 620.188814][T22053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.188830][T22053] RSP: 002b:00007f4c4c495028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.188852][T22053] RAX: ffffffffffffffda RBX: 00007f4c4b825fa0 RCX: 00007f4c4b59e0d9 [ 620.188867][T22053] RDX: 0000000020008888 RSI: 0000200000000040 RDI: 0000000000000004 [ 620.188901][T22053] RBP: 00007f4c4c495090 R08: 0000000000000000 R09: 0000000000000000 [ 620.188915][T22053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.188927][T22053] R13: 00007f4c4b826038 R14: 00007f4c4b825fa0 R15: 00007fff50c1b368 [ 620.188960][T22053] [ 620.520397][T22073] FAULT_INJECTION: forcing a failure. [ 620.520397][T22073] name failslab, interval 1, probability 0, space 0, times 0 [ 620.533367][T22073] CPU: 0 UID: 0 PID: 22073 Comm: syz.1.4941 Not tainted syzkaller #0 PREEMPT(full) [ 620.533396][T22073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.533409][T22073] Call Trace: [ 620.533417][T22073] [ 620.533426][T22073] dump_stack_lvl+0xe8/0x150 [ 620.533460][T22073] should_fail_ex+0x40c/0x560 [ 620.533482][T22073] ? __rhashtable_init_noprof+0x545/0xaf0 [ 620.533509][T22073] should_failslab+0xa8/0x100 [ 620.533540][T22073] __kvmalloc_node_noprof+0x176/0x860 [ 620.533572][T22073] ? __rhashtable_init_noprof+0x545/0xaf0 [ 620.533603][T22073] __rhashtable_init_noprof+0x545/0xaf0 [ 620.533631][T22073] __rhltable_init_noprof+0x26/0x70 [ 620.533657][T22073] nf_tables_newtable+0x6e0/0x1990 [ 620.533710][T22073] nfnetlink_rcv+0x1288/0x28c0 [ 620.533771][T22073] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 620.533811][T22073] ? ref_tracker_free+0x689/0x830 [ 620.533858][T22073] ? skb_clone+0x246/0x3a0 [ 620.533886][T22073] ? __netlink_deliver_tap+0x811/0x860 [ 620.533919][T22073] ? netlink_deliver_tap+0x2e/0x1b0 [ 620.533942][T22073] ? netlink_deliver_tap+0x2e/0x1b0 [ 620.533982][T22073] netlink_unicast+0x7bb/0x940 [ 620.534016][T22073] netlink_sendmsg+0x813/0xb40 [ 620.534050][T22073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.534080][T22073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.534115][T22073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.534138][T22073] sock_sendmsg_nosec+0x13a/0x180 [ 620.534171][T22073] ____sys_sendmsg+0x54e/0x850 [ 620.534200][T22073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.534233][T22073] ? import_iovec+0x73/0xa0 [ 620.534264][T22073] ___sys_sendmsg+0x2a5/0x360 [ 620.534285][T22073] ? __lock_acquire+0x683/0x2cf0 [ 620.534316][T22073] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.534379][T22073] ? __fget_files+0x2a/0x420 [ 620.534404][T22073] ? __fget_files+0x3a2/0x420 [ 620.534440][T22073] __x64_sys_sendmsg+0x1b1/0x290 [ 620.534465][T22073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.534508][T22073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.534532][T22073] do_syscall_64+0x174/0x580 [ 620.534560][T22073] ? trace_irq_disable+0x3b/0x140 [ 620.534583][T22073] ? clear_bhb_loop+0x70/0xc0 [ 620.534608][T22073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.534628][T22073] RIP: 0033:0x7f4c4b59e0d9 [ 620.534648][T22073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.534665][T22073] RSP: 002b:00007f4c4c495028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.534687][T22073] RAX: ffffffffffffffda RBX: 00007f4c4b825fa0 RCX: 00007f4c4b59e0d9 [ 620.534703][T22073] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 620.534715][T22073] RBP: 00007f4c4c495090 R08: 0000000000000000 R09: 0000000000000000 [ 620.534729][T22073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.534741][T22073] R13: 00007f4c4b826038 R14: 00007f4c4b825fa0 R15: 00007fff50c1b368 [ 620.534776][T22073] [ 621.294037][T22095] lo speed is unknown, defaulting to 1000 [ 621.334742][T22095] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.492967][T22106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.551771][T22098] __nla_validate_parse: 6 callbacks suppressed [ 621.551791][T22098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4952'. [ 621.606905][T22110] xt_hashlimit: size too large, truncated to 1048576 [ 621.710189][T22117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4956'. [ 621.893957][T22128] netlink: 'syz.0.4956': attribute type 4 has an invalid length. [ 621.987633][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4956'. [ 622.614920][T22170] ip_tables: iptables: counters copy to user failed while replacing table [ 625.103791][T22136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.436631][T22184] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4976'. [ 625.472134][T22185] tipc: Started in network mode [ 625.491320][T22185] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 625.590745][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4980'. [ 625.843431][T22207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4986'. [ 625.875013][T22202] lo speed is unknown, defaulting to 1000 [ 625.905896][T22202] virt_wifi0 speed is unknown, defaulting to 1000 [ 626.005866][T22213] netlink: 380 bytes leftover after parsing attributes in process `syz.2.4989'. [ 626.026984][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4989'. [ 626.061532][T22213] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4989'. [ 626.094252][T22215] netlink: 'syz.0.4990': attribute type 58 has an invalid length. [ 626.114631][T22215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4990'. [ 626.176775][T22217] tc_dump_action: action bad kind [ 626.373796][T22231] xt_hashlimit: size too large, truncated to 1048576 [ 626.612354][T22231] __nla_validate_parse: 1 callbacks suppressed [ 626.612376][T22231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4996'. [ 627.121241][T22271] FAULT_INJECTION: forcing a failure. [ 627.121241][T22271] name failslab, interval 1, probability 0, space 0, times 0 [ 627.154726][T22271] CPU: 0 UID: 0 PID: 22271 Comm: syz.2.5009 Not tainted syzkaller #0 PREEMPT(full) [ 627.154755][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.154767][T22271] Call Trace: [ 627.154776][T22271] [ 627.154786][T22271] dump_stack_lvl+0xe8/0x150 [ 627.154820][T22271] should_fail_ex+0x40c/0x560 [ 627.154846][T22271] ? alloc_netdev_mqs+0xadd/0x12b0 [ 627.154874][T22271] should_failslab+0xa8/0x100 [ 627.154903][T22271] __kvmalloc_node_noprof+0x176/0x860 [ 627.154934][T22271] ? alloc_netdev_mqs+0xadd/0x12b0 [ 627.154966][T22271] alloc_netdev_mqs+0xadd/0x12b0 [ 627.155004][T22271] rtnl_create_link+0x321/0xd70 [ 627.155037][T22271] rtnl_newlink_create+0x258/0x7b0 [ 627.155064][T22271] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 627.155090][T22271] ? __pfx___mutex_lock+0x10/0x10 [ 627.155132][T22271] ? ns_capable+0x89/0xe0 [ 627.155157][T22271] rtnl_newlink+0x166d/0x1c30 [ 627.155193][T22271] ? __pfx_rtnl_newlink+0x10/0x10 [ 627.155210][T22271] ? do_syscall_64+0x174/0x580 [ 627.155237][T22271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.155295][T22271] ? kasan_quarantine_put+0xbb/0x1f0 [ 627.155320][T22271] ? lockdep_hardirqs_on+0x7a/0x110 [ 627.155347][T22271] ? nlmon_xmit+0xb0/0x100 [ 627.155484][T22271] ? kmem_cache_free+0x182/0x650 [ 627.155527][T22271] ? __lock_acquire+0x683/0x2cf0 [ 627.155558][T22271] ? __dev_queue_xmit+0x29b/0x3820 [ 627.155585][T22271] ? __local_bh_enable_ip+0xd0/0x130 [ 627.155607][T22271] ? lockdep_hardirqs_on+0x7a/0x110 [ 627.155633][T22271] ? __dev_queue_xmit+0x29b/0x3820 [ 627.155655][T22271] ? __local_bh_enable_ip+0xd0/0x130 [ 627.155673][T22271] ? __dev_queue_xmit+0x29b/0x3820 [ 627.155704][T22271] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 627.155742][T22271] ? __pfx_rtnl_newlink+0x10/0x10 [ 627.155760][T22271] rtnetlink_rcv_msg+0x802/0xc00 [ 627.155785][T22271] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 627.155805][T22271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.155823][T22271] ? ref_tracker_free+0x689/0x830 [ 627.155849][T22271] ? __pfx_ref_tracker_free+0x10/0x10 [ 627.155883][T22271] netlink_rcv_skb+0x226/0x4a0 [ 627.155908][T22271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.155929][T22271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.155963][T22271] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.155984][T22271] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.156011][T22271] netlink_unicast+0x7bb/0x940 [ 627.156044][T22271] netlink_sendmsg+0x813/0xb40 [ 627.156078][T22271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.156107][T22271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 627.156142][T22271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.156164][T22271] sock_sendmsg_nosec+0x13a/0x180 [ 627.156195][T22271] ____sys_sendmsg+0x54e/0x850 [ 627.156224][T22271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.156258][T22271] ? import_iovec+0x73/0xa0 [ 627.156287][T22271] ___sys_sendmsg+0x2a5/0x360 [ 627.156308][T22271] ? __lock_acquire+0x683/0x2cf0 [ 627.156336][T22271] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.156394][T22271] ? __fget_files+0x2a/0x420 [ 627.156417][T22271] ? __fget_files+0x3a2/0x420 [ 627.156460][T22271] __x64_sys_sendmsg+0x1b1/0x290 [ 627.156487][T22271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.156527][T22271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.156550][T22271] do_syscall_64+0x174/0x580 [ 627.156577][T22271] ? trace_irq_disable+0x3b/0x140 [ 627.156600][T22271] ? clear_bhb_loop+0x70/0xc0 [ 627.156625][T22271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.156645][T22271] RIP: 0033:0x7f494079e0d9 [ 627.156664][T22271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.156681][T22271] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.156703][T22271] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 627.156718][T22271] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 627.156731][T22271] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 627.156744][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.156755][T22271] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 627.156788][T22271] [ 627.587606][T22274] netlink: 'syz.1.5006': attribute type 4 has an invalid length. [ 627.635994][T22278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5011'. [ 627.931364][T22293] FAULT_INJECTION: forcing a failure. [ 627.931364][T22293] name failslab, interval 1, probability 0, space 0, times 0 [ 627.948069][T22293] CPU: 0 UID: 0 PID: 22293 Comm: syz.0.5019 Not tainted syzkaller #0 PREEMPT(full) [ 627.948098][T22293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.948110][T22293] Call Trace: [ 627.948119][T22293] [ 627.948129][T22293] dump_stack_lvl+0xe8/0x150 [ 627.948164][T22293] should_fail_ex+0x40c/0x560 [ 627.948191][T22293] should_failslab+0xa8/0x100 [ 627.948221][T22293] __kmalloc_cache_noprof+0xa8/0x660 [ 627.948248][T22293] ? nfnetlink_rcv+0x1021/0x28c0 [ 627.948268][T22293] ? nfnetlink_rcv+0x1021/0x28c0 [ 627.948296][T22293] nfnetlink_rcv+0x1021/0x28c0 [ 627.948354][T22293] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 627.948428][T22293] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.948463][T22293] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.948485][T22293] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.948514][T22293] netlink_unicast+0x7bb/0x940 [ 627.948546][T22293] netlink_sendmsg+0x813/0xb40 [ 627.948578][T22293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.948614][T22293] ? aa_sock_msg_perm+0xf1/0x1b0 [ 627.948648][T22293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.948670][T22293] sock_sendmsg_nosec+0x13a/0x180 [ 627.948700][T22293] ____sys_sendmsg+0x54e/0x850 [ 