last executing test programs: 5m37.077834443s ago: executing program 3 (id=918): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x20044014) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000003f00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x78c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x6c4, 0x12, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0xfc}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}]}}}, {0xdc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xcc, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xbe, 0x3, "60fc6d9441b0d58dd73d8cd5697a7d21905f8db0ac5e142fea00498a385e3a8220b557b4d7438d0db9fd0a1fcf3c61407944a8bdebb69be5db4644489ff39ab4ca8d59e5dc9010e0659ab9b1b7fe78b64fa2df0cc31ef7460e5c3cfe7b94947f3c85e962873492f241e23444f3a0f004d9d7b6b88bf13d8e4b637e764260ea764c9272bc55a30e597216ceed6bafc71719b9da90ed442fa5561abb5fcd0f761118a5994c1f493d1ac7207596e956792fdd1a177c74ef05073999"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x588, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x578, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf2}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x63}, @NFTA_INNER_EXPR={0x508, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4f4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "c0a492d1a73a130bc1ded3842016d47b793beb2dadafb49f61be96d3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x290, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "24b570aa48"}, @NFTA_DATA_VALUE={0x28, 0x1, "34f9cdea1ac86ad293d0fd6749d7013f73b13b48672f9989543b1521a5ef9711ccc8c9f9"}, @NFTA_DATA_VALUE={0xdf, 0x1, "27e03640793c8e144f403de61756610cf78b80998aeea2629fc3e79f542e5875327f0ae426359c7d9877a49b7dd65cee1a5a2f416061dd73485abb21a6eb9401055e9fb9b5bffdc1cb5d6acc1fbc1032de7c8dd6c4c99abc1955a7a0306b0358fd90591b94c855f4ec06b2db0dfdbd24d4c4de42d5c622db411861c7aa0851787803172932c0f11d248413a1570e4d775db2d18830fed680ad93d39623c1595ccff41b17281ab87f6ada30aab187576b53d6ee76394df02d12a56bf2a553981e65da088f97f882a076d0c92b58d50976e7edf8672b9f83a44d59f8"}, @NFTA_DATA_VALUE={0x80, 0x1, "24428dc302fe0bb085750b06f91ef64e73a9aac1788b0623f89e0b3df3fc6b09038d54b6af2a86a25ae69da2abc0259787ad45b78a5434ad9b608623311d82818d75d613baccbc791c38d6a55c67f2d7f91d19a0773f5561a9b2dfc57dd2d3c4a859da8034f93b935515be712c117cf822d5b17fa01da4860a8a6504"}, @NFTA_DATA_VALUE={0xcc, 0x1, "47794e86f116d14ebe00a330a209548a6d6b7c312329951f39ae1e3162cd0bc3c12569324fbf88f5e64aebc40a0d87aad62a87fd3f9c08a78dc5b2ec0c76ceaa551e8f4f779476b78e318cba3533e66206c77b12e2397cff4c6a561a28138deaf9381721744d287ae66ce13fc5cb148fa7f1568e5507b912a98ed0e9310f12e2741cf5f563a0a0efacd9166d86da57eb1cccffc51b50a49c18872b07ac45d11243d061314b94858d113ec1a026bc9a22ce87b546ee8cb0bb7597bc56afa26a1ecd8cd7ee4ba5b2bf"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "4cfcc334ecc81b287b07395d2f634eed0eb56ce5c3f1a1bb66dc5f165fd452361bb025b4fe71a3ec581963211338b0a307faca9bce309d100a0c4cbdfd4d242303dc7ba97baa9cd1deedca68ac4060952848c99d07d5c649d6e4cb8904a56f1fb94c69cc3c17e7fa34e5b8c68c02f6ce1c70fee8ec580d49277aeeecf1d0bfc05af3628daef025eebe5ab7c9e33ec167e273b2d91a5a69b7db4747e4e09b1373f276a2f77336126d32733d7af56f1436857f2ff5804f4ea0de975a8333474b90c08e43f1ff783365d6df0600c42ab9c70a56bdbe56db144ba0323e9c9bd14a6d107b3ca49eec76bfa95bf521"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5, 0x1, "b2"}]}, @NFTA_IMMEDIATE_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}]}}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc0}]}, @NFT_MSG_NEWSET={0x30c, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_DESC={0x130, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc52}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0e7216}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x79}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x64f0dbf8}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1000}, @NFTA_SET_EXPRESSIONS={0x1a4, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x27}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xd7}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x27}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2d}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x14c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe2}, @NFTA_SET_ID={0x8}, @NFTA_SET_EXPRESSIONS={0xf0, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xd300}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6431}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffff6cc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffff09}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0xe0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xcc, 0x8, "de70376b150192c74c3e2a6db227efe3734f986af8b5dd94d4525457454b735ecd499bf013e4c51e70f744f14a323402901a5ef3d9786e76d17138e6a59d93aa62c98093a6956ed8c257a02c76ea1ebe38897c28b64ff5abbd85880f9b94584e4493ff699c2e57a8328643edbe7f18665dba054c6a4afb1c98c3bfa82e21380e24e09797abe26318bbc874381970097fdac0c46bef1105fb19d78d5341e859d69cca53a7662005bdbad6c6167a284087cde81ff43d1b9ce9830e3ece456d2e735088936e1656f6ef"}]}, @NFT_MSG_DELCHAIN={0x1e0, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7102ebf9}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf2, 0xc, "2d8040ff50696988bcffcb56d7c28c485d1eed41a4de6266ed427b0fc6b0d9c2f30b9d5e2d401f2fd02ddc61ce20e8560d0426afc5c58cd6157f35d17a50613de162e4d6cafc6a23c7526dcf558e180d9bd5075097d86a8c15074934b690ed15bad4c7583e4c7e5dd2e3fb5f8482dcf336434176a790d5f93e8c5a8883254cf7929e318519271787afe5d5711737ece77fb63ef8a29474bc5606261b7a3142e538ac3fda45d3306c218d8c25f707ce658a5d7c909d0e0a3f5d5ac41e29d564657795eb6dbd4cb351301a8225340b5be7b738e69f1443f5d5a7d7c8e90b598624cb152a2523128e7816f369db0dcc"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfe000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x13c, 0x12, 0xa, 0xb81, 0x0, 0x0, {0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x128, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:system_map_t:s0\x00'}, @NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:hald_cache_t:s0\x00'}, @NFTA_SECMARK_CTX={0x24, 0x1, 'system_u:object_r:gpg_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x2f, 0x1, 'system_u:object_r:xserver_misc_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x30, 0x1, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:textrel_shlib_t:s0\x00'}, @NFTA_SECMARK_CTX={0x24, 0x1, 'system_u:object_r:hald_log_t:s0\x00'}]}}, @NFT_MSG_DELTABLE={0x370, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xf0, 0x6, "c1900806800b5b805152914914a2f292999cfe5bdcb72dee17e147c3cc1df113dc1a253efaa0e2baff4c4078d71f2cb021c9a8885de92abd5907e212289d3fcfe041e02f7fc5f34f2690e769a2e32b905fc47537bd25bd8538a495f645915067784edb268e238faf00d7a1cd402daa186b7c589f42f2a6228e86e12b8880fb8011b5e329c745944621122b7aba15821bce5cdd555bbccc22b0a15da63a0f23a210de0cadff3bf01aba4bbedd81c81b63abcfdf9c4bbf7102807e267a14242ad12dcace267476ea4679433aac7adb64a2b5e1d6a4c1ad2650991dce0eebee54559665bcef25864aa97c75db75"}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "3716282d2203156a5d457e3d7b432f5db6981d91845864f550c7db6d4e0146aa2f1d07bb4055c369c935fc22a9d1913e93cf990d3315335c7906b2569d52b660f86e67c16f47244447473caa8a2cb166b7929c4684817730b8768e15d4ba4efe2de2d0f50dd24cc5f2c48a9b6477fed8b82d93cc954e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xab, 0x6, "6d7dd3c65f761a459f78bd25694ed1fef6ba392b7c37351e50a19a6ab24e2c5d6257dae9949b4c1546c0dbebb5169959f867daf66f43b65c1028838e6604949aa992b6211cf1fc4ced33ce27c517f3d6a22d887e42021569c12ea1d40bb3e49371d77dcb94d46f11f1bd640292f2fec587a0a91de29d9a26d9f1bf0c71d8ebcb4b7a5e42387b13855884a316fd8b60610344b57d92d306ac785ba99d348e1c3309b8d5964a81b5"}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "71cc4d58f9885f27714ede3f3d4f2b54ae707755228ecf4e7f3d623f52758b0a8a9a23f6acf21493275ed765c2547f393e51475f6395d995b71c34007559b56f5a81e47696e57d0c6e7d3880b7dc6c8d97c139ce5a54bc8e7e3a4f37acc05f65dd427b745fe5eefdb6e926e058eca42e41202587a1a2ce6063c67d1516d228d70bb29507ecd02e25ebb38e949b0179d8a64959cf08a7369cedcfc88c8022d158abb6293074e1a99cec7c5d"}, @NFTA_TABLE_USERDATA={0x6c, 0x6, "f8b4590339578531381d0cf62fc780074413342405a3f71221d0c91202cde3197fd25f879fabb9fdd1a8d05c57304aee4bcaa0d9565da6e4b32353ca8b7475a7da467e62f76d38a9615a314e5fe2b46ccd2687e48238d60a209d8ad672bd131a49c3346eca7890b0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd7, 0x6, "0cd0efe0b04bd44f07085e13a19bf9380867019e6453fcac61c4f3a5185c7c138aa474df86cf75244ef3714c946758fbc73d7bedcf00bba4a000b7b8db4e988250442c0689b78112296335b477f9c1ca5bd3018ffcd5567b1833fdf6d358c4e18cf51bc77f45c009a2f531e0d63b6e75d6d2d388be445c25e25e1efcc8c051b93dd2fcbc7e299c27db805ac8ceca5608c92554363660eccbf48001ebbccb53a99317814b19e17e4a17d463c5c1650dd7f9d7022e3c02437626444af11bb8f14ac7c785a01cc971839abbf3e1170c659e69a171"}]}, @NFT_MSG_DELSETELEM={0x2168, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "7ed0c19c7a"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20ec, 0x3, 0x0, 0x1, [{0x4c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "bf0dc66cae5707262a1e7530c8b2d5a33f5b3d8817969d35e7bc16bbd1fc0873164f424bf8bd8a710578fb1a9380c2ef62b299f78c93e2e4d10eae086d4d086bae87e12e2a96d4ae369e34f2ebe9a5b195500ebaea4aef2beeab0548d26dfe"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "66564ba90b5e256b3d81631c32e515ec0f145dea32ac3f60e499527c4dd4d7e1d3d6d4a0772b3c063266716ed9b9a66c39f10f72a2253dc371fc4a74d9f6b5b769f849b75f00fbc0"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x57, 0x1, "062ed774f6b77f70586f330bcf4930b0a1cafdcff67e54168b2415a8a6025f95ddd67f55f2dda93d345ec23d604628ca45c444d8c9a1b3c3ea188b34535bd3af38097e8d990d87d163401cdde6e28a14f3e9bd"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x210, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb, 0x1, "42b1122b685c46"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "62aac6a4f5118a81758e1d37184582d022561dc9555b05aede172f5ede0e38af3b6f9607bb76d889118192487114b7fcb07a9839dade5837e0426eb4ea7d62f34d993c57c2c0d77ff2cf94735b445ffb65673c42f51f6cd95ea9c1151555ebe417145f7fe45abffee7034a2f1cb0fcd17185606da712ee86b42ebe717fd857f11a0525a2d79835993a1b42d0896d4b93945bf58a11f66cccd28bae42608875c97e8b733a730e2867bf40883e8d1b10991c5015381c5bb6b9c8351a6e415230cbf9725713b8ef6a3af45e0fd4aa8c18217419c7c060ba7f8acb9efb4df2f75371aaadc5697f5690ba559dbfe680"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0xed, 0x6, 0x1, 0x0, "1c21a10ebbf5e9b3a7df1bbf3cff35b29b45f48124bbd070d69b4e6d1305aa7be8f16fa1dca46ec7e0dbd0d6373203ac306834897f67c92700ffcea5dfb1e648203b8579748c6499cfb1dbb86f00a2d78ca64312f34bc818d67a7c242153d01c86649ae7605af35891b5b9c9563e0a00c3e3539146f92d2a4da6d47834d0c55cef3468de207756c816c45c46e9bcdb03d9add0a2aca38baadc0f6fea67114766fb2b826d09b8e14b0cb14462333c6051d4e760fdbb3efdf72f6b71ed178060027b0726de4a9f75163facc917c721403dacba837a3107f251156fa8915405e8bb9312cd962b83f220bf"}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x448, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "4a0c5f9eadd06df3faf069e02aef51a9444dd6cf75306c59294f5adb356623dfdd4b067dfc3a216e1b17641179542c30602a6778921226f724863cc45a06269d8d1f0700baba280d177472611be6967ccc00067ec2bfa624d1817bbb7b80e475d9f4a1dcc5d14892cea964eda1fc2ff60a5f2897bad53b2308571a4ba31497b8d1df54c539c8a84f0b6dc87143bcaa8260ff53cc253f09126eec072c78a2b372b4d24c5328bbc913bb488a463a35466c2a2ffee44f1d9852"}, @NFTA_DATA_VALUE={0x4b, 0x1, "92062609f684280cfa1bfb717bbf153991c9b4b1550ae75bdb280cdf6fd725933e00beb83cd7a06748a293c03c8b9eb1d7ebdcb4b8bb94c5394baaa3a7a11303d7cfcc345a9107"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x83d61133ab55995a}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc48c840e8410dd24}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x6b, 0x1, "d66a2740fd05decc93474f0284109bcc7a37cb7a2c657addee800c8763c7f555cdf39db7bc50d303806a1925650b98ba19f328602d92bffd0e5380152ef3c8d50c1f0dc70b489912e0e17f5a2e9a7aeabe1d174ec419b9173d4908125206c21241eff03c737288"}, @NFTA_DATA_VALUE={0x7c, 0x1, "2b67cf7773f9731980762db94234f15cdac04e9c9748433c8f7c49d72879cd4e44d474e6416ea7ef6d771cbd29e0894aab243be872fe98f5954646f3766889a2daf7bcfdfa0d4e08ddd41fa1ad89a9756bdfe4c3d1559d63b5271ab6873498a69c6a18d185d613096f3bdc322681481617c5241abc0513cc"}, @NFTA_DATA_VALUE={0xf5, 0x1, "1288b992dcf96075c53ea0ba4050ce72f375d3527d0885e71c8df9f738157e8d5010549f3ecd05c978fb3e63f024575dfe6052b77c7f776a1ff001386398c54bbf4f496c10388dcb0c8bb2b8373a4b31c26d8cb3802e179078819dab5595d1f65910739ce0a3d0e41b977b082918d606f14829a7bfbb48e19c9eb3b690de76d5009277675d85a95166da10cf13ff71c77ecff822eddcc03c7ab9c262994da308af2820c0e936dd66cc82494ac03a124f138d7fdae474c093264520134458cf7668899d46ee5aa36ab5a53947385d334db72ca009d9e7c7afa1233967204833e2ccafeecc5324aff3987697f597c2a381b2"}, @NFTA_DATA_VALUE={0xf, 0x1, "acd2486882e25cbc1d6147"}]}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8001}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x1668, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa8, 