last executing test programs: 4m33.984145621s ago: executing program 4 (id=2688): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fff, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="192c0300120100dc3fd9ee7d61d75c7c47764c65d7355602566baa69f4bb2e69404506c65b1d059b0768eb734283138d4c960cc0d4b3daacf30d0340f83c30f520899695b20718ff4999f8a61b19c926f2a4c987383c8b5fe8444d6e5fa228285fc58f9fa86f930294786cbfe9d06132a382c6bf2af1461d88b94c3173cf40f4fc40a8ffc89b0d50043053132f3e95817b2867a15f2ab7ecbc3c31e3a583444b63d32d955caa5e5ecd2f2bac272be89a8c739e1c92e9c73b25707000"/201, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e23, @private=0xa010102}}}, &(0x7f0000000140)=0x84) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES8=r1], 0x158}, 0x1, 0xba01, 0x0, 0x80}, 0x44) 4m33.85957747s ago: executing program 0 (id=2690): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x3c, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x12, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1}}], 0x1, 0x400c404) writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="2b5438cb299c45d594cda7b9a066357276250fa56578344e20f4a4cacdcb71cc427bf0a53788", 0x26}], 0x1) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140), 0x1}, 0x4000080) 4m33.629736542s ago: executing program 2 (id=2693): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xf8, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 4m33.555977409s ago: executing program 0 (id=2694): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r4, r7, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040001) 4m33.554979825s ago: executing program 4 (id=2695): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x6, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0)={0x0, 0xa, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001100)=[0xffffffffffffffff, 0x1], &(0x7f0000001140)=[{0x0, 0x3, 0x7, 0x6}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001240)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r0, 0x0, 0x1b, 0x2, &(0x7f0000001280)="54d17eb0ac7bd403bdfe7142591b01b194f427e47f58ccc0b86b38", &(0x7f00000012c0)=""/2, 0x9, 0x0, 0xdb, 0x45, &(0x7f0000001300)="a1fb31d7cc3c7aa164c7572a504d7d6f60cb779e749bb4506f94505c4b8db0dbdf1b8dbd399c706630ff609e7bd121605e663ab17aff47d3652237990672665af0f381b56d0095e83a9afa269392385087674cadcb83f0481ea0060226ef6de654a765a7bdcd39bba960b802e6abc547260b68dbb5674cba473443df8ed9a567bc544e77db2fa64dacba4c9b754e5141817934792d15e3f6238648e244cb2b63e6c2e44c4328b6cba3099e396892161edcfe5507446c67a465f8d0ec2fa5af1bdcb05c9637df6e60bb317f4afcc8b8d8e4d185ed6569ae4941ce28", &(0x7f0000001400)="72be7a4d26b64209d01159d32dcfaa838ce4c0975860009d290919bf4080485c93ad647b603ae6f4e72024b717f76ffbe20b602cc2bddf929d4a6e44f6355b66b8eaba3a5c", 0x2, 0x0, 0x4}, 0x50) socket$netlink(0x10, 0x3, 0x5) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001500)) getpeername$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001580)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000015c0)={@mcast2, 0x1e, r2}) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001600)="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") getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r0, 0x0, 0x8, 0xf1, &(0x7f0000001700)="5872ae50d90c9045", &(0x7f0000001740)=""/241, 0x8, 0x0, 0xb, 0x1e, &(0x7f0000001840)="edd6424afbd04a4fc9c015", &(0x7f0000001880)="a905ec125150d738cf4df99f5376f672b1e45171dac892f52d2dcfc1078e", 0x6, 0x0, 0x4}, 0x50) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000001940)=""/102, &(0x7f00000019c0)=0x66) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x6, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x4}]}, &(0x7f0000001a80)='GPL\x00', 0xd50, 0x9e, &(0x7f0000001ac0)=""/158, 0x40f00, 0x74, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001bc0)={0x4, 0xe, 0xfffffffa, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c40)=[{0x3, 0x1, 0x3}], 0x10, 0x5}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000001a00)='block_rq_remap\x00', r4, 0x0, 0x524b143b}, 0x18) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6b, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe9b}}, 0x9, 0x8}, &(0x7f0000001e40)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001e80)={r7, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001f40)=0x2, 0x4) syz_emit_ethernet(0x56, &(0x7f0000001f80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x19, 0x0, 0x0, 0x0, "da4a7f94d431d1a8b254a48f008d3145abed0f1ec1a1f638bd7569ed5d457b470f6b5ffdd23462c8cf3efe86c17fde4e7438c8fb44ea3ba6b863af86ae131cbc"}}}}, &(0x7f0000002000)={0x0, 0x3, [0xb63, 0x249, 0x96c, 0x5b7]}) sendto$inet6(r1, &(0x7f0000002040)="9ff090413e450bee2a2b8a850e7a8add916e69bc7873f3958213f4e8de8db1577c17ccd4e9dca937596924f61ed6c2edd28661b8cd90fe0634b67c1c6ba5b8d4436430c6ecb667055007fc93be948fe09d", 0x51, 0x4048044, &(0x7f00000020c0)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc683}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000002100)={r7, 0x1000, "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"}, &(0x7f0000003140)=0x1008) r8 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000003180)) sendto$ax25(0xffffffffffffffff, &(0x7f00000031c0)="7f4eed0cd674caac495909ac77867e7fe40324349c0e05354347bae9d185f410de576167a6d911e3c38d353f7b0d98a36975b53881a23d7dc21c46977d361da1d8cfa3c1fc7dc7fb71627b6c47af5b8c7a54845fa5af5c31dc8261f9217aad04fcdf9e4089ff0e3149c37d426877fdbab3fa959f7b87c6bdbfc2c3137f669ff57ddba3e2aeea9b4ea7a35d58f17e0e07a186cb3c6d14aeb7226f3ef4", 0x9c, 0x20004880, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000003280), 0x101000, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000032c0)={0x0, 0x2, 0x1, [0x0, 0xb, 0x4, 0x7, 0xa9], [0x2882, 0x6641d108, 0x1, 0x8, 0x5, 0x0, 0x7b, 0x1, 0x25c, 0x2, 0x0, 0xb, 0xfffffffffffffffd, 0x1000, 0xb88a, 0x6, 0xba32, 0x5, 0x7, 0x6, 0x10001, 0x0, 0x8, 0x3, 0x5, 0x80000000, 0x5, 0x8, 0x5, 0x7ff, 0x9, 0x0, 0x4, 0x400, 0x2, 0x2, 0x81, 0xfffffffffffffffc, 0xab, 0x8000000000000001, 0xffffffff, 0x3, 0x3, 0x7, 0x7, 0x7fffffffffffffff, 0x9, 0x1a2, 0xb28a, 0x7, 0x5, 0x80000001, 0x2, 0x40, 0x8, 0x1, 0x9, 0x522, 0x3, 0x8, 0x1, 0x40, 0x7, 0xfffffffffffffffc, 0x81, 0x7fffffffffffffff, 0x1, 0x8, 0xfffffffffffffffb, 0x3, 0x5, 0x200, 0x6, 0x8, 0xf, 0x7fffffffffffffff, 0x9, 0x800, 0x1ff, 0x6, 0x81, 0x7, 0x0, 0x10, 0x2, 0x7, 0x75, 0x3, 0x9, 0x100, 0x3, 0x8, 0x7, 0x5, 0x97d, 0x8, 0x7, 0xffffffffffffffde, 0x1ff, 0x4501, 0x9, 0xfffffffffffffc00, 0x8000000000000000, 0x8, 0x7fffffff, 0x7, 0x0, 0x2, 0x80000001, 0x3, 0x8, 0x3c1a, 0xfffffffffffffffe, 0x5, 0x9, 0x6, 0x3, 0x5, 0xffff, 0x9, 0x5]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000003700)={r9, 0x1, 0x96, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003b00), &(0x7f0000003b40)=0xc) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000003b80)={0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3, 0x3ff}) 4m33.344126993s ago: executing program 2 (id=2698): r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r5, 0x6, 0x11, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x880) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @broadcast}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="000b12d21b80648c2594f90324fbffffffffff1cff000000000000000000000248070500000000d1bd0000000000fd", 0x2f}, {&(0x7f0000000180)="abd3eb9885db00c5dc20365ae2e221969059947f3c2a09454256c7c3cd883e088dbbd2760edb920aa16407862ac9b27e09fec51d5c8f05278aab139a4d41a7f3ba078d01810e6e2a851d51305c80789bbfa65b59453a7c6fd062a1506230c58eb064e9db4e895c9721cbe4650d5e422ec40a9f819886980259dd3ca397fb531df3e6598b8041b54a0496e4247527022af98840a3c5eb", 0x96}], 0x2}, 0x0) 4m33.335989776s ago: executing program 4 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x4a}, 0x28) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async, rerun: 64) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async, rerun: 64) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) syz_emit_ethernet(0x76, &(0x7f0000001100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa81000000867660b33883003c3a00200100000000000000001c000000008b148add2d1d9e999302fe8000000000000000000000000000aa03009078000000006074cd7b00008800fc010000000000000000000000000000ff010000000000000000000000000001c6ffce"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x52, 0x2, {0x2, 0x8cb}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204040, 0x0) (async, rerun: 64) r10 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r9, 0x401c5820, &(0x7f0000000080)) (async) setsockopt$packet_int(r10, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000000080)={'team_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x10000000, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_FLOW={0x8, 0xb, 0x2}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 4m33.317422172s ago: executing program 0 (id=2700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8050) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r4, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4m33.114346707s ago: executing program 2 (id=2703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 4m33.059120948s ago: executing program 0 (id=2705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000040)="72107ca262da3270cbd43e000000", 0xe}], 0x1}, 0x3) (async) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ppoll(&(0x7f0000001b00)=[{r1, 0x1}], 0x1, &(0x7f0000001b80), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000600908be021d88c53f6e3d286"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) 4m33.05818979s ago: executing program 4 (id=2706): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) close(0x3) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r6, &(0x7f0000000540)=""/4096, 0x1000) (async) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x6, 0x8, 0x0, 0x1, [@generic="d812"]}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 4m32.953469716s ago: executing program 2 (id=2707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) 4m32.696463738s ago: executing program 0 (id=2708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x514a3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/178, 0xb2}], 0x1}, 0x5}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/12, 0xc}], 0x1, &(0x7f0000000580)=""/177, 0xb1}, 0x14b1}, {{&(0x7f0000000640)=@tipc=@id, 0x80, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/82, 0x52}], 0x4, &(0x7f0000001940)=""/110, 0x6e}, 0xffff}, {{&(0x7f00000019c0)=@isdn, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001c80)=""/51, 0x33}, {&(0x7f0000001a80)=""/63, 0x3f}], 0x2, &(0x7f0000001b00)=""/205, 0xcd}, 0x8}, {{&(0x7f0000001c00)=@isdn, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/182, 0xb6}, {&(0x7f0000001d80)=""/28, 0x1c}, {&(0x7f0000001dc0)=""/154, 0x9a}], 0x4, &(0x7f0000001ec0)=""/113, 0x71}, 0x8001}], 0x5, 0x11040, &(0x7f0000002080)) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000020c0)={0x120, r6, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x731}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x631d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeba1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7c45}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80c7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x120}}, 0x90) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) 4m32.596837857s ago: executing program 2 (id=2709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) close(r1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) (async) close(r1) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) (async) 4m32.596467119s ago: executing program 4 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000480001002cbd7000fcdbdf250a003800", @ANYRES32=r5, @ANYBLOB="06000000000000000600000014000100fe8000000000120000000000000000bb"], 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000) 4m32.255095454s ago: executing program 4 (id=2712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a010200000000000000000000000814000000110001000000000000000000000051f739ff58606ee22b693567b0cb7353d7dce3c60f447df716bf8a93"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xe, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x6000040, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x44) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 4m31.734639782s ago: executing program 32 (id=2712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a010200000000000000000000000814000000110001000000000000000000000051f739ff58606ee22b693567b0cb7353d7dce3c60f447df716bf8a93"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xe, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x6000040, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x44) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 4m31.691355523s ago: executing program 0 (id=2714): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendto$netrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x8, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x54, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x4, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4m31.487238269s ago: executing program 33 (id=2714): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendto$netrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x8, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x54, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x4, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4m31.464452176s ago: executing program 2 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a03020000000000000000020000000900020073797a30000000000900010073797a300000000040000380080001400000000008000240000000002c000380140001206e696376663000000900000000000000140001006e696376663000000000000000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) 4m31.464247339s ago: executing program 34 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a03020000000000000000020000000900020073797a30000000000900010073797a300000000040000380080001400000000008000240000000002c000380140001206e696376663000000900000000000000140001006e696376663000000000000000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) 2.830794743s ago: executing program 5 (id=5321): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0xfffffffd}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) (async) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x4788, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f00000005c0)=""/216, &(0x7f0000000080)=0xd8) 2.340101962s ago: executing program 3 (id=5329): syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) 2.255859341s ago: executing program 5 (id=5330): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0xfffffffc, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r5, &(0x7f0000001640)=[{{&(0x7f0000000380)=@ax25={{0x3, @rose}, [@rose, @null, @null, @null, @remote, @bcast, @default, @rose]}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000a40)=""/145, 0x91}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/125, 0x7d}, {&(0x7f0000000c00)=""/106, 0x6a}], 0x9}, 0x4}, {{&(0x7f0000000d40)=@sco={0x1f, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000000dc0)=""/80, 0x50}, {&(0x7f0000000e40)=""/81, 0x51}], 0x3, &(0x7f0000000ec0)=""/76, 0x4c}, 0x8000}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)=""/90, 0x5a}, {&(0x7f0000001040)=""/25, 0x19}, {&(0x7f0000001080)=""/73, 0x49}, {&(0x7f0000001100)=""/234, 0xea}], 0x4, &(0x7f0000001a80)=""/4096, 0x1000}, 0x1899fbdf}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001240)=""/252, 0xfc}], 0x1}, 0x2}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001400)=""/52, 0x34}, {&(0x7f0000001440)=""/35, 0x23}, {&(0x7f0000001480)=""/194, 0xc2}, {&(0x7f0000001580)=""/6, 0x6}], 0x4, &(0x7f0000001600)=""/13, 0xd}, 0x9}], 0x5, 0x20, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000000308010100000000000000000005000300df0000000400048000010072a77639e68754cf9186622bfadc833fdfaacb197662f3f2caa9b16d53b5a318e391819ee49fa17227b2f423d3a8f1b0f6679a64e8601ce54fbbe8989fd81caf650c2a6900c40d4b78cbaaf759f7134d0c2ae58f49448fd3a76c2c97b9de2990933f1eaa8c8613436fa2e949e65958524555b0f1a6b221d72f7a653890a3c11ab30a7f7d80418962b114086d29c4896d6f6b31888baae359ffa9a040f87a41e58036"], 0x20}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x4e22, 0x8, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x6, 0x2, 0x600d382c, 0x80, 0x4}, {0x17e, 0x9, 0x8, 0xfffffffffffffff8}, 0x100, 0x6e6bbb, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x4, 0x3, 0x7, 0x8, 0x6, 0x400}}, 0xe8) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000001780)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f070000004883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe092aa520af1e597e8449a805241a32ebd83ef082b1"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2.141797691s ago: executing program 7 (id=5331): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 65) 1.747030466s ago: executing program 7 (id=5336): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "f78597f14aeafc9529712a9bb84de804b45276f42cebfab53949192593c1b14f", "808d776bd15684533c8dc06be1efd6eb", {"e3a7680c689f194e40a36e6c2886b20e", "a3ab73c5648e791686ba9f6517d926eb"}}}}}}}}, 0x8e) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x48, 0x18, 0x8, 0x70bd2a, 0x25dfdbfb, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x48}}, 0x20040844) 1.743420669s ago: executing program 6 (id=5337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0, 0x6}) socketpair(0x1a, 0x80000, 0x2, &(0x7f00000001c0)) 1.539121181s ago: executing program 6 (id=5339): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async) accept(r0, 0x0, 0x0) 1.491789801s ago: executing program 7 (id=5340): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0x6, 0xb}, {0x5, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x7, 0x0, 0x1, 0x2}}}}]}, 0x4c}}, 0x44000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.487607315s ago: executing program 1 (id=5341): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r2, 0x917}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf389}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4048840) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf389}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4048840) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) 1.335162702s ago: executing program 6 (id=5342): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) (async) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x20008088) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.326146547s ago: executing program 1 (id=5343): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080) 1.236648152s ago: executing program 1 (id=5344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$key(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020003060f00000027bd7000ffdbdf2505000700ff800000a661c6ed233069b70a004e2400000005fc01000000000000000000000000000104000000000000000800190000000083234f88207ffffffffe80000000000000000000000000001c070000000a004e2200007208fc00000000000000000000000000000009000000"], 0x78}}, 0x8080) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x9aa, 0x5a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7, 0xffffffff, 0x32e}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x5, 0x4, {{0x23, 0x4, 0x0, 0x9, 0x8c, 0x66, 0x0, 0x3a, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@end, @ssrr={0x89, 0x17, 0xed, [@multicast1, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @local]}, @ssrr={0x89, 0xb, 0x50, [@multicast2, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "43edd9bff302963ff7104fde33ec"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x60, 0x3, 0xa, [{@local, 0x2}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x800}, {@empty, 0x4}, {@private=0xa010101, 0x40}]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f80000005400010029bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00030200fc02000000000000000000000000000086dd000020000100", @ANYRES32=r6, @ANYBLOB="00010200000000000000000000000000000000018edd000020000100", @ANYRES32=0x0, @ANYBLOB="0001000000000000000300000000018ecb00002000f55003c653dcfd33f2ab3d063e9dc34c9a2f9cfd7c00"/56, @ANYRES32=r7, @ANYBLOB="00010200ac1414aa00000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="00020100fe8000000000000000000000000000aa8edd000020000100", @ANYRES32=r8, @ANYBLOB="00020300ac1414bb0000000000000000000000000800000020000100", @ANYRES32=r9, @ANYBLOB="00000400ffffffff00"/24], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) 1.095357052s ago: executing program 3 (id=5345): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='netfs_failure\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) 1.093248464s ago: executing program 6 (id=5346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd28, 0x9, {{}, {@void, @val={0xc, 0x99, {0x8, 0x78}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x154, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf93}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff73}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x154}}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0xc080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)=@migrate={0xb0, 0x21, 0x8, 0x70bd25, 0x25dfdbfb, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 0x4e23, 0x9, 0xa, 0x0, 0x80, 0x27, r3, r7}, 0x6e6bb4, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@empty, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x1}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in6=@local, 