627.948729][T22293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.948760][T22293] ? import_iovec+0x73/0xa0 [ 627.948791][T22293] ___sys_sendmsg+0x2a5/0x360 [ 627.948811][T22293] ? __lock_acquire+0x683/0x2cf0 [ 627.948840][T22293] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.948913][T22293] ? __fget_files+0x2a/0x420 [ 627.948937][T22293] ? __fget_files+0x3a2/0x420 [ 627.948969][T22293] __x64_sys_sendmsg+0x1b1/0x290 [ 627.948993][T22293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.949035][T22293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.949057][T22293] do_syscall_64+0x174/0x580 [ 627.949086][T22293] ? trace_irq_disable+0x3b/0x140 [ 627.949109][T22293] ? clear_bhb_loop+0x70/0xc0 [ 627.949133][T22293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.949152][T22293] RIP: 0033:0x7f2241b9e0d9 [ 627.949172][T22293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.949190][T22293] RSP: 002b:00007f2242a7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.949213][T22293] RAX: ffffffffffffffda RBX: 00007f2241e25fa0 RCX: 00007f2241b9e0d9 [ 627.949227][T22293] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 627.949239][T22293] RBP: 00007f2242a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 627.949251][T22293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.949263][T22293] R13: 00007f2241e26038 R14: 00007f2241e25fa0 R15: 00007ffcc7a08c18 [ 627.949296][T22293] [ 628.329551][T22300] FAULT_INJECTION: forcing a failure. [ 628.329551][T22300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.374229][T22300] CPU: 1 UID: 0 PID: 22300 Comm: syz.3.5020 Not tainted syzkaller #0 PREEMPT(full) [ 628.374260][T22300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 628.374273][T22300] Call Trace: [ 628.374281][T22300] [ 628.374290][T22300] dump_stack_lvl+0xe8/0x150 [ 628.374324][T22300] should_fail_ex+0x40c/0x560 [ 628.374351][T22300] _copy_from_iter+0x1d3/0x1660 [ 628.374372][T22300] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 628.374395][T22300] ? rcu_is_watching+0x15/0xb0 [ 628.374424][T22300] ? trace_kmem_cache_alloc+0x29/0xe0 [ 628.374449][T22300] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 628.374472][T22300] ? __pfx__copy_from_iter+0x10/0x10 [ 628.374495][T22300] ? __alloc_skb+0x276/0x7a0 [ 628.374514][T22300] ? __alloc_skb+0x276/0x7a0 [ 628.374539][T22300] ? netlink_sendmsg+0x650/0xb40 [ 628.374560][T22300] ? skb_put+0x112/0x210 [ 628.374584][T22300] netlink_sendmsg+0x6c0/0xb40 [ 628.374607][T22300] ? aa_file_perm+0x18b/0x15f0 [ 628.374635][T22300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.374663][T22300] ? aa_sock_msg_perm+0xf1/0x1b0 [ 628.374697][T22300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.374719][T22300] sock_sendmsg_nosec+0x13a/0x180 [ 628.374750][T22300] sock_write_iter+0x2de/0x3e0 [ 628.374778][T22300] ? __pfx_sock_write_iter+0x10/0x10 [ 628.374825][T22300] do_iter_readv_writev+0x612/0x8c0 [ 628.374860][T22300] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 628.374896][T22300] ? bpf_lsm_file_permission+0x9/0x20 [ 628.374918][T22300] ? security_file_permission+0x75/0x260 [ 628.374944][T22300] ? rw_verify_area+0x203/0x4c0 [ 628.374976][T22300] vfs_writev+0x343/0x990 [ 628.375006][T22300] ? __pfx_vfs_writev+0x10/0x10 [ 628.375045][T22300] ? __fget_files+0x2a/0x420 [ 628.375085][T22300] ? __fget_files+0x3a2/0x420 [ 628.375108][T22300] ? __fget_files+0x2a/0x420 [ 628.375140][T22300] do_writev+0x154/0x2e0 [ 628.375165][T22300] ? __pfx_do_writev+0x10/0x10 [ 628.375196][T22300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.375218][T22300] do_syscall_64+0x174/0x580 [ 628.375246][T22300] ? trace_irq_disable+0x3b/0x140 [ 628.375270][T22300] ? clear_bhb_loop+0x70/0xc0 [ 628.375295][T22300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.375315][T22300] RIP: 0033:0x7f3e2a19e0d9 [ 628.375335][T22300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.375353][T22300] RSP: 002b:00007f3e2b10d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 628.375376][T22300] RAX: ffffffffffffffda RBX: 00007f3e2a425fa0 RCX: 00007f3e2a19e0d9 [ 628.375390][T22300] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 628.375403][T22300] RBP: 00007f3e2b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 628.375415][T22300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.375432][T22300] R13: 00007f3e2a426038 R14: 00007f3e2a425fa0 R15: 00007ffd81292d58 [ 628.375466][T22300] [ 628.692768][T22308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5022'. [ 628.768561][T22310] syzkaller0: entered promiscuous mode [ 628.802078][T22310] syzkaller0: entered allmulticast mode [ 628.923994][T22321] netlink: 'syz.1.5026': attribute type 4 has an invalid length. [ 629.119885][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5031'. [ 629.185853][T22335] FAULT_INJECTION: forcing a failure. [ 629.185853][T22335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.202184][T22335] CPU: 0 UID: 0 PID: 22335 Comm: syz.2.5035 Not tainted syzkaller #0 PREEMPT(full) [ 629.202214][T22335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.202227][T22335] Call Trace: [ 629.202235][T22335] [ 629.202244][T22335] dump_stack_lvl+0xe8/0x150 [ 629.202276][T22335] should_fail_ex+0x40c/0x560 [ 629.202304][T22335] _copy_from_user+0x2d/0xb0 [ 629.202330][T22335] ___sys_sendmsg+0x1c6/0x360 [ 629.202353][T22335] ? __lock_acquire+0x683/0x2cf0 [ 629.202382][T22335] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.202406][T22335] ? kstrtouint+0x6e/0xe0 [ 629.202464][T22335] ? __fget_files+0x2a/0x420 [ 629.202488][T22335] ? __fget_files+0x3a2/0x420 [ 629.202517][T22335] __sys_sendmmsg+0x273/0x4d0 [ 629.202544][T22335] ? __pfx___sys_sendmmsg+0x10/0x10 [ 629.202574][T22335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.202616][T22335] ? ksys_write+0x242/0x270 [ 629.202646][T22335] ? __pfx_ksys_write+0x10/0x10 [ 629.202684][T22335] __x64_sys_sendmmsg+0xa0/0xc0 [ 629.202706][T22335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.202728][T22335] do_syscall_64+0x174/0x580 [ 629.202755][T22335] ? trace_irq_disable+0x3b/0x140 [ 629.202778][T22335] ? clear_bhb_loop+0x70/0xc0 [ 629.202802][T22335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.202821][T22335] RIP: 0033:0x7f494079e0d9 [ 629.202840][T22335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.202855][T22335] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 629.202875][T22335] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 629.202890][T22335] RDX: 0000000000000001 RSI: 0000200000005800 RDI: 0000000000000003 [ 629.202925][T22335] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 629.202937][T22335] R10: 0000000000004005 R11: 0000000000000246 R12: 0000000000000001 [ 629.202950][T22335] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 629.202981][T22335] [ 629.545579][T22342] bridge0: left allmulticast mode [ 629.569697][T22346] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 629.582981][T22342] bridge2: left promiscuous mode [ 629.588742][T22342] bridge2: left allmulticast mode [ 629.594577][T22342] geneve2: left promiscuous mode [ 629.600260][T22342] geneve2: left allmulticast mode [ 629.630834][T22342] bond1: left promiscuous mode [ 629.650466][ T168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.659712][ T168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.705665][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5040'. [ 629.706104][ T168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.819351][T22352] lo speed is unknown, defaulting to 1000 [ 629.851672][T22352] virt_wifi0 speed is unknown, defaulting to 1000 [ 629.896355][T22359] netlink: 'syz.2.5042': attribute type 4 has an invalid length. [ 629.922531][T22360] syzkaller0: entered promiscuous mode [ 629.933284][T22360] syzkaller0: entered allmulticast mode [ 630.024813][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5046'. [ 630.499053][T22383] syzkaller0: entered promiscuous mode [ 630.526112][T22383] syzkaller0: entered allmulticast mode [ 631.600909][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 633.352761][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5055'. [ 633.419213][T22415] syzkaller0: entered promiscuous mode [ 633.426170][T22415] syzkaller0: entered allmulticast mode [ 633.541728][T22441] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 633.661088][T22447] FAULT_INJECTION: forcing a failure. [ 633.661088][T22447] name failslab, interval 1, probability 0, space 0, times 0 [ 633.699787][T22447] CPU: 1 UID: 0 PID: 22447 Comm: syz.3.5064 Not tainted syzkaller #0 PREEMPT(full) [ 633.699818][T22447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.699831][T22447] Call Trace: [ 633.699839][T22447] [ 633.699848][T22447] dump_stack_lvl+0xe8/0x150 [ 633.699882][T22447] should_fail_ex+0x40c/0x560 [ 633.699907][T22447] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 633.699933][T22447] should_failslab+0xa8/0x100 [ 633.699963][T22447] __kvmalloc_node_noprof+0x176/0x860 [ 633.700002][T22447] ? arch_stack_walk+0xfb/0x150 [ 633.700032][T22447] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 633.700062][T22447] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 633.700089][T22447] ? __pfx_stack_trace_save+0x10/0x10 [ 633.700115][T22447] ? stack_depot_save_flags+0x33/0x800 [ 633.700140][T22447] ? __kmalloc_noprof+0x1ad/0x720 [ 633.700163][T22447] ? kasan_save_track+0x4f/0x80 [ 633.700186][T22447] ? kasan_save_track+0x3e/0x80 [ 633.700207][T22447] ? __kasan_kmalloc+0x93/0xb0 [ 633.700229][T22447] ? __kmalloc_noprof+0x375/0x720 [ 633.700250][T22447] ? bpf_test_init+0x9f/0x150 [ 633.700268][T22447] ? bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 633.700294][T22447] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 633.700354][T22447] ? __might_fault+0xaf/0x130 [ 633.700382][T22447] ? __might_fault+0xaf/0x130 [ 633.700413][T22447] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 633.700447][T22447] ? _copy_from_user+0x94/0xb0 [ 633.700473][T22447] ? bpf_test_init+0x113/0x150 [ 633.700493][T22447] ? xdp_convert_md_to_buff+0x5b/0x330 [ 633.700519][T22447] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 633.700558][T22447] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 633.700588][T22447] ? __fget_files+0x2a/0x420 [ 633.700618][T22447] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 633.700643][T22447] bpf_prog_test_run+0x2c5/0x340 [ 633.700673][T22447] __sys_bpf+0xa22/0xd90 [ 633.700705][T22447] ? __pfx___sys_bpf+0x10/0x10 [ 633.700739][T22447] ? __fget_files+0x2a/0x420 [ 633.700780][T22447] ? ksys_write+0x242/0x270 [ 633.700808][T22447] ? __pfx_ksys_write+0x10/0x10 [ 633.700838][T22447] __x64_sys_bpf+0xba/0xd0 [ 633.700859][T22447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.700881][T22447] do_syscall_64+0x174/0x580 [ 633.700907][T22447] ? trace_irq_disable+0x3b/0x140 [ 633.700931][T22447] ? clear_bhb_loop+0x70/0xc0 [ 633.700956][T22447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.700973][T22447] RIP: 0033:0x7f3e2a19e0d9 [ 633.701005][T22447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.701022][T22447] RSP: 002b:00007f3e2b10d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.701044][T22447] RAX: ffffffffffffffda RBX: 00007f3e2a425fa0 RCX: 00007f3e2a19e0d9 [ 633.701059][T22447] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 633.701071][T22447] RBP: 00007f3e2b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 633.701082][T22447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.701094][T22447] R13: 00007f3e2a426038 R14: 00007f3e2a425fa0 R15: 00007ffd81292d58 [ 633.701126][T22447] [ 634.022962][T22454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 