0x1, "9c7fd200257d4ff125c2376f27d39e6c78fc51be18904290a480249d883badc7efea3222a54c7be8d05b6d81ebff6fafddf1f9472461fd86b74db8c6fe6ade22dcb0d6b7ee0ea6f7393682449d3f8e5b05fb9ec881c27b38133255b6ba969e83daee9cd22fb2f027a350dabfb912672c0173261efe8c233620a6625495cfb35c73d5c6daa31a68e234a2177ca606141b045950d82d8dda3f047d8e7cf992e6aa2e493633"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x32c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "23e9b4252a4307c040f264045b8cf43936992735cadabfd4f3bade669354196b65b7d47b95f28ba40648769c648f6a14ad773c2b4484b1e05969080b37f3942bf0a355af80eebadd"}, @NFTA_DATA_VALUE={0x1a, 0x1, "b51fd8cc765ae8eb40faa5552f77fd1f2b1accf12330"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "8ae3012f64869bf342b9b24ae2a279da5b781dded2147056ecc1d615d2ee0bbdc1b83c62046d6e378bc89fdc570710782f5022bce33008f7c80661f07d185544cd1c56d3a89b008d9378430fb89d7afba20b2077b601c25e576c6d79e804efb43b6d6f49e86e65819461d13495b9e757571dec1a243a79416ed9313bfac47ed5695c3b35d0ce460dd757961b097e38b587e26e13a3a5989af69fb7bcf3b2a0677a0e2e25f8c746b6cfb816d0ee5688f3b593205e374b02f8bbb4aacf8b9511221995fe20307f9bf8b25ad1efb911de8cd372e4c8089a71d9d0c64f1788"}, @NFTA_DATA_VALUE={0xc2, 0x1, "f060b4c9a6b17d656f573887b2bab136f783a2113f4f5987a4346b740a979d091f68e7e4a7eb4c283987275f3fbbacc0b1061c74a9993af2e9cc263fb868b77e197c9a9533d124d4096b88a9a25b44932affd79c2128b36bf0b616c023e05c5295e2012e951afe270752d2ae25f82a902c9a833e1af575ace5273544810fbd107ac88e2e50399771eb0764fd829be59bb87f1c7b6076fef9d099106d8661b845c07a73753d20ad5cf1672d107e435ff059fbb6a4a0d757321dfe879e3e10"}, @NFTA_DATA_VALUE={0x26, 0x1, "615e39173dbf3892664d62977749e27c6ce012bfd711e0ba8d4f41875995d07338c2"}, @NFTA_DATA_VALUE={0x78, 0x1, "77b66eae6986e754178ea5e575f501887af163dcf8767fd69d1e55772f70f21740e52491e9e0040a78279f3742359b3d45e2d16755d04f196b273b99824a8a9aeb08b6c823eb5a0b154f81043b8c275d2d8704e25bfd639d49d3ee8a92f5a7b8cffe5dc673c9930982f3c1566f07e29592e96896"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x30, 0x6, 0x1, 0x0, "899dd6847428f0826a3d43829dda0abd72dd9a9a3398f4fc4338191a66eabb7982414a3065ab65216b7acecb"}, @NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc1, 0x1, "4d6ab3319f6bcdeaf56e3d6e0f230513a12a54e8ccbc4d2728933abaff5930ada88e9450441f601ab4a731fb655f16aec0edccd64c592c34d93ad0db3f2d4055afc7666be4c9aa611127df10bbc7918cb4c75878577746187d246cb63fe61818cc83b57d04cd024777c2107bba9406926698cc69f9281a57291f17843b6a8aefadb8e26a082bc6ce1c331739adc5008e20fffb92fe5bab2e3a9371a5113fb6ba633e3087b36e752c9b6110d90fc782e065fe7e9ac9effdd61f094c338e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x47, 0x1, "69cc0b5bc387527505b96a390d5ea52e2b320b6259379b6649e6d47621ab74306ace135937ffe261395ad9d48d147d188fe54f1f5d4368cc7d0df4ee6fc724a7c4af70"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x238, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xc4, 0x6, "ef6938efeb175a8aee9b551e3e18ee598a4690b52c4af0f60d3159f8715d3f9c791487e7e98bfd39f9d4b8f763ff27f5f83b3f43b953547f90424a64a1657042d03d624e3345a6793f65f51c910defd381f61eff3b01940e856ba756c6aea72ad5230d0523458b9576e443040afc025283994831d5f235865e4bb94d56e85655e60c3ca1c95d3423d9d9ad7951491604b2a2332b4223fabde60e5ada650c219fe2a3bf40cd01b537313f94593db11916011e80d5045afbb189566413234514a3"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x69, 0x6, "c432a0e2a370b272f9084f88a9f76c05b3bc5ed3d5ee69cdd64f13820202396142875e2b6b23cdf67d7ef35657957e3996420d700f82fb3f1bf7a8d8783a84be3f7973b3b2c14ce778acfd348bd313a39239bb679d4d7efa73b693b018f5b9d9cd01d252a9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "2cf920b5858de5749ce8cde3a96ca265e48498a2a6ae47e3bc1e023de296c7df88c3c3fca09c45a696a9fd06409fd8ea5583ea82f92db74a64886eb80e0ed516b92a0fbd0cc67c0f8e87904b318a4ac2ed193dc30715d634c08b1dd6d310bd801be6225de207287a5fb41bc263c2b9517047af499bdd540e8ce48205d30532771f6354c456342a661d0447f409a8f3bb89dafb715297b398dcafae6c379dd8b588e21195a2b70cf92e76e6df7f165816604305334d84c0edd0b129"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3818}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20004000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x20004090) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002700)=""/4089, &(0x7f0000001000)=0xff9) sendto$inet6(r3, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x2, 0xfff, 0x8000000000000001, 0x4, 0x8, 0xb7be, 0x3, 0x4, 0x5, 0x1, 0x100, 0x3, 0x7, 0x5, 0x1d79c6ed]}, &(0x7f0000000000)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x86dd}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [], "fafb17c133"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008700000000000000a6000000ffffff8595"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r8 = accept4(r0, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80, 0x80000) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000580)=0x8000, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000600)={'sit0\x00', &(0x7f00000005c0)={@remote, @local, 0x1c, 0x15}}) 5m36.802513906s ago: executing program 1 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0xf2ff0000, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0xe, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x8, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x480}, 0x1, 0x0, 0x0, 0x1}, 0x800) 5m36.68818421s ago: executing program 3 (id=925): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 5m36.659219793s ago: executing program 1 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000070fdab9382150e2931d27c10be8f8b4a313eace234caebe430ee3da60e0b8907d4c129402869bc484ee9fa0c6d503015d75165359fc80b25d37fea4bacfcfc9f5df7a9c496ad657f48f0261eb7080d3530974f2cd66b797c4c7c8ce4e99d11dc2074046606d1795670fdb20206c38cddf850ca0354fc2bebc39beeaa469119aee164a9305e9211d04ad0e35c53d70655199419e5de10a903623c367484cae3e43845d3197d550a7da704ef39d45a2e574e2d90b850bc76ce63e820fdb2fb95620bdda6", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000240007800c00030000000000000000000c00040000000000000000000800020001010000"], 0x38}}, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6f9b, 0x81, 0xc, 0x1ff, 0x7fff, 0x9}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getaddr={0xa0, 0x16, 0x10, 0x70bd26, 0x25dfdbfe, {0xa, 0x38, 0x24, 0xff, r7}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x54}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff, 0xf4df, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x40, 0x8, 0x5, 0x3}}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0xa0}}, 0x0) 5m36.499973283s ago: executing program 3 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1588040003002d1f24712cf13a132f199b08000d000100000043000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 5m36.268097685s ago: executing program 1 (id=933): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001a00130726bd70000000000020010000000000000000000000000000000000000000000000000000000000004e22000100000002020000006c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414aa000000040000000000000000feffffffffffffff000000000000000085ea0000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000a000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000840000000000000000000000000000000000000000e000000080"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m36.222476499s ago: executing program 1 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000af1fdffff060a0b04000000000000000002000000380004803400002400028008000240000000000c00010070687973646576000900010074696d650000000008000b40000000040900020073797a3100000000140000001100200000000000000000000a00000a35e406e27296ad3b3bbcabfc3b8073333ef6c7f89a1412645ec658993e319599f2ce6ef491ac9d0aafe2bc835a9b8d745443f31b09aaf323a7846fd99ee8535e44270035dd7e9e29810fe8fd8c2a1f674cd6c985d5d0ddd2a197c100"/227], 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 5m36.095257036s ago: executing program 3 (id=937): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e"], 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102130003"], 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0xcd8, 0x10}, 0xc) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfffff800, 0x74, 0x10001, 0x8800, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0xd}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xff07, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f7ffff01010000000800000085200000050000009500000000020000"], &(0x7f0000000100)='GPL\x00', 0xdb4, 0xc, &(0x7f0000000140)=""/12, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r1, r2, r3, r4, 0xffffffffffffffff, r7], 0x0, 0x10, 0x6b318e1a}, 0x94) 5m35.237500123s ago: executing program 1 (id=951): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) 5m35.136749809s ago: executing program 3 (id=952): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) r4 = socket(0x2d, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x104000, 0x0, 0x4, 0x3}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '#'}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000200)=0x9, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) (async) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) (async) socket(0x2d, 0x2, 0x0) (async) bind$inet(r4, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x104000, 0x0, 0x4, 0x3}, 0x20) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '#'}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000200)=0x9, 0x4) (async) 5m34.741385722s ago: executing program 1 (id=955): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffffca) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000000000000001, 0x4df9bbaa, 0xfaf8}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f0000000100)=""/200, 0x60680, 0x10, '\x00', 0x0, @sk_skb, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/138, 0x8a, 0x0, &(0x7f0000000440)=""/14, 0xe}}, 0x10) (async) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 5m34.327882112s ago: executing program 32 (id=955): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffffca) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000000000000001, 0x4df9bbaa, 0xfaf8}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f0000000100)=""/200, 0x60680, 0x10, '\x00', 0x0, @sk_skb, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/138, 0x8a, 0x0, &(0x7f0000000440)=""/14, 0xe}}, 0x10) (async) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 5m34.316505104s ago: executing program 3 (id=960): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m34.241418037s ago: executing program 33 (id=960): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m45.011920987s ago: executing program 5 (id=1542): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000080)) (async) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x19, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0}}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000180), 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x5, 0x5, 0x9, 0xb}, {0x4, 0x3, 0x1, 0x1}, {0x4, 0x3, 0xd, 0x6}, {0x5, 0x5, 0x3, 0x2}, {0x0, 0x2, 0x6, 0x5}, {0x0, 0x3, 0x6, 0xb}], 0x10, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0}}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000180), 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x5, 0x5, 0x9, 0xb}, {0x4, 0x3, 0x1, 0x1}, {0x4, 0x3, 0xd, 0x6}, {0x5, 0x5, 0x3, 0x2}, {0x0, 0x2, 0x6, 0x5}, {0x0, 0x3, 0x6, 0xb}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000000), &(0x7f0000000380)=r7}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101180, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000300)={'nr0\x00', @random="06c4ed546da2"}) 4m44.863651819s ago: executing program 5 (id=1546): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, '\x00\a\x00', 0x0, 0x2b, 0x0, @private1, @mcast2}}}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0xdc4c, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x2, 0x8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) (async) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000062eaffff940000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 4m44.636218879s ago: executing program 5 (id=1551): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 4m43.638993107s ago: executing program 5 (id=1572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x50) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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"/399, 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000a80)="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", 0x112}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f0000000f40)="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", 0x974}], 0x6}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "adb6c5b29ca2b8382d00", "7e609086", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) 4m37.121056972s ago: executing program 5 (id=1636): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c000340"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 4m36.743897628s ago: executing program 5 (id=1641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) unshare(0x28020480) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x49, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000ffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x22) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) 4m36.372851258s ago: executing program 34 (id=1641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) unshare(0x28020480) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x49, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000ffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x22) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) 1m58.259329306s ago: executing program 2 (id=3853): sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m58.079828676s ago: executing program 2 (id=3856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}}, 0x0) 1m57.878431931s ago: executing program 2 (id=3859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x5, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0xc, 0x2, 0x6, 0x6, 0xffffffffffffffff}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000000100)=""/247, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x2, 0xf, 0x2}, {0x2, 0x1, 0x2, 0x9}, {0x1, 0x1, 0x6, 0xc}, {0x1, 0x3, 0x5, 0xb}], 0x10, 0x8}, 0x94) (rerun: 32) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000380)=r1) r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) connect$netrom(r2, &(0x7f0000000400)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) (async, rerun: 32) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000480)="e88c51f33d7c755ce9d9710cd53063356d14a45971f3552e3f6f1ef467653c7480264c87ed38acb71282bce6d42c0f94810de655ea2db16b3183b2fc6fb2aa93ff49ea776e1a9c5e3618", 0x4a}, {&(0x7f0000000500)="837351ff275da475e48f6870d216bc6dac2e702cf6e717f581c563f0b1cd97c1471a6b8cb139630075bba58714a3de24dae99b", 0x33}], 0x2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048814}, 0x20008801) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9b, 0xf}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x8851) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r3) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0xc6, 0xc, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x1, 0x40, 0x101, 0x6}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x4000004) (async, rerun: 64) writev(r3, &(0x7f0000000b80)=[{&(0x7f0000000a80)="505145b84ea6d314071b59e0f6c8c4e0ea6d3ca589b49e26f0c55f57ff9f18fec0dc63538ded6349e384968597e38f4bc2dc35ddf19d8a9105e042b9368449cdfae6089386d09b46cf8ecc63b2d2db53ef2558faa9d4395eae3f53f867d8cec5bce6b993e9613beca313cd02dadafd76296224c57c270e04a0f932cf9f747b603f67cdcb83f98b0f793e723094e1cbbe3af416b77f0e9c6cb70c97d7d788e5fca5aecae9cb9b771816062173a6e0d04e915419c51f88f34118955b87403ec7085c66cf", 0xc3}], 0x1) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000bc0)={0x9, 0x0}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={r8, 0x608, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x10, r9}, 0x18) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r3) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d40)={r1, 0xffffffffffffffff, 0x31, 0x0, @val=@iter={&(0x7f0000000d00)=@cgroup={0x1, 0xffffffffffffffff, 0x4}, 0x10}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000d80)={r10}, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r4, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45) (async) ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000ec0)=0x8) r11 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r11, &(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000f80)=0x80, 0x80800) (async) writev(r3, &(0x7f0000003180)=[{&(0x7f0000000fc0)="abe75edf95e9170973e51ad4d5d47cd7b01ab4a6c6898b4c9cbe6c283a425f2f00a77a764ad3151a65b4e2d8c7aa9a230b03840892e93bba270744eb3304e31ffe7808f7b06b05b4da4cf9d8da737204733b73e950e7f7049716e7c50c080ced4d4a125755a858c7249e07b0b00f20fc6d736f97e13b3068ca5aac5766272894bf2552e16e89ba538b90f165387da05f74fc6b4a46afdfe0df4f09e678fa0da41b4730e59323686f609581a6238b4d13d0ac0765aab3a452610100daa3d42c7d88f2ddef933f0db9ac7acdb561f2d77412465b3fbc2d97d25eae7aace513713d0352ef5aca080cbc364b5e4a92ebb997205241d1fb95", 0xf6}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="b51421163c7a33737e5f0ce1f25e2f892a4bbd6a2b7f69147e091555574b9fddd7", 0x21}, {&(0x7f0000002100)="66683ba4c696e55d4c9195df283851515fd85755d75b346c05ab8c2e2635b0c8d3dbdb0da15cade89197ce0ee95eb326dc02e60780af38d1342f9009f106030646ba1118924a2078c19afcc5aadc8abbcdaacf79f99cdc64f2d6ce2ed76c07d995eabd9c8327f2af719148befbba53247eb6cc99dc4419bf60557009", 0x7c}, {&(0x7f0000002180)="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", 0x1000}], 0x5) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003200)={r8, 0x6}, 0xc) (rerun: 64) 1m57.532225949s ago: executing program 2 (id=3862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0x40) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4f6243b6e330638ec6de8532eae0102c000000", @ANYRES16=r2, @ANYBLOB="3183000000000000000019000000180001801400020077673200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xa4}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x40000000) 1m57.200087357s ago: executing program 2 (id=3868): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) 1m56.755564783s ago: executing program 2 (id=3876): sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x4c040) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) (rerun: 64) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) sendmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="97ac0547f4dbe008146aa69f5d21b56f2a603008ef204b2b2b7f9894ca21fd3d27d52f81e50ac30a318ca5cb21d3c52226491a1c35af5d31599c0ed9b27efd08e44ea9a647f8758055a41fdafc8c5703de16b0bebd2e9a583d93ff3b4922a9f0785beefa51e54b2d3684f8637ba9b48d83e6d2c157e0833f1959b62275eeeb485655c10af8cad24df29f8e6c126ff857512a6e09dd1c6e20893e98619ab60a93bdc9934908764eab3826cd7387e9c8797b76d2c9c13e490a10a8ebdf31dd89", 0xbf}, {&(0x7f00000003c0)="5af719bf6a2ca56f0da60e5ad3c455c440374cf181970fe7796390627c3b9c5459b0b60064bcfc24c7ea593f9d6c8992f79bb2267f7070311487f8a9d923f8310b5e9da8fd10b67e310d882652083dee4ea88ed8935f4b61af50f6989d53f30d2f687ec2ab325db5bcc67aa3257c8a616460e76e46381d50da0468c95e23be90de63ad359eb651be53057ada74cbf4dec0c5e14b3286db5674381b0c819a9ec361286598833f5e8da1a194e7f462208a396e48be499cc6b0895197", 0xbb}, {&(0x7f0000000480)="7aa934433448b32c2cc116220effb4e32216dcec9c6ef72da9f2205fd1d326b5adbea6031c9a534e6d47c5075e0cb93d6231f82eed7f4d51db4cd6d226adb1e8891f5a7c70cad43ea35856a45b0ca764f4bf408b15f222728191297d98b2ecdf16261ac36dedb9dac62af68944ab4a5874567f9e10bae2037fe1e2ee1141cc235ba90f", 0x83}], 0x3, &(0x7f0000000540)=[{0x48, 0x3a, 0x398, "a5a22458959a62e28cea416c3d804c57e8e2a7b51e29e8129240069d79775f5bece86e897cf27b7b249cc6ccec10df7cb2b72e23c8df82"}, {0x98, 0x3a, 0x5, "ef582ed7920e1fcbfe4f9a0b77fa26b5a0c25347f082f6d259d17bacfbcfcb5048b0c3afbef7226bc392251b38500c1e790bc87b296b7baa245c0456cc94c669f3917a0dc93b9ac8a10c089932cbbc23e411ee4cd1c8cc1deb29d605cc5e7c6332b6f290e26d830f2907fc3299512c491339ad83d6d3af527bdb3b35ce5be1b25df4"}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="924755febab5c93856e84014110ffd3cec91093e0a852ff8dfdb0d42185f8b91404f3f082207a088145e651a294d556ad8daba489a2e73d15857392e985775ca43fccde8fe5f2f51640c50fe04a809f0e6be06c102c184a4da643ec506a34ca3f4bd4139ced00f11ec4c2a86a0ba65d4633933557f077a2fd9369f93faf30ae151249c06e4a4232f2bed69e556c41ca8f25057d7f9c6a2b58d33219ea9a0d2ec6bf6256eba2b374913f4e320647abd9c0ee80eaf7d9cb0f38dbf44e6cc046fe474837fc3e7aaf8739f9147cc", 0xcc}, {&(0x7f0000000200)="15a315d7fc77f3909e6f1798caa34600e8296dc475c82d86e2fbb5f5511e830e17f61e6a1dbdd2bf75075dd673335f244733ab5fb6de039f15fb112036afae7c89", 0x41}, {&(0x7f0000000180)="771496a265a74d15e906316fcf0f1347b7fdb0884b92332a7b8ade66e99df98da23a1b358d0861b0416700", 0x2b}, {&(0x7f0000000740)="89c24368f4abe49b2d96dd87effbd1d7eb61c2a73eeb4443", 0x18}, {&(0x7f0000000780)="8f2e25a1a3d39e1ce71d85f192933e05f0fd2d904f3f16b58f4d6e20cccf4faa6883a87616305d8fff8e21885ef7260b2993597cc12168a03e1c49c55383820448385007ea5e8ed72451af855d43524a87bb3212f208709cce151720b89d71d69ce09e5a63dbd51f8ffa4e6822b0882368b5acba5c82351888782de8ccce68dadaebe83f643d204ff79ea83060c25e894d9a195ab9a419bf45947ecf93bf64b34840eed1a91b39a26ecaf13881d0d9ffdfaf0a49a338022b4ba56d92a6751ee97249761e95d4e05d43d0ba8676969ae6b1d3", 0xd2}, {&(0x7f0000000880)="e61913167914bb0184c30ce80ded90f1992c27f3676449c7b5e4861417529b5853be919f49a708d8a51a2e3701bc8d182ce91b787077412c839c90e18d6a1233ad11a8a1171565cda0d657657b8e6de08f4738bc2fd6837e32e979f7beed8051d179f7be73607ae09826bf629f5e9c798e0a66006d6daed2a48187ac512836c5f01f9099a9f689e99b0958eed35f26cf34423e6ddd27046de323129001b50194963054260a2a289fc24482177397fedff9891abdaba858d536b4be9ef794da90bc151a1599533664826107291f878450df13d4eb7dde91c476e0c92d05dcfdbab8cbb73f1ebd7ff8c5b6a5034f937fcc23fbe9d643190c24ee", 0xf9}, {&(0x7f0000000980)="b35f1a336dd1", 0x6}, {&(0x7f00000009c0)="6e299e0f613e2cb2bb78c9bd5ce1419d5c1070f7d5e28ff725e4ae5cb7e9f9b2dc6ca79d2918e6395e8647b7099d953f5ea21af9dbc9ddb38a88d444a4feb11ad61e8f416da3c1515c79267a640e592a62a798f71c6035cc652c676d318154f2bddee52f735179173a05091415e1ec6957fba77775adaf5d703588da51b1a5ebb2b035517611b5d2f3cb0a630d07ad1e9a891c28a1f9561b63ae66e5ead28cdcfef4d3bc8d8c953878cc32f12630e348938920c6cd6d1671f058204799c7360671fbdc583afcf7eefe7e381e94396cc41fb079", 0xd3}, {&(0x7f0000000ac0)="c35b327a8cc17be1e9029d972f354d7caacc603fd88fd75ab18d87e02f81e91f5ab00af001013c8362032ce6db8dc81cd5eef2c45754bdc8f6f804cfebfc98aed8450c751de27da176bf6defcfd5aa1d227ec9ceffe8fe25b3ebeb5d3c809d08c7f18201be49e3554202d1051838e24d1354d2205cb5a1e7cf6ba14db429281f7611ac565f3f8e7b886de5642c5c04056d225c57c5939424e8b83c8594c9b68768cbb29359c8a6b42a937230a0c2a5acaf6beb896271f5c9221d2cde34d1e1589e1fe426791b0caf1fc3836829f27f0675e488443eae1ea601635f7d26bd36854a83b9c99dabe8e4", 0xe8}], 0x9, &(0x7f0000000c80)=[{0xc0, 0x1, 0xa, "9a34a3b4439f5edfe74e1f25c46f58ae2de2624e094c830fbbbb238202aecfffe8bf11070a7a5248dd7d60cef4d609e4fe64dbb626a274040092f2aee9e98a1cf92f0a5b021c8f4c671469c982806c6ed2624a2f69514c04c2ce60c95d5531b6681e54513166b09fd823ff7b8487cb9f3e44716ae422f325a0575b704e25b933b9995c0ff6f45a23e900736e058d2e0df1bb3e953f5c156854d1328a7513bc21d018e47d565b013e93fd92060bb3"}, {0xd8, 0xff, 0xffff, "c652fa4a63653bf489368c297c8c836039f3bfcd0770a7e3f93bbb20a274a3a9fb980aa1de2a65d9816a1b604652b4d2da10f0b16f307299bf4144ac990eaf9c8489c3ddb38cd44dfb3f6bea96f4348c7daa964438dc5485e654ea95166f94ba41eb2f287c605c4b7dec6a31ee7c65d61fd2e9e898a18cc5bd05dbc708dfdd16f52c00e5fd39c847f764d6ed6fe21a71824bce3183525200a006385a578c435513e802a015a6da9781fba81f1e35c81d00da561ed012a06bbcec8167b32c49a484"}, {0x20, 0x102, 0x10001, "138051614c7150613d95bd"}, {0x60, 0x88, 0x4, "f604eac00d803cf5c4409adea8a858905d979085d44d2c061f6112c66106f3b2a23179c3226163c0c5a98e43c810432eb8a83ec58f4fc50cc9a0d7325950756fee3f138446f0e548c1eb"}, {0xa8, 0x117, 0xd, "77644bc0d72f32d6834693182bd544d60e6221777b4f18e38b8368b767c02be02e9043a3a077070d073a01fe71b2c589bc776e0eb49e68644b342b7f1fcfe6165db0f4f14a5f631097063fa2ef243a2c99fe8d2961cfbfc9accee1dd0b0a6b851d729fef8f7fec32f8df1e87f6b5e4a5963a3fda637bd7575b4f42893de68a472b2fd9f1eba00289261db9d2b273c766d4af91aaa973"}, {0x108, 0x6, 0x4, "0e690ca572ff4b36fc6c5b6ca019c75f7acf248b62a275b832c81d584e19295ecd41b792a0633bfdd90ff97cece2b73afecbde43618d4ae8d293f0e6a2e4a7455588611d05fe92edca77e751044dbc84a9e8f5ca134538e77e8260aa7da8c3a3064d9c921d3fcb65b46b01719851164298b6f84852de3ae55301d46bde50b86793f0ffe23dce496347f1bf5c419e4c555cba13a3dd9337d51477e1e5f8ad6ee62b311b180a4da80a42769a05018aea465cb065c7cc5b4f157fc779d9623169e7c5a7ae2aaeeb939d7d39a22fd94b75561c12a72c6d3a15306bd433a36e4b9f79bb05cef91b4fab00d3bbac8e072951bc36a895af"}, {0xc8, 0x6, 0x5, "4e8f6fb38da7a0d6745e1396c0a4829158df64f0847e28bdce7cba4ebf5b0ca65122b606127a9e4aa416cdd9a2b5da49c2487d0309d5927bba59cdecb06539d8631fee2a1583c8a0e05e47f8e5bcb1f47e0d516809b27f5270e24f080da41747383f4120e0cebd4b0b913175864b6a8a29ff98ca8e3671c5e724f6120291f76c9e4248b8180a0fb4e42e98f5324e2e01b11b27599a8d2606df8d91ff9afd22d1ed1161265bead636e4ac4403b6f5693e9d542eec1cd06e5c"}, {0xb8, 0x6, 0x36, "703cf6fe32d25b13e0a5aea6077849e71e2979c6ce1f20e5f00aef052ba3e65fb547a474471d6a6dd3a55633d45bf02a14839784b3f635ff3bcc5eed3fae6c2a9ae00f74ce21f1616a99a3cae4e78dfddcef775fa0202df574ccafee17765203e013fe15f0c75cd8d6b510f04ce75cf6e076f576a1ff661062e09b6591ee7856f4f5759504e07787be62d8003f37cf7fd5bff741b63d57a583123fa4e88d775e0e7cb1ca886d4fab"}], 0x548}}], 0x2, 0x8000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 1m56.432527747s ago: executing program 35 (id=3876): sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x4c040) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) (rerun: 64) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) sendmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="97ac0547f4dbe008146aa69f5d21b56f2a603008ef204b2b2b7f9894ca21fd3d27d52f81e50ac30a318ca5cb21d3c52226491a1c35af5d31599c0ed9b27efd08e44ea9a647f8758055a41fdafc8c5703de16b0bebd2e9a583d93ff3b4922a9f0785beefa51e54b2d3684f8637ba9b48d83e6d2c157e0833f1959b62275eeeb485655c10af8cad24df29f8e6c126ff857512a6e09dd1c6e20893e98619ab60a93bdc9934908764eab3826cd7387e9c8797b76d2c9c13e490a10a8ebdf31dd89", 