0x0, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4008044) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000c80)={r0, r6, 0x8, 0x66, &(0x7f0000000c00)="f1da1155b276b13af1c96295b75c7df23a8e3d597befadc963ceb02399c67b53fb3004a4d97d80932f4d6ebbfb03607e46644e5edb48f499cb467d19a605412749ea4b9b75cb78388d79db2f33c6980548e678c01e1fc6d53c9defa82e6f7cd33884e1eebfdc", 0xe3, 0x0, 0x8, 0x8, 0x7, 0x2, 0x2, 'syz0\x00'}) r10 = socket(0x2c, 0x1, 0x2) connect$unix(r10, &(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r0) r12 = getpid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000e80)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb0, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x2004c841) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x4000, 0x0) ioctl$TUNSETLINK(r14, 0x400454cd, 0x110) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001040)={'vxcan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r0) 1.029960917s ago: executing program 5 (id=5347): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 66) 1.019966343s ago: executing program 3 (id=5348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x7c35, 0x6, 0x2, 0x3, 0x9, 0x3, 0x9, 0x7, 0x0}, &(0x7f0000000340)=0x20) (rerun: 32) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={r1, 0x4, 0xfff, 0x31, 0x3d, 0x9, 0x80, 0x0, {r1, @in6={{0xa, 0x4e21, 0x80000000, @local, 0x3}}, 0x3, 0x1, 0x7f, 0xfffffff8, 0x61}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, 0x8) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x5, 0xf}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003, {0x0, 0xf0}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2b, 0xfa, 0xd, 0x80000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x10, 0x40, 0xfffffa73}}) sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getnexthop={0x50, 0x6a, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r6}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) (async) r12 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e, 0x80800) (async, rerun: 32) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 32) vmsplice(r12, &(0x7f0000000180)=[{&(0x7f0000000200)="6d335dc88d0df02782b6fd9e15d1e41f5c2e3652c3029aef5ccc441aef45cf7bf6b182db48c0a4cf6198b259c03fdb239c58d6860b126961a2346a82edaf791f8e66cf7995d8eb245ee497a6215c94bfadf3a6b7230290be8b993948b82836142bec242f71be2364f5a2eca769fd64bb6d62ded0206e3bfd3760392732ac41034aaef654537af8b79b556ea860e74e613691f55335129917d7a0c72d621aa7fd16a2add3a392c454bfc470c13d73f3adcb25a044a772839ca93a05243c5884adae2144f1a973cd37173c973d83b7047971305f64db0ebbc03b1166f376be368583d3acc6ee535af721c0e1e0cc", 0xed}], 0x1, 0x8) 858.313732ms ago: executing program 7 (id=5349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000029c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002980)={&(0x7f0000000080)={0x28cc, r1, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x264, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1c4, 0xe, 0x0, 0x1, [{0xd9, 0x0, "52900f058eaa091eee3453e0cb6201a5bb69462c4df68fc2b33f7507a5837a4c54a1a04a4c1e12a449cc06bed284e90ed37d19dcc03680a7aaedb8eda6519bef591a31b5de9a48d66ca59521b2e34ab1ff3cff2c28ddec01d5ff1c4f2440616378fece719d37ad82c4d194a9042afdf41fba745aa1b4c23f120d414debcde89201d85f7c9f130ac51d5d23430c92c8738c8a9abdfdf2dd93cd6ff582b46c2320ee60fc909fa8e606aca0b9ad74aeff486ba202311d2211585026db600cacb7af9cf04076777c2a1d3d47df889a36eab6c8271948c1"}, {0xc7, 0x0, "5fc8a18b235765e6d917754277ab24bdf2e019fd4b2d0cdcc541ddb575c1372172b386df622a7f3b5929bff55c5d983f2ca710bd56a59f167c1a46b327ccab470aee7d27d65a1cffe93db5e008af4cc1fd624a3bf03c42273c4a2dff989c3271260351608289911891827bbe02f93dec65626ab7cdb79de80a2b1ebb2e2a867f08c4b2f2f62701ae1c8e30ae3b58a810b50429aae51d7ccfb6cac88e78ec90375dc5ae4a897f5913050090a50bf0cce634f1d6b47a02d54585e0f2921d270d3a306404"}, {0x1c, 0x0, "6683ba1d0fc0fa90dccbaffdb45e2e257252d25e5100094d"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x90, 0xb, "25c5195ade70fd9f783e68f3ef418341c1cd238192410b3ab88fe7400565bb61d3585df670ce46e63c59c3d2dc5eaf0f1e026b8519d1ec6688e369b0b0607e6794ded80f52be908f3ce9ca9c122b351aaa80b98ee68b71c0245724f3429eed2a067c35fb34d048671ea0a5387d3121555038afde3d204127726b939e854a31aaa97c76fd5f0d56fe8e64a8f2"}]}, @NL80211_ATTR_NAN_FUNC={0x1468, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1454, 0xe, 0x0, 0x1, [{0x63, 0x0, "d327b497b29148db6a85c071ee971d175a88a3f63abe1c1a02e9da33c2b897f52f4a97595cfc73efc636104cb5dd85d4da4371a4d31d07fb637b3b698acca35be3484e8032e978458e60a71fe5bf17df010c10602c5cfc9610897fe015d19e"}, {0x8e, 0x0, "70bd57365c41e7052b6720bee86c60d169cc4ebe2354cb9240deb68418cc800373cba023b954b0eb2b656650fa535f79b133d9ee4fb804091825d37f6114872cd552b3929c8aa53729362e1e9c3bf499668d53a1ad96d49ef7d6c6140bf70f0ded1a5be7ae44eb8869be9498eaf342f70a1e57489798c7e3d39c2f015b25bd989f7a4a8b0e5f1e3dad1e"}, {0xf4, 0x0, "8e272de104eff1f44031d17f4faa7f083a2b36c4c7354cfef4866468c8dcfbfd0eb3b17b85904a8d6fbeb09580629679e03961fb66470182776634de9a478fcc21ea748df66b84390a8aa243e83e92102941bc28321a1fa965ef09d4680ed53f7682e10506753d9bffc7f5751c09abf12eddfc12c75f9e016b714d2e63a585d60fe484c357c6014cd7d2119b11949ce763a7ae522fb1b572f2a07b0f1a89e8002d7c8c3124ded76471e6bb4231fff707bda7d7a62bc1ae090413655bf611f7668b0fb10e3fb761a300159a33ce97dba3e888a81095637ab9563138e101cc9bde501353d6bcba06a1e2f937057ad443b6"}, {0x6b, 0x0, "6699034cfda48895893e8f6e4900f9b220ed382e906caf61fec7a88da05363fcae6faa8326bc423f7401a4fb7dca23efceb182f92956acd0e67ca0368ce4d3d0d5c9f96caddef1bdf3cd2a17658393a610c4787fd7748bdd28ab37bfaac5a5898e4d1dcb5d323b"}, {0x34, 0x0, "71eeabc10942f9c6c3c869a88fc26cf107cabd708c36ae8a97e40cd0a4aca22bedf91615b139d2c42408435eae3dde33"}, {0x92, 0x0, "d74e01b557e576540641bb81aeaab5aaec1efdbf43d6f262d7693316f4d1c08485f64931fd9b443d10583419a46db6b4408e1fd6b15c9544a181d74967e86a809f66ce6736591c3bf7ac0cb4d66633e92e0cfa35e7bdf9ce4d9e511bb37790116bf2cc485f88ffce34bc6748ad571e1f6ba31c71d024eaaa116a64c0fc92953dc5246265bf8b4b9cf2600e1af3f5"}, {0xa5, 0x0, "59ecd14e36830e9216d8b1d233b939ebb8bdef97c32873aa54e32d6a689cadcc08dcdf4de3b166c992b00fa2052f02259da93568ba19395fec8cca947a838d4e9ddc81e585a20f4a6635b5e00d07377f2b2c9145a38dd120a3824f4eba1aa66d3a2c656f671d8cdb8de8605e1633b139f803a38aed7a5ec9a8994ddf0ec7e1d8a3f93f2408652f8277a9e1c4d454520e0793ace5c7a24deb141cfb47fd2084bd3f"}, {0x1004, 0x0, "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"}, {0x87, 0x0, "8f6276a11f9d41e387bc0a57bfc4d6cd2eb8c5ebd63432726b302ab9c3686cdbc9400e88e401e71850d0a017365f99d3cf28729ee880a89f216d18388a257940b3223c267f533f11e04d76cc4f7823eb68b313c4945f67f65a39b964466c25403095525d7fafa4cb04b50001402e601e67f7c438ce7f52f94da0ef3786e45165a48415"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x11d0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11b8, 0xe, 0x0, 0x1, [{0xdb, 0x0, "5a9b67701c85466fa36c1a465b869c33c10f4352781cabf60fb99f0b5bebde1afa4e9ddcc18d47fcd52f2f5e306d40580ddc25c2a3e334135ca132f2b7d5a9ebe2799ee2ac2b710a7c0ed583617e35fb173cde5ef22e70a599834c24ec6367c6967b02d90793ea578d1fec2e0dc46d69758f2e6b6e2aaf8360b926588c262155f14b3afa9857e29902d418edcd378273875da8d890c63f74f90733301e36f729ff53f02b9182d122d6c06a668f82ed227ad5a3e306cf7e140e141d614fafadc587a407a4640aae8d5afe9e15869c3281bcabec0daf1d58"}, {0xd2, 0x0, "540731cef0d14cd8d4c7f2b078dc8c7121217c2da8c79da83916ac3a4517fb3cd26210b506041b845d2672d43a86452d81d1ecbe365a13adda7a1c6270e84a492b29a20af6d45d5d47897e51bbd28d0b09cbdc91ee8dfab8f120532cead8f9b1e1836e6dec912c4184019ced400f06e83073fd3187465e8af025bdc2cae4c2bc9f9d5f6e8ad02b86191b9aeaa5950a7e8673913d77094d5928c3488eeae8a076d592a603dc3d02748be4ee8a587339372ab6c9f281eb909a26ec80c4708fc41005ceba11d5feffc876d2a9c63103"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x28cc}}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x70, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002bc0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x60, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002d00), r2) pipe(&(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002d40), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x50000004}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x28, r9, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc008844}, 0x20040000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002f00), r2) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x14, r11, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000003940)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003900)={&(0x7f00000030c0)={0x81c, r12, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1ff, 0x38}}}}, [@NL80211_ATTR_TX_RATES={0x288, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x60, 0x6c, 0x24, 0x1b, 0x1b, 0x1, 0x18, 0x2, 0x4, 0xc, 0xc, 0x36, 0x24, 0x4, 0x6, 0x30, 0x12, 0x12, 0x3, 0x12, 0xb, 0xc, 0x60, 0x36, 0x1, 0x6c, 0x3]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x16, 0x1, 0xc, 0x6d, 0x3, 0x6c, 0x6, 0x30, 0x16, 0xb, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x3, 0x533, 0x800, 0x6, 0x100, 0x1000]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x9}, {0x1}, {0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xd, 0x400, 0xfc01, 0x9b, 0x0, 0x32a, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x5, 0x6149, 0x1000, 0x0, 0x401, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xfffd, 0x3, 0x1ff0, 0x1, 0xa, 0x4]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x4, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x8}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4000, 0x0, 0x1, 0x1, 0x2, 0x9b]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0xff, 0x3, 0x9, 0x81, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x0, 0xff00, 0x6, 0xb0, 0xed9e, 0x3, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff, 0x2, 0x2, 0x7, 0x3, 0x1]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x3}, {0x6, 0x7}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x8}, {}, {0x6, 0x6}, {0x4, 0xa}, {0x4}, {0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x7, 0x9}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x1}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x5}, {0x6}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x9}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x115, 0x4, 0x1, 0x5, 0x6b8, 0xa8b, 0xe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {}, {0x4}, {0x4, 0x5}, {0x2}, {0x3, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0x6}, {0x2, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3102, 0x8, 0x4, 0x8000, 0x100, 0x7, 0xda, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xe, 0x8, 0x9, 0xffff, 0x5, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x618, 0x86, 0x1, 0x7, 0xff, 0x1, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x621, 0x3, 0x9, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0xa}, {0x1, 0x9}, {0x2, 0x2}, {0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x5}, {0x6, 0xd}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x9}, {0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x3}, {0x6}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d, 0x81, 0x5, 0x267c, 0x9, 0x64, 0x21]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x18, 0x2, 0xb, 0xb, 0x3, 0x1b, 0x2, 0x6, 0x6c, 0xb8d8e4d35e69b088]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x1b, 0x60, 0x1a, 0xc, 0x24, 0x18, 0x36]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x5, 0x9, 0x7fff, 0x72, 0x7fff, 0xe]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x4}, {0x3, 0x4}, {0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x6}, {0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x1}, {}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x8}, {0x4}, {0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x5, 0x8}, {0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x4}, {0x5}, {0x4, 0x8}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3, 0xb, 0x8, 0x3, 0x9, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x2, 0x4}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x671, 0x0, 0x0, 0xb58, 0x9, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x3}, {0x5, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x4, 0x9}, {0x6}, {0x4, 0x1}, {0x0, 0x7}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x782, 0x6, 0x10, 0x7, 0x3, 0x2f86, 0x5e]}}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5c0, 0x1ff, 0x2, 0x800, 0x3, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x7}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0x6}, {0x4}, {0x6, 0x1}, {0x2, 0xa}, {0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x5, 0x4, 0x6b, 0xc, 0x18, 0x5, 0x24, 0xc, 0x1b, 0x18, 0x3, 0x60, 0x48, 0x36, 0x1, 0x18, 0x2, 0x1, 0xc, 0x1, 0x6c, 0xb, 0x5, 0x9, 0x12, 0x24, 0x30, 0xc, 0x5, 0x33]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x3, 0x9, 0x7fff, 0xab, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x2}, {0x7, 0x7}, {0x5, 0x1}, {0x6}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0x1a}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {}, {0x5, 0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x2, 0xa}, {0x1}, {0x4, 0x7}, {0x2, 0x8}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfdd, 0xffff, 0x5, 0x2, 0x400, 0x7, 0xe40d]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6646, 0xfffa, 0x100, 0x2, 0x88b, 0x2, 0x2d0, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x1ff, 0x200, 0x2, 0x9, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x9, 0x7, 0x9, 0x8000, 0xf, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {}, {0x6, 0x6}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x4}, {0x1}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0xa}, {0x2, 0x8}, {}, {0x7, 0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x1}, {0x4, 0x6}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xef7, 0x8, 0x3, 0x8, 0x1, 0x0, 0x4000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe9, 0x4, 0x1ff, 0xff01, 0x2, 0x81, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xa, 0x0, 0x6c1, 0x5, 0x3, 0x6, 0x52]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x5, 0x9, 0x3, 0xfffe, 0x5e3, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x1, 0x3, 0xc, 0xc, 0x5, 0x2, 0x6, 0x30, 0x60, 0x0, 0x30, 0x30, 0x53, 0x1b, 0x36, 0x12, 0x5, 0x4, 0xb, 0x9, 0xb]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6e, 0x2, 0x9c0d, 0x8, 0x5, 0x3, 0x7ff, 0x6ff]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x36, 0x6, 0x18, 0x6, 0x4, 0x60, 0x60, 0x16, 0x4, 0x1b, 0x1b, 0x9, 0x30, 0x36, 0x36, 0x1, 0x1, 0xc, 0x60, 0x3]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x80, 0x50, 0x5, 0x200, 0x6, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x1ff, 0x4, 0xc, 0x7c94, 0x7, 0x8, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x6, 0x6, 0x24, 0x1, 0x1b, 0x9, 0x6c, 0xb, 0x30, 0x12, 0xb, 0xc, 0xc, 0xb, 0x6, 0x9, 0x30, 0x6, 0x5, 0x18, 0x30, 0x24, 0x5, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xd17, 0x9, 0x22e, 0xe44, 0x8000, 0x1, 0x11]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x5, 0x3, 0x36, 0x1, 0x18, 0x6c, 0x3, 0x6c, 0x1b, 0x18, 0x0, 0x12, 0x18, 0x12, 0x4]}]}]}]}, 0x81c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000003bc0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b80)={&(0x7f00000039c0)={0x19c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa804f0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4049f881}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f4538c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f3f46f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68c6e25e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f591316}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b062d2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x673070ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cae893c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa873bcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573f4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49a0b529}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7550fd51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x319b5942}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe8927d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cd6a63d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a67672e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2bb331}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32f0775f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dce10a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x358d843c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x633a1fe8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x294d2f63}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) syz_genetlink_get_family_id$nfc(&(0x7f0000003c00), r2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000003c40)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003c80), r0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000003d00)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x4}}, 0x8001, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003cc0)='macvtap0\x00', 0xed, 0x7, 0xfff7}) setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000003d80)=@gcm_256={{0x304}, "4241f780d1aa25bc", "df4bfa1281368bce261038fcd8503d8e6d1a99de4a585916f7fa45355989568c", "e98dd75e", "0707f05a3ca9c151"}, 0x38) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r14, 0x11, 0x1, &(0x7f0000003dc0), &(0x7f0000003e00)=0x4) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2317}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xb7b12000) 857.354839ms ago: executing program 3 (id=5350): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x84) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 792.396657ms ago: executing program 5 (id=5351): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@delchain={0x64, 0x65, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5fdc6ae426c7001f}, {0x9, 0xf}, {0xfff3, 0xffe6}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x3}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x9}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x64}}, 0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c00)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x602e4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000004004000128001280090001007665746800080000000000000000010000000000", @ANYRES32, @ANYBLOB="130000000008000008000a00", @ANYRES32=r3], 0x50}}, 0x0) 728.879606ms ago: executing program 3 (id=5352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="8f6b190c6a48b854397c0d6235de68061b97b4fa8890ea40b2915f0b38439e393482242d81b626298d2eb38c5f2b279b50c7f5c382a459b2d83ad93f137b6fdf049c37274b2da1083361652f4b5dcfb2f03fbfb8caa871c0d589478cbea71f9636888704c9e30e3297425973f577de3c1fb1a28e7b43bc38560d3dbc829bebc29fd71810537e", 0x86}, {&(0x7f00000000c0)="de2d7af9593c6c5b0cc222e8e8f1f9d33bbe5ef22ba2dd39ce4458b95806f71e6e403304ff38d9046800ef4f61e1415f2236df90eb672a76ba0a5cacbf2d0a79f9b922ad3964626aaea664c13edca9a53667c735a3cef9b0d0f4065ed8e68efdc2458b5caeb9a50c807db3a6218123ba1a42", 0x72}, {&(0x7f0000000140)}], 0x3, &(0x7f00000004c0)=[{0x90, 0x10b, 0xb6, "b110967f0d4450687beff277bf1869722bea49dc8730b2b70fbcce330bf9249f3458166068db232f4e5dce61d9ac7fe8cfafe7d99bc98c555fa0a548ef64775aa148be8145bd9a84bca48eb6a9b9f2c7cccea35aac6f96e65d6d24e2f701f1817b4a20e56f36465a51c263f7a6d76021339ae5e3599f4eb72a0705815dba7224"}, {0x90, 0x107, 0x3, "8cf3f1a5441a0a8d3db6d447f37287cc3217ccc8cffe46338568382f5c907e8ce146798a0c86bd1d4f235dfad86b53c6325aea3545f7b26a111ba4056c24df141017c9abc996974e857dea6b623bdbd91c4c197d12aac15fce912d0ed4e2eee82b266e3ef4dec44c0e05826e59f1475c383bb18df1b446512550cd"}, {0x98, 0x115, 0x23ea47d3, "67fb6a37b0b44e7bf562a5fb1aa2d66efa53269ed8a9d7b46462bd7b0cadf1212b6396387587352794b744a407446974abb97f14873c791631d75a7d83c4ea0012bbc2cbfdba9a0c95d1406ded4f5cb8e40d3dcea21fa10b5e177a251f0232704a739de9d2ba7ce9fe476dcc23a3d8f498bb93788ecba577e485f9f19a70fbd083"}, {0x110, 0x3a, 0x4e, "e5b3fffe8b5e8f80312eecc84e544fd3c82941b8007b88cf85f56b1e652b2c9a0101da88796b3795eeefb1f5fac24e564b31a948fa48552e29dd86ef4543a423d304a992400d534a2dd5ac580b776f3e4d9f989dd585c72de9e6069a66a142f4179d51760671bebbd288bc5b72911ddd1b71c8e05a2ac5f92631a60aa61c2ce0c45917300d602c768d5df3b15c29da9fe89b863fee5a8476be37d477aaee192ac553fea2a8173c59f7abef42d70c83a56c73aa64712430a1d45fb6568040db2e935a690e560b2a47ecac12cbad3bb399d798384015c0f4de5eedd417573c1959771992d92696cd383089ddc2abc7559bd38bb18f6148e9d72e"}, {0x40, 0x84, 0x2, "3e77a9708df4f8d6f831cb880dac6e2244eded5611e3c940d6cb1ee80fb1ee46d5da92e8ec11f5c54d60"}, {0x1010, 0x29, 0x8000, "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"}, {0x48, 0x112, 0x2, "b8c224eb422c3783adc264a43bd292cb0948bc2e6b1edda92b0ddd477d405974b5a22577abca86d8d8fa1304e7172c322a15"}, {0xe0, 0x117, 0x9, "039f03fd85e8c20a8704ea96f4b0d42095bf50bbb271ed4551952c863cf32136dbd2638286c385338db0341aa15fd120e44d337aa1eb4c0dd8ec79ac60017d7cdd46476cc69c2a30c1dd7c5c827f44e37d2867209b08dcf44026d4e52bacdde674279464a78bc26c4c496b3debb0219313d12b0016ba8d9119a5526d11492bf664908308c6e3fd5bceff52579da1fa638e65ce8f2159bc15d1dc922930f4e4237b55bf5667f0e269d6aa408f0b7d91d3b8290fc57ddf89430116223c19ac2a2f164c5ca92d5af7a1d9"}], 0x1440}, 0x20000011) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa452}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0x14, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a00)='GPL\x00', 0x80000000, 0x67, &(0x7f0000001a40)=""/103, 0x41000, 