634.249372][T22462] FAULT_INJECTION: forcing a failure. [ 634.249372][T22462] name failslab, interval 1, probability 0, space 0, times 0 [ 634.271162][T22462] CPU: 1 UID: 0 PID: 22462 Comm: syz.2.5070 Not tainted syzkaller #0 PREEMPT(full) [ 634.271192][T22462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.271204][T22462] Call Trace: [ 634.271212][T22462] [ 634.271222][T22462] dump_stack_lvl+0xe8/0x150 [ 634.271256][T22462] should_fail_ex+0x40c/0x560 [ 634.271284][T22462] should_failslab+0xa8/0x100 [ 634.271313][T22462] __kmalloc_noprof+0xfe/0x720 [ 634.271337][T22462] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.271367][T22462] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.271405][T22462] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.271443][T22462] genl_family_rcv_msg_doit+0xda/0x340 [ 634.271498][T22462] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.271536][T22462] ? apparmor_capable+0x126/0x170 [ 634.271562][T22462] ? bpf_lsm_capable+0x9/0x20 [ 634.271586][T22462] ? security_capable+0x7e/0x2c0 [ 634.271621][T22462] genl_rcv_msg+0x614/0x7a0 [ 634.271656][T22462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.271684][T22462] ? __pfx_tipc_nl_media_set+0x10/0x10 [ 634.271787][T22462] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.271823][T22462] netlink_rcv_skb+0x226/0x4a0 [ 634.271861][T22462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.271889][T22462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.271920][T22462] ? down_read+0x2be/0x330 [ 634.271940][T22462] genl_rcv+0x28/0x40 [ 634.271959][T22462] netlink_unicast+0x7bb/0x940 [ 634.271985][T22462] netlink_sendmsg+0x813/0xb40 [ 634.272011][T22462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.272033][T22462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.272059][T22462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.272075][T22462] sock_sendmsg_nosec+0x13a/0x180 [ 634.272100][T22462] ____sys_sendmsg+0x54e/0x850 [ 634.272122][T22462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.272147][T22462] ? import_iovec+0x73/0xa0 [ 634.272170][T22462] ___sys_sendmsg+0x2a5/0x360 [ 634.272186][T22462] ? __lock_acquire+0x683/0x2cf0 [ 634.272210][T22462] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.272269][T22462] ? __fget_files+0x2a/0x420 [ 634.272288][T22462] ? __fget_files+0x3a2/0x420 [ 634.272316][T22462] __x64_sys_sendmsg+0x1b1/0x290 [ 634.272337][T22462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.272375][T22462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.272392][T22462] do_syscall_64+0x174/0x580 [ 634.272413][T22462] ? trace_irq_disable+0x3b/0x140 [ 634.272438][T22462] ? clear_bhb_loop+0x70/0xc0 [ 634.272457][T22462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.272473][T22462] RIP: 0033:0x7f494079e0d9 [ 634.272489][T22462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.272503][T22462] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.272521][T22462] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 634.272532][T22462] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 634.272542][T22462] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 634.272553][T22462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.272562][T22462] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 634.272588][T22462] [ 634.850615][T22479] syzkaller0: entered promiscuous mode [ 634.889007][T22479] netlink: 'syz.2.5074': attribute type 2 has an invalid length. [ 635.060380][T22489] netlink: 'syz.1.5077': attribute type 4 has an invalid length. [ 635.098093][T22485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.156969][T22485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.190580][T22485] bond0 (unregistering): Released all slaves [ 635.714043][T22507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5081'. [ 636.074878][T22523] sctp: [Deprecated]: syz.1.5087 (pid 22523) Use of int in maxseg socket option. [ 636.074878][T22523] Use struct sctp_assoc_value instead [ 636.139093][T22529] netlink: 'syz.3.5089': attribute type 4 has an invalid length. [ 636.457321][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5094'. [ 636.524611][T22546] FAULT_INJECTION: forcing a failure. [ 636.524611][T22546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.549144][T22546] CPU: 1 UID: 0 PID: 22546 Comm: syz.5.5095 Not tainted syzkaller #0 PREEMPT(full) [ 636.549174][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.549186][T22546] Call Trace: [ 636.549194][T22546] [ 636.549203][T22546] dump_stack_lvl+0xe8/0x150 [ 636.549237][T22546] should_fail_ex+0x40c/0x560 [ 636.549269][T22546] _copy_from_user+0x2d/0xb0 [ 636.549297][T22546] ___sys_sendmsg+0x1c6/0x360 [ 636.549319][T22546] ? __lock_acquire+0x683/0x2cf0 [ 636.549357][T22546] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.549386][T22546] ? kstrtouint+0x6e/0xe0 [ 636.549434][T22546] ? __fget_files+0x2a/0x420 [ 636.549459][T22546] ? __fget_files+0x3a2/0x420 [ 636.549495][T22546] __sys_sendmmsg+0x273/0x4d0 [ 636.549524][T22546] ? __pfx___sys_sendmmsg+0x10/0x10 [ 636.549555][T22546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 636.549600][T22546] ? ksys_write+0x242/0x270 [ 636.549632][T22546] ? __pfx_ksys_write+0x10/0x10 [ 636.549667][T22546] __x64_sys_sendmmsg+0xa0/0xc0 [ 636.549688][T22546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.549710][T22546] do_syscall_64+0x174/0x580 [ 636.549738][T22546] ? trace_irq_disable+0x3b/0x140 [ 636.549763][T22546] ? clear_bhb_loop+0x70/0xc0 [ 636.549788][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.549808][T22546] RIP: 0033:0x7f6353d9e0d9 [ 636.549828][T22546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.549844][T22546] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 636.549867][T22546] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 636.549882][T22546] RDX: 0000000000000001 RSI: 0000200000005800 RDI: 0000000000000003 [ 636.549895][T22546] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 636.549907][T22546] R10: 0000000000004005 R11: 0000000000000246 R12: 0000000000000001 [ 636.549920][T22546] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 636.549962][T22546] [ 636.609404][T22519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5086'. [ 636.681949][T22553] netlink: 'syz.3.5098': attribute type 1 has an invalid length. [ 636.786154][T22519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5086'. [ 636.802561][T22519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5086'. [ 636.856905][T22553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 636.897813][T22558] bond5: entered allmulticast mode [ 636.919743][T22558] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5098'. [ 637.066715][T22553] bond5: (slave ip6gretap1): making interface the new active one [ 637.100587][T22570] FAULT_INJECTION: forcing a failure. [ 637.100587][T22570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.114839][T22553] ip6gretap1: entered allmulticast mode [ 637.125461][T22553] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 637.146420][T22570] CPU: 1 UID: 0 PID: 22570 Comm: syz.2.5101 Not tainted syzkaller #0 PREEMPT(full) [ 637.146447][T22570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.146460][T22570] Call Trace: [ 637.146468][T22570] [ 637.146478][T22570] dump_stack_lvl+0xe8/0x150 [ 637.146513][T22570] should_fail_ex+0x40c/0x560 [ 637.146539][T22570] _copy_from_iter+0x1d3/0x1660 [ 637.146562][T22570] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 637.146587][T22570] ? rcu_is_watching+0x15/0xb0 [ 637.146617][T22570] ? trace_kmem_cache_alloc+0x29/0xe0 [ 637.146641][T22570] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 637.146664][T22570] ? __pfx__copy_from_iter+0x10/0x10 [ 637.146685][T22570] ? __alloc_skb+0x276/0x7a0 [ 637.146702][T22570] ? __alloc_skb+0x276/0x7a0 [ 637.146727][T22570] ? netlink_sendmsg+0x650/0xb40 [ 637.146750][T22570] ? skb_put+0x112/0x210 [ 637.146772][T22570] netlink_sendmsg+0x6c0/0xb40 [ 637.146795][T22570] ? aa_file_perm+0x18b/0x15f0 [ 637.146822][T22570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.146850][T22570] ? aa_sock_msg_perm+0xf1/0x1b0 [ 637.146884][T22570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.146907][T22570] sock_sendmsg_nosec+0x13a/0x180 [ 637.146944][T22570] sock_write_iter+0x2de/0x3e0 [ 637.146973][T22570] ? __pfx_sock_write_iter+0x10/0x10 [ 637.147019][T22570] do_iter_readv_writev+0x612/0x8c0 [ 637.147053][T22570] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 637.147088][T22570] ? bpf_lsm_file_permission+0x9/0x20 [ 637.147108][T22570] ? security_file_permission+0x75/0x260 [ 637.147133][T22570] ? rw_verify_area+0x203/0x4c0 [ 637.147164][T22570] vfs_writev+0x343/0x990 [ 637.147196][T22570] ? __pfx_vfs_writev+0x10/0x10 [ 637.147232][T22570] ? __fget_files+0x2a/0x420 [ 637.147262][T22570] ? __fget_files+0x3a2/0x420 [ 637.147285][T22570] ? __fget_files+0x2a/0x420 [ 637.147318][T22570] do_writev+0x154/0x2e0 [ 637.147344][T22570] ? __pfx_do_writev+0x10/0x10 [ 637.147375][T22570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.147402][T22570] do_syscall_64+0x174/0x580 [ 637.147429][T22570] ? trace_irq_disable+0x3b/0x140 [ 637.147452][T22570] ? clear_bhb_loop+0x70/0xc0 [ 637.147476][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.147495][T22570] RIP: 0033:0x7f494079e0d9 [ 637.147516][T22570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.147531][T22570] RSP: 002b:00007f49415e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 637.147553][T22570] RAX: ffffffffffffffda RBX: 00007f4940a25fa0 RCX: 00007f494079e0d9 [ 637.147577][T22570] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 637.147590][T22570] RBP: 00007f49415e4090 R08: 0000000000000000 R09: 0000000000000000 [ 637.147602][T22570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.147614][T22570] R13: 00007f4940a26038 R14: 00007f4940a25fa0 R15: 00007ffe56212b28 [ 637.147646][T22570] [ 637.596885][T22575] netlink: 'syz.3.5104': attribute type 4 has an invalid length. [ 637.603213][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5105'. [ 637.689150][T22580] syzkaller0: entered promiscuous mode [ 637.694693][T22580] syzkaller0: entered allmulticast mode [ 637.789723][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 637.957681][T22592] FAULT_INJECTION: forcing a failure. [ 637.957681][T22592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.971033][T22592] CPU: 1 UID: 0 PID: 22592 Comm: syz.3.5113 Not tainted syzkaller #0 PREEMPT(full) [ 637.971065][T22592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.971076][T22592] Call Trace: [ 637.971084][T22592] [ 637.971092][T22592] dump_stack_lvl+0xe8/0x150 [ 637.971124][T22592] should_fail_ex+0x40c/0x560 [ 637.971149][T22592] _copy_from_user+0x2d/0xb0 [ 637.971180][T22592] __copy_msghdr+0x390/0x590 [ 637.971208][T22592] ___sys_sendmsg+0x213/0x360 [ 637.971227][T22592] ? __lock_acquire+0x683/0x2cf0 [ 637.971255][T22592] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.971279][T22592] ? kstrtouint+0x6e/0xe0 [ 637.971328][T22592] ? __fget_files+0x2a/0x420 [ 637.971352][T22592] ? __fget_files+0x3a2/0x420 [ 637.971390][T22592] __sys_sendmmsg+0x273/0x4d0 [ 637.971425][T22592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 637.971458][T22592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 637.971501][T22592] ? ksys_write+0x242/0x270 [ 637.971537][T22592] ? __pfx_ksys_write+0x10/0x10 [ 637.971570][T22592] __x64_sys_sendmmsg+0xa0/0xc0 [ 637.971592][T22592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.971614][T22592] do_syscall_64+0x174/0x580 [ 637.971640][T22592] ? trace_irq_disable+0x3b/0x140 [ 637.971664][T22592] ? clear_bhb_loop+0x70/0xc0 [ 637.971694][T22592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.971719][T22592] RIP: 0033:0x7f3e2a19e0d9 [ 637.971739][T22592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.971755][T22592] RSP: 002b:00007f3e2b10d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 637.971776][T22592] RAX: ffffffffffffffda RBX: 00007f3e2a425fa0 RCX: 00007f3e2a19e0d9 [ 637.971791][T22592] RDX: 0000000000000001 RSI: 0000200000005800 RDI: 0000000000000003 [ 637.971803][T22592] RBP: 00007f3e2b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 637.971816][T22592] R10: 0000000000004005 R11: 0000000000000246 R12: 0000000000000001 [ 637.971828][T22592] R13: 00007f3e2a426038 R14: 00007f3e2a425fa0 R15: 00007ffd81292d58 [ 637.971864][T22592] [ 638.602957][T22610] FAULT_INJECTION: forcing a failure. [ 638.602957][T22610] name failslab, interval 1, probability 0, space 0, times 0 [ 638.615730][T22610] CPU: 1 UID: 0 PID: 22610 Comm: syz.5.5118 Not tainted syzkaller #0 PREEMPT(full) [ 638.615757][T22610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.615769][T22610] Call Trace: [ 638.615777][T22610] [ 638.615786][T22610] dump_stack_lvl+0xe8/0x150 [ 638.615818][T22610] should_fail_ex+0x40c/0x560 [ 638.615845][T22610] should_failslab+0xa8/0x100 [ 638.615874][T22610] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 638.615898][T22610] ? skb_clone+0x212/0x3a0 [ 638.615919][T22610] ? skb_clone+0x212/0x3a0 [ 638.615952][T22610] skb_clone+0x212/0x3a0 [ 638.615979][T22610] bpf_clone_redirect+0x170/0x4b0 [ 638.616016][T22610] ? bpf_test_run+0x1d1/0x830 [ 638.616040][T22610] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 638.616065][T22610] ? __kernel_text_address+0xd/0x30 [ 638.616094][T22610] ? unwind_get_return_address+0x4d/0x90 [ 638.616124][T22610] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.616149][T22610] ? arch_stack_walk+0xfb/0x150 [ 638.616186][T22610] ? ktime_get+0x45/0x220 [ 638.616217][T22610] ? ktime_get+0x45/0x220 [ 638.616243][T22610] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 638.616267][T22610] ? lockdep_hardirqs_on+0x7a/0x110 [ 638.616296][T22610] ? ktime_get+0x45/0x220 [ 638.616317][T22610] ? seqcount_lockdep_reader_access+0xea/0x100 [ 638.616340][T22610] ? bpf_test_run+0x1d1/0x830 [ 638.616366][T22610] ? bpf_test_timer_continue+0x10c/0x320 [ 638.616395][T22610] bpf_test_run+0x354/0x830 [ 638.616450][T22610] ? __pfx_bpf_test_run+0x10/0x10 [ 638.616486][T22610] ? csum_partial+0x239/0x2c0 [ 638.616522][T22610] ? __asan_memcpy+0x40/0x70 [ 638.616546][T22610] ? convert___skb_to_skb+0x319/0x5b0 [ 638.616572][T22610] bpf_prog_test_run_skb+0xe35/0x2230 [ 638.616617][T22610] ? __fget_files+0x3a2/0x420 [ 638.616641][T22610] ? __fget_files+0x2a/0x420 [ 638.616672][T22610] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 638.616696][T22610] bpf_prog_test_run+0x2c5/0x340 [ 638.616728][T22610] __sys_bpf+0xa22/0xd90 [ 638.616762][T22610] ? __pfx___sys_bpf+0x10/0x10 [ 638.616799][T22610] ? __fget_files+0x2a/0x420 [ 638.616848][T22610] ? rcu_is_watching+0x15/0xb0 [ 638.616884][T22610] __x64_sys_bpf+0xba/0xd0 [ 638.616907][T22610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.616929][T22610] do_syscall_64+0x174/0x580 [ 638.616957][T22610] ? trace_irq_disable+0x3b/0x140 [ 638.616981][T22610] ? clear_bhb_loop+0x70/0xc0 [ 638.617007][T22610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.617027][T22610] RIP: 0033:0x7f6353d9e0d9 [ 638.617047][T22610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.617063][T22610] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.617086][T22610] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 638.617101][T22610] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 638.617114][T22610] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 638.617126][T22610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 638.617138][T22610] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 638.617172][T22610] [ 638.626081][T22615] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 639.163324][T22628] __nla_validate_parse: 2 callbacks suppressed [ 639.163347][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'. [ 639.290417][T22641] FAULT_INJECTION: forcing a failure. [ 639.290417][T22641] name failslab, interval 1, probability 0, space 0, times 0 [ 639.340335][T22641] CPU: 0 UID: 0 PID: 22641 Comm: syz.0.5127 Not tainted syzkaller #0 PREEMPT(full) [ 639.340372][T22641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.340383][T22641] Call Trace: [ 639.340391][T22641] [ 639.340400][T22641] dump_stack_lvl+0xe8/0x150 [ 639.340440][T22641] should_fail_ex+0x40c/0x560 [ 639.340468][T22641] should_failslab+0xa8/0x100 [ 639.340497][T22641] __kmalloc_noprof+0xfe/0x720 [ 639.340521][T22641] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 639.340550][T22641] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 639.340585][T22641] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 639.340624][T22641] genl_family_rcv_msg_doit+0xda/0x340 [ 639.340661][T22641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 639.340697][T22641] ? apparmor_capable+0x126/0x170 [ 639.340722][T22641] ? bpf_lsm_capable+0x9/0x20 [ 639.340746][T22641] ? security_capable+0x7e/0x2c0 [ 639.340777][T22641] genl_rcv_msg+0x614/0x7a0 [ 639.340810][T22641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.340835][T22641] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 639.340982][T22641] netlink_rcv_skb+0x226/0x4a0 [ 639.341006][T22641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.341035][T22641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.341075][T22641] ? down_read+0x2be/0x330 [ 639.341099][T22641] genl_rcv+0x28/0x40 [ 639.341122][T22641] netlink_unicast+0x7bb/0x940 [ 639.341156][T22641] netlink_sendmsg+0x813/0xb40 [ 639.341189][T22641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.341217][T22641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 639.341248][T22641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.341268][T22641] sock_sendmsg_nosec+0x13a/0x180 [ 639.341296][T22641] ____sys_sendmsg+0x54e/0x850 [ 639.341324][T22641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.341353][T22641] ? import_iovec+0x73/0xa0 [ 639.341393][T22641] ___sys_sendmsg+0x2a5/0x360 [ 639.341414][T22641] ? __lock_acquire+0x683/0x2cf0 [ 639.341445][T22641] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.341502][T22641] ? __fget_files+0x2a/0x420 [ 639.341527][T22641] ? __fget_files+0x3a2/0x420 [ 639.341563][T22641] __x64_sys_sendmsg+0x1b1/0x290 [ 639.341588][T22641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.341628][T22641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.341650][T22641] do_syscall_64+0x174/0x580 [ 639.341679][T22641] ? trace_irq_disable+0x3b/0x140 [ 639.341704][T22641] ? clear_bhb_loop+0x70/0xc0 [ 639.341728][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.341748][T22641] RIP: 0033:0x7f2241b9e0d9 [ 639.341769][T22641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.341786][T22641] RSP: 002b:00007f2242a5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.341807][T22641] RAX: ffffffffffffffda RBX: 00007f2241e26090 RCX: 00007f2241b9e0d9 [ 639.341821][T22641] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000004 [ 639.341834][T22641] RBP: 00007f2242a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 639.341846][T22641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.341857][T22641] R13: 00007f2241e26128 R14: 00007f2241e26090 R15: 00007ffcc7a08c18 [ 639.341888][T22641] [ 639.678262][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5130'. [ 639.812605][T22649] FAULT_INJECTION: forcing a failure. [ 639.812605][T22649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.895163][T22649] CPU: 1 UID: 0 PID: 22649 Comm: syz.0.5132 Not tainted syzkaller #0 PREEMPT(full) [ 639.895196][T22649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.895208][T22649] Call Trace: [ 639.895217][T22649] [ 639.895227][T22649] dump_stack_lvl+0xe8/0x150 [ 639.895262][T22649] should_fail_ex+0x40c/0x560 [ 639.895289][T22649] _copy_from_user+0x2d/0xb0 [ 639.895316][T22649] __sys_bpf+0x2e7/0xd90 [ 639.895351][T22649] ? __pfx___sys_bpf+0x10/0x10 [ 639.895387][T22649] ? __fget_files+0x2a/0x420 [ 639.895431][T22649] ? ksys_write+0x242/0x270 [ 639.895463][T22649] ? __pfx_ksys_write+0x10/0x10 [ 639.895498][T22649] __x64_sys_bpf+0xba/0xd0 [ 639.895521][T22649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.895543][T22649] do_syscall_64+0x174/0x580 [ 639.895571][T22649] ? trace_irq_disable+0x3b/0x140 [ 639.895595][T22649] ? clear_bhb_loop+0x70/0xc0 [ 639.895619][T22649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.895639][T22649] RIP: 0033:0x7f2241b9e0d9 [ 639.895658][T22649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.895679][T22649] RSP: 002b:00007f2242a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.895702][T22649] RAX: ffffffffffffffda RBX: 00007f2241e25fa0 RCX: 00007f2241b9e0d9 [ 639.895717][T22649] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 639.895729][T22649] RBP: 00007f2242a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 639.895742][T22649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.895754][T22649] R13: 00007f2241e26038 R14: 00007f2241e25fa0 R15: 00007ffcc7a08c18 [ 639.895787][T22649] [ 640.606549][T22673] xt_l2tp: wrong L2TP version: 0 [ 640.826833][T22686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5142'. [ 640.913754][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5145'. [ 640.928675][T22689] FAULT_INJECTION: forcing a failure. [ 640.928675][T22689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.958297][T22689] CPU: 1 UID: 0 PID: 22689 Comm: syz.3.5145 Not tainted syzkaller #0 PREEMPT(full) [ 640.958327][T22689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.958339][T22689] Call Trace: [ 640.958348][T22689] [ 640.958357][T22689] dump_stack_lvl+0xe8/0x150 [ 640.958393][T22689] should_fail_ex+0x40c/0x560 [ 640.958422][T22689] _copy_to_user+0x31/0xb0 [ 640.958461][T22689] simple_read_from_buffer+0xe1/0x170 [ 640.958493][T22689] proc_fail_nth_read+0x1bb/0x230 [ 640.958523][T22689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.958552][T22689] ? rw_verify_area+0x24a/0x4c0 [ 640.958581][T22689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.958605][T22689] vfs_read+0x213/0xa80 [ 640.958637][T22689] ? __pfx___mutex_lock+0x10/0x10 [ 640.958666][T22689] ? __pfx_vfs_read+0x10/0x10 [ 640.958695][T22689] ? __fget_files+0x2a/0x420 [ 640.958728][T22689] ? __fget_files+0x3a2/0x420 [ 640.958751][T22689] ? __fget_files+0x2a/0x420 [ 640.958783][T22689] ksys_read+0x150/0x270 [ 640.958813][T22689] ? __pfx_ksys_read+0x10/0x10 [ 640.958848][T22689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.958871][T22689] do_syscall_64+0x174/0x580 [ 640.958898][T22689] ? trace_irq_disable+0x3b/0x140 [ 640.958923][T22689] ? clear_bhb_loop+0x70/0xc0 [ 640.958945][T22689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.958964][T22689] RIP: 0033:0x7f3e2a15e90e [ 640.958985][T22689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 640.959002][T22689] RSP: 002b:00007f3e2b10cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.959024][T22689] RAX: ffffffffffffffda RBX: 00007f3e2b10d6c0 RCX: 00007f3e2a15e90e [ 640.959037][T22689] RDX: 000000000000000f RSI: 00007f3e2b10d0a0 RDI: 0000000000000005 [ 640.959050][T22689] RBP: 00007f3e2b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 640.959062][T22689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.959073][T22689] R13: 00007f3e2a426038 