0xbf}, {&(0x7f00000003c0)="5af719bf6a2ca56f0da60e5ad3c455c440374cf181970fe7796390627c3b9c5459b0b60064bcfc24c7ea593f9d6c8992f79bb2267f7070311487f8a9d923f8310b5e9da8fd10b67e310d882652083dee4ea88ed8935f4b61af50f6989d53f30d2f687ec2ab325db5bcc67aa3257c8a616460e76e46381d50da0468c95e23be90de63ad359eb651be53057ada74cbf4dec0c5e14b3286db5674381b0c819a9ec361286598833f5e8da1a194e7f462208a396e48be499cc6b0895197", 0xbb}, {&(0x7f0000000480)="7aa934433448b32c2cc116220effb4e32216dcec9c6ef72da9f2205fd1d326b5adbea6031c9a534e6d47c5075e0cb93d6231f82eed7f4d51db4cd6d226adb1e8891f5a7c70cad43ea35856a45b0ca764f4bf408b15f222728191297d98b2ecdf16261ac36dedb9dac62af68944ab4a5874567f9e10bae2037fe1e2ee1141cc235ba90f", 0x83}], 0x3, &(0x7f0000000540)=[{0x48, 0x3a, 0x398, "a5a22458959a62e28cea416c3d804c57e8e2a7b51e29e8129240069d79775f5bece86e897cf27b7b249cc6ccec10df7cb2b72e23c8df82"}, {0x98, 0x3a, 0x5, "ef582ed7920e1fcbfe4f9a0b77fa26b5a0c25347f082f6d259d17bacfbcfcb5048b0c3afbef7226bc392251b38500c1e790bc87b296b7baa245c0456cc94c669f3917a0dc93b9ac8a10c089932cbbc23e411ee4cd1c8cc1deb29d605cc5e7c6332b6f290e26d830f2907fc3299512c491339ad83d6d3af527bdb3b35ce5be1b25df4"}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="924755febab5c93856e84014110ffd3cec91093e0a852ff8dfdb0d42185f8b91404f3f082207a088145e651a294d556ad8daba489a2e73d15857392e985775ca43fccde8fe5f2f51640c50fe04a809f0e6be06c102c184a4da643ec506a34ca3f4bd4139ced00f11ec4c2a86a0ba65d4633933557f077a2fd9369f93faf30ae151249c06e4a4232f2bed69e556c41ca8f25057d7f9c6a2b58d33219ea9a0d2ec6bf6256eba2b374913f4e320647abd9c0ee80eaf7d9cb0f38dbf44e6cc046fe474837fc3e7aaf8739f9147cc", 0xcc}, {&(0x7f0000000200)="15a315d7fc77f3909e6f1798caa34600e8296dc475c82d86e2fbb5f5511e830e17f61e6a1dbdd2bf75075dd673335f244733ab5fb6de039f15fb112036afae7c89", 0x41}, {&(0x7f0000000180)="771496a265a74d15e906316fcf0f1347b7fdb0884b92332a7b8ade66e99df98da23a1b358d0861b0416700", 0x2b}, {&(0x7f0000000740)="89c24368f4abe49b2d96dd87effbd1d7eb61c2a73eeb4443", 0x18}, {&(0x7f0000000780)="8f2e25a1a3d39e1ce71d85f192933e05f0fd2d904f3f16b58f4d6e20cccf4faa6883a87616305d8fff8e21885ef7260b2993597cc12168a03e1c49c55383820448385007ea5e8ed72451af855d43524a87bb3212f208709cce151720b89d71d69ce09e5a63dbd51f8ffa4e6822b0882368b5acba5c82351888782de8ccce68dadaebe83f643d204ff79ea83060c25e894d9a195ab9a419bf45947ecf93bf64b34840eed1a91b39a26ecaf13881d0d9ffdfaf0a49a338022b4ba56d92a6751ee97249761e95d4e05d43d0ba8676969ae6b1d3", 0xd2}, {&(0x7f0000000880)="e61913167914bb0184c30ce80ded90f1992c27f3676449c7b5e4861417529b5853be919f49a708d8a51a2e3701bc8d182ce91b787077412c839c90e18d6a1233ad11a8a1171565cda0d657657b8e6de08f4738bc2fd6837e32e979f7beed8051d179f7be73607ae09826bf629f5e9c798e0a66006d6daed2a48187ac512836c5f01f9099a9f689e99b0958eed35f26cf34423e6ddd27046de323129001b50194963054260a2a289fc24482177397fedff9891abdaba858d536b4be9ef794da90bc151a1599533664826107291f878450df13d4eb7dde91c476e0c92d05dcfdbab8cbb73f1ebd7ff8c5b6a5034f937fcc23fbe9d643190c24ee", 0xf9}, {&(0x7f0000000980)="b35f1a336dd1", 0x6}, {&(0x7f00000009c0)="6e299e0f613e2cb2bb78c9bd5ce1419d5c1070f7d5e28ff725e4ae5cb7e9f9b2dc6ca79d2918e6395e8647b7099d953f5ea21af9dbc9ddb38a88d444a4feb11ad61e8f416da3c1515c79267a640e592a62a798f71c6035cc652c676d318154f2bddee52f735179173a05091415e1ec6957fba77775adaf5d703588da51b1a5ebb2b035517611b5d2f3cb0a630d07ad1e9a891c28a1f9561b63ae66e5ead28cdcfef4d3bc8d8c953878cc32f12630e348938920c6cd6d1671f058204799c7360671fbdc583afcf7eefe7e381e94396cc41fb079", 0xd3}, {&(0x7f0000000ac0)="c35b327a8cc17be1e9029d972f354d7caacc603fd88fd75ab18d87e02f81e91f5ab00af001013c8362032ce6db8dc81cd5eef2c45754bdc8f6f804cfebfc98aed8450c751de27da176bf6defcfd5aa1d227ec9ceffe8fe25b3ebeb5d3c809d08c7f18201be49e3554202d1051838e24d1354d2205cb5a1e7cf6ba14db429281f7611ac565f3f8e7b886de5642c5c04056d225c57c5939424e8b83c8594c9b68768cbb29359c8a6b42a937230a0c2a5acaf6beb896271f5c9221d2cde34d1e1589e1fe426791b0caf1fc3836829f27f0675e488443eae1ea601635f7d26bd36854a83b9c99dabe8e4", 0xe8}], 0x9, &(0x7f0000000c80)=[{0xc0, 0x1, 0xa, "9a34a3b4439f5edfe74e1f25c46f58ae2de2624e094c830fbbbb238202aecfffe8bf11070a7a5248dd7d60cef4d609e4fe64dbb626a274040092f2aee9e98a1cf92f0a5b021c8f4c671469c982806c6ed2624a2f69514c04c2ce60c95d5531b6681e54513166b09fd823ff7b8487cb9f3e44716ae422f325a0575b704e25b933b9995c0ff6f45a23e900736e058d2e0df1bb3e953f5c156854d1328a7513bc21d018e47d565b013e93fd92060bb3"}, {0xd8, 0xff, 0xffff, "c652fa4a63653bf489368c297c8c836039f3bfcd0770a7e3f93bbb20a274a3a9fb980aa1de2a65d9816a1b604652b4d2da10f0b16f307299bf4144ac990eaf9c8489c3ddb38cd44dfb3f6bea96f4348c7daa964438dc5485e654ea95166f94ba41eb2f287c605c4b7dec6a31ee7c65d61fd2e9e898a18cc5bd05dbc708dfdd16f52c00e5fd39c847f764d6ed6fe21a71824bce3183525200a006385a578c435513e802a015a6da9781fba81f1e35c81d00da561ed012a06bbcec8167b32c49a484"}, {0x20, 0x102, 0x10001, "138051614c7150613d95bd"}, {0x60, 0x88, 0x4, "f604eac00d803cf5c4409adea8a858905d979085d44d2c061f6112c66106f3b2a23179c3226163c0c5a98e43c810432eb8a83ec58f4fc50cc9a0d7325950756fee3f138446f0e548c1eb"}, {0xa8, 0x117, 0xd, "77644bc0d72f32d6834693182bd544d60e6221777b4f18e38b8368b767c02be02e9043a3a077070d073a01fe71b2c589bc776e0eb49e68644b342b7f1fcfe6165db0f4f14a5f631097063fa2ef243a2c99fe8d2961cfbfc9accee1dd0b0a6b851d729fef8f7fec32f8df1e87f6b5e4a5963a3fda637bd7575b4f42893de68a472b2fd9f1eba00289261db9d2b273c766d4af91aaa973"}, {0x108, 0x6, 0x4, "0e690ca572ff4b36fc6c5b6ca019c75f7acf248b62a275b832c81d584e19295ecd41b792a0633bfdd90ff97cece2b73afecbde43618d4ae8d293f0e6a2e4a7455588611d05fe92edca77e751044dbc84a9e8f5ca134538e77e8260aa7da8c3a3064d9c921d3fcb65b46b01719851164298b6f84852de3ae55301d46bde50b86793f0ffe23dce496347f1bf5c419e4c555cba13a3dd9337d51477e1e5f8ad6ee62b311b180a4da80a42769a05018aea465cb065c7cc5b4f157fc779d9623169e7c5a7ae2aaeeb939d7d39a22fd94b75561c12a72c6d3a15306bd433a36e4b9f79bb05cef91b4fab00d3bbac8e072951bc36a895af"}, {0xc8, 0x6, 0x5, "4e8f6fb38da7a0d6745e1396c0a4829158df64f0847e28bdce7cba4ebf5b0ca65122b606127a9e4aa416cdd9a2b5da49c2487d0309d5927bba59cdecb06539d8631fee2a1583c8a0e05e47f8e5bcb1f47e0d516809b27f5270e24f080da41747383f4120e0cebd4b0b913175864b6a8a29ff98ca8e3671c5e724f6120291f76c9e4248b8180a0fb4e42e98f5324e2e01b11b27599a8d2606df8d91ff9afd22d1ed1161265bead636e4ac4403b6f5693e9d542eec1cd06e5c"}, {0xb8, 0x6, 0x36, "703cf6fe32d25b13e0a5aea6077849e71e2979c6ce1f20e5f00aef052ba3e65fb547a474471d6a6dd3a55633d45bf02a14839784b3f635ff3bcc5eed3fae6c2a9ae00f74ce21f1616a99a3cae4e78dfddcef775fa0202df574ccafee17765203e013fe15f0c75cd8d6b510f04ce75cf6e076f576a1ff661062e09b6591ee7856f4f5759504e07787be62d8003f37cf7fd5bff741b63d57a583123fa4e88d775e0e7cb1ca886d4fab"}], 0x548}}], 0x2, 0x8000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 3.12203041s ago: executing program 7 (id=5377): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x12, r1, {0x2, 0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x3, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) 3.054991601s ago: executing program 7 (id=5378): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3) recvfrom$inet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x2c, 0x9, r2, 0x34}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)}, {&(0x7f00000004c0)="5524acdb1e607da592c02ae9d0531ec80c330767b5adf31e22f63638e37562d4649282626c6841d958e48808719cd95c19fe9a4bd20a979b719e8e10a87453aa11c7fbf6451063bc1bbd3f3f44b5fea717a4e3f632b570a9375b2d8a6298972054fa478b43207878a5bd5fae2734533e48ea82f0bc290e1b595ac3d18e5c44a237d87c32a351a92cebfc50103b1a9fee768c46451a6dd55945f3b8d8a4d06af80b49d21a4d058e8ec8d7c5f925375ed77c80cfb211b586ca5fa9a46bb014b597d310fa00f0630623275c44feb0adfae563891aa902dff5bd", 0xd8}], 0x2, 0x0, 0x0, 0x41}, 0x8010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @local, 0x7}], 0x1c) sendto$inet6(r3, &(0x7f0000000140)="15", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private0, 0x3ff}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xdc, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x2c}]}, @lsrr={0x83, 0xf, 0xed, [@multicast2, @loopback, @broadcast]}, @generic={0x89, 0xb, "9264ed39f367d88c22"}, @end, @noop, @generic={0x83, 0xe, "0b70e9494bda3bca5a9d11c7"}]}}, "eb"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) 2.046176795s ago: executing program 7 (id=5393): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603cafffe0f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.940153994s ago: executing program 4 (id=5395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x20, 0x9, 0x0, 0x0, {0x2}, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xffff}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.768182642s ago: executing program 4 (id=5399): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.72177199s ago: executing program 4 (id=5400): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 1.515612687s ago: executing program 0 (id=5402): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2b, 0x1, 0x1) (async) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x11, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x6, 0x1b, 0x0, &(0x7f0000000240)) (async) getsockopt$inet6_buf(r7, 0x6, 0x1b, 0x0, &(0x7f0000000240)) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000140), &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) 1.501345151s ago: executing program 6 (id=5403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.448148491s ago: executing program 4 (id=5404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @mcast2, 0x7f}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x28, 0x7, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0xc}, {0xffff, 0xfff3}, {0xa, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0xfe, 0xa6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8850) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) sendto$inet6(r0, &(0x7f0000000280)="32780f643983237562", 0x9, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000400)="2cacbf", 0x3}], 0x1) 1.380074119s ago: executing program 0 (id=5405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="32780f643983237562", 0x9, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000400)="2cacbf", 0x3}], 0x1) 1.359890342s ago: executing program 6 (id=5407): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="0300f198aa0100000000008508005e1046ff0dbdbba8972972b3ecf066f77f", 0x1f, 0x20044080, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0xfe, 0x6, @random="5483ccb17b06"}, 0x14) 1.273134821s ago: executing program 6 (id=5409): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x20000080, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) read(r0, &(0x7f0000000040)=""/140, 0x8c) 1.052110534s ago: executing program 7 (id=5410): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.020700897s ago: executing program 7 (id=5412): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) unshare(0x24020400) poll(&(0x7f0000000100)=[{r3, 0xd350}], 0x1, 0x7) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000007c0)={0x40}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x40008095) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @private}, &(0x7f00000003c0)=0xc) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000400)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="78000000130010002abd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="001000001402020008001e000f00000000000000", @ANYRES32=r6, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB="1400030076657468315f766c616e00000000000008001f000c00000008002000670f0000080023000100000008000d0003000000"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r8, 0x37}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x0, 0x9, 0x62, &(0x7f00000004c0)="31c62ef2a7f1f37e4e", &(0x7f0000000500)=""/98, 0x7, 0x0, 0xf8, 0x16, &(0x7f0000000580)="422a8b9c0f8a8a52d04cbb93ef63a05d074d354e33684aadf7bccf27109fdf59999654301486f5b1ab6af59216c9658f31cd84c0da53e86bc256ffeb61536f9739ac33d13bb6a58cdb330552c05f98175c2d4cea2129ec1e74988462970e130fccd3093e016605b9f7451d794ef0318344f570b2d8f917efc0a3c30fc52693a19f28420eeb52893607ccf2e8b7988bedff490b489c6169004dba488f80f635312c290cabe6c3a17a619ed866fccb8a4e0da5ca7a58fc1bfcf97824367cdbcc89cad20e9974cf3f642d4c7c405765d9c28f7118336e8ba2852731f31f50c474e79f8b043320ab1bc4035a14a55bd196aec54bac763a961952", &(0x7f0000000680)="619430b12f87ad4a4141623950c144ab59ae3342aae3", 0x4, 0x0, 0x3}, 0x50) 817.998945ms ago: executing program 8 (id=5416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x3, {0x2, 0xf0, 0x1}, 0x1}, 0x18) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x1}, 0x18) sendmmsg(r1, &(0x7f000000a200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getuid() sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0xd5f, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711247000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r8, &(0x7f00000000c0)={@val={0x0, 