0x8, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000001ac0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b00)=[r8], &(0x7f0000001b40)=[{0x4, 0x1, 0x8, 0x4}, {0x2, 0x4, 0x8, 0x9}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0x0, 0x3, 0xa, 0xa}, {0x3, 0x3, 0x0, 0x4}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c80)={&(0x7f0000001900)='ata_tf_load\x00', r9, 0x0, 0x7}, 0x18) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0xffffffffffffffae) 607.286228ms ago: executing program 1 (id=5353): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) (async) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x1, 0x10000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f0000000740)=0x8) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000000114000425bd7000ff250000"], 0x10}}, 0x0) (async) recvmsg(r10, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) (async) r11 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) bind$802154_raw(r10, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) (async) sendfile(r11, r2, &(0x7f00000000c0)=0xd3a, 0xa2d) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8820}, 0x0) 560.938751ms ago: executing program 7 (id=5354): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x154, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1d}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x1c, r9, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000000000100000003400018014000200776c616e31000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400230076657468315f766972745f7769666900080009000008000016b2b8d0e57978"], 0x50}}, 0x40004) 425.502772ms ago: executing program 6 (id=5355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x90) r1 = socket$inet6(0xa, 0x80000, 0xfffeffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x8, 0xfff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 328.050358ms ago: executing program 1 (id=5356): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c0067000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001312c2ad8e98be22f76b333c631c7206577113123e48e5d51c1fca71c9b2a45e6a2fef68"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000008bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 303.489008ms ago: executing program 3 (id=5357): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 260.086228ms ago: executing program 5 (id=5358): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x400, 0x0, 0x25dfdbfb, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x3ffe, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x400, 0x0, 0x25dfdbfb, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x3ffe, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x178, 0x32, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x85}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff824}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb4b}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r8, 0x0, 0x3, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0x8, 0xffff}, {0x2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}]}, 0x2c}}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0x8, 0xffff}, {0x2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}]}, 0x2c}}, 0x20000000) 208.079295ms ago: executing program 7 (id=5359): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x1, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x8, 0xfe, 0x0, 0x13, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffb, 0x88000}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 164.113632ms ago: executing program 6 (id=5360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0x4}]}}}], 0x18}}], 0x1, 0x20000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x90}], 0x2, &(0x7f0000000080)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0xcb5b}}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8008001}, 0x0) 121.801728ms ago: executing program 1 (id=5361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x11, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x800a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a00040077"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x83a06000) ioctl$SIOCAX25NOUID(r6, 0x89e3, 0x0) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=5362): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000001740)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x44040050) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) close(0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x8, 0x4}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703030000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) kernel console output (not intermixed with test programs): ng attributes in process `syz.3.3738'. [ 544.227580][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3738'. [ 544.297100][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3738'. [ 544.326539][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3738'. [ 544.344902][ T7194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.377917][ T7194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.414068][ T7194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.433939][ T7194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.525127][T19267] sctp: [Deprecated]: syz.1.3746 (pid 19267) Use of int in maxseg socket option. [ 544.525127][T19267] Use struct sctp_assoc_value instead [ 544.692267][T19278] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3750'. [ 544.707209][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 544.754432][T19282] netlink: 'syz.1.3752': attribute type 10 has an invalid length. [ 544.832236][T19290] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 544.872495][T19282] team0: Device veth0_macvtap failed to register rx_handler [ 544.988360][T19299] ip6t_srh: unknown srh invflags 4000 [ 545.051410][T19299] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 545.068000][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.079680][T19299] bond2 (unregistering): Released all slaves [ 545.200745][T19309] xt_hashlimit: size too large, truncated to 1048576 [ 545.889030][T19349] netlink: 'syz.5.3772': attribute type 1 has an invalid length. [ 546.012162][T19357] bond1: (slave bridge2): making interface the new active one [ 546.021365][T19357] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 546.106593][T19355] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 546.108059][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 546.453515][T19379] netlink: 'syz.6.3781': attribute type 17 has an invalid length. [ 546.620045][T19390] xt_bpf: check failed: parse error [ 546.718262][T19393] bond0: (slave caif0): Error: Device type is different from other slaves [ 546.810021][T19400] netlink: 'syz.7.3788': attribute type 1 has an invalid length. [ 546.830387][T19400] netlink: 'syz.7.3788': attribute type 2 has an invalid length. [ 546.914150][T19404] netlink: 'syz.6.3790': attribute type 11 has an invalid length. [ 546.924682][T19404] netlink: 'syz.6.3790': attribute type 11 has an invalid length. [ 547.148038][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.287690][T19421] openvswitch: netlink: IPv4 tunnel dst address is zero [ 547.600452][T19438] geneve2: entered promiscuous mode [ 547.683287][ T7196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.717664][ T7196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.738478][ T7196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.758143][ T7196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.188126][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.371473][T19482] netlink: 'syz.7.3817': attribute type 30 has an invalid length. [ 548.439349][T19489] netlink: 'syz.7.3817': attribute type 30 has an invalid length. [ 548.699908][T19508] !: renamed from dummy0 [ 548.837045][T19519] __nla_validate_parse: 17 callbacks suppressed [ 548.837068][T19519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3824'. [ 548.929071][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3827'. [ 548.960950][T19523] netlink: 'syz.5.3827': attribute type 7 has an invalid length. [ 548.981861][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3827'. [ 549.011545][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3827'. [ 549.020856][T19523] netlink: 'syz.5.3827': attribute type 7 has an invalid length. [ 549.028879][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3827'. [ 549.120337][T19534] syzkaller1: entered promiscuous mode [ 549.136058][T19534] syzkaller1: entered allmulticast mode [ 549.228150][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 549.269019][T19541] syzkaller0: entered promiscuous mode [ 549.284873][T19541] syzkaller0: entered allmulticast mode [ 549.539054][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 549.569658][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'. [ 549.604081][T19566] netlink: 'syz.5.3841': attribute type 7 has an invalid length. [ 549.629858][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 549.645667][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'. [ 549.646083][T19573] netlink: 'syz.5.3841': attribute type 7 has an invalid length. [ 549.736148][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3845'. [ 549.748282][T19576] netlink: 'syz.1.3844': attribute type 1 has an invalid length. [ 550.268116][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.140104][T19666] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 551.308018][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.559151][T19669] team0 (unregistering): Port device team_slave_0 removed [ 551.610611][T19669] team0 (unregistering): Port device team_slave_1 removed [ 551.760074][T19697] FAULT_INJECTION: forcing a failure. [ 551.760074][T19697] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 551.761629][T19695] vlan2: entered promiscuous mode [ 551.793731][T19695] bridge0: entered promiscuous mode [ 551.797763][T19697] CPU: 1 UID: 0 PID: 19697 Comm: syz.7.3885 Not tainted syzkaller #0 PREEMPT(full) [ 551.797790][T19697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.797801][T19697] Call Trace: [ 551.797809][T19697] [ 551.797823][T19697] dump_stack_lvl+0xe8/0x150 [ 551.797851][T19697] should_fail_ex+0x414/0x560 [ 551.797884][T19697] _copy_to_user+0x31/0xb0 [ 551.797908][T19697] simple_read_from_buffer+0xe1/0x170 [ 551.797936][T19697] proc_fail_nth_read+0x1b3/0x220 [ 551.797958][T19697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.797981][T19697] ? rw_verify_area+0x2a6/0x4d0 [ 551.797997][T19697] ? tun_chr_write_iter+0xe0/0x200 [ 551.798016][T19697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.798037][T19697] vfs_read+0x200/0xa30 [ 551.798054][T19697] ? fdget_pos+0x247/0x320 [ 551.798079][T19697] ? __pfx___mutex_lock+0x10/0x10 [ 551.798100][T19697] ? __pfx_vfs_read+0x10/0x10 [ 551.798119][T19697] ? __fget_files+0x2a/0x420 [ 551.798144][T19697] ? __fget_files+0x3a0/0x420 [ 551.798165][T19697] ? __fget_files+0x2a/0x420 [ 551.798195][T19697] ksys_read+0x145/0x250 [ 551.798214][T19697] ? __pfx_ksys_read+0x10/0x10 [ 551.798243][T19697] do_syscall_64+0xec/0xf80 [ 551.798260][T19697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.798277][T19697] ? trace_irq_disable+0x37/0x100 [ 551.798299][T19697] ? clear_bhb_loop+0x60/0xb0 [ 551.798321][T19697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.798338][T19697] RIP: 0033:0x7ff57718e15c [ 551.798355][T19697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 551.798370][T19697] RSP: 002b:00007ff577f4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.798391][T19697] RAX: ffffffffffffffda RBX: 00007ff5773e5fa0 RCX: 00007ff57718e15c [ 551.798404][T19697] RDX: 000000000000000f RSI: 00007ff577f4b0a0 RDI: 0000000000000003 [ 551.798415][T19697] RBP: 00007ff577f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 551.798426][T19697] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 551.798437][T19697] R13: 00007ff5773e6038 R14: 00007ff5773e5fa0 R15: 00007ffd32b74ba8 [ 551.798468][T19697] [ 552.348153][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 552.623938][T19749] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 552.656427][T19744] netlink: 'syz.5.3901': attribute type 1 has an invalid length. [ 553.142448][T19774] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 553.168308][T19776] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 553.279286][T19783] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 553.388019][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.601314][T19796] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 553.640958][T19796] netlink: 'syz.1.3919': attribute type 6 has an invalid length. [ 553.808832][T19808] block nbd3: Unsupported socket: should be TCP or UNIX. [ 553.841880][T19808] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 554.244429][T19836] __nla_validate_parse: 10 callbacks suppressed [ 554.244452][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3934'. [ 554.264177][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3934'. [ 554.428128][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 554.565110][T19851] 8021q: VLANs not supported on ip6tnl0 [ 554.903583][T19874] FAULT_INJECTION: forcing a failure. [ 554.903583][T19874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.922783][T19874] CPU: 1 UID: 0 PID: 19874 Comm: syz.5.3946 Not tainted syzkaller #0 PREEMPT(full) [ 554.922814][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.922826][T19874] Call Trace: [ 554.922835][T19874] [ 554.922844][T19874] dump_stack_lvl+0xe8/0x150 [ 554.922875][T19874] should_fail_ex+0x414/0x560 [ 554.922912][T19874] _copy_from_iter+0x1cd/0x1630 [ 554.922933][T19874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 554.922965][T19874] ? policy_nodemask+0x27c/0x720 [ 554.922987][T19874] ? __pfx__copy_from_iter+0x10/0x10 [ 554.923014][T19874] ? set_page_refcounted+0xa0/0x1e0 [ 554.923036][T19874] ? page_copy_sane+0x4e/0x280 [ 554.923058][T19874] copy_page_from_iter+0xdd/0x170 [ 554.923085][T19874] tun_get_user+0x1d40/0x3dc0 [ 554.923114][T19874] ? tun_get_user+0x6fc/0x3dc0 [ 554.923151][T19874] ? aa_file_perm+0x44c/0x1530 [ 554.923178][T19874] ? __pfx_tun_get_user+0x10/0x10 [ 554.923204][T19874] ? __lock_acquire+0x6b6/0x2cf0 [ 554.923228][T19874] ? kstrtoull+0x12f/0x1d0 [ 554.923276][T19874] ? ref_tracker_alloc+0x318/0x460 [ 554.923294][T19874] ? get_pid_task+0x20/0x1f0 [ 554.923319][T19874] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 554.923341][T19874] ? tun_get+0x1c/0x2f0 [ 554.923363][T19874] ? tun_get+0x1c/0x2f0 [ 554.923391][T19874] ? tun_get+0x1c/0x2f0 [ 554.923414][T19874] ? tun_get+0x1c/0x2f0 [ 554.923438][T19874] tun_chr_write_iter+0x113/0x200 [ 554.923461][T19874] vfs_write+0x5c9/0xb30 [ 554.923484][T19874] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 554.923506][T19874] ? __pfx_vfs_write+0x10/0x10 [ 554.923532][T19874] ? __fget_files+0x2a/0x420 [ 554.923565][T19874] ksys_write+0x145/0x250 [ 554.923585][T19874] ? __pfx_ksys_write+0x10/0x10 [ 554.923616][T19874] do_syscall_64+0xec/0xf80 [ 554.923636][T19874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.923655][T19874] ? trace_irq_disable+0x37/0x100 [ 554.923679][T19874] ? clear_bhb_loop+0x60/0xb0 [ 554.923709][T19874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.923728][T19874] RIP: 0033:0x7fe6f0b8e1ff [ 554.923747][T19874] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 554.923764][T19874] RSP: 002b:00007fe6f1a75000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 554.923785][T19874] RAX: ffffffffffffffda RBX: 00007fe6f0de5fa0 RCX: 00007fe6f0b8e1ff [ 554.923800][T19874] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 554.923813][T19874] RBP: 00007fe6f1a75090 R08: 0000000000000000 R09: 0000000000000000 [ 554.923825][T19874] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 554.923837][T19874] R13: 00007fe6f0de6038 R14: 00007fe6f0de5fa0 R15: 00007ffe89388de8 [ 554.923869][T19874] [ 554.927684][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 554.989588][T19878] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3947'. [ 555.298321][T19858] vlan1 (unregistering): left allmulticast mode [ 555.305130][T19858] veth0_vlan (unregistering): left allmulticast mode [ 555.340560][T19864] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 555.351665][T19864] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 555.359709][T19864] gretap1: entered promiscuous mode [ 555.365111][T19864] gretap1: entered allmulticast mode [ 555.447807][T19887] netlink: 'syz.5.3948': attribute type 1 has an invalid length. [ 555.468112][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 555.486228][T19870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.507204][T19870] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.525160][T19870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.545733][T19885] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3948'. [ 555.771287][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3951'. [ 555.790856][T19902] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 555.799971][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3951'. [ 555.817773][T19907] netlink: 'syz.7.3952': attribute type 5 has an invalid length. [ 555.872502][ T7191] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.884656][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3951'. [ 555.903412][ T7191] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.920553][ T7191] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.931404][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3951'. [ 555.942629][T19915] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3956'. [ 555.953625][ T7191] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.419369][T15365] IPVS: starting estimator thread 0... [ 556.508130][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 556.529297][T19948] IPVS: using max 32 ests per chain, 76800 per kthread [ 556.633666][T19960] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 556.660059][T19960] nbd: must specify a size in bytes for the device [ 556.700626][T19966] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.791380][T19969] netlink: 'syz.7.3974': attribute type 1 has an invalid length. [ 556.854033][T19973] lo: entered promiscuous mode [ 556.870668][T19973] tunl0: entered promiscuous mode [ 556.887014][T19973] gre0: entered promiscuous mode [ 556.894469][T19979] netlink: 'syz.5.3978': attribute type 11 has an invalid length. [ 556.902651][T19973] gretap0: entered promiscuous mode [ 556.911885][T19973] erspan0: entered promiscuous mode [ 556.931264][T19973] ip_vti0: entered promiscuous mode [ 556.945090][T19977] sch_fq: defrate 0 ignored. [ 557.130190][T19993] x_tables: duplicate underflow at hook 1 [ 557.180016][T19995] veth7: entered allmulticast mode [ 557.453815][T20006] lo: Caught tx_queue_len zero misconfig [ 557.502541][T20007] tipc: Enabled bearer , priority 0 [ 557.511950][T20006] netlink: 'syz.5.3988': attribute type 24 has an invalid length. [ 557.536700][T20007] syzkaller0: entered promiscuous mode [ 557.548132][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 557.551593][T20007] syzkaller0: entered allmulticast mode [ 557.582845][T20008] ipt_REJECT: TCP_RESET invalid for non-tcp [ 557.592913][T20008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 557.699639][T20007] tipc: Resetting bearer [ 557.836304][T20008] tipc: Resetting bearer [ 557.933483][T20008] tipc: Disabling bearer [ 558.142491][T20032] netlink: 'syz.1.3996': attribute type 3 has an invalid length. [ 558.198818][T20035] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 558.217085][T20035] bond2: entered promiscuous mode [ 558.222669][T20035] bond2: entered allmulticast mode [ 558.239956][T20035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.249304][T20032] IPVS: Unknown mcast interface: dvmrp1 [ 558.588044][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.705341][T20075] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 558.717538][T20076] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 558.904283][T20087] FAULT_INJECTION: forcing a failure. [ 558.904283][T20087] name failslab, interval 1, probability 0, space 0, times 0 [ 558.917505][T20087] CPU: 0 UID: 0 PID: 20087 Comm: syz.3.4015 Not tainted syzkaller #0 PREEMPT(full) [ 558.917531][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.917544][T20087] Call Trace: [ 558.917553][T20087] [ 558.917561][T20087] dump_stack_lvl+0xe8/0x150 [ 558.917594][T20087] should_fail_ex+0x414/0x560 [ 558.917631][T20087] should_failslab+0xa8/0x100 [ 558.917655][T20087] ? __pfx_ip6_dst_gc+0x10/0x10 [ 558.917673][T20087] kmem_cache_alloc_noprof+0x88/0x710 [ 558.917701][T20087] ? ip6_pol_route+0x161/0x11a0 [ 558.917722][T20087] ? dst_alloc+0x105/0x170 [ 558.917750][T20087] ? __pfx_ip6_dst_gc+0x10/0x10 [ 558.917769][T20087] dst_alloc+0x105/0x170 [ 558.917799][T20087] ip6_pol_route+0xa28/0x11a0 [ 558.917823][T20087] ? trace_fib6_table_lookup+0x87/0x1d0 [ 558.917839][T20087] ? ip6_pol_route+0x161/0x11a0 [ 558.917864][T20087] ? __pfx_ip6_pol_route+0x10/0x10 [ 558.917896][T20087] ? __lock_acquire+0x6b6/0x2cf0 [ 558.917920][T20087] fib6_rule_lookup+0x348/0x6f0 [ 558.917945][T20087] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 558.917966][T20087] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 558.917992][T20087] ? ip6_route_output_flags+0x2e/0x5d0 [ 558.918011][T20087] ? lock_acquire+0x107/0x340 [ 558.918030][T20087] ? ip6_route_output_flags+0x2e/0x5d0 [ 558.918066][T20087] ip6_route_output_flags+0x364/0x5d0 [ 558.918087][T20087] ? ip6_route_output_flags+0x2e/0x5d0 [ 558.918112][T20087] icmpv6_rt_has_prefsrc+0x4f/0x3e0 [ 558.918142][T20087] ? icmp6_send+0x1e3/0x1990 [ 558.918170][T20087] icmp6_send+0xd71/0x1990 [ 558.918199][T20087] ? icmp6_send+0x1e3/0x1990 [ 558.918248][T20087] ? __pfx_icmp6_send+0x10/0x10 [ 558.918280][T20087] ? ip6_route_input+0x7cc/0xad0 [ 558.918345][T20087] ip6_pkt_drop+0x53d/0x620 [ 558.918381][T20087] ip6_pkt_discard+0x1c/0x30 [ 558.918407][T20087] NF_HOOK+0x30c/0x3a0 [ 558.918429][T20087] ? skb_orphan+0x4f/0xd0 [ 558.918463][T20087] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 558.918484][T20087] ? NF_HOOK+0x9a/0x3a0 [ 558.918506][T20087] ? __pfx_NF_HOOK+0x10/0x10 [ 558.918529][T20087] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 558.918563][T20087] __netif_receive_skb+0xd3/0x380 [ 558.918599][T20087] ? netif_receive_skb+0x105/0x750 [ 558.918626][T20087] netif_receive_skb+0x1bb/0x750 [ 558.918654][T20087] ? __lock_acquire+0x6b6/0x2cf0 [ 558.918675][T20087] ? __pfx_netif_receive_skb+0x10/0x10 [ 558.918708][T20087] ? tun_rx_batched+0x160/0x730 [ 558.918736][T20087] tun_rx_batched+0x1b9/0x730 [ 558.918766][T20087] ? __pfx_tun_rx_batched+0x10/0x10 [ 558.918789][T20087] ? tun_get_user+0x266d/0x3dc0 [ 558.918812][T20087] ? tun_get_user+0x266d/0x3dc0 [ 558.918840][T20087] ? tun_get_user+0x2331/0x3dc0 [ 558.918861][T20087] ? __local_bh_enable_ip+0xd0/0x130 [ 558.918885][T20087] ? tun_get_user+0x266d/0x3dc0 [ 558.918907][T20087] tun_get_user+0x2aa3/0x3dc0 [ 558.918932][T20087] ? tun_get_user+0x6fc/0x3dc0 [ 558.918972][T20087] ? aa_file_perm+0x44c/0x1530 [ 558.918997][T20087] ? __pfx_tun_get_user+0x10/0x10 [ 558.919023][T20087] ? __lock_acquire+0x6b6/0x2cf0 [ 558.919046][T20087] ? kstrtoull+0x12f/0x1d0 [ 558.919085][T20087] ? ref_tracker_alloc+0x318/0x460 [ 558.919104][T20087] ? get_pid_task+0x20/0x1f0 [ 558.919132][T20087] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 558.919154][T20087] ? tun_get+0x1c/0x2f0 [ 558.919177][T20087] ? tun_get+0x1c/0x2f0 [ 558.919206][T20087] ? tun_get+0x1c/0x2f0 [ 558.919229][T20087] ? tun_get+0x1c/0x2f0 [ 558.919258][T20087] tun_chr_write_iter+0x113/0x200 [ 558.919285][T20087] vfs_write+0x5c9/0xb30 [ 558.919310][T20087] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 558.919332][T20087] ? __pfx_vfs_write+0x10/0x10 [ 558.919361][T20087] ? __fget_files+0x2a/0x420 [ 558.919395][T20087] ksys_write+0x145/0x250 [ 558.919417][T20087] ? __pfx_ksys_write+0x10/0x10 [ 558.919461][T20087] do_syscall_64+0xec/0xf80 [ 558.919481][T20087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.919501][T20087] ? clear_bhb_loop+0x60/0xb0 [ 558.919525][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.919545][T20087] RIP: 0033:0x7f625b58e1ff [ 558.919564][T20087] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 558.919580][T20087] RSP: 002b:00007f625c432000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 558.919603][T20087] RAX: ffffffffffffffda RBX: 00007f625b7e5fa0 RCX: 00007f625b58e1ff [ 558.919617][T20087] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 558.919630][T20087] RBP: 00007f625c432090 R08: 0000000000000000 R09: 0000000000000000 [ 558.919643][T20087] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 558.919655][T20087] R13: 00007f625b7e6038 R14: 00007f625b7e5fa0 R15: 00007ffe8a0310d8 [ 558.919692][T20087] [ 559.628096][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 559.639345][T20100] __nla_validate_parse: 15 callbacks suppressed [ 559.639367][T20100] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4020'. [ 559.662532][T20096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4018'. [ 559.713512][T20096] IPVS: Error connecting to the multicast addr [ 559.727733][T20097] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4018'. [ 559.768049][T20110] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4018'. [ 559.784260][T20102] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4019'. [ 559.973424][T20120] netlink: 'syz.7.4025': attribute type 58 has an invalid length. [ 559.975854][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 559.981363][T20120] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4025'. [ 560.043311][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 560.234274][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4030'. [ 560.364657][T20141] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 560.389118][T20141] bond7 (unregistering): Released all slaves [ 560.442138][T20149] pim6reg527: entered allmulticast mode [ 560.668851][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 560.759267][T20174] netlink: 'syz.6.4043': attribute type 6 has an invalid length. [ 561.374623][T20200] tipc: Started in network mode [ 561.394642][T20200] tipc: Node identity , cluster identity 4711 [ 561.411615][T20200] tipc: Failed to set node id, please configure manually [ 561.435930][T20200] tipc: Enabling of bearer rejected, failed to enable media [ 561.708020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 561.723445][T20214] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4057'. [ 561.911599][T20230] netlink: 'syz.5.4062': attribute type 29 has an invalid length. [ 562.001802][T20219] netlink: 'syz.6.4059': attribute type 1 has an invalid length. [ 562.452897][T20266] mac80211_hwsim hwsim35 : renamed from wlan1 [ 562.461517][T20265] netlink: 'syz.7.4073': attribute type 13 has an invalid length. [ 562.473599][T20268] netlink: 'syz.6.4074': attribute type 33 has an invalid length. [ 562.501238][T20270] bond0: Caught tx_queue_len zero misconfig [ 562.748022][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 562.800978][T20265] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 562.840702][T20265] bond3: left promiscuous mode [ 562.845775][T20265] bond3: left allmulticast mode [ 562.854391][T20265] veth3: left allmulticast mode [ 562.866694][T20281] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 563.099529][T20284] team0 (unregistering): Port device team_slave_0 removed [ 563.109037][T20284] team0 (unregistering): Port device team_slave_1 removed [ 563.236233][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.242733][T20301] ipt_REJECT: ECHOREPLY no longer supported. [ 563.778704][T20338] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.789581][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.813053][T20338] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 563.823948][T20338] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 563.895177][T20338] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.924516][T20338] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 563.935486][T20338] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.017182][T20338] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.032094][T20338] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 564.050997][T20338] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.118303][T20338] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.140538][T20338] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 564.168495][T20338] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.360728][T13446] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.372721][T13446] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 564.385100][T13446] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 564.390459][T20371] netlink: 'syz.5.4104': attribute type 8 has an invalid length. [ 564.417728][T13446] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.432926][T13446] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 564.441330][T13446] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 564.463813][T13446] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.472875][T13446] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 564.489066][T13446] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 564.522720][ T7196] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.533893][ T7196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 564.542166][ T7196] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 564.562992][T20345] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.582707][T20345] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 564.597152][T20345] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.677423][T20345] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.692578][T20345] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 564.717192][T20345] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.759762][T20387] __nla_validate_parse: 9 callbacks suppressed [ 564.759780][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 564.800489][T20345] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.810701][T20345] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 564.820823][T20345] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.831117][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.853964][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 564.904113][T20345] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.915733][T20345] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 564.940141][T20345] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 565.211495][T20399] bond7 (unregistering): Released all slaves [ 565.265219][T20409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4114'. [ 565.294857][T20409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4114'. [ 565.449171][T20413] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4115'. [ 565.475368][T20418] atomic_op ffff888054584198 conn xmit_atomic 0000000000000000 [ 565.540977][T20415] wireguard0: entered promiscuous mode [ 565.558537][T20415] wireguard0: entered allmulticast mode [ 565.568112][T20415] team0: Device wireguard0 is of different type [ 565.745802][T20436] netlink: 6712 bytes leftover after parsing attributes in process `syz.3.4120'. [ 565.764765][T20436] netlink: 'syz.3.4120': attribute type 32 has an invalid length. [ 565.772853][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4120'. [ 565.841751][T20436] bond3: option coupled_control: invalid value (24) [ 565.850010][T20436] bond3 (unregistering): Released all slaves [ 565.868027][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 566.323818][T20466] netlink: 'syz.5.4130': attribute type 16 has an invalid length. [ 566.459126][T20475] syzkaller0: entered promiscuous mode [ 566.464672][T20475] syzkaller0: entered allmulticast mode [ 566.811695][T20485] openvswitch: netlink: Message has 8 unknown bytes. [ 566.818888][T20485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.907999][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.062269][T20493] openvswitch: netlink: Invalid VLAN frame [ 567.076353][T20497] openvswitch: netlink: IP tunnel dst address not specified [ 567.105533][T20497] bridge0: entered allmulticast mode [ 567.216075][T20504] policy can only be matched on NF_INET_PRE_ROUTING [ 567.216099][T20504] unable to load match [ 567.287065][T20508] tipc: Enabling of bearer rejected, failed to enable media [ 567.312573][T20511] Cannot find add_set index 4 as target [ 567.369459][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 567.435921][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4151'. [ 567.453044][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4151'. [ 567.928250][T20545] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 567.948148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.027625][ T2985] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.046762][ T2985] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 568.056545][ T2985] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 568.093338][ T2985] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.104972][ T2985] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 568.145390][ T2985] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 568.182135][ T2985] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.191290][ T2985] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 568.205043][ T2985] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 568.266590][ T2985] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.278634][ T2985] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 568.295200][ T2985] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 568.344932][T20569] netlink: 'syz.6.4168': attribute type 58 has an invalid length. [ 568.470941][T20572] bond3: Removing last arp target with arp_interval on [ 568.658609][T20585] FAULT_INJECTION: forcing a failure. [ 568.658609][T20585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.673294][T20585] CPU: 0 UID: 0 PID: 20585 Comm: syz.1.4175 Not tainted syzkaller #0 PREEMPT(full) [ 568.673323][T20585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.673335][T20585] Call Trace: [ 568.673344][T20585] [ 568.673351][T20585] dump_stack_lvl+0xe8/0x150 [ 568.673383][T20585] should_fail_ex+0x414/0x560 [ 568.673416][T20585] _copy_from_user+0x2d/0xb0 [ 568.673453][T20585] bpf_test_init+0xd8/0x150 [ 568.673481][T20585] bpf_prog_test_run_xdp+0x503/0x10e0 [ 568.673524][T20585] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 568.673555][T20585] ? __fget_files+0x2a/0x420 [ 568.673586][T20585] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 568.673613][T20585] bpf_prog_test_run+0x2c7/0x340 [ 568.673647][T20585] __sys_bpf+0x562/0x860 [ 568.673677][T20585] ? __pfx___sys_bpf+0x10/0x10 [ 568.673728][T20585] ? ksys_write+0x22a/0x250 [ 568.673751][T20585] ? __pfx_ksys_write+0x10/0x10 [ 568.673779][T20585] __x64_sys_bpf+0x7c/0x90 [ 568.673805][T20585] do_syscall_64+0xec/0xf80 [ 568.673826][T20585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.673846][T20585] ? trace_irq_disable+0x37/0x100 [ 568.673871][T20585] ? clear_bhb_loop+0x60/0xb0 [ 568.673893][T20585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.673912][T20585] RIP: 0033:0x7fc7a8b8f749 [ 568.673930][T20585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.673947][T20585] RSP: 002b:00007fc7a9a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.673969][T20585] RAX: ffffffffffffffda RBX: 00007fc7a8de5fa0 RCX: 00007fc7a8b8f749 [ 568.673984][T20585] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 568.673996][T20585] RBP: 00007fc7a9a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 568.674009][T20585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.674021][T20585] R13: 00007fc7a8de6038 R14: 00007fc7a8de5fa0 R15: 00007ffcabb432c8 [ 568.674054][T20585] [ 568.943964][T20591] netlink: 'syz.5.4177': attribute type 12 has an invalid length. [ 568.988211][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.010271][T20593] netlink: 'syz.3.4178': attribute type 13 has an invalid length. [ 569.046036][T20593] macvtap0: entered allmulticast mode [ 569.062667][T20593] macvtap0: refused to change device tx_queue_len [ 569.081346][T20598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.342301][T20619] netlink: 'syz.6.4187': attribute type 1 has an invalid length. [ 569.416917][T20622] syzkaller0: entered allmulticast mode [ 569.437489][T20619] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 569.452725][T20619] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 569.463249][T20619] bond1: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 569.675172][T20640] sctp: [Deprecated]: syz.7.4191 (pid 20640) Use of int in maxseg socket option. [ 569.675172][T20640] Use struct sctp_assoc_value instead [ 569.692386][T20640] xt_time: unknown flags 0xf4 [ 569.842273][T20655] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 569.894327][T20655] bond2: (slave lo): Enslaving as a backup interface with an up link [ 569.931438][T20655] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 570.014009][T20665] __nla_validate_parse: 11 callbacks suppressed [ 570.014032][T20665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4200'. [ 570.028302][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.480077][T20692] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4210'. [ 570.652247][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4214'. [ 570.735409][T20712] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 570.912696][T20715] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4219'. [ 571.068094][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.325441][T20738] netlink: 'syz.7.4227': attribute type 1 has an invalid length. [ 571.348001][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4227'. [ 571.357669][T20742] bridge_slave_0: invalid flags given to default FDB implementation [ 571.375504][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4227'. [ 571.432633][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4227'. [ 571.491360][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4230'. [ 571.698802][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4236'. [ 571.711530][T20765] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 571.719861][T20765] netlink: 'syz.3.4235': attribute type 3 has an invalid length. [ 571.728584][T20765] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4235'. [ 571.741168][T20765] NCSI netlink: No device for ifindex 813332851 [ 572.110121][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.127517][T20788] netlink: 'syz.5.4247': attribute type 11 has an invalid length. [ 572.140286][T20783] openvswitch: netlink: Key type 80 is out of range max 32 [ 572.149826][T20788] netlink: 'syz.5.4247': attribute type 11 has an invalid length. [ 572.165514][T20790] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 572.329223][T20800] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 572.608720][T20820] tipc: Started in network mode [ 572.626932][T20820] tipc: Node identity e0000002, cluster identity 4711 [ 572.647527][T20820] tipc: Enabling of bearer rejected, failed to enable media [ 573.148025][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.452158][T20863] netlink: 'syz.5.4270': attribute type 1 has an invalid length. [ 573.526516][T20863] bond3: entered promiscuous mode [ 573.532180][T20863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.624192][T20869] bond3: (slave bridge5): making interface the new active one [ 573.634872][T20869] bridge5: entered promiscuous mode [ 573.642243][T20869] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 573.668188][T20863] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 573.814462][T20884] IPVS: length: 234 != 8 [ 574.145308][T20912] FAULT_INJECTION: forcing a failure. [ 574.145308][T20912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.186857][T20912] CPU: 1 UID: 0 PID: 20912 Comm: syz.6.4283 Not tainted syzkaller #0 PREEMPT(full) [ 574.186889][T20912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.186901][T20912] Call Trace: [ 574.186909][T20912] [ 574.186918][T20912] dump_stack_lvl+0xe8/0x150 [ 574.186951][T20912] should_fail_ex+0x414/0x560 [ 574.186988][T20912] _copy_to_user+0x31/0xb0 [ 574.187016][T20912] simple_read_from_buffer+0xe1/0x170 [ 574.187047][T20912] proc_fail_nth_read+0x1b3/0x220 [ 574.187074][T20912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.187100][T20912] ? rw_verify_area+0x2a6/0x4d0 [ 574.187119][T20912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.187143][T20912] vfs_read+0x200/0xa30 [ 574.187162][T20912] ? fdget_pos+0x247/0x320 [ 574.187202][T20912] ? __pfx___mutex_lock+0x10/0x10 [ 574.187224][T20912] ? __pfx_vfs_read+0x10/0x10 [ 574.187246][T20912] ? __fget_files+0x2a/0x420 [ 574.187276][T20912] ? __fget_files+0x3a0/0x420 [ 574.187299][T20912] ? __fget_files+0x2a/0x420 [ 574.187334][T20912] ksys_read+0x145/0x250 [ 574.187356][T20912] ? __pfx_ksys_read+0x10/0x10 [ 574.187389][T20912] do_syscall_64+0xec/0xf80 [ 574.187410][T20912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.187428][T20912] ? trace_irq_disable+0x37/0x100 [ 574.187451][T20912] ? clear_bhb_loop+0x60/0xb0 [ 574.187477][T20912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.187496][T20912] RIP: 0033:0x7fad5118e15c [ 574.187515][T20912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 574.187532][T20912] RSP: 002b:00007fad51ff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 574.187556][T20912] RAX: ffffffffffffffda RBX: 00007fad513e6090 RCX: 00007fad5118e15c [ 574.187570][T20912] RDX: 000000000000000f RSI: 00007fad51ff70a0 RDI: 0000000000000004 [ 574.187583][T20912] RBP: 00007fad51ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 574.187595][T20912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.187606][T20912] R13: 00007fad513e6128 R14: 00007fad513e6090 R15: 00007ffeebb8b388 [ 574.187640][T20912] [ 574.396483][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.059342][T20956] netlink: 'syz.3.4299': attribute type 11 has an invalid length. [ 575.067615][T20956] __nla_validate_parse: 12 callbacks suppressed [ 575.067637][T20956] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.4299'. [ 575.100448][T20956] netlink: 'syz.3.4299': attribute type 4 has an invalid length. [ 575.333639][T20967] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4303'. [ 575.343206][T20967] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4303'. [ 575.434497][T20971] netlink: 'syz.1.4305': attribute type 1 has an invalid length. [ 575.468227][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.500694][T20971] tc_dump_action: action bad kind [ 575.601342][T20979] netlink: 'syz.6.4306': attribute type 14 has an invalid length. [ 