R14: 00007f3e2a425fa0 R15: 00007ffd81292d58 [ 640.959106][T22689] [ 641.219092][T22690] tipc: Enabled bearer , priority 10 [ 641.331641][T22697] FAULT_INJECTION: forcing a failure. [ 641.331641][T22697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.344852][T22697] CPU: 1 UID: 0 PID: 22697 Comm: syz.5.5149 Not tainted syzkaller #0 PREEMPT(full) [ 641.344880][T22697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 641.344893][T22697] Call Trace: [ 641.344901][T22697] [ 641.344911][T22697] dump_stack_lvl+0xe8/0x150 [ 641.344945][T22697] should_fail_ex+0x40c/0x560 [ 641.344972][T22697] _copy_from_user+0x2d/0xb0 [ 641.344999][T22697] ___sys_sendmsg+0x1c6/0x360 [ 641.345022][T22697] ? __lock_acquire+0x683/0x2cf0 [ 641.345053][T22697] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.345112][T22697] ? __fget_files+0x2a/0x420 [ 641.345138][T22697] ? __fget_files+0x3a2/0x420 [ 641.345174][T22697] __x64_sys_sendmsg+0x1b1/0x290 [ 641.345200][T22697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.345242][T22697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.345266][T22697] do_syscall_64+0x174/0x580 [ 641.345295][T22697] ? trace_irq_disable+0x3b/0x140 [ 641.345319][T22697] ? clear_bhb_loop+0x70/0xc0 [ 641.345344][T22697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.345365][T22697] RIP: 0033:0x7f6353d9e0d9 [ 641.345395][T22697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.345413][T22697] RSP: 002b:00007f6354d09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.345436][T22697] RAX: ffffffffffffffda RBX: 00007f6354025fa0 RCX: 00007f6353d9e0d9 [ 641.345450][T22697] RDX: 0000000024008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 641.345464][T22697] RBP: 00007f6354d09090 R08: 0000000000000000 R09: 0000000000000000 [ 641.345478][T22697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.345491][T22697] R13: 00007f6354026038 R14: 00007f6354025fa0 R15: 00007ffea1190ae8 [ 641.345524][T22697] [ 641.921391][T22707] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 641.939534][T22707] bond0 (unregistering): Released all slaves [ 642.081994][ T5840] tipc: Node number set to 2035774871 [ 642.338043][T22725] pim6reg: entered allmulticast mode [ 642.384097][T22730] lo speed is unknown, defaulting to 1000 [ 642.392863][T22730] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.412525][T22736] netlink: 'syz.1.5160': attribute type 4 has an invalid length. [ 642.421136][ T168] nci: nci_rx_work: unknown MT 0x6 [ 642.444606][T22736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5160'. [ 642.505774][T22736] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 645.285527][T22725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.611198][T22769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.832449][T22779] syzkaller0: entered promiscuous mode [ 645.839594][T22779] syzkaller0: entered allmulticast mode [ 648.553193][T22790] netlink: 'syz.3.5180': attribute type 28 has an invalid length. [ 648.759799][T22808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5183'. [ 648.894183][T22818] netlink: 'syz.5.5187': attribute type 1 has an invalid length. [ 648.903111][T22818] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5187'. [ 649.071013][T22828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5189'. [ 649.431349][T22838] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5194'. [ 649.599048][T22835] syzkaller0: entered promiscuous mode [ 649.621543][T22835] syzkaller0: entered allmulticast mode [ 653.163797][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5203'. [ 655.490232][T22851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.567879][T22870] lo speed is unknown, defaulting to 1000 [ 655.590327][T22870] virt_wifi0 speed is unknown, defaulting to 1000 [ 655.650903][T22887] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 655.701111][T22890] FAULT_INJECTION: forcing a failure. [ 655.701111][T22890] name failslab, interval 1, probability 0, space 0, times 0 [ 655.720272][T22890] CPU: 1 UID: 0 PID: 22890 Comm: syz.1.5206 Not tainted syzkaller #0 PREEMPT(full) [ 655.720301][T22890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.720314][T22890] Call Trace: [ 655.720322][T22890] [ 655.720331][T22890] dump_stack_lvl+0xe8/0x150 [ 655.720367][T22890] should_fail_ex+0x40c/0x560 [ 655.720394][T22890] should_failslab+0xa8/0x100 [ 655.720432][T22890] __kmalloc_cache_node_noprof+0xaa/0x630 [ 655.720458][T22890] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 655.720485][T22890] ? page_pool_create_percpu+0x73/0xc70 [ 655.720588][T22890] ? page_pool_create_percpu+0x73/0xc70 [ 655.720623][T22890] page_pool_create_percpu+0x73/0xc70 [ 655.720648][T22890] ? page_pool_create+0xd/0x20 [ 655.720677][T22890] bpf_test_run_xdp_live+0x23a/0x1c20 [ 655.720704][T22890] ? __pfx_stack_trace_save+0x10/0x10 [ 655.720729][T22890] ? stack_depot_save_flags+0x33/0x800 [ 655.720753][T22890] ? __kmalloc_noprof+0x1ad/0x720 [ 655.720775][T22890] ? kasan_save_track+0x4f/0x80 [ 655.720797][T22890] ? kasan_save_track+0x3e/0x80 [ 655.720819][T22890] ? __kasan_kmalloc+0x93/0xb0 [ 655.720843][T22890] ? __kmalloc_noprof+0x375/0x720 [ 655.720863][T22890] ? bpf_test_init+0x9f/0x150 [ 655.720881][T22890] ? bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 655.720906][T22890] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 655.720965][T22890] ? __might_fault+0xaf/0x130 [ 655.720988][T22890] ? __might_fault+0xaf/0x130 [ 655.721019][T22890] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 655.721052][T22890] ? _copy_from_user+0x94/0xb0 [ 655.721080][T22890] ? bpf_test_init+0x113/0x150 [ 655.721100][T22890] ? xdp_convert_md_to_buff+0x5b/0x330 [ 655.721127][T22890] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 655.721167][T22890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 655.721197][T22890] ? __fget_files+0x2a/0x420 [ 655.721227][T22890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 655.721252][T22890] bpf_prog_test_run+0x2c5/0x340 [ 655.721283][T22890] __sys_bpf+0xa22/0xd90 [ 655.721317][T22890] ? __pfx___sys_bpf+0x10/0x10 [ 655.721354][T22890] ? __fget_files+0x2a/0x420 [ 655.721405][T22890] ? ksys_write+0x242/0x270 [ 655.721436][T22890] ? __pfx_ksys_write+0x10/0x10 [ 655.721470][T22890] __x64_sys_bpf+0xba/0xd0 [ 655.721493][T22890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.721516][T22890] do_syscall_64+0x174/0x580 [ 655.721545][T22890] ? trace_irq_disable+0x3b/0x140 [ 655.721569][T22890] ? clear_bhb_loop+0x70/0xc0 [ 655.721593][T22890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.721614][T22890] RIP: 0033:0x7f4c4b59e0d9 [ 655.721634][T22890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.721651][T22890] RSP: 002b:00007f4c4c495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.721675][T22890] RAX: ffffffffffffffda RBX: 00007f4c4b825fa0 RCX: 00007f4c4b59e0d9 [ 655.721690][T22890] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 655.721703][T22890] RBP: 00007f4c4c495090 R08: 0000000000000000 R09: 0000000000000000 [ 655.721719][T22890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.721732][T22890] R13: 00007f4c4b826038 R14: 00007f4c4b825fa0 R15: 00007fff50c1b368 [ 655.721762][T22890] [ 656.291615][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 656.344142][T22902] syzkaller0: entered promiscuous mode [ 656.349818][T22902] syzkaller0: entered allmulticast mode [ 656.361823][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 657.444367][T22919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5217'. [ 658.941848][T22916] FAULT_INJECTION: forcing a failure. [ 658.941848][T22916] name failslab, interval 1, probability 0, space 0, times 0 [ 658.976024][T22916] CPU: 0 UID: 0 PID: 22916 Comm: syz.5.5216 Not tainted syzkaller #0 PREEMPT(full) [ 658.976054][T22916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.976066][T22916] Call Trace: [ 658.976075][T22916] [ 658.976084][T22916] dump_stack_lvl+0xe8/0x150 [ 658.976118][T22916] should_fail_ex+0x40c/0x560 [ 658.976146][T22916] should_failslab+0xa8/0x100 [ 658.976176][T22916] __kmalloc_noprof+0xfe/0x720 [ 658.976202][T22916] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 658.976231][T22916] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 658.976269][T22916] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 658.976306][T22916] genl_family_rcv_msg_doit+0xda/0x340 [ 658.976343][T22916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 658.976390][T22916] ? apparmor_capable+0x126/0x170 [ 658.976416][T22916] ? bpf_lsm_capable+0x9/0x20 [ 658.976439][T22916] ? security_capable+0x7e/0x2c0 [ 658.976473][T22916] genl_rcv_msg+0x614/0x7a0 [ 658.976510][T22916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.976537][T22916] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 658.976569][T22916] ? __pfx_ref_tracker_free+0x10/0x10 [ 658.976604][T22916] netlink_rcv_skb+0x226/0x4a0 [ 658.976629][T22916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.976660][T22916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.976700][T22916] ? down_read+0x2be/0x330 [ 658.976727][T22916] genl_rcv+0x28/0x40 [ 658.976752][T22916] netlink_unicast+0x7bb/0x940 [ 658.976787][T22916] netlink_sendmsg+0x813/0xb40 [ 658.976822][T22916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.976851][T22916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.976884][T22916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.976906][T22916] sock_sendmsg_nosec+0x13a/0x180 [ 658.976938][T22916] ____sys_sendmsg+0x54e/0x850 [ 658.976972][T22916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.977004][T22916] ? import_iovec+0x73/0xa0 [ 658.977036][T22916] ___sys_sendmsg+0x2a5/0x360 [ 658.977057][T22916] ? __lock_acquire+0x683/0x2cf0 [ 658.977088][T22916] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.977115][T22916] ? irqentry_exit+0x218/0x8f0 [ 658.977142][T22916] ? trace_irq_disable+0x3b/0x140 [ 658.977199][T22916] ? __fget_files+0x2a/0x420 [ 658.977224][T22916] ? __fget_files+0x3a2/0x420 [ 658.977261][T22916] __x64_sys_sendmsg+0x1b1/0x290 [ 658.977287][T22916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.977330][T22916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.977351][T22916] do_syscall_64+0x174/0x580 [ 658.977376][T22916] ? trace_irq_disable+0x3b/0x140 [ 658.977405][T22916] ? clear_bhb_loop+0x70/0xc0 [ 658.977430][T22916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.977450][T22916] RIP: 0033:0x7f6353d9e0d9 [ 658.977471][T22916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.977488][T22916] RSP: 002b:00007f6354ce8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.977511][T22916] RAX: ffffffffffffffda RBX: 00007f6354026090 RCX: 00007f6353d9e0d9 [ 658.977526][T22916] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000004 [ 658.977540][T22916] RBP: 00007f6354ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 658.977553][T22916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.977566][T22916] R13: 00007f6354026128 R14: 00007f6354026090 R15: 00007ffea1190ae8 [ 658.977601][T22916] [ 659.757620][T22954] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5223'. [ 659.925169][T22958] lo speed is unknown, defaulting to 1000 [ 659.959582][T22958] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.053756][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5227'. [ 660.385228][T22970] syzkaller0: entered promiscuous mode [ 660.406147][T22970] syzkaller0: entered allmulticast mode [ 662.516270][T22942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.377116][T22978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.431947][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5234'. [ 