0xf8}, @val={0x0, 0x1, 0x0, 0x6, 0x5, 0x7}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @multicast, @private0={0xfc, 0x0, '\x00', 0x1}, @random="c45d418a2f59", @empty}}, 0x42) write$tun(r5, &(0x7f0000000440)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @tcp={{0x27, 0x4, 0x1, 0x8, 0xef, 0x68, 0x0, 0x2f, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x7e, 0x3, 0x2, [{@broadcast, 0x8}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x7}]}, @noop, @ssrr={0x89, 0xf, 0x8a, [@remote, @local, @local]}, @rr={0x7, 0xb, 0xd6, [@broadcast, @empty]}, @end, @timestamp_addr={0x44, 0x4c, 0xda, 0x1, 0x0, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x80000001}, {@loopback, 0x7fff}, {@multicast2}, {@remote, 0x4}, {@local, 0x8}, {@broadcast, 0x1ec}]}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e20, 0x4e23, r6, r7, 0x0, 0x0, 0xf, 0xc2, 0x9, 0x0, 0x7, {[@timestamp={0x8, 0xa, 0xfffffff2, 0x4000000}, @md5sig={0x13, 0x12, "4584e917aa11a80002e6c5a45b5c439f"}, @nop, @sack={0x5, 0xa, [0xfffffff4, 0x3]}]}}, {"de40dff603cc5a86eb7aeba61be2f5d3b4e829ac16d92e"}}}}}}}, 0xfd) 715.591095ms ago: executing program 8 (id=5417): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', r5, 0x20, 0x20, 0x1, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) (async) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0x72) 698.155025ms ago: executing program 8 (id=5418): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303178010"], 0x328}}, 0x84) r1 = socket(0x1e, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x80}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095", @ANYRESDEC=r2, @ANYBLOB="65d03dde737726c8a544f6b84035f8a6bdb8867d66c1d0a769d392a6ba8fb724", @ANYRESHEX=0x0, @ANYRESDEC=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff2, 0xd}, {0xf}, {0x1, 0x1a}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff4}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) 559.544015ms ago: executing program 8 (id=5419): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000004000000000000000010ff02000000000000000000000000000189"], 0x340a) 504.657891ms ago: executing program 0 (id=5420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000004400006190be00000000009501000000000000043410fa151532c7ef41d88439050890ea39ad497f83f60314aa1204d67554c8ad3f7cf9784b703f5a145c4c537e6d48272dc8f8bcc43ebcdc00f7ff9f69e452f0a5aa8f2fe5967328ca8ebba00c601d6bc1abb2d53445f2be1c57b73bc6ebf2ea34d75d5639fa5395af5b58c19034d7690763d15bd820"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 460.086438ms ago: executing program 4 (id=5421): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000140)=""/252, 0xfc}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x98, r5, 0x8, 0x70bd22, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3516}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d32df6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d051080}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5094}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f4de76d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b00509e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x166}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cf65f03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x312ce337}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7917b5e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2531}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3f3}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4002004}, 0x2c000011) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) 441.35741ms ago: executing program 0 (id=5422): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)=ANY=[@ANYBLOB="28d65d00", @ANYRES16=r2, @ANYBLOB="050129bd7000fddbdf251100000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140f, 0x8, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r6, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000001580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000040), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x97, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x400, @rand_addr=' \x01\x00', 0x4}]}, &(0x7f0000000140)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008051}, 0x8804) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000100)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x20000800) 384.969672ms ago: executing program 8 (id=5423): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 323.94166ms ago: executing program 4 (id=5424): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r9, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0x3, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x9, 0xb, 0x8, 0xc3c851b6ebfa16ae, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x2a, &(0x7f0000000140)=""/42, 0x41100, 0x61, '\x00', r6, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r9, 0x1, r3], 0x0, 0x10, 0x80000000}, 0x94) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 323.709784ms ago: executing program 6 (id=5425): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe803f000000000000000000000000bbfe8000000000000b00000000000000aa00000000", @ANYRES8], 0x0) 290.755229ms ago: executing program 0 (id=5426): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f00000009c0)={0x24, @none={0x0, 0xfffc}}, 0x14) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r5 = accept$netrom(r0, 0x0, &(0x7f0000000000)) getpeername$netrom(r5, &(0x7f0000000040)={{0x3, @null}, [@bcast, @null, @netrom, @null, @remote, @default, @default, @netrom]}, &(0x7f00000002c0)=0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r6) (async) close(r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRESOCT=r4], 0x24}}, 0x8040) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0100000030020022a5a54d2b12000700", @ANYRES64=0x0, @ANYBLOB="dba0879a9e021bb50bb338f961217e9934375270658b0e0bba17657380531e38b7c2d2227759a28842b2f834b1082f0ad9d6f40f21e676c5cb1f8a93ef1322413836ba4afba3195bc017a49cc910e9ec7d771057aae6cc08c69611aa6a3334e28ae950bceeee6419a98e833bbf29fd3da15834700606b179972631dbc36b0e3e497d7c8c6b5f3bf98d4108340f0b7bd7c6dc1edc176b7a8021b58f56593d87d6706f51630a1e1e22b90ecec92075bc4442c8bca7e7c1993d464750d866c553befd16a081359286210d3a05c616524f942c", @ANYRES64=r3, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 270.558422ms ago: executing program 8 (id=5427): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x39, 0x0, "35390074218cc2d7d9c95462b94557b3f418a0f841348673881609e8b07aa66a4101aa94603f4146d4abf6679647e756c1c4caceea144840b3092a4d9904e79cd43da7cd11c93f914ee8406f3b1d6246"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "d69a3fe82d45168edef382d0f6875446970bbdea805f0af95ba18fa21f8c55f4c3aeab6e4d5094c73e412345479d238cdb2cc09829eb51f757bb3c515ac5916967379715421571786d599acc198d4e88"}, 0xd8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x9, 0x47b, 0x4, 0x1, 0x3, 0x2a980000, 0x3}}, {0xa, 0x2, [0x1, 0x1ff, 0x2]}}]}]}, 0x50}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r11) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r13, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r14, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 155.425627ms ago: executing program 6 (id=5428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000003c0)={0x1, 0x1, 0x1000, 0x88, &(0x7f0000000280)="cfcac93521ba8eaf56f3460c900b034f0e9c6dbf8d6829026cb4666ec91f081da965d6dcfb7ca463af268acb38f70b37f8e11fca3fc1e0549f1887166078f890c9c6ccae38d12819d5356b2250e31172cdfc06f07bc3069fdaedc3a695b3fc0f33fa3e798436c2492b1b8676068251a0fd332be0a56bf442c390676a313efbd36298a070b97e436a", 0x67, 0x0, &(0x7f0000000340)="b565b53ae642c7aab59109894de147f25d7ce32517da8cf1021e076fc2e2d5584100f343bd42d5dfc4bd81ece2e2f28106889c79032f299e452f6f046bacc982d662914cfac6dc3bfd42421054b949242c63b36af812a5be574d6739bb23bd0d4b334869f51700"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 118.87903ms ago: executing program 0 (id=5429): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r2}, 0x10) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r0, 0x0, 0x14, 0xfffffffffffffffe}, 0x76) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) listen(r0, 0xd) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r9, 0x8b32, &(0x7f0000000040)) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) sendfile(r8, r8, 0x0, 0x8) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740), 0x2}, 0x2020) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9b4378192f60020001907800001e020000"], 0x0) 110.16334ms ago: executing program 7 (id=5430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="32780f643983237562", 0x9, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000400)="2cacbf", 0x3}], 0x1) 0s ago: executing program 6 (id=5431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000192c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb0}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e21, 0x6, @loopback, 0x400}, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x0, {[0x5, 0xffffffff, 0x4, 0x2, 0x320, 0x5, 0x2, 0xc]}}, 0x5c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r2, 0xe44a0000) close(r2) kernel console output (not intermixed with test programs): 00300 RDI: 0000000000000004 [ 362.549684][T17726] RBP: 00007fa91b84f090 R08: 0000000000000000 R09: 0000000000000000 [ 362.549696][T17726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.549707][T17726] R13: 00007fa91abd6038 R14: 00007fa91abd5fa0 R15: 00007ffeb5e43fe8 [ 362.549738][T17726] [ 362.880824][T17702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.998195][T17702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.117585][ T9544] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.147755][ T9544] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.188935][ T9544] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.200472][T17744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.246120][ T9544] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.634951][T17769] FAULT_INJECTION: forcing a failure. [ 363.634951][T17769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.682557][T17769] CPU: 0 UID: 0 PID: 17769 Comm: syz.6.3825 Not tainted syzkaller #0 PREEMPT(full) [ 363.682586][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.682598][T17769] Call Trace: [ 363.682605][T17769] [ 363.682614][T17769] dump_stack_lvl+0x189/0x250 [ 363.682642][T17769] ? __pfx____ratelimit+0x10/0x10 [ 363.682664][T17769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.682686][T17769] ? __pfx__printk+0x10/0x10 [ 363.682708][T17769] ? __might_fault+0xb0/0x130 [ 363.682749][T17769] should_fail_ex+0x414/0x560 [ 363.682780][T17769] _copy_from_iter+0x1de/0x1790 [ 363.682809][T17769] ? _copy_from_iter+0x24f/0x1790 [ 363.682838][T17769] ? __pfx__copy_from_iter+0x10/0x10 [ 363.682857][T17769] ? sock_alloc_send_pskb+0x875/0x990 [ 363.682891][T17769] ? __pfx__copy_from_iter+0x10/0x10 [ 363.682917][T17769] ? page_copy_sane+0x16a/0x280 [ 363.682942][T17769] copy_page_from_iter+0xdd/0x170 [ 363.682967][T17769] skb_copy_datagram_from_iter+0x306/0x720 [ 363.683003][T17769] tun_get_user+0x1691/0x3e20 [ 363.683045][T17769] ? aa_file_perm+0x44d/0x1550 [ 363.683067][T17769] ? __pfx_tun_get_user+0x10/0x10 [ 363.683088][T17769] ? _parse_integer_limit+0x1ae/0x1f0 [ 363.683117][T17769] ? __lock_acquire+0xab9/0xd20 [ 363.683152][T17769] ? ref_tracker_alloc+0x318/0x460 [ 363.683175][T17769] ? __lock_acquire+0xab9/0xd20 [ 363.683201][T17769] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 363.683224][T17769] ? tun_get+0x1c/0x2f0 [ 363.683250][T17769] ? tun_get+0x1c/0x2f0 [ 363.683271][T17769] ? tun_get+0x1c/0x2f0 [ 363.683297][T17769] tun_chr_write_iter+0x113/0x200 [ 363.683323][T17769] vfs_write+0x5c6/0xb30 [ 363.683354][T17769] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 363.683377][T17769] ? __pfx_vfs_write+0x10/0x10 [ 363.683413][T17769] ? __fget_files+0x2a/0x420 [ 363.683440][T17769] ksys_write+0x145/0x250 [ 363.683468][T17769] ? __pfx_ksys_write+0x10/0x10 [ 363.683491][T17769] ? rcu_is_watching+0x15/0xb0 [ 363.683516][T17769] ? do_syscall_64+0xbe/0x3b0 [ 363.683542][T17769] do_syscall_64+0xfa/0x3b0 [ 363.683562][T17769] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.683581][T17769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.683601][T17769] ? clear_bhb_loop+0x60/0xb0 [ 363.683625][T17769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.683644][T17769] RIP: 0033:0x7f582c98eba9 [ 363.683661][T17769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.683679][T17769] RSP: 002b:00007f582d901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.683700][T17769] RAX: ffffffffffffffda RBX: 00007f582cbd5fa0 RCX: 00007f582c98eba9 [ 363.683715][T17769] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 363.683728][T17769] RBP: 00007f582d901090 R08: 0000000000000000 R09: 0000000000000000 [ 363.683740][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.683752][T17769] R13: 00007f582cbd6038 R14: 00007f582cbd5fa0 R15: 00007ffcb9755f38 [ 