575.610467][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4306'. [ 575.622357][T20979] netlink: 'syz.6.4306': attribute type 14 has an invalid length. [ 575.637499][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4306'. [ 575.794945][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4309'. [ 575.813859][T20986] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4309'. [ 576.345784][T21012] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4314'. [ 576.508477][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.895076][T21035] netlink: 'syz.1.4328': attribute type 1 has an invalid length. [ 576.899517][T21033] syzkaller0: entered promiscuous mode [ 576.919241][T21033] syzkaller0: entered allmulticast mode [ 576.925556][T21044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4326'. [ 577.062726][T21035] bond4 (unregistering): Released all slaves [ 577.174465][T21054] ip6tnl1: entered promiscuous mode [ 577.185780][T21062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4332'. [ 577.190041][T21054] ip6tnl1: entered allmulticast mode [ 577.558157][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.590478][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.628042][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.706301][T21062] bridge_slave_0 (unregistering): left allmulticast mode [ 579.726440][T21062] bridge_slave_0 (unregistering): left promiscuous mode [ 579.733685][T21062] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.926422][T21083] netlink: 'syz.7.4340': attribute type 4 has an invalid length. [ 580.179263][T21104] netlink: 'syz.5.4347': attribute type 9 has an invalid length. [ 580.180706][T21099] x_tables: duplicate underflow at hook 1 [ 580.197649][T21104] netlink: 'syz.5.4347': attribute type 6 has an invalid length. [ 580.200062][T21103] xt_bpf: check failed: parse error [ 580.232808][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4346'. [ 580.361290][T21118] netlink: 'syz.3.4350': attribute type 2 has an invalid length. [ 580.668098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.904942][T21154] xt_CT: No such helper "snmp_trap" [ 580.993851][T21161] netlink: 'syz.5.4364': attribute type 1 has an invalid length. [ 581.091851][T21161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.179845][T21176] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4369'. [ 581.195035][T21168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.207305][T21178] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 581.214511][T21168] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 581.216361][T21178] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 581.227064][T21168] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 581.236355][T21178] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.4371'. [ 581.311669][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4372'. [ 581.341395][T21161] veth5: entered promiscuous mode [ 581.356490][T21161] bond4: (slave veth5): Enslaving as an active interface with a down link [ 581.693471][T21207] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4382'. [ 581.708166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.718548][T21207] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4382'. [ 581.743830][T21207] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4382'. [ 581.781911][T21207] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4382'. [ 581.792871][T21211] ip6t_srh: unknown srh invflags 4000 [ 581.923752][T21222] syzkaller0: entered promiscuous mode [ 581.954829][T21222] syzkaller0: entered allmulticast mode [ 582.089339][T21216] wg1 speed is unknown, defaulting to 1000 [ 582.166345][T21231] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 582.186231][T21231] team0: Device macvtap1 is already an upper device of the team interface [ 582.447288][T21245] netlink: 'syz.1.4393': attribute type 1 has an invalid length. [ 582.522138][T21245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.542011][T21249] bond4: (slave veth0_to_bond): making interface the new active one [ 582.552471][T21249] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 582.573388][T21245] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 582.748019][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 582.780760][T21259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.050393][T21269] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4399'. [ 583.352274][T21280] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 583.512585][T21283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4405'. [ 583.788144][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.988133][T21302] IPv6: sit2: Disabled Multicast RS [ 584.176917][T21323] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 584.828342][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.548993][T21398] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 585.754558][T21411] netlink: 'syz.7.4442': attribute type 10 has an invalid length. [ 585.766894][T21411] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 585.875303][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.179678][T21429] wg1 speed is unknown, defaulting to 1000 [ 586.258422][T21434] __nla_validate_parse: 2 callbacks suppressed [ 586.258456][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4448'. [ 586.862903][T21469] xt_hashlimit: size too large, truncated to 1048576 [ 586.915769][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 587.085155][T21451] bond0: (slave team0): Releasing backup interface [ 587.105244][T21451] team0 (unregistering): Port device team_slave_0 removed [ 587.121598][T21451] team0 (unregistering): Port device team_slave_1 removed [ 587.136111][T21451] team0 (unregistering): Port device batadv1 removed [ 587.170670][T21475] : renamed from vxcan1 [ 587.345030][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4462'. [ 587.592025][T21490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.604030][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4463'. [ 587.650621][T21490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.948042][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 587.999797][T21518] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4471'. [ 588.154416][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4472'. [ 588.315794][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4474'. [ 588.350686][T21530] smc: net device team0 applied user defined pnetid SYZ2 [ 588.417665][T21530] batman_adv: batadv0: Adding interface: dummy0 [ 588.447901][T21530] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.532528][T21530] batman_adv: batadv0: Interface activated: dummy0 [ 588.540874][T21541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4478'. [ 588.551202][T21542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4477'. [ 588.552061][T21541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4478'. [ 588.568197][T21542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4477'. [ 588.616814][T21536] batadv0: mtu less than device minimum [ 588.635485][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 588.647779][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 588.659830][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 588.672248][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 588.685205][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 588.697723][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 588.709552][T21536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 589.578587][T21597] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 589.845141][T21613] netlink: 'syz.3.4502': attribute type 1 has an invalid length. [ 590.197591][T21620] wg1 speed is unknown, defaulting to 1000 [ 590.206438][T21607] netlink: 'syz.1.4500': attribute type 1 has an invalid length. [ 591.697972][T21645] netlink: 'syz.7.4510': attribute type 29 has an invalid length. [ 591.752560][T21646] netlink: 'syz.7.4510': attribute type 29 has an invalid length. [ 591.855718][T21652] netlink: 'syz.6.4512': attribute type 13 has an invalid length. [ 591.878722][T21652] __nla_validate_parse: 7 callbacks suppressed [ 591.878743][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4512'. [ 591.919909][T21652] netlink: 'syz.6.4512': attribute type 13 has an invalid length. [ 591.939515][T21657] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4515'. [ 591.959043][T21659] netlink: 'syz.6.4512': attribute type 1 has an invalid length. [ 591.990136][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4512'. [ 592.013726][T21663] netlink: 412 bytes leftover after parsing attributes in process `syz.5.4516'. [ 592.114485][ C1] net_ratelimit: 16 callbacks suppressed [ 592.114509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.176217][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4519'. [ 592.221747][T21664] bond3: (slave bridge1): making interface the new active one [ 592.273051][T21664] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 592.330749][ T1139] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 592.361873][ T1139] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 592.401473][ T1139] bond0: now running without any active interface! [ 592.506952][T21682] tunl0: Caught tx_queue_len zero misconfig [ 592.548553][T21685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4522'. [ 592.704544][T21695] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4523'. [ 592.881152][T21704] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4527'. [ 593.148141][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 593.157640][T21719] netlink: 'syz.7.4532': attribute type 32 has an invalid length. [ 593.225921][T21724] netlink: 'syz.6.4536': attribute type 1 has an invalid length. [ 593.389290][T21741] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 593.399609][T21739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4540'. [ 593.414204][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4541'. [ 593.423823][T21741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.540054][T21749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.550529][T21753] vlan0: entered promiscuous mode [ 593.563594][T21753] vlan0: entered allmulticast mode [ 593.579443][T21753] veth0_vlan: entered allmulticast mode [ 594.188027][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.345264][T21801] syzkaller0: entered promiscuous mode [ 594.370659][T21801] syzkaller0: entered allmulticast mode [ 594.514390][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.551977][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.581726][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.590785][T21817] ipt_rpfilter: unknown options [ 594.620886][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.627622][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.658109][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.673370][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.818773][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.834872][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 594.859562][T21816] ipt_ECN: cannot use operation on non-tcp rule [ 595.228691][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.357656][T21848] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 595.697378][T21863] mac80211_hwsim hwsim33 : renamed from wlan1 [ 595.740803][T21860] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 595.964214][T21881] syzkaller1: entered promiscuous mode [ 595.994268][T21881] syzkaller1: entered allmulticast mode [ 596.023029][T21881] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 596.075968][T21889] : entered promiscuous mode [ 596.268127][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.278288][T21893] syzkaller0: entered promiscuous mode [ 596.283810][T21893] syzkaller0: entered allmulticast mode [ 596.311312][T21893] tipc: Enabled bearer , priority 0 [ 596.319968][T21892] tipc: Resetting bearer [ 596.368278][T21892] tipc: Disabling bearer [ 596.639460][T21922] tipc: Started in network mode [ 596.652563][T21922] tipc: Node identity 9, cluster identity 4711 [ 596.677360][T21922] tipc: Node number set to 9 [ 597.129492][T21953] __nla_validate_parse: 8 callbacks suppressed [ 597.129515][T21953] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4613'. [ 597.308009][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.523643][T21981] netlink: 19 bytes leftover after parsing attributes in process `syz.5.4622'. [ 597.852800][T21995] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4627'. [ 597.864059][T21995] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4627'. [ 598.015649][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4631'. [ 598.017048][T22004] bond7: Removing last arp target with arp_interval on [ 598.221459][T22016] macsec2: entered promiscuous mode [ 598.292849][T22018] syzkaller0: entered promiscuous mode [ 598.300745][T22018] syzkaller0: entered allmulticast mode [ 598.340845][T22029] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4638'. [ 598.350173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.375286][T22029] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4638'. [ 598.527417][T22037] netlink: 'syz.7.4640': attribute type 1 has an invalid length. [ 598.626000][T22037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 598.757109][T22042] veth5: entered promiscuous mode [ 598.787746][T22042] bond8: (slave veth5): Enslaving as an active interface with an up link [ 598.958508][T22059] pim6reg1: entered promiscuous mode [ 598.963887][T22059] pim6reg1: entered allmulticast mode [ 599.065276][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4646'. [ 599.096714][T22059] bridge_slave_1: left allmulticast mode [ 599.121610][T22059] bridge_slave_1: left promiscuous mode [ 599.141995][T22059] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.220769][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4651'. [ 599.270885][T22081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'. [ 599.386034][T22073] wg1 speed is unknown, defaulting to 1000 [ 599.392257][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.140037][T22111] tipc: Enabling of bearer rejected, failed to enable media [ 600.428020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.153929][T22132] hsr_slave_0 (unregistering): left promiscuous mode [ 601.168733][T22138] netlink: 'syz.5.4670': attribute type 4 has an invalid length. [ 601.186527][T22140] erspan0: entered promiscuous mode [ 601.468192][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.558891][T22162] syzkaller0: entered promiscuous mode [ 601.564440][T22162] syzkaller0: entered allmulticast mode [ 601.846061][T22177] netlink: 'syz.1.4682': attribute type 1 has an invalid length. [ 602.030542][T22191] netlink: 'syz.7.4685': attribute type 24 has an invalid length. [ 602.064012][T22177] bond6: (slave gretap1): making interface the new active one [ 602.109980][T22177] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 602.186648][T22199] __nla_validate_parse: 11 callbacks suppressed [ 602.186780][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4686'. [ 602.508091][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.616523][T22223] netem: unknown loss type 0 [ 602.634133][T22223] netem: change failed [ 602.772406][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 602.914146][T22243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4701'. [ 602.943860][T22246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4702'. [ 602.985020][T22246] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 603.201716][T22235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.214066][T22235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.223729][T22235] bond0 (unregistering): Released all slaves [ 603.266899][T22254] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 603.446473][T22265] syzkaller0: entered promiscuous mode [ 603.468068][T22265] syzkaller0: entered allmulticast mode [ 603.522815][T22265] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4706'. [ 603.548146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.615526][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 603.766785][T22281] netlink: 'syz.3.4711': attribute type 1 has an invalid length. [ 603.796498][T22281] netlink: 'syz.3.4711': attribute type 11 has an invalid length. [ 604.016754][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4718'. [ 604.037591][T22298] bridge_slave_0: left allmulticast mode [ 604.044814][T22298] bridge_slave_0: left promiscuous mode [ 604.059607][T22298] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.226350][T22303] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:0 [ 604.588056][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 604.628401][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4725'. [ 604.666542][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4725'. [ 604.705507][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4725'. [ 604.718916][T22333] netlink: 'syz.5.4725': attribute type 14 has an invalid length. [ 604.733352][T22332] netlink: 'syz.5.4725': attribute type 14 has an invalid length. [ 604.749932][T22333] netlink: 'syz.5.4725': attribute type 13 has an invalid length. [ 604.759927][T22336] netlink: 'syz.6.4727': attribute type 1 has an invalid length. [ 604.788059][T22332] netlink: 'syz.5.4725': attribute type 13 has an invalid length. [ 605.278714][T22366] netlink: 'syz.6.4738': attribute type 2 has an invalid length. [ 605.358171][T22372] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 605.458099][T22380] netlink: 'syz.6.4743': attribute type 1 has an invalid length. [ 605.486624][T22380] netlink: 'syz.6.4743': attribute type 2 has an invalid length. [ 605.628007][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.122011][T22422] syzkaller0: entered promiscuous mode [ 606.150760][T22422] syzkaller0: entered allmulticast mode [ 606.335633][T22430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 606.612654][T22455] Bluetooth: MGMT ver 1.23 [ 606.668195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.717341][T22464] bond0: entered promiscuous mode [ 606.723215][T22464] bond_slave_0: entered promiscuous mode [ 606.730455][T22464] bond_slave_1: entered promiscuous mode [ 606.739785][T22464] batadv0: entered promiscuous mode [ 606.751666][T22464] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 606.782373][T22451] veth0_to_team: entered promiscuous mode [ 606.837578][T22454] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 606.919835][T22454] bond7 (unregistering): Released all slaves [ 607.091604][T22484] syzkaller1: entered promiscuous mode [ 607.128641][T22484] syzkaller1: entered allmulticast mode [ 607.205717][T22496] __nla_validate_parse: 11 callbacks suppressed [ 607.205739][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4776'. [ 607.457544][T22507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4779'. [ 607.493540][T22509] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4779'. [ 607.708041][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.917790][T22537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.947652][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4786'. [ 608.201894][T22552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4792'. [ 608.242821][T22562] lo: left promiscuous mode [ 608.250514][T22562] tunl0: left promiscuous mode [ 608.255965][T22562] gre0: left promiscuous mode [ 608.264837][T22562] gretap0: left promiscuous mode [ 608.273968][T22562] erspan0: left promiscuous mode [ 608.284932][T22562] ip_vti0: left promiscuous mode [ 608.468379][T22562] macvtap0: left allmulticast mode [ 608.492765][T22562] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 608.561918][T22562] geneve2: left promiscuous mode [ 608.638689][T22571] bond0: (slave gretap1): making interface the new active one [ 608.645397][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4800'. [ 608.660942][T22571] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 608.748137][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.932779][T22600] FAULT_INJECTION: forcing a failure. [ 608.932779][T22600] name failslab, interval 1, probability 0, space 0, times 0 [ 608.968017][T22590] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 608.993869][T22590] bond5 (unregistering): Released all slaves [ 609.016525][T22600] CPU: 0 UID: 0 PID: 22600 Comm: syz.1.4805 Not tainted syzkaller #0 PREEMPT(full) [ 609.016556][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.016568][T22600] Call Trace: [ 609.016577][T22600] [ 609.016586][T22600] dump_stack_lvl+0xe8/0x150 [ 609.016628][T22600] should_fail_ex+0x414/0x560 [ 609.016665][T22600] should_failslab+0xa8/0x100 [ 609.016691][T22600] __kvmalloc_node_noprof+0x175/0x920 [ 609.016715][T22600] ? xt_alloc_table_info+0x40/0xb0 [ 609.016744][T22600] xt_alloc_table_info+0x40/0xb0 [ 609.016765][T22600] do_ipt_set_ctl+0x881/0xcd0 [ 609.016789][T22600] ? rcu_is_watching+0x15/0xb0 [ 609.016815][T22600] ? trace_contention_end+0x39/0x100 [ 609.016840][T22600] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 609.016883][T22600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 609.016904][T22600] ? aa_sk_perm+0x7ee/0x920 [ 609.016933][T22600] ? __pfx_aa_sk_perm+0x10/0x10 [ 609.016963][T22600] nf_setsockopt+0x26f/0x290 [ 609.016985][T22600] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 609.017017][T22600] do_sock_setsockopt+0x17c/0x1b0 [ 609.017045][T22600] __x64_sys_setsockopt+0x13f/0x1b0 [ 609.017074][T22600] do_syscall_64+0xec/0xf80 [ 609.017093][T22600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.017111][T22600] ? trace_irq_disable+0x37/0x100 [ 609.017136][T22600] ? clear_bhb_loop+0x60/0xb0 [ 609.017174][T22600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.017193][T22600] RIP: 0033:0x7fc7a8b8f749 [ 609.017212][T22600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.017230][T22600] RSP: 002b:00007fc7a9a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 609.017253][T22600] RAX: ffffffffffffffda RBX: 00007fc7a8de5fa0 RCX: 00007fc7a8b8f749 [ 609.017268][T22600] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 609.017282][T22600] RBP: 00007fc7a9a8f090 R08: 0000000000000318 R09: 0000000000000000 [ 609.017294][T22600] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 609.017307][T22600] R13: 00007fc7a8de6038 R14: 00007fc7a8de5fa0 R15: 00007ffcabb432c8 [ 609.017340][T22600] [ 609.415032][T22614] syzkaller0: entered promiscuous mode [ 609.421661][T22616] ecn_tg_check: 56 callbacks suppressed [ 609.421682][T22616] ipt_ECN: cannot use operation on non-tcp rule [ 609.437081][T22614] syzkaller0: entered allmulticast mode [ 609.454614][T22617] sctp: [Deprecated]: syz.3.4813 (pid 22617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.454614][T22617] Use struct sctp_sack_info instead [ 609.614117][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4814'. [ 609.710783][T22638] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4815'. [ 609.798016][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.524977][T22646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.838052][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.863077][T22631] validate_nla: 8 callbacks suppressed [ 611.863098][T22631] netlink: 'syz.3.4815': attribute type 29 has an invalid length. [ 611.878066][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.949637][T22626] wg1 speed is unknown, defaulting to 1000 [ 612.071008][T22661] FAULT_INJECTION: forcing a failure. [ 612.071008][T22661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.129912][T22661] CPU: 0 UID: 0 PID: 22661 Comm: syz.3.4822 Not tainted syzkaller #0 PREEMPT(full) [ 612.129942][T22661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.129954][T22661] Call Trace: [ 612.129961][T22661] [ 612.129969][T22661] dump_stack_lvl+0xe8/0x150 [ 612.130000][T22661] should_fail_ex+0x414/0x560 [ 612.130033][T22661] _copy_from_user+0x2d/0xb0 [ 612.130058][T22661] copy_from_sockptr_offset+0x66/0xa0 [ 612.130080][T22661] do_ipt_set_ctl+0x8ae/0xcd0 [ 612.130102][T22661] ? rcu_is_watching+0x15/0xb0 [ 612.130127][T22661] ? trace_contention_end+0x39/0x100 [ 612.130159][T22661] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 612.130198][T22661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.130219][T22661] ? aa_sk_perm+0x7ee/0x920 [ 612.130248][T22661] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.130277][T22661] nf_setsockopt+0x26f/0x290 [ 612.130298][T22661] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 612.130329][T22661] do_sock_setsockopt+0x17c/0x1b0 [ 612.130356][T22661] __x64_sys_setsockopt+0x13f/0x1b0 [ 612.130384][T22661] do_syscall_64+0xec/0xf80 [ 612.130403][T22661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.130422][T22661] ? trace_irq_disable+0x37/0x100 [ 612.130447][T22661] ? clear_bhb_loop+0x60/0xb0 [ 612.130469][T22661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.130488][T22661] RIP: 0033:0x7f625b58f749 [ 612.130506][T22661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.130523][T22661] RSP: 002b:00007f625c432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.130544][T22661] RAX: ffffffffffffffda RBX: 00007f625b7e5fa0 RCX: 00007f625b58f749 [ 612.130558][T22661] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 612.130570][T22661] RBP: 00007f625c432090 R08: 0000000000000318 R09: 0000000000000000 [ 612.130582][T22661] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 612.130594][T22661] R13: 00007f625b7e6038 R14: 00007f625b7e5fa0 R15: 00007ffe8a0310d8 [ 612.130626][T22661] [ 612.551523][T22673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4824'. [ 612.910278][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.117172][T22697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4833'. [ 613.164893][T22697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4833'. [ 613.389551][T22709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4834'. [ 613.431384][T22711] FAULT_INJECTION: forcing a failure. [ 613.431384][T22711] name failslab, interval 1, probability 0, space 0, times 0 [ 613.464165][T22711] CPU: 0 UID: 0 PID: 22711 Comm: syz.1.4836 Not tainted syzkaller #0 PREEMPT(full) [ 613.464196][T22711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.464208][T22711] Call Trace: [ 613.464217][T22711] [ 613.464226][T22711] dump_stack_lvl+0xe8/0x150 [ 613.464259][T22711] should_fail_ex+0x414/0x560 [ 613.464297][T22711] should_failslab+0xa8/0x100 [ 613.464324][T22711] __kvmalloc_node_noprof+0x175/0x920 [ 613.464345][T22711] ? do_ipt_set_ctl+0x881/0xcd0 [ 613.464365][T22711] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 613.464385][T22711] ? translate_table+0x198/0x2000 [ 613.464411][T22711] translate_table+0x198/0x2000 [ 613.464453][T22711] ? __pfx_translate_table+0x10/0x10 [ 613.464472][T22711] ? __might_fault+0xb0/0x130 [ 613.464503][T22711] ? __might_fault+0xb0/0x130 [ 613.464553][T22711] ? _copy_from_user+0x94/0xb0 [ 613.464584][T22711] do_ipt_set_ctl+0x967/0xcd0 [ 613.464607][T22711] ? rcu_is_watching+0x15/0xb0 [ 613.464633][T22711] ? trace_contention_end+0x39/0x100 [ 613.464659][T22711] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 613.464702][T22711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 613.464725][T22711] ? aa_sk_perm+0x7ee/0x920 [ 613.464754][T22711] ? __pfx_aa_sk_perm+0x10/0x10 [ 613.464786][T22711] nf_setsockopt+0x26f/0x290 [ 613.464807][T22711] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 613.464841][T22711] do_sock_setsockopt+0x17c/0x1b0 [ 613.464868][T22711] __x64_sys_setsockopt+0x13f/0x1b0 [ 613.464898][T22711] do_syscall_64+0xec/0xf80 [ 613.464918][T22711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.464938][T22711] ? trace_irq_disable+0x37/0x100 [ 613.464963][T22711] ? clear_bhb_loop+0x60/0xb0 [ 613.464987][T22711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.465006][T22711] RIP: 0033:0x7fc7a8b8f749 [ 613.465025][T22711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.465043][T22711] RSP: 002b:00007fc7a9a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 613.465066][T22711] RAX: ffffffffffffffda RBX: 00007fc7a8de5fa0 RCX: 00007fc7a8b8f749 [ 613.465082][T22711] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 613.465095][T22711] RBP: 00007fc7a9a8f090 R08: 0000000000000318 R09: 0000000000000000 [ 613.465108][T22711] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 613.465120][T22711] R13: 00007fc7a8de6038 R14: 00007fc7a8de5fa0 R15: 00007ffcabb432c8 [ 613.465217][T22711] [ 613.768844][T22721] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4839'. [ 613.947979][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.967692][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4841'. [ 614.270499][T22748] FAULT_INJECTION: forcing a failure. [ 614.270499][T22748] name failslab, interval 1, probability 0, space 0, times 0 [ 614.318189][T22748] CPU: 0 UID: 0 PID: 22748 Comm: syz.5.4849 Not tainted syzkaller #0 PREEMPT(full) [ 614.318221][T22748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.318233][T22748] Call Trace: [ 614.318241][T22748] [ 614.318250][T22748] dump_stack_lvl+0xe8/0x150 [ 614.318283][T22748] should_fail_ex+0x414/0x560 [ 614.318317][T22748] should_failslab+0xa8/0x100 [ 614.318343][T22748] __kmalloc_cache_noprof+0x84/0x700 [ 614.318365][T22748] ? quota_mt_check+0x9c/0x180 [ 614.318397][T22748] quota_mt_check+0x9c/0x180 [ 614.318427][T22748] xt_check_match+0x3d1/0xab0 [ 614.318452][T22748] ? __pfx_xt_check_match+0x10/0x10 [ 614.318476][T22748] ? pcpu_alloc_noprof+0xf95/0x1750 [ 614.318506][T22748] ? xt_find_match+0x1f7/0x250 [ 614.318544][T22748] translate_table+0x150b/0x2000 [ 614.318587][T22748] ? __pfx_translate_table+0x10/0x10 [ 614.318604][T22748] ? __might_fault+0xb0/0x130 [ 614.318634][T22748] ? __might_fault+0xb0/0x130 [ 614.318682][T22748] ? _copy_from_user+0x94/0xb0 [ 614.318712][T22748] do_ipt_set_ctl+0x967/0xcd0 [ 614.318736][T22748] ? rcu_is_watching+0x15/0xb0 [ 614.318762][T22748] ? trace_contention_end+0x39/0x100 [ 614.318787][T22748] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 614.318834][T22748] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 614.318855][T22748] ? aa_sk_perm+0x7ee/0x920 [ 614.318884][T22748] ? __pfx_aa_sk_perm+0x10/0x10 [ 614.318914][T22748] nf_setsockopt+0x26f/0x290 [ 614.318935][T22748] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 614.318968][T22748] do_sock_setsockopt+0x17c/0x1b0 [ 614.318996][T22748] __x64_sys_setsockopt+0x13f/0x1b0 [ 614.319024][T22748] do_syscall_64+0xec/0xf80 [ 614.319043][T22748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.319062][T22748] ? trace_irq_disable+0x37/0x100 [ 614.319087][T22748] ? clear_bhb_loop+0x60/0xb0 [ 614.319111][T22748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.319130][T22748] RIP: 0033:0x7fe6f0b8f749 [ 614.319158][T22748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.319176][T22748] RSP: 002b:00007fe6f1a75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 614.319200][T22748] RAX: ffffffffffffffda RBX: 00007fe6f0de5fa0 RCX: 00007fe6f0b8f749 [ 614.319214][T22748] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 614.319228][T22748] RBP: 00007fe6f1a75090 R08: 0000000000000318 R09: 0000000000000000 [ 614.319241][T22748] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 614.319254][T22748] R13: 00007fe6f0de6038 R14: 00007fe6f0de5fa0 R15: 00007ffe89388de8 [ 614.319287][T22748] [ 614.551889][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4854'. [ 614.568472][T22754] : entered promiscuous mode [ 614.933369][T22754] syzkaller0: entered promiscuous mode [ 614.940793][T22754] syzkaller0: entered allmulticast mode [ 614.988052][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.234500][T22801] FAULT_INJECTION: forcing a failure. [ 615.234500][T22801] name failslab, interval 1, probability 0, space 0, times 0 [ 615.261530][T22801] CPU: 0 UID: 0 PID: 22801 Comm: syz.1.4863 Not tainted syzkaller #0 PREEMPT(full) [ 615.261561][T22801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.261574][T22801] Call Trace: [ 615.261582][T22801] [ 615.261591][T22801] dump_stack_lvl+0xe8/0x150 [ 615.261623][T22801] should_fail_ex+0x414/0x560 [ 615.261659][T22801] should_failslab+0xa8/0x100 [ 615.261686][T22801] __kvmalloc_node_noprof+0x175/0x920 [ 615.261707][T22801] ? rcu_is_watching+0x15/0xb0 [ 615.261733][T22801] ? nf_hook_entries_grow+0x281/0x720 [ 615.261762][T22801] ? __pfx___mutex_lock+0x10/0x10 [ 615.261789][T22801] nf_hook_entries_grow+0x281/0x720 [ 615.261820][T22801] ? unwind_get_return_address+0x4d/0x90 [ 615.261865][T22801] __nf_register_net_hook+0x2c9/0x930 [ 615.261905][T22801] nf_register_net_hook+0xb2/0x190 [ 615.261935][T22801] nf_register_net_hooks+0x44/0x1b0 [ 615.261966][T22801] nf_defrag_ipv4_enable+0x87/0x120 [ 615.261997][T22801] nf_ct_netns_do_get+0x18c/0x5a0 [ 615.262029][T22801] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 615.262074][T22801] xt_ct_tg_check+0xf1/0xa90 [ 615.262123][T22801] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 615.262155][T22801] ? __mutex_trylock_common+0x153/0x260 [ 615.262179][T22801] ? xt_ct_tg_check_v0+0x162/0x290 [ 615.262214][T22801] xt_ct_tg_check_v0+0x16f/0x290 [ 615.262248][T22801] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 615.262276][T22801] ? trace_contention_end+0x39/0x100 [ 615.262312][T22801] ? xt_find_target+0x1f3/0x240 [ 615.262349][T22801] xt_check_target+0x3c3/0xa90 [ 615.262372][T22801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.262396][T22801] ? __pfx_xt_check_target+0x10/0x10 [ 615.262421][T22801] ? pcpu_alloc_noprof+0xf95/0x1750 [ 615.262453][T22801] ? xt_find_target+0x1f3/0x240 [ 615.262493][T22801] translate_table+0x1811/0x2000 [ 615.262539][T22801] ? __pfx_translate_table+0x10/0x10 [ 615.262556][T22801] ? __might_fault+0xb0/0x130 [ 615.262586][T22801] ? __might_fault+0xb0/0x130 [ 615.262638][T22801] ? _copy_from_user+0x94/0xb0 [ 615.262669][T22801] do_ipt_set_ctl+0x967/0xcd0 [ 615.262694][T22801] ? rcu_is_watching+0x15/0xb0 [ 615.262720][T22801] ? trace_contention_end+0x39/0x100 [ 615.262745][T22801] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 615.262792][T22801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.262813][T22801] ? aa_sk_perm+0x7ee/0x920 [ 615.262844][T22801] ? __pfx_aa_sk_perm+0x10/0x10 [ 615.262876][T22801] nf_setsockopt+0x26f/0x290 [ 615.262898][T22801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 615.262931][T22801] do_sock_setsockopt+0x17c/0x1b0 [ 615.262961][T22801] __x64_sys_setsockopt+0x13f/0x1b0 [ 615.262991][T22801] do_syscall_64+0xec/0xf80 [ 615.263012][T22801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.263031][T22801] ? trace_irq_disable+0x37/0x100 [ 615.263057][T22801] ? clear_bhb_loop+0x60/0xb0 [ 615.263083][T22801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.263102][T22801] RIP: 0033:0x7fc7a8b8f749 [ 615.263129][T22801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.263146][T22801] RSP: 002b:00007fc7a9a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 615.263169][T22801] RAX: ffffffffffffffda RBX: 00007fc7a8de5fa0 RCX: 00007fc7a8b8f749 [ 615.263184][T22801] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 615.263197][T22801] RBP: 00007fc7a9a8f090 R08: 0000000000000318 R09: 0000000000000000 [ 615.263209][T22801] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 615.263221][T22801] R13: 00007fc7a8de6038 R14: 00007fc7a8de5fa0 R15: 00007ffcabb432c8 [ 615.263258][T22801] [ 615.886665][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4867'. [ 615.965858][T22814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4867'. [ 615.992595][T22824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4871'. [ 616.028011][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.170667][T22824] netlink: 'syz.5.4871': attribute type 7 has an invalid length. [ 616.239134][T22838] FAULT_INJECTION: forcing a failure. [ 616.239134][T22838] name failslab, interval 1, probability 0, space 0, times 0 [ 616.260020][T22832] wg1 speed is unknown, defaulting to 1000 [ 616.328119][T22838] CPU: 1 UID: 0 PID: 22838 Comm: syz.3.4875 Not tainted syzkaller #0 PREEMPT(full) [ 616.328157][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.328170][T22838] Call Trace: [ 616.328178][T22838] [ 616.328187][T22838] dump_stack_lvl+0xe8/0x150 [ 616.328220][T22838] should_fail_ex+0x414/0x560 [ 616.328258][T22838] should_failslab+0xa8/0x100 [ 616.328285][T22838] __kvmalloc_node_noprof+0x175/0x920 [ 616.328309][T22838] ? nf_hook_entries_grow+0x281/0x720 [ 616.328337][T22838] ? __pfx___mutex_lock+0x10/0x10 [ 616.328364][T22838] nf_hook_entries_grow+0x281/0x720 [ 616.328408][T22838] __nf_register_net_hook+0x2c9/0x930 [ 616.328448][T22838] nf_register_net_hook+0xb2/0x190 [ 616.328477][T22838] nf_register_net_hooks+0x44/0x1b0 [ 616.328507][T22838] nf_defrag_ipv4_enable+0x87/0x120 [ 616.328538][T22838] nf_ct_netns_do_get+0x18c/0x5a0 [ 616.328571][T22838] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 616.328616][T22838] xt_ct_tg_check+0xf1/0xa90 [ 616.328655][T22838] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 616.328686][T22838] ? __mutex_trylock_common+0x153/0x260 [ 616.328711][T22838] ? xt_ct_tg_check_v0+0x162/0x290 [ 616.328746][T22838] xt_ct_tg_check_v0+0x16f/0x290 [ 616.328779][T22838] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 616.328806][T22838] ? trace_contention_end+0x39/0x100 [ 616.328843][T22838] ? xt_find_target+0x1f3/0x240 [ 616.328882][T22838] xt_check_target+0x3c3/0xa90 [ 616.328906][T22838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.328930][T22838] ? __pfx_xt_check_target+0x10/0x10 [ 616.328954][T22838] ? pcpu_alloc_noprof+0xf95/0x1750 [ 616.328986][T22838] ? xt_find_target+0x1f3/0x240 [ 616.329025][T22838] translate_table+0x1811/0x2000 [ 616.329071][T22838] ? __pfx_translate_table+0x10/0x10 [ 616.329089][T22838] ? __might_fault+0xb0/0x130 [ 616.329120][T22838] ? __might_fault+0xb0/0x130 [ 616.329185][T22838] ? _copy_from_user+0x94/0xb0 [ 616.329216][T22838] do_ipt_set_ctl+0x967/0xcd0 [ 616.329239][T22838] ? rcu_is_watching+0x15/0xb0 [ 616.329264][T22838] ? trace_contention_end+0x39/0x100 [ 616.329285][T22838] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 616.329332][T22838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.329353][T22838] ? aa_sk_perm+0x7ee/0x920 [ 616.329385][T22838] ? __pfx_aa_sk_perm+0x10/0x10 [ 616.329416][T22838] nf_setsockopt+0x26f/0x290 [ 616.329436][T22838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 616.329470][T22838] do_sock_setsockopt+0x17c/0x1b0 [ 616.329499][T22838] __x64_sys_setsockopt+0x13f/0x1b0 [ 616.329529][T22838] do_syscall_64+0xec/0xf80 [ 616.329549][T22838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.329566][T22838] ? trace_irq_disable+0x37/0x100 [ 616.329591][T22838] ? clear_bhb_loop+0x60/0xb0 [ 616.329615][T22838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.329634][T22838] RIP: 0033:0x7f625b58f749 [ 616.329653][T22838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.329671][T22838] RSP: 002b:00007f625c432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 616.329693][T22838] RAX: ffffffffffffffda RBX: 00007f625b7e5fa0 RCX: 00007f625b58f749 [ 616.329707][T22838] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 616.329720][T22838] RBP: 00007f625c432090 R08: 0000000000000318 R09: 0000000000000000 [ 616.329733][T22838] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 616.329745][T22838] R13: 00007f625b7e6038 R14: 00007f625b7e5fa0 R15: 00007ffe8a0310d8 [ 616.329782][T22838] [ 617.068129][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.207775][T22857] nbd: device at index 64 is going down [ 617.646739][T22876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.964478][T22895] __nla_validate_parse: 6 callbacks suppressed [ 617.964500][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4890'. [ 618.108077][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.476717][T22922] netlink: 'syz.3.4900': attribute type 11 has an invalid length. [ 618.478389][T22924] netlink: 'syz.3.4900': attribute type 11 has an invalid length. [ 618.524954][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4900'. [ 618.542534][T22924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4900'. [ 618.643007][T22932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4901'. [ 618.675055][T22934] syzkaller1: entered promiscuous mode [ 618.694967][T22934] syzkaller1: entered allmulticast mode [ 619.073896][T22962] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4910'. [ 619.099871][T22964] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 619.148036][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 619.665191][T23000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4922'. [ 620.104369][T23024] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 620.124028][T23024] netlink: 'syz.3.4929': attribute type 3 has an invalid length. [ 620.133085][T23024] netlink: 'syz.3.4929': attribute type 1 has an invalid length. [ 620.188352][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.263472][T23036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4932'. [ 620.745637][T23065] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4941'. [ 620.844399][T23069] sctp: [Deprecated]: syz.7.4944 (pid 23069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.844399][T23069] Use struct sctp_sack_info instead [ 620.865032][T23071] sctp: [Deprecated]: syz.7.4944 (pid 23071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.865032][T23071] Use struct sctp_sack_info instead [ 621.228099][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.309647][T23099] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4953'. [ 621.368433][T23101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.383751][T23101] netlink: 'syz.6.4954': attribute type 10 has an invalid length. [ 621.396112][T23101] bond2: (slave lo): Releasing backup interface [ 621.405073][T23101] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 621.430311][T23101] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 621.443541][T23101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.476946][T23101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.569060][T23111] netlink: 'syz.6.4957': attribute type 10 has an invalid length. [ 621.576975][T23111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4957'. [ 621.844593][T23122] bond3: entered promiscuous mode [ 621.852841][T23122] bond3: entered allmulticast mode [ 621.858639][T23122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.893289][T23128] FAULT_INJECTION: forcing a failure. [ 621.893289][T23128] name failslab, interval 1, probability 0, space 0, times 0 [ 621.906658][T23128] CPU: 0 UID: 0 PID: 23128 Comm: syz.1.4963 Not tainted syzkaller #0 PREEMPT(full) [ 621.906687][T23128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.906698][T23128] Call Trace: [ 621.906706][T23128] [ 621.906715][T23128] dump_stack_lvl+0xe8/0x150 [ 