663.451581][T22994] netlink: 'syz.3.5234': attribute type 5 has an invalid length. [ 663.484955][T22994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5234'. [ 663.552884][T22986] syzkaller0: entered promiscuous mode [ 663.559055][T22986] syzkaller0: entered allmulticast mode [ 663.572150][ T36] bridge_slave_1: left allmulticast mode [ 663.579832][ T36] bridge_slave_1: left promiscuous mode [ 663.588173][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.638147][ T36] bridge_slave_0: left allmulticast mode [ 663.643944][ T36] bridge_slave_0: left promiscuous mode [ 663.672966][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.711553][ T36] batman_adv: batadv0: Interface deactivated: gretap2 [ 663.895041][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'. [ 663.909719][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'. [ 663.912361][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 663.919642][T23012] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 664.032509][ T36] batman_adv: batadv0: Removing interface: gretap2 [ 664.135691][ T36] bond4 (unregistering): (slave geneve3): Releasing active interface [ 664.186767][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.204310][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.214652][ T36] bond0 (unregistering): Released all slaves [ 664.225655][ T36] bond1 (unregistering): Released all slaves [ 664.240798][ T36] bond2 (unregistering): Released all slaves [ 664.260046][ T36] bond3 (unregistering): Released all slaves [ 664.279295][ T36] bond4 (unregistering): Released all slaves [ 664.301492][ T36] bond5 (unregistering): Released all slaves [ 664.323032][ T36] bond6 (unregistering): Released all slaves [ 664.337754][ T36] bond7 (unregistering): Released all slaves [ 664.352694][ T36] bond8 (unregistering): Released all slaves [ 664.369549][ T36] bond9 (unregistering): Released all slaves [ 664.384405][ T36] bond10 (unregistering): Released all slaves [ 664.411438][ T36] bond11 (unregistering): Released all slaves [ 664.436193][ T36] bond12 (unregistering): Released all slaves [ 664.450905][ T36] bond13 (unregistering): Released all slaves [ 664.475273][T22994] geneve4: entered promiscuous mode [ 664.480733][T22994] geneve4: entered allmulticast mode [ 664.691876][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5241'. [ 667.107426][ T6538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 38677 - 0 [ 667.147950][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 38677 - 0 [ 667.295894][T23029] netlink: 'syz.3.5244': attribute type 7 has an invalid length. [ 667.325416][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5244'. [ 667.334721][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 38677 - 0 [ 667.346967][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 38677 - 0 [ 667.609634][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5246'. [ 667.645597][T23027] lo speed is unknown, defaulting to 1000 [ 667.664662][T23027] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.832415][T23049] FAULT_INJECTION: forcing a failure. [ 667.832415][T23049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.851655][T23049] CPU: 0 UID: 0 PID: 23049 Comm: syz.1.5249 Not tainted syzkaller #0 PREEMPT(full) [ 667.851683][T23049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.851695][T23049] Call Trace: [ 667.851704][T23049] [ 667.851714][T23049] dump_stack_lvl+0xe8/0x150 [ 667.851756][T23049] should_fail_ex+0x40c/0x560 [ 667.851785][T23049] _copy_from_iter+0x1d3/0x1660 [ 667.851807][T23049] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 667.851833][T23049] ? rcu_is_watching+0x15/0xb0 [ 667.851862][T23049] ? trace_kmem_cache_alloc+0x29/0xe0 [ 667.851887][T23049] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 667.851910][T23049] ? __pfx__copy_from_iter+0x10/0x10 [ 667.851932][T23049] ? __alloc_skb+0x276/0x7a0 [ 667.851950][T23049] ? __alloc_skb+0x276/0x7a0 [ 667.851973][T23049] ? netlink_sendmsg+0x650/0xb40 [ 667.851994][T23049] ? skb_put+0x112/0x210 [ 667.852016][T23049] netlink_sendmsg+0x6c0/0xb40 [ 667.852047][T23049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.852074][T23049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 667.852107][T23049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.852129][T23049] sock_sendmsg_nosec+0x13a/0x180 [ 667.852158][T23049] ____sys_sendmsg+0x54e/0x850 [ 667.852184][T23049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.852214][T23049] ? import_iovec+0x73/0xa0 [ 667.852242][T23049] ___sys_sendmsg+0x2a5/0x360 [ 667.852263][T23049] ? __lock_acquire+0x683/0x2cf0 [ 667.852292][T23049] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.852351][T23049] ? __fget_files+0x2a/0x420 [ 667.852375][T23049] ? __fget_files+0x3a2/0x420 [ 667.852410][T23049] __x64_sys_sendmsg+0x1b1/0x290 [ 667.852435][T23049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.852476][T23049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.852498][T23049] do_syscall_64+0x174/0x580 [ 667.852525][T23049] ? trace_irq_disable+0x3b/0x140 [ 667.852549][T23049] ? clear_bhb_loop+0x70/0xc0 [ 667.852573][T23049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.852593][T23049] RIP: 0033:0x7f4c4b59e0d9 [ 667.852617][T23049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.852634][T23049] RSP: 002b:00007f4c4c495028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.852658][T23049] RAX: ffffffffffffffda RBX: 00007f4c4b825fa0 RCX: 00007f4c4b59e0d9 [ 667.852672][T23049] RDX: 0000000024008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 667.852685][T23049] RBP: 00007f4c4c495090 R08: 0000000000000000 R09: 0000000000000000 [ 667.852697][T23049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.852709][T23049] R13: 00007f4c4b826038 R14: 00007f4c4b825fa0 R15: 00007fff50c1b368 [ 667.852753][T23049] [ 668.471831][ T36] hsr_slave_0: left promiscuous mode [ 668.506951][ T36] hsr_slave_1: left promiscuous mode [ 668.544192][ T36] veth1_macvtap: left promiscuous mode [ 668.571393][ T36] veth0_macvtap: left promiscuous mode [ 668.593895][ T36] veth1_vlan: left promiscuous mode [ 668.609141][ T36] veth0_vlan: left promiscuous mode [ 668.973724][T23092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5260'. [ 669.113312][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5260'. [ 669.123117][ T36] team0 (unregistering): Port device team_slave_1 removed [ 669.133510][T23097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5260'. [ 669.148346][T23088] can: request_module (can-proto-3) failed. [ 669.158519][ T36] team0 (unregistering): Port device team_slave_0 removed [ 669.185654][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5260'. [ 669.492743][T23097] veth5: entered allmulticast mode [ 669.581872][T23088] bond10 (unregistering): Released all slaves [ 669.665597][T23104] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5262'. [ 669.727883][T23104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.101888][ T36] IPVS: stop unused estimator thread 0... [ 670.543013][T23129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5271'. [ 670.580628][T23136] syzkaller0: entered promiscuous mode [ 670.586449][T23136] syzkaller0: entered allmulticast mode [ 670.614880][T23135] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5273'. [ 671.654849][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 671.820731][T23171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5285'. [ 671.858276][T23171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5285'. [ 671.885218][T23167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.638161][T23193] pim6reg: entered allmulticast mode [ 673.089931][T23227] lo speed is unknown, defaulting to 1000 [ 673.141452][ T5267] veth0_vlan: left promiscuous mode [ 673.171351][T23227] virt_wifi0 speed is unknown, defaulting to 1000 [ 673.180430][ T24] veth0_vlan: entered promiscuous mode [ 673.734190][T23256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 674.518565][T23295] tipc: Started in network mode [ 674.542143][T23295] tipc: Node identity 78563452785634122143658721436587, cluster identity 4711 [ 674.719794][T23294] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 674.735179][T23308] __nla_validate_parse: 6 callbacks suppressed [ 674.735201][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5319'. [ 674.861286][T23311] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5320'. [ 676.247299][T23380] tipc: Enabling of bearer rejected, failed to enable media [ 676.445043][T23390] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5346'. [ 676.547574][T23395] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5347'. [ 676.730953][T23402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5349'. [ 676.793175][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5351'. [ 676.984801][T23414] netlink: 'syz.1.5353': attribute type 21 has an invalid length. [ 677.021693][T23414] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5353'. [ 677.138401][T23412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5354'. [ 677.168863][T23429] netlink: 'syz.3.5357': attribute type 12 has an invalid length. [ 677.180837][T23412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5354'. [ 677.229134][T23412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5354'. [ 677.562672][T23437] lo speed is unknown, defaulting to 1000 [ 677.608113][T23437] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.508511][T23493] netlink: 'syz.3.5374': attribute type 1 has an invalid length. [ 678.514398][T23496] FAULT_INJECTION: forcing a failure. [ 678.514398][T23496] name failslab, interval 1, probability 0, space 0, times 0 [ 678.554114][T23496] CPU: 0 UID: 0 PID: 23496 Comm: syz.1.5375 Not tainted syzkaller #0 PREEMPT(full) [ 678.554142][T23496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.554154][T23496] Call Trace: [ 678.554163][T23496] [ 678.554172][T23496] dump_stack_lvl+0xe8/0x150 [ 678.554230][T23496] should_fail_ex+0x40c/0x560 [ 678.554261][T23496] should_failslab+0xa8/0x100 [ 678.554300][T23496] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 678.554326][T23496] ? skb_clone+0x212/0x3a0 [ 678.554361][T23496] ? skb_clone+0x212/0x3a0 [ 678.554426][T23496] skb_clone+0x212/0x3a0 [ 678.554454][T23496] ? nfnetlink_rcv+0x4b0/0x28c0 [ 678.554481][T23496] nfnetlink_rcv+0x4de/0x28c0 [ 678.554506][T23496] ? __dev_queue_xmit+0x29b/0x3820 [ 678.554549][T23496] ? __local_bh_enable_ip+0xd0/0x130 [ 678.554586][T23496] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.554631][T23496] ? __dev_queue_xmit+0x29b/0x3820 [ 678.554666][T23496] ? __local_bh_enable_ip+0xd0/0x130 [ 678.554686][T23496] ? __dev_queue_xmit+0x29b/0x3820 [ 678.554708][T23496] ? __dev_queue_xmit+0x1edc/0x3820 [ 678.554730][T23496] ? do_syscall_64+0x174/0x580 [ 678.554757][T23496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.554791][T23496] ? __dev_queue_xmit+0x29b/0x3820 [ 678.554814][T23496] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 678.554853][T23496] ? ref_tracker_free+0x689/0x830 [ 678.554878][T23496] ? __pfx_ref_tracker_free+0x10/0x10 [ 678.554910][T23496] ? __skb_clone+0x449/0x6c0 [ 678.554939][T23496] ? skb_clone+0x246/0x3a0 [ 678.554964][T23496] ? __netlink_deliver_tap+0x811/0x860 [ 678.554987][T23496] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.555016][T23496] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.555038][T23496] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.555067][T23496] netlink_unicast+0x7bb/0x940 [ 678.555100][T23496] netlink_sendmsg+0x813/0xb40 [ 