363.683785][T17769] [ 364.037314][T17780] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 364.046830][T17780] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 364.369181][T17803] sctp: [Deprecated]: syz.2.3833 (pid 17803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.369181][T17803] Use struct sctp_sack_info instead [ 364.429255][T17806] team_slave_0: mtu greater than device maximum [ 364.444598][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3835'. [ 365.022737][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.587400][T17860] netlink: 'syz.6.3852': attribute type 18 has an invalid length. [ 365.594298][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3853'. [ 365.618634][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'. [ 365.659372][T17860] netlink: 'syz.6.3852': attribute type 18 has an invalid length. [ 365.697658][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'. [ 365.719890][T17867] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3855'. [ 366.196611][T17893] netlink: 'syz.7.3861': attribute type 11 has an invalid length. [ 366.217526][T17893] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3861'. [ 366.512047][T17904] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 366.960890][T17933] netlink: 'syz.7.3873': attribute type 10 has an invalid length. [ 366.988261][ T9544] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.158063][ T9544] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.274125][ T9544] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.334825][ T9544] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.597882][T17956] netem: change failed [ 367.686347][T17961] netlink: 'syz.7.3884': attribute type 1 has an invalid length. [ 367.807158][T17961] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.911426][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.914714][T17969] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.930302][T17969] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 367.930780][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.946062][T17969] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 367.957990][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.977239][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.989562][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.007034][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 368.068420][T17979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.076611][T17979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.089489][T17979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.103584][T17979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.178104][T17982] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3889'. [ 368.186047][T17985] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 368.250657][T17986] netlink: zone id is out of range [ 368.259361][T17986] netlink: zone id is out of range [ 368.282856][T17986] netlink: zone id is out of range [ 368.305022][T17988] netlink: 'syz.4.3891': attribute type 10 has an invalid length. [ 368.643801][ T9544] bond0 (unregistering): Released all slaves [ 368.747934][T17988] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 368.800228][T17994] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3895'. [ 369.057911][T18002] macsec3: entered promiscuous mode [ 369.063904][T18002] macsec3: entered allmulticast mode [ 369.120192][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3897'. [ 369.160371][ T9544] hsr_slave_0: left promiscuous mode [ 369.170926][ T9544] hsr_slave_1: left promiscuous mode [ 369.218895][ T9544] vlan0: left allmulticast mode [ 369.227021][ T9544] veth0_vlan: left allmulticast mode [ 369.236032][ T9544] vlan0: left promiscuous mode [ 369.241553][ T9544] veth1_macvtap: left promiscuous mode [ 369.248129][ T9544] veth0_macvtap: left promiscuous mode [ 369.255575][ T9544] veth1_vlan: left promiscuous mode [ 369.262160][ T9544] veth0_vlan: left promiscuous mode [ 370.068527][ T5185] Bluetooth: hci2: command tx timeout [ 370.437852][T18014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.481012][T18006] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 370.493823][T18022] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3900'. [ 370.741214][T18043] netlink: 'syz.4.3905': attribute type 9 has an invalid length. [ 370.834959][T17974] chnl_net:caif_netlink_parms(): no params data found [ 370.936699][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3908'. [ 371.101038][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.126100][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.134036][T17974] bridge_slave_0: entered allmulticast mode [ 371.141819][T17974] bridge_slave_0: entered promiscuous mode [ 371.159827][ T9544] IPVS: stop unused estimator thread 0... [ 371.167971][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.181342][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.190325][T17974] bridge_slave_1: entered allmulticast mode [ 371.206294][T17974] bridge_slave_1: entered promiscuous mode [ 371.267827][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.285138][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.352946][T17974] team0: Port device team_slave_0 added [ 371.361751][T17974] team0: Port device team_slave_1 added [ 371.431531][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.439035][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.470846][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.485453][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.501701][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.529392][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.564630][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3916'. [ 371.615397][T17974] hsr_slave_0: entered promiscuous mode [ 371.627471][T17974] hsr_slave_1: entered promiscuous mode [ 371.635581][T17974] debugfs: 'hsr0' already exists in 'hsr' [ 371.641405][T17974] Cannot create hsr debugfs directory [ 372.076181][T17974] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 372.095552][T17974] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 372.113633][T17974] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 372.126855][T17974] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 372.143715][ T5185] Bluetooth: hci2: command tx timeout [ 372.227591][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3921'. [ 372.268413][T17974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.301189][T18112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3921'. [ 372.316736][T17974] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.331393][T18112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3921'. [ 372.347477][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.354717][ T7000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.364507][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.371630][ T7000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.485817][T18122] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 372.956090][T17974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.144838][T18160] __nla_validate_parse: 1 callbacks suppressed [ 373.144857][T18160] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3935'. [ 373.235303][T18164] netlink: 'syz.7.3936': attribute type 32 has an invalid length. [ 373.253462][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3936'. [ 373.281368][T18164] (unnamed net_device) (uninitialized): option coupled_control: invalid value (7) [ 373.315056][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3935'. [ 373.324291][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3937'. [ 373.604855][T18180] syzkaller1: entered promiscuous mode [ 373.621272][T18180] syzkaller1: entered allmulticast mode [ 373.743688][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.804567][T18191] netlink: 212372 bytes leftover after parsing attributes in process `syz.7.3943'. [ 373.811834][T17974] veth0_vlan: entered promiscuous mode [ 373.850039][T17974] veth1_vlan: entered promiscuous mode [ 373.916887][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3945'. [ 373.954681][T17974] veth0_macvtap: entered promiscuous mode [ 373.976823][T17974] veth1_macvtap: entered promiscuous mode [ 374.044641][T17974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.087627][T17974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.121977][ T3541] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.151471][ T3541] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.180390][ T3541] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.199414][ T3541] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.224455][ T5185] Bluetooth: hci2: command tx timeout [ 374.536304][ T9544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.544795][ T9544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.662039][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.681537][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.942266][T18231] tap0: tun_chr_ioctl cmd 1074025678 [ 374.948145][T18231] tap0: group set to 0 [ 375.447814][T18244] macvlan0: entered allmulticast mode [ 375.462118][T18244] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 375.729839][T18248] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3963'. [ 375.761290][ T5886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.777515][ T5886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.788833][ T5886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.798599][ T5886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.814601][ T5886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.302895][ T5185] Bluetooth: hci2: command tx timeout [ 376.496135][T18292] nbd: socks must be embedded in a SOCK_ITEM attr [ 376.527467][T18253] chnl_net:caif_netlink_parms(): no params data found [ 376.556607][T18295] tipc: Enabling of bearer rejected, failed to enable media [ 376.697928][T18302] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 376.748386][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 376.766149][T18302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3978'. [ 376.776190][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 376.922144][T18315] netlink: 'syz.0.3983': attribute type 11 has an invalid length. [ 376.962659][T18253] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.969867][T18253] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.987101][T18253] bridge_slave_0: entered allmulticast mode [ 376.995818][T18253] bridge_slave_0: entered promiscuous mode [ 377.020065][T18253] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.029575][T18253] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.037029][T18253] bridge_slave_1: entered allmulticast mode [ 377.047247][T18253] bridge_slave_1: entered promiscuous mode [ 377.054916][T18315] netlink: 'syz.0.3983': attribute type 1 has an invalid length. [ 377.160737][T18253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.228182][T18253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.361231][T18253] team0: Port device team_slave_0 added [ 377.380239][T18253] team0: Port device team_slave_1 added [ 377.506328][T18253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.513707][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.549355][T18253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.561807][T18347] rdma_op ffff88807b5759f0 conn xmit_rdma 0000000000000000 [ 377.581028][T18253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.591285][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.619838][T18253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.649922][T18350] netlink: 'syz.8.3992': attribute type 33 has an invalid length. [ 377.718299][T18253] hsr_slave_0: entered promiscuous mode [ 377.727678][T18253] hsr_slave_1: entered promiscuous mode [ 377.734790][T18253] debugfs: 'hsr0' already exists in 'hsr' [ 377.740692][T18253] Cannot create hsr debugfs directory [ 377.903795][ T5185] Bluetooth: hci3: command tx timeout [ 378.154156][T18253] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.166001][T18253] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.271396][T18253] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.286746][T18253] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.405015][T18253] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.423869][T18253] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.469264][T18378] netlink: 'syz.4.3999': attribute type 7 has an invalid length. [ 378.761037][T18253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.779919][T18253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.804916][T18253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.823047][T18253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.879606][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.006368][T18253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.074767][T18253] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.107289][T18407] __nla_validate_parse: 