621.906747][T23128] should_fail_ex+0x414/0x560 [ 621.906795][T23128] should_failslab+0xa8/0x100 [ 621.906821][T23128] __kmalloc_cache_noprof+0x84/0x700 [ 621.906843][T23128] ? nf_ct_tmpl_alloc+0x7e/0x230 [ 621.906875][T23128] nf_ct_tmpl_alloc+0x7e/0x230 [ 621.906906][T23128] xt_ct_tg_check+0x223/0xa90 [ 621.906942][T23128] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 621.906971][T23128] ? __mutex_trylock_common+0x153/0x260 [ 621.906993][T23128] ? xt_ct_tg_check_v0+0x162/0x290 [ 621.907022][T23128] xt_ct_tg_check_v0+0x16f/0x290 [ 621.907048][T23128] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 621.907070][T23128] ? trace_contention_end+0x39/0x100 [ 621.907098][T23128] ? xt_find_target+0x1f3/0x240 [ 621.907130][T23128] xt_check_target+0x3c3/0xa90 [ 621.907150][T23128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.907170][T23128] ? __pfx_xt_check_target+0x10/0x10 [ 621.907191][T23128] ? pcpu_alloc_noprof+0xf95/0x1750 [ 621.907216][T23128] ? xt_find_target+0x1f3/0x240 [ 621.907246][T23128] translate_table+0x1811/0x2000 [ 621.907283][T23128] ? __pfx_translate_table+0x10/0x10 [ 621.907297][T23128] ? __might_fault+0xb0/0x130 [ 621.907321][T23128] ? __might_fault+0xb0/0x130 [ 621.907361][T23128] ? _copy_from_user+0x94/0xb0 [ 621.907393][T23128] do_ipt_set_ctl+0x967/0xcd0 [ 621.907413][T23128] ? rcu_is_watching+0x15/0xb0 [ 621.907433][T23128] ? trace_contention_end+0x39/0x100 [ 621.907453][T23128] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 621.907492][T23128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.907511][T23128] ? aa_sk_perm+0x7ee/0x920 [ 621.907533][T23128] ? __pfx_aa_sk_perm+0x10/0x10 [ 621.907558][T23128] nf_setsockopt+0x26f/0x290 [ 621.907573][T23128] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 621.907603][T23128] do_sock_setsockopt+0x17c/0x1b0 [ 621.907628][T23128] __x64_sys_setsockopt+0x13f/0x1b0 [ 621.907655][T23128] do_syscall_64+0xec/0xf80 [ 621.907675][T23128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.907693][T23128] ? trace_irq_disable+0x37/0x100 [ 621.907717][T23128] ? clear_bhb_loop+0x60/0xb0 [ 621.907740][T23128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.907758][T23128] RIP: 0033:0x7fc7a8b8f749 [ 621.907778][T23128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.907799][T23128] RSP: 002b:00007fc7a9a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 621.907821][T23128] RAX: ffffffffffffffda RBX: 00007fc7a8de5fa0 RCX: 00007fc7a8b8f749 [ 621.907835][T23128] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 621.907848][T23128] RBP: 00007fc7a9a8f090 R08: 0000000000000318 R09: 0000000000000000 [ 621.907859][T23128] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000002 [ 621.907872][T23128] R13: 00007fc7a8de6038 R14: 00007fc7a8de5fa0 R15: 00007ffcabb432c8 [ 621.907905][T23128] [ 621.949815][T23130] tipc: Enabled bearer , priority 0 [ 622.267984][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.298857][T23137] netlink: 'syz.7.4965': attribute type 2 has an invalid length. [ 622.370932][T23125] syzkaller0: entered promiscuous mode [ 622.376484][T23125] syzkaller0: entered allmulticast mode [ 622.398649][T23125] tipc: Resetting bearer [ 622.442580][T23124] tipc: Resetting bearer [ 623.312635][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.354769][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.523736][T23124] tipc: Disabling bearer [ 624.556217][T23151] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 624.575202][T23151] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 624.625410][T23163] __nla_validate_parse: 1 callbacks suppressed [ 624.625431][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4972'. [ 624.685402][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.734444][T23169] FAULT_INJECTION: forcing a failure. [ 624.734444][T23169] name failslab, interval 1, probability 0, space 0, times 0 [ 624.756772][T23169] CPU: 1 UID: 0 PID: 23169 Comm: syz.6.4974 Not tainted syzkaller #0 PREEMPT(full) [ 624.756804][T23169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.756816][T23169] Call Trace: [ 624.756825][T23169] [ 624.756833][T23169] dump_stack_lvl+0xe8/0x150 [ 624.756866][T23169] should_fail_ex+0x414/0x560 [ 624.756902][T23169] should_failslab+0xa8/0x100 [ 624.756928][T23169] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 624.756952][T23169] ? nf_ct_ext_add+0x1b6/0x460 [ 624.756975][T23169] ? nf_ct_ext_add+0x1b6/0x460 [ 624.756996][T23169] krealloc_node_align_noprof+0x1ae/0x3a0 [ 624.757018][T23169] ? __kasan_kmalloc+0x93/0xb0 [ 624.757044][T23169] nf_ct_ext_add+0x1b6/0x460 [ 624.757071][T23169] nf_ct_ecache_ext_add+0x156/0x2e0 [ 624.757100][T23169] xt_ct_tg_check+0x2cf/0xa90 [ 624.757147][T23169] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 624.757178][T23169] ? __mutex_trylock_common+0x153/0x260 [ 624.757202][T23169] ? xt_ct_tg_check_v0+0x162/0x290 [ 624.757236][T23169] xt_ct_tg_check_v0+0x16f/0x290 [ 624.757268][T23169] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 624.757295][T23169] ? trace_contention_end+0x39/0x100 [ 624.757329][T23169] ? xt_find_target+0x1f3/0x240 [ 624.757368][T23169] xt_check_target+0x3c3/0xa90 [ 624.757392][T23169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.757416][T23169] ? __pfx_xt_check_target+0x10/0x10 [ 624.757439][T23169] ? pcpu_alloc_noprof+0xf95/0x1750 [ 624.757468][T23169] ? xt_find_target+0x1f3/0x240 [ 624.757505][T23169] translate_table+0x1811/0x2000 [ 624.757549][T23169] ? __pfx_translate_table+0x10/0x10 [ 624.757566][T23169] ? __might_fault+0xb0/0x130 [ 624.757597][T23169] ? __might_fault+0xb0/0x130 [ 624.757646][T23169] ? _copy_from_user+0x94/0xb0 [ 624.757677][T23169] do_ipt_set_ctl+0x967/0xcd0 [ 624.757700][T23169] ? rcu_is_watching+0x15/0xb0 [ 624.757720][T23169] ? trace_contention_end+0x39/0x100 [ 624.757743][T23169] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 624.757785][T23169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.757810][T23169] ? aa_sk_perm+0x7ee/0x920 [ 624.757838][T23169] ? __pfx_aa_sk_perm+0x10/0x10 [ 624.757867][T23169] nf_setsockopt+0x26f/0x290 [ 624.757887][T23169] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 624.757917][T23169] do_sock_setsockopt+0x17c/0x1b0 [ 624.757945][T23169] __x64_sys_setsockopt+0x13f/0x1b0 [ 624.757973][T23169] do_syscall_64+0xec/0xf80 [ 624.757993][T23169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.758012][T23169] ? trace_irq_disable+0x37/0x100 [ 624.758038][T23169] ? clear_bhb_loop+0x60/0xb0 [ 624.758063][T23169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.758083][T23169] RIP: 0033:0x7fad5118f749 [ 624.758101][T23169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.758127][T23169] RSP: 002b:00007fad52018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 624.758149][T23169] RAX: ffffffffffffffda RBX: 00007fad513e5fa0 RCX: 00007fad5118f749 [ 624.758164][T23169] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 624.758177][T23169] RBP: 00007fad52018090 R08: 0000000000000318 R09: 0000000000000000 [ 624.758189][T23169] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000002 [ 624.758202][T23169] R13: 00007fad513e6038 R14: 00007fad513e5fa0 R15: 00007ffeebb8b388 [ 624.758235][T23169] [ 625.388054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 625.396302][T23185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'. [ 625.645427][T23209] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4986'. [ 625.670545][T23204] bond5: Unable to set up delay as MII monitoring is disabled [ 625.682856][T23204] bond5 (unregistering): Released all slaves [ 625.730495][T23203] syzkaller0: entered promiscuous mode [ 625.736480][T23203] syzkaller0: entered allmulticast mode [ 625.883517][T23221] netlink: 'syz.7.4990': attribute type 32 has an invalid length. [ 625.920380][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4990'. [ 625.943735][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4989'. [ 625.994771][T23226] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4991'. [ 626.031274][T23221] bond9: Setting coupled_control to off (0) [ 626.118094][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4994'. [ 626.345256][T23248] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4998'. [ 626.367338][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4998'. [ 626.377350][T23248] netlink: 31 bytes leftover after parsing attributes in process `syz.7.4998'. [ 626.387635][T23248] netlink: 'syz.7.4998': attribute type 2 has an invalid length. [ 626.428017][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 626.852722][T23273] wg1 speed is unknown, defaulting to 1000 [ 627.364492][T23296] block nbd3: Unsupported socket: should be TCP or UNIX. [ 627.468119][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.833176][T23320] netlink: 'syz.5.5019': attribute type 10 has an invalid length. [ 628.209410][T23333] netlink: 'syz.7.5026': attribute type 3 has an invalid length. [ 628.508383][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.664023][T23362] netlink: 'syz.7.5035': attribute type 10 has an invalid length. [ 628.756984][T23362] team0: Port device geneve0 added [ 628.969645][T23378] netlink: 'syz.6.5041': attribute type 1 has an invalid length. [ 628.987688][T23378] netlink: 'syz.6.5041': attribute type 1 has an invalid length. [ 629.078266][T23389] tipc: Enabling of bearer rejected, failed to enable media [ 629.106861][T23389] netlink: 'syz.5.5044': attribute type 83 has an invalid length. [ 629.279315][T23399] sit1: entered promiscuous mode [ 629.286432][T23399] sit1: entered allmulticast mode [ 629.548073][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.781206][T23428] netlink: 'syz.1.5058': attribute type 6 has an invalid length. [ 629.839478][T23431] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:32789 [ 630.289114][T23455] xt_hashlimit: max too large, truncated to 1048576 [ 630.519807][T23470] __nla_validate_parse: 12 callbacks suppressed [ 630.519831][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5068'. [ 630.588071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.629232][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5068'. [ 630.876800][T23492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5071'. [ 631.006629][T23500] netlink: 512 bytes leftover after parsing attributes in process `syz.7.5075'. [ 631.125428][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5076'. [ 631.259830][T23515] xt_hashlimit: size too large, truncated to 1048576 [ 631.628212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.705334][T23533] wg1 speed is unknown, defaulting to 1000 [ 631.891920][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5089'. [ 631.943674][T23545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5089'. [ 631.974333][T23545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5089'. [ 632.003664][T23545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5089'. [ 632.022045][T23545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5089'. [ 632.250839][T23556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 632.311729][T23563] netlink: 'syz.3.5095': attribute type 1 has an invalid length. [ 632.400281][T23554] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 632.420578][T23554] netlink: 'syz.1.5092': attribute type 11 has an invalid length. [ 632.678106][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.752604][T23582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.112607][T23600] netlink: 'syz.1.5105': attribute type 3 has an invalid length. [ 633.139925][T23600] netlink: 'syz.1.5105': attribute type 1 has an invalid length. [ 633.708072][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.006492][T23641] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 634.246065][T23647] wg1 speed is unknown, defaulting to 1000 [ 634.256373][T23643] netem: incorrect gi model size [ 634.262174][T23643] netem: change failed [ 634.382974][T23660] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 634.748026][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.183404][T23688] bond6 (unregistering): Released all slaves [ 635.604355][T23714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.788282][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.831238][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.878090][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.137434][T23744] veth0_to_team: entered promiscuous mode [ 638.493440][T23764] __nla_validate_parse: 14 callbacks suppressed [ 638.493462][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5156'. [ 638.655250][T23785] team0: No ports can be present during mode change [ 638.890314][T23798] netlink: 'syz.5.5165': attribute type 7 has an invalid length. [ 638.908037][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.915892][T23798] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5165'. [ 639.014135][T23800] wg1 speed is unknown, defaulting to 1000 [ 639.032246][T23804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5168'. [ 639.254634][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.289944][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.338625][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.379070][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.433248][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.465216][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.485983][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.545174][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.580097][T23830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5176'. [ 639.592089][T23817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.748445][T23835] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 639.958909][T23848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5183'. [ 640.183422][T23861] netlink: 'syz.5.5186': attribute type 5 has an invalid length. [ 640.224282][T23861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5186'. [ 640.291255][T23855] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5186'. [ 640.394610][T23868] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5189'. [ 640.438556][T23868] block nbd0: reconnected socket [ 640.570619][ T5840] block nbd0: Receive control failed (result -32) [ 640.800093][T23882] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5192'. [ 640.985164][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 641.066398][T23886] team0: entered promiscuous mode [ 641.086376][T23886] team0: entered allmulticast mode [ 641.352469][ T7187] netdevsim netdevsim4 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.458299][ T7193] netdevsim netdevsim4 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.467290][ T7193] netdevsim netdevsim4 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.536909][ T7193] netdevsim netdevsim4 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.591195][T13446] bridge_slave_1: left allmulticast mode [ 641.609316][T13446] bridge_slave_1: left promiscuous mode [ 641.635713][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.702334][T13446] bridge_slave_0: left allmulticast mode [ 641.710283][T13446] bridge_slave_0: left promiscuous mode [ 641.729954][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.671935][T13446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.682780][T13446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.692646][T13446] bond0 (unregistering): Released all slaves [ 642.832542][T13446] bond1 (unregistering): (slave lo): Removing an active aggregator [ 642.841984][T13446] bond1 (unregistering): (slave lo): Releasing backup interface [ 642.850387][T13446] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 642.862078][T13446] bond1 (unregistering): Released all slaves [ 643.021221][T13446] bond2 (unregistering): Released all slaves [ 643.034607][T23927] syzkaller0: entered promiscuous mode [ 643.040728][T23927] syzkaller0: entered allmulticast mode [ 643.140578][T13446] tipc: Disabling bearer [ 643.158822][T13446] tipc: Left network mode [ 643.312823][T23937] wg1 speed is unknown, defaulting to 1000 [ 643.337167][T23973] netlink: 'syz.7.5217': attribute type 3 has an invalid length. [ 643.427146][T13446] IPVS: stopping backup sync thread 10339 ... [ 643.771806][T23993] __nla_validate_parse: 3 callbacks suppressed [ 643.771828][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5225'. [ 643.988107][T24008] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5227'. [ 644.257607][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5232'. [ 644.454473][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5235'. [ 644.520646][T13446] hsr_slave_0: left promiscuous mode [ 644.527718][T13446] hsr_slave_1: left promiscuous mode [ 644.537213][T13446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.558015][T13446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.009556][T13446] team0 (unregistering): Port device team_slave_1 removed [ 645.057245][T13446] team0 (unregistering): Port device team_slave_0 removed [ 645.451442][T13446] smc: removing net device team0 with user defined pnetid SYZ2 [ 645.669947][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5238'. [ 645.729293][T24043] No such timeout policy "syz0" [ 646.050787][T24059] netlink: 696 bytes leftover after parsing attributes in process `syz.6.5245'. [ 646.176962][T24062] tipc: Enabled bearer , priority 10 [ 646.250645][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5249'. [ 646.285273][T24066] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5249'. [ 646.323720][T13446] IPVS: stop unused estimator thread 0... [ 646.334061][T24073] bridge0: entered allmulticast mode [ 646.358939][T24072] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5250'. [ 646.500107][T24082] FAULT_INJECTION: forcing a failure. [ 646.500107][T24082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.520629][T24082] CPU: 0 UID: 0 PID: 24082 Comm: syz.5.5252 Not tainted syzkaller #0 PREEMPT(full) [ 646.520661][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.520673][T24082] Call Trace: [ 646.520681][T24082] [ 646.520690][T24082] dump_stack_lvl+0xe8/0x150 [ 646.520721][T24082] should_fail_ex+0x414/0x560 [ 646.520757][T24082] _copy_from_iter+0x1cd/0x1630 [ 646.520778][T24082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.520812][T24082] ? policy_nodemask+0x27c/0x720 [ 646.520834][T24082] ? __pfx__copy_from_iter+0x10/0x10 [ 646.520863][T24082] ? set_page_refcounted+0xa0/0x1e0 [ 646.520886][T24082] ? page_copy_sane+0x4e/0x280 [ 646.520909][T24082] copy_page_from_iter+0xdd/0x170 [ 646.520936][T24082] tun_get_user+0x1d40/0x3dc0 [ 646.520964][T24082] ? tun_get_user+0x6fc/0x3dc0 [ 646.521001][T24082] ? aa_file_perm+0x44c/0x1530 [ 646.521029][T24082] ? __pfx_tun_get_user+0x10/0x10 [ 646.521055][T24082] ? __lock_acquire+0x6b6/0x2cf0 [ 646.521079][T24082] ? kstrtoull+0x12f/0x1d0 [ 646.521126][T24082] ? ref_tracker_alloc+0x318/0x460 [ 646.521144][T24082] ? get_pid_task+0x20/0x1f0 [ 646.521170][T24082] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 646.521189][T24082] ? tun_get+0x1c/0x2f0 [ 646.521210][T24082] ? tun_get+0x1c/0x2f0 [ 646.521236][T24082] ? tun_get+0x1c/0x2f0 [ 646.521256][T24082] ? tun_get+0x1c/0x2f0 [ 646.521284][T24082] tun_chr_write_iter+0x113/0x200 [ 646.521308][T24082] vfs_write+0x5c9/0xb30 [ 646.521331][T24082] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 646.521352][T24082] ? __pfx_vfs_write+0x10/0x10 [ 646.521382][T24082] ? __fget_files+0x2a/0x420 [ 646.521416][T24082] ksys_write+0x145/0x250 [ 646.521438][T24082] ? __pfx_ksys_write+0x10/0x10 [ 646.521470][T24082] do_syscall_64+0xec/0xf80 [ 646.521489][T24082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.521508][T24082] ? trace_irq_disable+0x37/0x100 [ 646.521532][T24082] ? clear_bhb_loop+0x60/0xb0 [ 646.521555][T24082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.521573][T24082] RIP: 0033:0x7fe6f0b8e1ff [ 646.521590][T24082] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 646.521607][T24082] RSP: 002b:00007fe6f1a75000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 646.521629][T24082] RAX: ffffffffffffffda RBX: 00007fe6f0de5fa0 RCX: 00007fe6f0b8e1ff [ 646.521643][T24082] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 646.521655][T24082] RBP: 00007fe6f1a75090 R08: 0000000000000000 R09: 0000000000000000 [ 646.521667][T24082] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 646.521678][T24082] R13: 00007fe6f0de6038 R14: 00007fe6f0de5fa0 R15: 00007ffe89388de8 [ 646.521710][T24082] [ 646.523624][T24080] syzkaller0: entered promiscuous mode [ 646.803656][T24080] syzkaller0: entered allmulticast mode [ 647.113227][T24113] netlink: 'syz.5.5263': attribute type 29 has an invalid length. [ 647.139329][T24113] netlink: 'syz.5.5263': attribute type 29 has an invalid length. [ 647.277314][T24124] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5265'. [ 647.298456][T15366] tipc: Node number set to 1886658656 [ 647.316226][T24123] xt_hashlimit: invalid rate [ 647.500043][T24133] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 647.548557][T24134] lo: entered allmulticast mode [ 647.549113][T24133] netlink: 'syz.3.5269': attribute type 1 has an invalid length. [ 647.562320][T24134] tunl0: entered allmulticast mode [ 647.565436][T24134] gre0: entered allmulticast mode [ 647.640676][T24134] gretap0: entered allmulticast mode [ 647.651717][T24134] erspan0: entered allmulticast mode [ 647.682962][T24134] ip_vti0: entered allmulticast mode [ 