678.555133][T23496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.555162][T23496] ? aa_sock_msg_perm+0xf1/0x1b0 [ 678.555199][T23496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.555224][T23496] sock_sendmsg_nosec+0x13a/0x180 [ 678.555256][T23496] ____sys_sendmsg+0x54e/0x850 [ 678.555293][T23496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.555327][T23496] ? import_iovec+0x73/0xa0 [ 678.555359][T23496] ___sys_sendmsg+0x2a5/0x360 [ 678.555381][T23496] ? __lock_acquire+0x683/0x2cf0 [ 678.555413][T23496] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.555474][T23496] ? __fget_files+0x2a/0x420 [ 678.555500][T23496] ? __fget_files+0x3a2/0x420 [ 678.555538][T23496] __x64_sys_sendmsg+0x1b1/0x290 [ 678.555564][T23496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.555606][T23496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.555629][T23496] do_syscall_64+0x174/0x580 [ 678.555660][T23496] ? clear_bhb_loop+0x70/0xc0 [ 678.555686][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.555707][T23496] RIP: 0033:0x7f4c4b59e0d9 [ 678.555729][T23496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.555747][T23496] RSP: 002b:00007f4c4c495028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.555770][T23496] RAX: ffffffffffffffda RBX: 00007f4c4b825fa0 RCX: 00007f4c4b59e0d9 [ 678.555785][T23496] RDX: 0000000024008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 678.555798][T23496] RBP: 00007f4c4c495090 R08: 0000000000000000 R09: 0000000000000000 [ 678.555812][T23496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.555825][T23496] R13: 00007f4c4b826038 R14: 00007f4c4b825fa0 R15: 00007fff50c1b368 [ 678.555859][T23496] [ 678.559994][T23493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 679.107564][T23519] netlink: 'syz.3.5380': attribute type 1 has an invalid length. [ 679.193761][T23519] bond7: entered promiscuous mode [ 679.217504][T23519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 679.653367][T23555] ip_tables: iptables: counters copy to user failed while replacing table [ 679.872951][T23548] __nla_validate_parse: 2 callbacks suppressed [ 679.872973][T23548] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5387'. [ 680.255694][T23573] batman_adv: batadv0: Adding interface: macvtap1 [ 680.283417][T23573] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.323275][T23573] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 680.387090][T23581] netlink: 'syz.3.5398': attribute type 12 has an invalid length. [ 680.445583][T23573] batman_adv: batadv0: Removing interface: macvtap1 [ 680.690671][T23590] FAULT_INJECTION: forcing a failure. [ 680.690671][T23590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.726346][T23590] CPU: 0 UID: 0 PID: 23590 Comm: syz.0.5402 Not tainted syzkaller #0 PREEMPT(full) [ 680.726377][T23590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.726389][T23590] Call Trace: [ 680.726398][T23590] [ 680.726408][T23590] dump_stack_lvl+0xe8/0x150 [ 680.726442][T23590] should_fail_ex+0x40c/0x560 [ 680.726468][T23590] _copy_from_user+0x2d/0xb0 [ 680.726496][T23590] kstrtouint_from_user+0xd6/0x180 [ 680.726526][T23590] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 680.726567][T23590] proc_fail_nth_write+0x8e/0x210 [ 680.726598][T23590] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 680.726636][T23590] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 680.726664][T23590] vfs_write+0x296/0xba0 [ 680.726704][T23590] ? __pfx_vfs_write+0x10/0x10 [ 680.726734][T23590] ? __fget_files+0x2a/0x420 [ 680.726765][T23590] ? __fget_files+0x3a2/0x420 [ 680.726788][T23590] ? __fget_files+0x2a/0x420 [ 680.726822][T23590] ksys_write+0x150/0x270 [ 680.726852][T23590] ? __pfx_ksys_write+0x10/0x10 [ 680.726890][T23590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.726913][T23590] do_syscall_64+0x174/0x580 [ 680.726941][T23590] ? trace_irq_disable+0x3b/0x140 [ 680.726967][T23590] ? clear_bhb_loop+0x70/0xc0 [ 680.726994][T23590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.727014][T23590] RIP: 0033:0x7f2241b5e90e [ 680.727035][T23590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 680.727052][T23590] RSP: 002b:00007f2242a7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.727074][T23590] RAX: ffffffffffffffda RBX: 00007f2242a7e6c0 RCX: 00007f2241b5e90e [ 680.727089][T23590] RDX: 0000000000000001 RSI: 00007f2242a7e0a0 RDI: 0000000000000005 [ 680.727102][T23590] RBP: 00007f2242a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 680.727115][T23590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.727127][T23590] R13: 00007f2241e26038 R14: 00007f2241e25fa0 R15: 00007ffcc7a08c18 [ 680.727161][T23590] [ 681.382012][T23612] syzkaller0: entered promiscuous mode [ 681.408135][T23612] syzkaller0: entered allmulticast mode [ 681.444977][T23612] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5410'. [ 682.202582][T23644] syzkaller0: entered promiscuous mode [ 682.208460][T23644] syzkaller0: entered allmulticast mode [ 682.443944][T23655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'. [ 682.450520][T23651] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 682.453234][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5423'. [ 682.469340][T23656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5424'. [ 682.501886][T23651] bond10 (unregistering): Released all slaves [ 683.016816][T23686] syzkaller0: entered promiscuous mode [ 683.032636][T23686] syzkaller0: entered allmulticast mode [ 683.216633][T23693] netlink: 'syz.5.5437': attribute type 4 has an invalid length. [ 683.815225][T23712] FAULT_INJECTION: forcing a failure. [ 683.815225][T23712] name failslab, interval 1, probability 0, space 0, times 0 [ 683.836438][T23712] CPU: 0 UID: 0 PID: 23712 Comm: syz.0.5443 Not tainted syzkaller #0 PREEMPT(full) [ 683.836468][T23712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 683.836478][T23712] Call Trace: [ 683.836485][T23712] [ 683.836493][T23712] dump_stack_lvl+0xe8/0x150 [ 683.836523][T23712] should_fail_ex+0x40c/0x560 [ 683.836549][T23712] should_failslab+0xa8/0x100 [ 683.836575][T23712] __kmalloc_noprof+0xfe/0x720 [ 683.836599][T23712] ? nft_pernet+0x23/0x240 [ 683.836618][T23712] ? nf_tables_newrule+0x1524/0x28a0 [ 683.836643][T23712] ? nf_tables_newrule+0x1524/0x28a0 [ 683.836677][T23712] nf_tables_newrule+0x1524/0x28a0 [ 683.836726][T23712] ? __pfx_nf_tables_newrule+0x10/0x10 [ 683.836822][T23712] ? nfnl_pernet+0x23/0x240 [ 683.836857][T23712] ? nfnl_pernet+0x23/0x240 [ 683.836889][T23712] ? __nla_parse+0x40/0x60 [ 683.836919][T23712] nfnetlink_rcv+0x1288/0x28c0 [ 683.836980][T23712] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 683.837071][T23712] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.837107][T23712] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.837128][T23712] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.837155][T23712] netlink_unicast+0x7bb/0x940 [ 683.837195][T23712] netlink_sendmsg+0x813/0xb40 [ 683.837233][T23712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.837263][T23712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 683.837300][T23712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.837322][T23712] sock_sendmsg_nosec+0x13a/0x180 [ 683.837354][T23712] ____sys_sendmsg+0x54e/0x850 [ 683.837384][T23712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.837417][T23712] ? import_iovec+0x73/0xa0 [ 683.837455][T23712] ___sys_sendmsg+0x2a5/0x360 [ 683.837481][T23712] ? __lock_acquire+0x683/0x2cf0 [ 683.837511][T23712] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.837574][T23712] ? __fget_files+0x2a/0x420 [ 683.837599][T23712] ? __fget_files+0x3a2/0x420 [ 683.837637][T23712] __x64_sys_sendmsg+0x1b1/0x290 [ 683.837663][T23712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.837720][T23712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.837742][T23712] do_syscall_64+0x174/0x580 [ 683.837772][T23712] ? trace_irq_disable+0x3b/0x140 [ 683.837798][T23712] ? clear_bhb_loop+0x70/0xc0 [ 683.837823][T23712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.837844][T23712] RIP: 0033:0x7f2241b9e0d9 [ 683.837865][T23712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.837883][T23712] RSP: 002b:00007f2242a7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.837908][T23712] RAX: ffffffffffffffda RBX: 00007f2241e25fa0 RCX: 00007f2241b9e0d9 [ 683.837923][T23712] RDX: 0000000024008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 683.837937][T23712] RBP: 00007f2242a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 683.837950][T23712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.837963][T23712] R13: 00007f2241e26038 R14: 00007f2241e25fa0 R15: 00007ffcc7a08c18 [ 683.837998][T23712] [ 684.277077][T23724] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5445'. [ 684.305728][T23724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5445'. [ 684.316572][T23724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5445'. [ 684.341437][T23724] tipc: Cannot configure node identity twice [ 684.366609][T23730] netlink: 'syz.3.5449': attribute type 4 has an invalid length. [ 684.517916][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5451'. [ 684.621273][T23741] syzkaller0: entered promiscuous mode [ 684.641470][T23741] syzkaller0: entered allmulticast mode [ 684.839372][T23757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5455'. [ 685.189221][T23771] netlink: 'syz.1.5461': attribute type 4 has an invalid length. [ 685.804342][T23795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5467'. [ 685.972423][T23800] syzkaller0: entered promiscuous mode [ 685.984223][T23800] syzkaller0: entered allmulticast mode [ 686.094443][T23804] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 686.158982][T23817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5469'. [ 686.319036][T23825] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 686.444039][T23834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 686.450290][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5475'. [ 686.460686][T23834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5477'. [ 686.463849][T23833] netlink: 'syz.3.5476': attribute type 4 has an invalid length. [ 686.498131][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5477'. [ 686.668928][T23838] bond10: Removing last arp target with arp_interval on [ 686.856090][T23854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5481'. [ 686.895451][T23856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5482'. [ 686.931066][T23856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5482'. [ 686.956233][T23856] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5482'. [ 687.015587][T23856] netlink: 'syz.0.5482': attribute type 1 has an invalid length. [ 687.024212][T23862] syzkaller0: entered promiscuous mode [ 687.033274][T23862] syzkaller0: entered allmulticast mode [ 687.533718][T23891] netlink: 'syz.2.5493': attribute type 4 has an invalid length. [ 687.943793][T23911] IPVS: Unknown mcast interface: vcan0 [ 687.975071][T23912] syzkaller0: entered promiscuous mode [ 687.997478][T23912] syzkaller0: entered allmulticast mode [ 688.099959][T23911] nbd3: detected capacity change from 0 to 63 [ 688.132801][ T1658] [ 688.135188][ T1658] ====================================================== [ 688.138232][T23918] block nbd3: NBD_DISCONNECT [ 688.142290][ T1658] WARNING: possible circular locking dependency detected [ 688.142353][ T1658] syzkaller #0 Not tainted [ 688.158425][ T1658] ------------------------------------------------------ [ 688.163184][T23918] block nbd3: Disconnected due to user request. [ 688.165518][ T1658] kworker/0:1H/1658 is trying to acquire lock: [ 688.165536][ T1658] ffff888057ae1268 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 688.165726][ T1658] [ 688.165726][ T1658] but task is already holding lock: [ 688.165734][ T1658] ffff8880280ae178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 688.165786][ T1658] [ 688.165786][ T1658] which lock already depends on the new lock. [ 688.165786][ T1658] [ 688.165795][ T1658] [ 688.165795][ T1658] the existing dependency chain (in reverse order) is: [ 688.165803][ T1658] [ 688.165803][ T1658] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 688.165862][ T1658] __mutex_lock+0x19d/0x1550 [ 688.165892][ T1658] nbd_queue_rq+0xc1/0x1150 [ 688.165913][ T1658] blk_mq_dispatch_rq_list+0x499/0x1990 [ 688.165996][ T1658] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 688.166040][ T1658] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 688.166063][ T1658] blk_mq_run_work_fn+0x16c/0x300 [ 688.166090][ T1658] process_scheduled_works+0xa8e/0x14e0 [ 688.166109][ T1658] worker_thread+0xa47/0xfb0 [ 688.166126][ T1658] kthread+0x388/0x470 [ 688.166145][ T1658] ret_from_fork+0x514/0xb70 [ 688.166168][ T1658] ret_from_fork_asm+0x1a/0x30 [ 688.166193][ T1658] [ 688.166193][ T1658] -> #5 (set->srcu){.