4 callbacks suppressed [ 379.107307][T18407] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4005'. [ 379.133056][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.134263][T18410] FAULT_INJECTION: forcing a failure. [ 379.134263][T18410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.140220][ T7002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.156900][T18410] CPU: 0 UID: 0 PID: 18410 Comm: syz.0.4006 Not tainted syzkaller #0 PREEMPT(full) [ 379.156928][T18410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.156944][T18410] Call Trace: [ 379.156953][T18410] [ 379.156961][T18410] dump_stack_lvl+0x189/0x250 [ 379.156991][T18410] ? __pfx____ratelimit+0x10/0x10 [ 379.157012][T18410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.157036][T18410] ? __pfx__printk+0x10/0x10 [ 379.157063][T18410] ? __might_fault+0xb0/0x130 [ 379.157100][T18410] should_fail_ex+0x414/0x560 [ 379.157133][T18410] _copy_from_user+0x2d/0xb0 [ 379.157161][T18410] ___sys_sendmsg+0x158/0x2a0 [ 379.157188][T18410] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.157248][T18410] ? __fget_files+0x2a/0x420 [ 379.157265][T18410] ? __fget_files+0x3a0/0x420 [ 379.157311][T18410] __x64_sys_sendmsg+0x19b/0x260 [ 379.157338][T18410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.157372][T18410] ? __pfx_ksys_write+0x10/0x10 [ 379.157395][T18410] ? rcu_is_watching+0x15/0xb0 [ 379.157419][T18410] ? do_syscall_64+0xbe/0x3b0 [ 379.157443][T18410] do_syscall_64+0xfa/0x3b0 [ 379.157463][T18410] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.157482][T18410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.157501][T18410] ? clear_bhb_loop+0x60/0xb0 [ 379.157524][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.157548][T18410] RIP: 0033:0x7f385558eba9 [ 379.157565][T18410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.157582][T18410] RSP: 002b:00007f3856403038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.157602][T18410] RAX: ffffffffffffffda RBX: 00007f38557d5fa0 RCX: 00007f385558eba9 [ 379.157617][T18410] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 379.157630][T18410] RBP: 00007f3856403090 R08: 0000000000000000 R09: 0000000000000000 [ 379.157642][T18410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.157654][T18410] R13: 00007f38557d6038 R14: 00007f38557d5fa0 R15: 00007ffdecf10608 [ 379.157683][T18410] [ 379.371205][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.378392][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.471844][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4007'. [ 379.760130][T18412] syzkaller0: entered promiscuous mode [ 379.773060][T18412] syzkaller0: entered allmulticast mode [ 379.996610][ T5185] Bluetooth: hci3: command tx timeout [ 381.746934][T18439] macvlan3: entered allmulticast mode [ 381.764098][T18439] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 381.923248][T18253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.012255][T18454] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 382.063158][ T5185] Bluetooth: hci3: command tx timeout [ 382.342289][T18472] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4021'. [ 382.632078][T18454] syz_tun: entered allmulticast mode [ 382.644436][T18253] veth0_vlan: entered promiscuous mode [ 382.689362][T18253] veth1_vlan: entered promiscuous mode [ 382.769103][T18253] veth0_macvtap: entered promiscuous mode [ 382.789188][T18253] veth1_macvtap: entered promiscuous mode [ 382.827154][T18253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.854669][T18253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.892007][ T3502] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.915313][ T3502] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.940993][ T3502] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.989605][ T9544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.146539][T18487] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4026'. [ 383.158536][T18487] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4026'. [ 383.195337][ T5955] IPVS: starting estimator thread 0... [ 383.241519][T18494] macvlan3: entered allmulticast mode [ 383.249449][T18494] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 383.286916][T18495] IPVS: using max 31 ests per chain, 74400 per kthread [ 383.382151][T18501] Bluetooth: MGMT ver 1.23 [ 383.416300][ T9544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.442250][ T9544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.554956][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.572868][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.705684][T18519] FAULT_INJECTION: forcing a failure. [ 383.705684][T18519] name failslab, interval 1, probability 0, space 0, times 0 [ 383.738598][T18519] CPU: 1 UID: 0 PID: 18519 Comm: syz.8.4036 Not tainted syzkaller #0 PREEMPT(full) [ 383.738621][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.738631][T18519] Call Trace: [ 383.738637][T18519] [ 383.738646][T18519] dump_stack_lvl+0x189/0x250 [ 383.738671][T18519] ? __pfx____ratelimit+0x10/0x10 [ 383.738689][T18519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.738707][T18519] ? __pfx__printk+0x10/0x10 [ 383.738734][T18519] ? __pfx___might_resched+0x10/0x10 [ 383.738750][T18519] ? fs_reclaim_acquire+0x7d/0x100 [ 383.738772][T18519] should_fail_ex+0x414/0x560 [ 383.738802][T18519] should_failslab+0xa8/0x100 [ 383.738830][T18519] __kmalloc_cache_noprof+0x70/0x3d0 [ 383.738851][T18519] ? rtnl_newlink+0xed/0x1c70 [ 383.738867][T18519] ? kasan_save_free_info+0x46/0x50 [ 383.738890][T18519] rtnl_newlink+0xed/0x1c70 [ 383.738908][T18519] ? netlink_sendmsg+0x805/0xb30 [ 383.738924][T18519] ? __sock_sendmsg+0x21c/0x270 [ 383.738947][T18519] ? ____sys_sendmsg+0x505/0x830 [ 383.738965][T18519] ? ___sys_sendmsg+0x21f/0x2a0 [ 383.738984][T18519] ? __x64_sys_sendmsg+0x19b/0x260 [ 383.739002][T18519] ? do_syscall_64+0xfa/0x3b0 [ 383.739021][T18519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.739048][T18519] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.739088][T18519] ? kasan_quarantine_put+0xdd/0x220 [ 383.739120][T18519] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.739145][T18519] ? nlmon_xmit+0xb0/0x100 [ 383.739164][T18519] ? kmem_cache_free+0x18f/0x400 [ 383.739197][T18519] ? __local_bh_enable_ip+0x12d/0x1c0 [ 383.739216][T18519] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.739236][T18519] ? __local_bh_enable_ip+0x12d/0x1c0 [ 383.739255][T18519] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 383.739276][T18519] ? __dev_queue_xmit+0x27b/0x3b50 [ 383.739303][T18519] ? __dev_queue_xmit+0x27b/0x3b50 [ 383.739327][T18519] ? __dev_queue_xmit+0x27b/0x3b50 [ 383.739355][T18519] ? __dev_queue_xmit+0x1d79/0x3b50 [ 383.739386][T18519] ? __lock_acquire+0xab9/0xd20 [ 383.739442][T18519] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.739463][T18519] rtnetlink_rcv_msg+0x7cc/0xb70 [ 383.739489][T18519] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 383.739510][T18519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.739528][T18519] ? ref_tracker_free+0x63a/0x7d0 [ 383.739548][T18519] ? __asan_memcpy+0x40/0x70 [ 383.739570][T18519] ? __pfx_ref_tracker_free+0x10/0x10 [ 383.739605][T18519] netlink_rcv_skb+0x208/0x470 [ 383.739628][T18519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.739652][T18519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.739685][T18519] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.739715][T18519] netlink_unicast+0x82f/0x9e0 [ 383.739755][T18519] ? __pfx_netlink_unicast+0x10/0x10 [ 383.739786][T18519] ? netlink_sendmsg+0x642/0xb30 [ 383.739805][T18519] ? skb_put+0x11b/0x210 [ 383.739832][T18519] netlink_sendmsg+0x805/0xb30 [ 383.739864][T18519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.739890][T18519] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.739913][T18519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.739934][T18519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.739957][T18519] __sock_sendmsg+0x21c/0x270 [ 383.739990][T18519] ____sys_sendmsg+0x505/0x830 [ 383.740022][T18519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.740056][T18519] ? import_iovec+0x74/0xa0 [ 383.740086][T18519] ___sys_sendmsg+0x21f/0x2a0 [ 383.740119][T18519] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.740184][T18519] ? __fget_files+0x2a/0x420 [ 383.740201][T18519] ? __fget_files+0x3a0/0x420 [ 383.740230][T18519] __x64_sys_sendmsg+0x19b/0x260 [ 383.740258][T18519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.740294][T18519] ? __pfx_ksys_write+0x10/0x10 [ 383.740318][T18519] ? rcu_is_watching+0x15/0xb0 [ 383.740344][T18519] ? do_syscall_64+0xbe/0x3b0 [ 383.740368][T18519] do_syscall_64+0xfa/0x3b0 [ 383.740388][T18519] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.740409][T18519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.740429][T18519] ? clear_bhb_loop+0x60/0xb0 [ 383.740453][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.740473][T18519] RIP: 0033:0x7fe5c418eba9 [ 383.740491][T18519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.740509][T18519] RSP: 002b:00007fe5c50c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.740531][T18519] RAX: ffffffffffffffda RBX: 00007fe5c43d5fa0 RCX: 00007fe5c418eba9 [ 383.740546][T18519] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 383.740560][T18519] RBP: 00007fe5c50c3090 R08: 0000000000000000 R09: 0000000000000000 [ 383.740572][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.740584][T18519] R13: 00007fe5c43d6038 R14: 00007fe5c43d5fa0 R15: 00007fff60ae6978 [ 383.740617][T18519] [ 384.223613][ T5185] Bluetooth: hci3: command tx timeout [ 384.369656][T18532] wg2: entered promiscuous mode [ 384.375540][T18532] wg2: entered allmulticast mode [ 384.488875][T18539] macvlan3: entered allmulticast mode [ 384.495139][T18539] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 384.605745][T18542] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 384.829906][T18559] netlink: 'syz.6.4049': attribute type 39 has an invalid length. [ 384.887590][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4049'. [ 385.026987][T18575] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4054'. [ 385.056256][T18580] netlink: 'syz.7.4055': attribute type 83 has an invalid length. [ 385.066053][T18580] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4055'. [ 385.178272][T18584] tipc: Started in network mode [ 385.183515][T18586] openvswitch: netlink: IPv4 tun info is not correct [ 385.191516][T18584] tipc: Node identity de28d6807c2, cluster identity 4711 [ 385.199484][T18584] tipc: Enabled bearer , priority 0 [ 385.207850][T18584] syzkaller0: entered promiscuous mode [ 385.214473][T18584] syzkaller0: entered allmulticast mode [ 385.247661][T18584] tipc: Resetting bearer [ 385.267635][T18583] tipc: Resetting bearer [ 385.285369][T18583] tipc: Disabling bearer [ 385.461114][T18591] syz_tun: left allmulticast mode [ 385.471679][T18593] netlink: 'syz.8.4060': attribute type 1 has an invalid length. [ 385.577473][T18601] FAULT_INJECTION: forcing a failure. [ 385.577473][T18601] name failslab, interval 1, probability 0, space 0, times 0 [ 385.592755][T18601] CPU: 0 UID: 0 PID: 18601 Comm: syz.7.4064 Not tainted syzkaller #0 PREEMPT(full) [ 385.592784][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.592796][T18601] Call Trace: [ 385.592805][T18601] [ 385.592813][T18601] dump_stack_lvl+0x189/0x250 [ 385.592840][T18601] ? __pfx____ratelimit+0x10/0x10 [ 385.592859][T18601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.592881][T18601] ? __pfx__printk+0x10/0x10 [ 385.592923][T18601] ? __pfx___might_resched+0x10/0x10 [ 385.592941][T18601] ? fs_reclaim_acquire+0x7d/0x100 [ 385.592963][T18601] should_fail_ex+0x414/0x560 [ 385.592997][T18601] should_failslab+0xa8/0x100 [ 385.593026][T18601] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 385.593051][T18601] ? __d_alloc+0x36/0x7a0 [ 385.593075][T18601] __d_alloc+0x36/0x7a0 [ 385.593100][T18601] d_alloc_parallel+0xe5/0x15e0 [ 385.593136][T18601] ? __lock_acquire+0xab9/0xd20 [ 385.593170][T18601] ? __pfx_d_alloc_parallel+0x10/0x10 [ 385.593198][T18601] ? __raw_spin_lock_init+0x45/0x100 [ 385.593221][T18601] ? __init_waitqueue_head+0xa9/0x150 [ 385.593249][T18601] __lookup_slow+0x116/0x3d0 [ 385.593268][T18601] ? __pfx___lookup_slow+0x10/0x10 [ 385.593301][T18601] ? d_lookup+0x8a/0xa0 [ 385.593321][T18601] ? lookup_noperm+0x112/0x220 [ 385.593346][T18601] simple_start_creating+0xfd/0x1e0 [ 385.593364][T18601] ? __pfx_simple_start_creating+0x10/0x10 [ 385.593395][T18601] start_creating+0x10f/0x180 [ 385.593425][T18601] __debugfs_create_file+0x79/0x4f0 [ 385.593457][T18601] debugfs_create_file_full+0x3f/0x60 [ 385.593492][T18601] ref_tracker_dir_debugfs+0x14e/0x270 [ 385.593512][T18601] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 385.593557][T18601] ? rcu_is_watching+0x15/0xb0 [ 