647.691959][T24134] ip6_vti0: entered allmulticast mode [ 647.705909][T24134] sit0: entered allmulticast mode [ 647.740610][T24134] ip6tnl0: entered allmulticast mode [ 647.754970][T24134] ip6gre0: entered allmulticast mode [ 647.763454][T24134] ip6gretap0: entered allmulticast mode [ 647.772355][T24134] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.780547][T24134] bridge0: entered allmulticast mode [ 647.791067][T24134] bond0: entered allmulticast mode [ 647.796228][T24134] bond_slave_0: entered allmulticast mode [ 647.802142][T24134] bond_slave_1: entered allmulticast mode [ 647.808578][T24134] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 647.815750][T24134] bridge_slave_1: entered allmulticast mode [ 647.823197][T24134] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 647.833672][T24134] team0: entered allmulticast mode [ 647.839119][T24134] team_slave_0: entered allmulticast mode [ 647.845424][T24134] team_slave_1: entered allmulticast mode [ 647.852151][T24134] geneve0: entered allmulticast mode [ 647.861691][T24134] batman_adv: batadv0: Interface deactivated: dummy0 [ 647.870149][T24134] dummy0: entered allmulticast mode [ 647.876393][T24134] nlmon0: entered allmulticast mode [ 647.884419][T24134] caif0: entered allmulticast mode [ 647.889938][T24134] batadv0: entered allmulticast mode [ 647.897634][T24134] veth0: entered allmulticast mode [ 647.906329][T24134] veth1: entered allmulticast mode [ 647.915397][T24134] wg0: entered allmulticast mode [ 647.923765][T24134] wg1: entered allmulticast mode [ 647.931891][T24134] wg2: entered allmulticast mode [ 647.940567][T24134] veth0_to_bridge: entered allmulticast mode [ 647.952402][T24134] veth1_to_bridge: entered allmulticast mode [ 647.962555][T24134] veth0_to_bond: entered allmulticast mode [ 647.974831][T24134] veth1_to_bond: entered allmulticast mode [ 647.985880][T24134] veth0_to_team: left promiscuous mode [ 647.992715][T24134] veth0_to_team: entered allmulticast mode [ 648.001276][T24134] veth1_to_team: entered allmulticast mode [ 648.013671][T24134] veth0_to_batadv: entered allmulticast mode [ 648.022492][T24134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.031612][T24134] batadv_slave_0: entered allmulticast mode [ 648.040579][T24134] veth1_to_batadv: entered allmulticast mode [ 648.049920][T24134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.057440][T24134] batadv_slave_1: entered allmulticast mode [ 648.067047][T24134] veth0_to_hsr: entered allmulticast mode [ 648.076238][T24134] hsr_slave_0: entered allmulticast mode [ 648.084509][T24134] hsr0: entered allmulticast mode [ 648.092891][T24134] veth1_virt_wifi: entered allmulticast mode [ 648.102385][T24134] veth0_virt_wifi: entered allmulticast mode [ 648.111656][T24134] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 648.119955][T24134] veth1_macvtap: entered allmulticast mode [ 648.129485][T24134] veth0_macvtap: entered allmulticast mode [ 648.138229][T24134] macvtap0: entered allmulticast mode [ 648.146105][T24134] macsec0: entered allmulticast mode [ 648.158676][T24134] geneve1: entered allmulticast mode [ 648.166434][T24134] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 648.174314][T24134] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 648.184441][T24134] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 648.201961][T24134] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 648.211916][T24134] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 648.219485][T24134] nicvf0: entered allmulticast mode [ 648.225054][T24134] vlan0001: entered allmulticast mode [ 648.231488][T24134] bond1: entered allmulticast mode [ 648.236767][T24134] bond2: entered allmulticast mode [ 648.242878][T24134] batadv1: entered allmulticast mode [ 648.249535][T24134] bond3: entered allmulticast mode [ 648.256039][T24134] veth2: entered allmulticast mode [ 648.261591][T24134] veth3: entered allmulticast mode [ 648.266925][T24134] vti0: entered allmulticast mode [ 648.273253][T24134] ip6tnl1: entered allmulticast mode [ 648.279382][T24134] gre1: entered allmulticast mode [ 648.285994][T24134] 9: entered allmulticast mode [ 648.291823][T24134] bond4: entered allmulticast mode [ 648.296948][T24134] bridge1: entered allmulticast mode [ 648.304230][T24134] bond5: entered allmulticast mode [ 648.309914][T24134] bond6: entered allmulticast mode [ 648.315314][T24134] sit1: entered allmulticast mode [ 648.342219][T24134] bridge2: entered allmulticast mode [ 648.352107][T24134] bridge3: entered allmulticast mode [ 648.357613][T24134] macsec1: entered allmulticast mode [ 648.364091][T24134] sit2: entered allmulticast mode [ 648.371965][T24134] : entered allmulticast mode [ 648.376881][T24134] bond7: entered allmulticast mode [ 648.384978][T24134] bond8: entered allmulticast mode [ 648.390784][T24134] veth5: entered allmulticast mode [ 648.398710][T24134] veth4: entered allmulticast mode [ 648.404375][T24134] veth5: left promiscuous mode [ 648.410388][T24134] erspan1: entered allmulticast mode [ 648.415830][T24134] gretap1: entered allmulticast mode [ 648.422387][T24134] bridge4: entered allmulticast mode [ 648.430756][T24134] : entered allmulticast mode [ 648.435733][T24134] bridge5: entered allmulticast mode [ 648.441681][T24134] bond9: entered allmulticast mode [ 648.447151][T24134] veth6: entered allmulticast mode [ 648.453159][T24134] veth7: entered allmulticast mode [ 648.461066][T24133] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 648.467186][ T7196] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.516127][ T7196] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.561275][ T7196] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.580371][ T7196] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.595720][T24154] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 648.672416][T24162] netlink: 'syz.3.5277': attribute type 1 has an invalid length. [ 648.687706][T24162] net_ratelimit: 28 callbacks suppressed [ 648.687730][T24162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.725635][T24162] tipc: Enabling of bearer rejected, failed to enable media [ 648.751886][T24162] 8021q: VLANs not supported on xfrm0 [ 648.828252][T24172] xt_policy: output policy not valid in PREROUTING and INPUT [ 648.931263][T24179] __nla_validate_parse: 5 callbacks suppressed [ 648.931283][T24179] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5286'. [ 648.970391][T24176] FAULT_INJECTION: forcing a failure. [ 648.970391][T24176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.991045][T24176] CPU: 0 UID: 0 PID: 24176 Comm: syz.3.5284 Not tainted syzkaller #0 PREEMPT(full) [ 648.991078][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.991099][T24176] Call Trace: [ 648.991107][T24176] [ 648.991116][T24176] dump_stack_lvl+0xe8/0x150 [ 648.991149][T24176] should_fail_ex+0x414/0x560 [ 648.991183][T24176] _copy_to_user+0x31/0xb0 [ 648.991211][T24176] simple_read_from_buffer+0xe1/0x170 [ 648.991242][T24176] proc_fail_nth_read+0x1b3/0x220 [ 648.991267][T24176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.991292][T24176] ? rw_verify_area+0x2a6/0x4d0 [ 648.991309][T24176] ? tun_chr_write_iter+0x18a/0x200 [ 648.991330][T24176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.991353][T24176] vfs_read+0x200/0xa30 [ 648.991370][T24176] ? fdget_pos+0x247/0x320 [ 648.991400][T24176] ? __pfx___mutex_lock+0x10/0x10 [ 648.991423][T24176] ? __pfx_vfs_read+0x10/0x10 [ 648.991445][T24176] ? __fget_files+0x2a/0x420 [ 648.991475][T24176] ? __fget_files+0x3a0/0x420 [ 648.991499][T24176] ? __fget_files+0x2a/0x420 [ 648.991534][T24176] ksys_read+0x145/0x250 [ 648.991556][T24176] ? __pfx_ksys_read+0x10/0x10 [ 648.991588][T24176] do_syscall_64+0xec/0xf80 [ 648.991608][T24176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.991626][T24176] ? trace_irq_disable+0x37/0x100 [ 648.991652][T24176] ? clear_bhb_loop+0x60/0xb0 [ 648.991676][T24176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.991695][T24176] RIP: 0033:0x7f625b58e15c [ 648.991715][T24176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 648.991732][T24176] RSP: 002b:00007f625c432030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.991755][T24176] RAX: ffffffffffffffda RBX: 00007f625b7e5fa0 RCX: 00007f625b58e15c [ 648.991769][T24176] RDX: 000000000000000f RSI: 00007f625c4320a0 RDI: 0000000000000008 [ 648.991781][T24176] RBP: 00007f625c432090 R08: 0000000000000000 R09: 0000000000000000 [ 648.991793][T24176] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 648.991806][T24176] R13: 00007f625b7e6038 R14: 00007f625b7e5fa0 R15: 00007ffe8a0310d8 [ 648.991840][T24176] [ 649.363806][T24192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.386561][T24192] netlink: 'syz.5.5291': attribute type 3 has an invalid length. [ 649.409189][T24195] netlink: 'syz.1.5289': attribute type 4 has an invalid length. [ 649.489568][T24200] netlink: 'syz.3.5290': attribute type 23 has an invalid length. [ 649.677120][T24214] Cannot find del_set index 2 as target [ 649.687680][T24214] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5299'. [ 649.702689][T24214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5299'. [ 649.712630][T24214] netlink: 50 bytes leftover after parsing attributes in process `syz.7.5299'. [ 649.722373][T24214] netlink: 50 bytes leftover after parsing attributes in process `syz.7.5299'. [ 649.735160][T24214] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5299'. [ 649.750098][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5299'. [ 650.074523][T24225] syzkaller0: entered promiscuous mode [ 650.081014][T24225] syzkaller0: entered allmulticast mode [ 652.530145][T24245] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 652.672517][T24267] netlink: 'syz.7.5312': attribute type 11 has an invalid length. [ 652.689961][T24267] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5312'. [ 652.723797][T24268] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 652.879397][T24275] netlink: 'syz.3.5315': attribute type 5 has an invalid length. [ 653.090737][T24290] bond10: Removing last arp target with arp_interval on [ 653.158762][T24301] ip6gre0: Master is either lo or non-ether device [ 653.952992][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5330'. [ 654.223465][T24361] bridge0: port 3(hsr0) entered blocking state [ 654.232689][T24361] bridge0: port 3(hsr0) entered disabled state [ 654.248952][T24361] hsr0: entered allmulticast mode [ 654.254139][T24361] hsr_slave_1: entered allmulticast mode [ 654.268293][T24361] hsr0: entered promiscuous mode [ 654.275250][T24361] bridge0: port 3(hsr0) entered blocking state [ 654.282005][T24361] bridge0: port 3(hsr0) entered forwarding state [ 654.596955][T24376] tipc: Enabled bearer , priority 0 [ 654.625886][T24376] syzkaller0: entered promiscuous mode [ 654.644941][T24376] syzkaller0: entered allmulticast mode [ 654.705509][T24376] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 654.826712][T24387] netlink: 'syz.1.5344': attribute type 1 has an invalid length. [ 654.847845][T24376] tipc: Resetting bearer [ 654.860819][T24374] tipc: Resetting bearer [ 654.928958][T24374] tipc: Disabling bearer [ 655.113012][T24390] bond7: (slave geneve4): making interface the new active one [ 655.178837][T24390] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 655.215816][ T1139] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 655.254728][ T1139] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 655.310251][ T1139] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 655.335661][T24417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5351'. [ 655.367484][ T1139] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 655.947981][ C0] [ 655.950381][ C0] ============================================ [ 655.956547][ C0] WARNING: possible recursive locking detected [ 655.962716][ C0] syzkaller #0 Not tainted [ 655.967146][ C0] -------------------------------------------- [ 655.973306][ C0] kworker/0:9/8948 is trying to acquire lock: [ 655.979375][ C0] ffff88807cddaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 655.988441][ C0] [ 655.988441][ C0] but task is already holding lock: [ 655.995817][ C0] ffff88805796af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 656.006121][ C0] [ 656.006121][ C0] other info that might help us debug this: [ 656.014198][ C0] Possible unsafe locking scenario: [ 656.014198][ C0] [ 656.021663][ C0] CPU0 [ 656.024945][ C0] ---- [ 656.028225][ C0] lock(&hsr->seqnr_lock); [ 656.032736][ C0] lock(&hsr->seqnr_lock); [ 656.037258][ C0] [ 656.037258][ C0] *** DEADLOCK *** [ 656.037258][ C0] [ 656.045399][ C0] May be due to missing lock nesting notation [ 656.045399][ C0] [ 656.053830][ C0] 12 locks held by kworker/0:9/8948: [ 656.059232][ C0] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 656.070223][ C0] #1: ffffc9000bb77bc0 (cleanup_vm_area){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 656.080686][ C0] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 656.090993][ C0] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: percpu_ref_tryget+0x15/0x180 [ 656.100610][ C0] #4: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x590 [ 656.110645][ C0] #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 656.119797][ C0] #6: ffff88805796af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 656.130508][ C0] #7: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 656.140016][ C0] #8: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 656.149941][ C0] #9: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x184/0x1830 [ 656.159174][ C0] #10: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 656.169196][ C0] #11: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 656.178430][ C0] [ 656.178430][ C0] stack backtrace: [ 656.184325][ C0] CPU: 0 UID: 0 PID: 8948 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 656.184343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.184355][ C0] Workqueue: events cleanup_vm_area_work [ 656.184375][ C0] Call Trace: [ 656.184382][ C0] [ 656.184389][ C0] dump_stack_lvl+0xe8/0x150 [ 656.184408][ C0] print_deadlock_bug+0x279/0x290 [ 656.184426][ C0] __lock_acquire+0x2540/0x2cf0 [ 656.184445][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 656.184466][ C0] ? hsr_dev_xmit+0x237/0x360 [ 656.184482][ C0] lock_acquire+0x107/0x340 [ 656.184496][ C0] ? hsr_dev_xmit+0x237/0x360 [ 656.184516][ C0] ? hsr_dev_xmit+0x237/0x360 [ 656.184532][ C0] _raw_spin_lock_bh+0x36/0x50 [ 656.184553][ C0] ? hsr_dev_xmit+0x237/0x360 [ 656.184569][ C0] hsr_dev_xmit+0x237/0x360 [ 656.184585][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 656.184602][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 656.184626][ C0] __dev_queue_xmit+0x149d/0x31c0 [ 656.184647][ C0] ? __dev_queue_xmit+0x289/0x31c0 [ 656.184669][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 656.184687][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 656.184701][ C0] ? ebt_do_table+0x2655/0x2810 [ 656.184719][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 656.184733][ C0] ? ebt_do_table+0x2655/0x2810 [ 656.184761][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 656.184777][ C0] ? lock_acquire+0x107/0x340 [ 656.184791][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 656.184808][ C0] ? NF_HOOK+0x9e/0x3c0 [ 656.184821][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 656.184835][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 656.184849][ C0] NF_HOOK+0x320/0x3c0 [ 656.184864][ C0] ? NF_HOOK+0x9e/0x3c0 [ 656.184877][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 656.184891][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 656.184905][ C0] ? lock_acquire+0x107/0x340 [ 656.184921][ C0] br_forward_finish+0xd3/0x130 [ 656.184934][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 656.184949][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 656.184962][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 656.184976][ C0] NF_HOOK+0x320/0x3c0 [ 656.184990][ C0] ? NF_HOOK+0x9e/0x3c0 [ 656.185003][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 656.185016][ C0] ? __asan_memcpy+0x40/0x70 [ 656.185030][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 656.185046][ C0] ? __skb_clone+0x483/0x7a0 [ 656.185063][ C0] ? br_handle_vlan+0x61/0x530 [ 656.185085][ C0] __br_forward+0x397/0x540 [ 656.185098][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 656.185114][ C0] maybe_deliver+0xb5/0x160 [ 656.185129][ C0] br_flood+0x31a/0x6a0 [ 656.185145][ C0] ? br_dev_xmit+0x184/0x1830 [ 656.185163][ C0] br_dev_xmit+0x1198/0x1830 [ 656.185181][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 656.185198][ C0] ? br_dev_xmit+0x184/0x1830 [ 656.185217][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 656.185234][ C0] ? netif_skb_features+0xa69/0x1540 [ 656.185253][ C0] ? arch_stack_walk+0x103/0x150 [ 656.185277][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 656.185298][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 656.185321][ C0] __dev_queue_xmit+0x149d/0x31c0 [ 656.185339][ C0] ? handle_softirqs+0x22b/0x7c0 [ 656.185354][ C0] ? percpu_ref_tryget+0x31/0x180 [ 656.185371][ C0] ? __dev_queue_xmit+0x289/0x31c0 [ 656.185388][ C0] ? worker_thread+0x8a0/0xda0 [ 656.185403][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 656.185425][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 656.185446][ C0] ? __copy_skb_header+0xa7/0x550 [ 656.185463][ C0] ? __asan_memcpy+0x40/0x70 [ 656.185478][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 656.185496][ C0] ? skb_clone+0x246/0x3a0 [ 656.185514][ C0] hsr_forward_skb+0x158b/0x2860 [ 656.185537][ C0] ? hsr_forward_skb+0x9e/0x2860 [ 656.185556][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 656.185575][ C0] ? do_raw_spin_lock+0x121/0x290 [ 656.185595][ C0] ? __asan_memset+0x22/0x50 [ 656.185607][ C0] ? __skb_pad+0x405/0x610 [ 656.185624][ C0] ? hsr_is_node_in_db+0x12c/0x150 [ 656.185641][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 656.185663][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 656.185682][ C0] hsr_announce+0x1d5/0x360 [ 656.185699][ C0] ? hsr_announce+0x83/0x360 [ 656.185716][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 656.185733][ C0] ? do_raw_spin_lock+0x121/0x290 [ 656.185754][ C0] call_timer_fn+0x16e/0x590 [ 656.185770][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 656.185786][ C0] ? call_timer_fn+0xbe/0x590 [ 656.185801][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 656.185820][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.185840][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 656.185858][ C0] __run_timer_base+0x61a/0x860 [ 656.185877][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 656.185890][ C0] ? clockevents_program_event+0x247/0x350 [ 656.185909][ C0] ? sched_clock_cpu+0x74/0x430 [ 656.185926][ C0] run_timer_softirq+0xb7/0x180 [ 656.185941][ C0] handle_softirqs+0x22b/0x7c0 [ 656.185957][ C0] ? __irq_exit_rcu+0x60/0x150 [ 656.185974][ C0] __irq_exit_rcu+0x60/0x150 [ 656.185987][ C0] irq_exit_rcu+0x9/0x30 [ 656.186000][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 656.186015][ C0] [ 656.186020][ C0] [ 656.186025][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.186041][ C0] RIP: 0010:lock_acquire+0x222/0x340 [ 656.186057][ C0] Code: ff ff ff e8 00 a1 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0a 00 e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 77 e7 [ 656.186070][ C0] RSP: 0018:ffffc9000bb778a8 EFLAGS: 00000282 [ 656.186083][ C0] RAX: 685c9e3b19dc3a00 RBX: 0000000000000000 RCX: 0000000000000046 [ 656.186094][ C0] RDX: 00000000c4c2e928 RSI: ffffffff8d975f50 RDI: ffffffff8bc083e0 [ 656.186104][ C0] RBP: ffffffff82303cc5 R08: ffffffff82303cc5 R09: ffffffff8df41aa0 [ 656.186115][ C0] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: 0000000000000002 [ 656.186125][ C0] R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 [ 656.186136][ C0] ? percpu_ref_tryget+0x15/0x180 [ 656.186153][ C0] ? percpu_ref_tryget+0x15/0x180 [ 656.186172][ C0] ? percpu_ref_tryget+0x15/0x180 [ 656.186189][ C0] percpu_ref_tryget+0x31/0x180 [ 656.186205][ C0] ? percpu_ref_tryget+0x15/0x180 [ 656.186221][ C0] get_mem_cgroup_from_objcg+0x108/0x1d0 [ 656.186242][ C0] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 656.186292][ C0] __memcg_kmem_uncharge_page+0x85/0x170 [ 656.186314][ C0] __free_frozen_pages+0x17b/0xd30 [ 656.186332][ C0] vfree+0x25a/0x400 [ 656.186353][ C0] cleanup_vm_area_work+0xa2/0x100 [ 656.186369][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 656.186384][ C0] process_scheduled_works+0xad1/0x1770 [ 656.186408][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.186421][ C0] ? do_raw_spin_lock+0x121/0x290 [ 656.186445][ C0] worker_thread+0x8a0/0xda0 [ 656.186463][ C0] ? __kthread_parkme+0x7b/0x200 [ 656.186482][ C0] kthread+0x711/0x8a0 [ 656.186500][ C0] ? __pfx_worker_thread+0x10/0x10 [ 656.186514][ C0] ? __pfx_kthread+0x10/0x10 [ 656.186532][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.186552][ C0] ? __pfx_kthread+0x10/0x10 [ 656.186569][ C0] ret_from_fork+0x510/0xa50 [ 656.186584][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 656.186596][ C0] ? __switch_to+0xc9e/0x1480 [ 656.186617][ C0] ? __pfx_kthread+0x10/0x10 [ 656.186634][ C0] ret_from_fork_asm+0x1a/0x30 [ 656.186658][ C0] [ 656.934962][T24447] wg1 speed is unknown, defaulting to 1000 [ 656.979389][T24450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5361'.