+.+}-{0:0}: [ 688.166231][ T1658] __synchronize_srcu+0xc9/0x2f0 [ 688.166253][ T1658] elevator_switch+0x1e8/0x7b0 [ 688.166295][ T1658] elevator_change+0x2fa/0x480 [ 688.166315][ T1658] elevator_set_default+0x375/0x440 [ 688.166334][ T1658] blk_register_queue+0x3f3/0x4e0 [ 688.166376][ T1658] __add_disk+0x6cb/0xe30 [ 688.166407][ T1658] add_disk_fwnode+0x100/0x3a0 [ 688.185066][T23918] block nbd3: shutting down sockets [ 688.187840][ T1658] nbd_dev_add+0x733/0xb60 [ 688.187873][ T1658] nbd_init+0x15f/0x1e0 [ 688.188003][ T1658] do_one_initcall+0x250/0x870 [ 688.188027][ T1658] do_initcall_level+0x10a/0x1a0 [ 688.188079][ T1658] do_initcalls+0x59/0xa0 [ 688.188096][ T1658] kernel_init_freeable+0x29d/0x3e0 [ 688.372792][ T1658] kernel_init+0x1d/0x1d0 [ 688.377684][ T1658] ret_from_fork+0x514/0xb70 [ 688.382890][ T1658] ret_from_fork_asm+0x1a/0x30 [ 688.388182][ T1658] [ 688.388182][ T1658] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 688.396037][ T1658] __mutex_lock+0x19d/0x1550 [ 688.401155][ T1658] elevator_change+0x1af/0x480 [ 688.406441][ T1658] elevator_set_none+0xb5/0x140 [ 688.411924][ T1658] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 688.418256][ T1658] nbd_start_device+0x189/0xb30 [ 688.423638][ T1658] nbd_genl_connect+0x1597/0x1c10 [ 688.429271][ T1658] genl_family_rcv_msg_doit+0x233/0x340 [ 688.435349][ T1658] genl_rcv_msg+0x614/0x7a0 [ 688.440398][ T1658] netlink_rcv_skb+0x226/0x4a0 [ 688.445712][ T1658] genl_rcv+0x28/0x40 [ 688.450226][ T1658] netlink_unicast+0x7bb/0x940 [ 688.455520][ T1658] netlink_sendmsg+0x813/0xb40 [ 688.460807][ T1658] sock_sendmsg_nosec+0x13a/0x180 [ 688.466451][ T1658] ____sys_sendmsg+0x54e/0x850 [ 688.471743][ T1658] ___sys_sendmsg+0x2a5/0x360 [ 688.476954][ T1658] __x64_sys_sendmsg+0x1b1/0x290 [ 688.482416][ T1658] do_syscall_64+0x174/0x580 [ 688.487625][ T1658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.494040][ T1658] [ 688.494040][ T1658] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 688.502760][ T1658] blk_alloc_queue+0x544/0x690 [ 688.508050][ T1658] __blk_mq_alloc_disk+0x194/0x390 [ 688.513687][ T1658] nbd_dev_add+0x494/0xb60 [ 688.518638][ T1658] nbd_init+0x15f/0x1e0 [ 688.523320][ T1658] do_one_initcall+0x250/0x870 [ 688.528611][ T1658] do_initcall_level+0x10a/0x1a0 [ 688.534101][ T1658] do_initcalls+0x59/0xa0 [ 688.538949][ T1658] kernel_init_freeable+0x29d/0x3e0 [ 688.544670][ T1658] kernel_init+0x1d/0x1d0 [ 688.549527][ T1658] ret_from_fork+0x514/0xb70 [ 688.554646][ T1658] ret_from_fork_asm+0x1a/0x30 [ 688.559959][ T1658] [ 688.559959][ T1658] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 688.567264][ T1658] fs_reclaim_acquire+0x71/0x100 [ 688.572737][ T1658] __kmalloc_noprof+0xbc/0x720 [ 688.578021][ T1658] tls_sw_sendmsg+0x59b/0x2b50 [ 688.583558][ T1658] sock_sendmsg_nosec+0x90/0x180 [ 688.589028][ T1658] sock_sendmsg+0x1ca/0x2d0 [ 688.594059][ T1658] splice_to_socket+0xb5e/0x12a0 [ 688.599521][ T1658] direct_splice_actor+0x101/0x160 [ 688.605155][ T1658] splice_direct_to_actor+0x57b/0xcb0 [ 688.611049][ T1658] do_splice_direct+0x195/0x290 [ 688.616423][ T1658] do_sendfile+0x52e/0x7c0 [ 688.621366][ T1658] __se_sys_sendfile64+0x144/0x1a0 [ 688.626996][ T1658] do_syscall_64+0x174/0x580 [ 688.632125][ T1658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.638575][ T1658] [ 688.638575][ T1658] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 688.646671][ T1658] lock_sock_nested+0x41/0x100 [ 688.651973][ T1658] inet_shutdown+0x6a/0x390 [ 688.657005][ T1658] nbd_mark_nsock_dead+0x2cb/0x550 [ 688.662673][ T1658] recv_work+0x1cee/0x1e10 [ 688.667607][ T1658] process_scheduled_works+0xa8e/0x14e0 [ 688.673678][ T1658] worker_thread+0xa47/0xfb0 [ 688.678790][ T1658] kthread+0x388/0x470 [ 688.683383][ T1658] ret_from_fork+0x514/0xb70 [ 688.688499][ T1658] ret_from_fork_asm+0x1a/0x30 [ 688.693812][ T1658] [ 688.693812][ T1658] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 688.701486][ T1658] __lock_acquire+0x1520/0x2cf0 [ 688.706880][ T1658] lock_acquire+0x106/0x350 [ 688.711917][ T1658] __mutex_lock+0x19d/0x1550 [ 688.717043][ T1658] nbd_queue_rq+0x373/0x1150 [ 688.722168][ T1658] blk_mq_dispatch_rq_list+0x499/0x1990 [ 688.728242][ T1658] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 688.735115][ T1658] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 688.741653][ T1658] blk_mq_run_work_fn+0x16c/0x300 [ 688.747218][ T1658] process_scheduled_works+0xa8e/0x14e0 [ 688.753287][ T1658] worker_thread+0xa47/0xfb0 [ 688.758399][ T1658] kthread+0x388/0x470 [ 688.762994][ T1658] ret_from_fork+0x514/0xb70 [ 688.768109][ T1658] ret_from_fork_asm+0x1a/0x30 [ 688.773401][ T1658] [ 688.773401][ T1658] other info that might help us debug this: [ 688.773401][ T1658] [ 688.783623][ T1658] Chain exists of: [ 688.783623][ T1658] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 688.783623][ T1658] [ 688.795742][ T1658] Possible unsafe locking scenario: [ 688.795742][ T1658] [ 688.803314][ T1658] CPU0 CPU1 [ 688.808742][ T1658] ---- ---- [ 688.814222][ T1658] lock(&cmd->lock); [ 688.818216][ T1658] lock(set->srcu); [ 688.824640][ T1658] lock(&cmd->lock); [ 688.831163][ T1658] lock(&nsock->tx_lock); [ 688.835611][ T1658] [ 688.835611][ T1658] *** DEADLOCK *** [ 688.835611][ T1658] [ 688.843790][ T1658] 4 locks held by kworker/0:1H/1658: [ 688.849073][ T1658] #0: ffff8880206f8140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 688.860172][ T1658] #1: ffffc900062a7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 688.873134][ T1658] #2: ffff888027e3bb18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 688.882717][ T1658] #3: ffff8880280ae178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 688.891775][ T1658] [ 688.891775][ T1658] stack backtrace: [ 688.897666][ T1658] CPU: 0 UID: 0 PID: 1658 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 688.897685][ T1658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.897698][ T1658] Workqueue: kblockd blk_mq_run_work_fn [ 688.897722][ T1658] Call Trace: [ 688.897730][ T1658] [ 688.897738][ T1658] dump_stack_lvl+0xe8/0x150 [ 688.897759][ T1658] print_circular_bug+0x2e1/0x300 [ 688.897782][ T1658] check_noncircular+0x12e/0x150 [ 688.897806][ T1658] __lock_acquire+0x1520/0x2cf0 [ 688.897832][ T1658] ? nbd_queue_rq+0x373/0x1150 [ 688.897851][ T1658] lock_acquire+0x106/0x350 [ 688.897869][ T1658] ? nbd_queue_rq+0x373/0x1150 [ 688.897892][ T1658] __mutex_lock+0x19d/0x1550 [ 688.897914][ T1658] ? nbd_queue_rq+0x373/0x1150 [ 688.897933][ T1658] ? ret_from_fork_asm+0x1a/0x30 [ 688.897953][ T1658] ? unwind_next_frame+0x8f/0x2550 [ 688.897977][ T1658] ? nbd_queue_rq+0x373/0x1150 [ 688.897996][ T1658] ? __pfx___mutex_lock+0x10/0x10 [ 688.898017][ T1658] ? ret_from_fork_asm+0x1a/0x30 [ 688.898038][ T1658] ? stack_trace_save+0xa9/0x100 [ 688.898055][ T1658] ? __pfx_stack_trace_save+0x10/0x10 [ 688.898073][ T1658] nbd_queue_rq+0x373/0x1150 [ 688.898095][ T1658] ? __lock_acquire+0x13e8/0x2cf0 [ 688.898113][ T1658] ? __pfx_nbd_queue_rq+0x10/0x10 [ 688.898138][ T1658] blk_mq_dispatch_rq_list+0x499/0x1990 [ 688.898160][ T1658] ? sbitmap_get+0x229/0x390 [ 688.898216][ T1658] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 688.898233][ T1658] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 688.898252][ T1658] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 688.898277][ T1658] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 688.898298][ T1658] ? blk_mq_run_work_fn+0x144/0x300 [ 688.898319][ T1658] ? blk_mq_run_work_fn+0x144/0x300 [ 688.898342][ T1658] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 688.898361][ T1658] ? blk_mq_run_work_fn+0x144/0x300 [ 688.898381][ T1658] blk_mq_run_work_fn+0x16c/0x300 [ 688.898403][ T1658] ? process_scheduled_works+0xa20/0x14e0 [ 688.898418][ T1658] process_scheduled_works+0xa8e/0x14e0 [ 688.898440][ T1658] ? __pfx_process_scheduled_works+0x10/0x10 [ 688.898457][ T1658] ? assign_work+0x3cf/0x5d0 [ 688.898473][ T1658] worker_thread+0xa47/0xfb0 [ 688.898492][ T1658] ? __kthread_parkme+0x71/0x1f0 [ 688.898511][ T1658] kthread+0x388/0x470 [ 688.898529][ T1658] ? __pfx_worker_thread+0x10/0x10 [ 688.898544][ T1658] ? __pfx_kthread+0x10/0x10 [ 688.898562][ T1658] ret_from_fork+0x514/0xb70 [ 688.898582][ T1658] ? __pfx_ret_from_fork+0x10/0x10 [ 688.898600][ T1658] ? __switch_to+0xc89/0x1420 [ 688.898617][ T1658] ? __pfx_kthread+0x10/0x10 [ 688.898635][ T1658] ret_from_fork_asm+0x1a/0x30 [ 688.898665][ T1658] [ 689.159332][ T1658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.168978][ T1658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 689.216624][ T1576] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 689.226344][ T1576] Buffer I/O error on dev nbd3, logical block 1, async page read [ 689.234127][ T1576] Buffer I/O error on dev nbd3, logical block 2, async page read [ 689.242231][ T1576] Buffer I/O error on dev nbd3, logical block 3, async page read [ 689.250529][ T1576] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.260415][ T1576] Buffer I/O error on dev nbd3, logical block 0, async page read [ 689.268498][ T1576] Buffer I/O error on dev nbd3, logical block 1, async page read [ 689.276506][ T1576] Buffer I/O error on dev nbd3, logical block 2, async page read [ 689.284285][ T1576] Buffer I/O error on dev nbd3, logical block 3, async page read [ 689.292577][ T1576] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.309557][ T1576] Buffer I/O error on dev nbd3, logical block 0, async page read [ 689.317698][ T1576] Buffer I/O error on dev nbd3, logical block 1, async page read [ 689.325834][ T1576] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.339696][ T1576] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.349521][ T1576] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.362513][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.382823][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.392488][T23792] ldm_validate_partition_table(): Disk read failed. [ 689.399363][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 689.409359][T23792] Dev nbd3: unable to read RDB block 0 [ 689.415178][T23792] nbd3: unable to read partition table [ 689.424029][T23792] ldm_validate_partition_table(): Disk read failed. [ 689.431554][T23792] Dev nbd3: unable to read RDB block 0 [ 689.438406][T23792] nbd3: unable to read partition table