385.593576][T18601] ? alloc_netdev_mqs+0xa3/0x11b0 [ 385.593607][T18601] ? __raw_spin_lock_init+0x45/0x100 [ 385.593633][T18601] alloc_netdev_mqs+0x26f/0x11b0 [ 385.593657][T18601] ? __pfx_macvlan_setup+0x10/0x10 [ 385.593689][T18601] rtnl_create_link+0x31f/0xd10 [ 385.593724][T18601] rtnl_newlink_create+0x25c/0xb00 [ 385.593753][T18601] ? __lock_acquire+0xab9/0xd20 [ 385.593784][T18601] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 385.593811][T18601] ? __pfx___mutex_lock+0x10/0x10 [ 385.593845][T18601] ? ns_capable+0x8a/0xf0 [ 385.593868][T18601] rtnl_newlink+0x16d6/0x1c70 [ 385.593890][T18601] ? netlink_sendmsg+0x805/0xb30 [ 385.593936][T18601] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.593985][T18601] ? kasan_quarantine_put+0xdd/0x220 [ 385.594009][T18601] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.594036][T18601] ? nlmon_xmit+0xb0/0x100 [ 385.594057][T18601] ? kmem_cache_free+0x18f/0x400 [ 385.594094][T18601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.594115][T18601] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.594134][T18601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.594152][T18601] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 385.594175][T18601] ? __dev_queue_xmit+0x27b/0x3b50 [ 385.594198][T18601] ? __dev_queue_xmit+0x27b/0x3b50 [ 385.594220][T18601] ? __dev_queue_xmit+0x27b/0x3b50 [ 385.594244][T18601] ? __dev_queue_xmit+0x1d79/0x3b50 [ 385.594273][T18601] ? __lock_acquire+0xab9/0xd20 [ 385.594327][T18601] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.594347][T18601] rtnetlink_rcv_msg+0x7cc/0xb70 [ 385.594372][T18601] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 385.594392][T18601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.594411][T18601] ? ref_tracker_free+0x63a/0x7d0 [ 385.594431][T18601] ? __asan_memcpy+0x40/0x70 [ 385.594453][T18601] ? __pfx_ref_tracker_free+0x10/0x10 [ 385.594484][T18601] netlink_rcv_skb+0x208/0x470 [ 385.594507][T18601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.594530][T18601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.594565][T18601] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.594592][T18601] netlink_unicast+0x82f/0x9e0 [ 385.594628][T18601] ? __pfx_netlink_unicast+0x10/0x10 [ 385.594655][T18601] ? netlink_sendmsg+0x642/0xb30 [ 385.594672][T18601] ? skb_put+0x11b/0x210 [ 385.594696][T18601] netlink_sendmsg+0x805/0xb30 [ 385.594725][T18601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.594749][T18601] ? aa_sock_msg_perm+0xf1/0x1d0 [ 385.594772][T18601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.594792][T18601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.594811][T18601] __sock_sendmsg+0x21c/0x270 [ 385.594844][T18601] ____sys_sendmsg+0x505/0x830 [ 385.594876][T18601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.594918][T18601] ? import_iovec+0x74/0xa0 [ 385.594948][T18601] ___sys_sendmsg+0x21f/0x2a0 [ 385.594974][T18601] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.595038][T18601] ? __fget_files+0x2a/0x420 [ 385.595054][T18601] ? __fget_files+0x3a0/0x420 [ 385.595083][T18601] __x64_sys_sendmsg+0x19b/0x260 [ 385.595110][T18601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.595145][T18601] ? __pfx_ksys_write+0x10/0x10 [ 385.595177][T18601] ? do_syscall_64+0xbe/0x3b0 [ 385.595203][T18601] do_syscall_64+0xfa/0x3b0 [ 385.595222][T18601] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.595241][T18601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.595260][T18601] ? clear_bhb_loop+0x60/0xb0 [ 385.595284][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.595302][T18601] RIP: 0033:0x7fb63438eba9 [ 385.595320][T18601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.595336][T18601] RSP: 002b:00007fb6351eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.595357][T18601] RAX: ffffffffffffffda RBX: 00007fb6345d5fa0 RCX: 00007fb63438eba9 [ 385.595372][T18601] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 385.595384][T18601] RBP: 00007fb6351eb090 R08: 0000000000000000 R09: 0000000000000000 [ 385.595397][T18601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.595408][T18601] R13: 00007fb6345d6038 R14: 00007fb6345d5fa0 R15: 00007ffe6623c528 [ 385.595440][T18601] [ 386.359283][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4069'. [ 386.369081][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4069'. [ 386.842953][T18633] macvlan2: entered allmulticast mode [ 386.849149][T18633] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 386.879532][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4077'. [ 386.994651][T16815] IPVS: starting estimator thread 0... [ 387.083625][T18643] IPVS: using max 34 ests per chain, 81600 per kthread [ 387.128551][T18650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.138923][T18652] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4082'. [ 387.154188][T18655] netlink: 'syz.6.4084': attribute type 2 has an invalid length. [ 387.240094][T18659] netlink: 'syz.8.4087': attribute type 1 has an invalid length. [ 387.249665][T18659] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4087'. [ 387.311969][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4082'. [ 387.394392][T18670] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4089'. [ 387.673890][ T30] audit: type=1800 audit(1758153494.499:8): pid=18680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4094" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 387.674324][T18680] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 387.721845][T18680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 387.771084][T18680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 387.853906][T18697] Bluetooth: MGMT ver 1.23 [ 387.907860][T18692] hsr_slave_0 (unregistering): left promiscuous mode [ 387.935431][T18696] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 388.101450][T18712] batadv1: left allmulticast mode [ 388.145697][T18712] batadv1: left promiscuous mode [ 388.152095][T18712] bridge0: port 3(batadv1) entered disabled state [ 388.196067][T18712] bridge_slave_1: left allmulticast mode [ 388.202148][T18712] bridge_slave_1: left promiscuous mode [ 388.216371][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.250672][T18712] bridge_slave_0: left promiscuous mode [ 388.258159][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.354410][T18731] netlink: 'syz.0.4108': attribute type 4 has an invalid length. [ 389.617877][T18785] netlink: 'syz.8.4123': attribute type 2 has an invalid length. [ 390.408525][T18815] team0: Port device bridge2 added [ 390.620080][T18828] __nla_validate_parse: 8 callbacks suppressed [ 390.620101][T18828] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4138'. [ 390.849175][T18837] FAULT_INJECTION: forcing a failure. [ 390.849175][T18837] name failslab, interval 1, probability 0, space 0, times 0 [ 390.893867][T18837] CPU: 1 UID: 0 PID: 18837 Comm: syz.8.4141 Not tainted syzkaller #0 PREEMPT(full) [ 390.893897][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.893910][T18837] Call Trace: [ 390.893919][T18837] [ 390.893929][T18837] dump_stack_lvl+0x189/0x250 [ 390.893958][T18837] ? __pfx____ratelimit+0x10/0x10 [ 390.893981][T18837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.894005][T18837] ? __pfx__printk+0x10/0x10 [ 390.894031][T18837] ? __mutex_trylock_common+0x153/0x260 [ 390.894056][T18837] ? __pfx___mutex_trylock_common+0x10/0x10 [ 390.894083][T18837] should_fail_ex+0x414/0x560 [ 390.894119][T18837] should_failslab+0xa8/0x100 [ 390.894150][T18837] __kmalloc_cache_noprof+0x70/0x3d0 [ 390.894177][T18837] ? __hw_addr_add_ex+0x1f4/0x770 [ 390.894208][T18837] __hw_addr_add_ex+0x1f4/0x770 [ 390.894242][T18837] dev_addr_init+0x14f/0x230 [ 390.894272][T18837] ? __pfx_dev_addr_init+0x10/0x10 [ 390.894312][T18837] alloc_netdev_mqs+0x2ae/0x11b0 [ 390.894339][T18837] ? __pfx_macvlan_setup+0x10/0x10 [ 390.894381][T18837] rtnl_create_link+0x31f/0xd10 [ 390.894418][T18837] rtnl_newlink_create+0x25c/0xb00 [ 390.894448][T18837] ? __mutex_lock+0x5bb/0x1350 [ 390.894476][T18837] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 390.894505][T18837] ? __pfx___mutex_lock+0x10/0x10 [ 390.894538][T18837] ? ns_capable+0x8a/0xf0 [ 390.894563][T18837] rtnl_newlink+0x16d6/0x1c70 [ 390.894587][T18837] ? netlink_sendmsg+0x805/0xb30 [ 390.894621][T18837] ? __pfx_rtnl_newlink+0x10/0x10 [ 390.894669][T18837] ? kasan_quarantine_put+0xdd/0x220 [ 390.894693][T18837] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.894721][T18837] ? nlmon_xmit+0xb0/0x100 [ 390.894743][T18837] ? kmem_cache_free+0x18f/0x400 [ 390.894779][T18837] ? __local_bh_enable_ip+0x12d/0x1c0 [ 390.894799][T18837] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.894821][T18837] ? __local_bh_enable_ip+0x12d/0x1c0 [ 390.894841][T18837] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 390.894865][T18837] ? __dev_queue_xmit+0x27b/0x3b50 [ 390.894892][T18837] ? __dev_queue_xmit+0x27b/0x3b50 [ 390.894916][T18837] ? __dev_queue_xmit+0x27b/0x3b50 [ 390.894944][T18837] ? __dev_queue_xmit+0x1d79/0x3b50 [ 390.894977][T18837] ? __lock_acquire+0xab9/0xd20 [ 390.895033][T18837] ? __pfx_rtnl_newlink+0x10/0x10 [ 390.895054][T18837] rtnetlink_rcv_msg+0x7cc/0xb70 [ 390.895080][T18837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 390.895100][T18837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.895119][T18837] ? ref_tracker_free+0x63a/0x7d0 [ 390.895139][T18837] ? __asan_memcpy+0x40/0x70 [ 390.895161][T18837] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.895192][T18837] netlink_rcv_skb+0x208/0x470 [ 390.895216][T18837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.895239][T18837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.895275][T18837] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.895309][T18837] netlink_unicast+0x82f/0x9e0 [ 390.895350][T18837] ? __pfx_netlink_unicast+0x10/0x10 [ 390.895389][T18837] ? netlink_sendmsg+0x642/0xb30 [ 390.895408][T18837] ? skb_put+0x11b/0x210 [ 390.895435][T18837] netlink_sendmsg+0x805/0xb30 [ 390.895468][T18837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.895495][T18837] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.895519][T18837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.895540][T18837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.895564][T18837] __sock_sendmsg+0x21c/0x270 [ 390.895598][T18837] ____sys_sendmsg+0x505/0x830 [ 390.895629][T18837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.895665][T18837] ? import_iovec+0x74/0xa0 [ 390.895696][T18837] ___sys_sendmsg+0x21f/0x2a0 [ 390.895725][T18837] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.895792][T18837] ? __fget_files+0x2a/0x420 [ 390.895810][T18837] ? __fget_files+0x3a0/0x420 [ 390.895840][T18837] __x64_sys_sendmsg+0x19b/0x260 [ 390.895869][T18837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.895905][T18837] ? __pfx_ksys_write+0x10/0x10 [ 390.895929][T18837] ? rcu_is_watching+0x15/0xb0 [ 390.895957][T18837] ? do_syscall_64+0xbe/0x3b0 [ 390.895984][T18837] do_syscall_64+0xfa/0x3b0 [ 390.896004][T18837] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.896025][T18837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.896044][T18837] ? clear_bhb_loop+0x60/0xb0 [ 390.896069][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.896089][T18837] RIP: 0033:0x7fe5c418eba9 [ 390.896108][T18837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.896126][T18837] RSP: 002b:00007fe5c50c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.896148][T18837] RAX: ffffffffffffffda RBX: 00007fe5c43d5fa0 RCX: 00007fe5c418eba9 [ 390.896163][T18837] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 390.896176][T18837] RBP: 00007fe5c50c3090 R08: 0000000000000000 R09: 0000000000000000 [ 390.896189][T18837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.896200][T18837] R13: 00007fe5c43d6038 R14: 00007fe5c43d5fa0 R15: 00007fff60ae6978 [ 390.896235][T18837] [ 391.380458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.427864][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4145'. [ 391.437833][T18846] bridge_slave_0: left allmulticast mode [ 391.455479][T18846] bridge_slave_0: left promiscuous mode [ 391.461433][T18846] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.518056][T18847] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4143'. [ 391.529212][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4147'. [ 391.545594][T18847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4143'. [ 391.897421][T18882] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4156'. [ 391.967052][T18884] FAULT_INJECTION: forcing a failure. [ 391.967052][T18884] name failslab, interval 1, probability 0, space 0, times 0 [ 391.993752][T18884] CPU: 0 UID: 0 PID: 18884 Comm: syz.6.4157 Not tainted syzkaller #0 PREEMPT(full) [ 391.993781][T18884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.993795][T18884] Call Trace: [ 391.993803][T18884] [ 391.993812][T18884] dump_stack_lvl+0x189/0x250 [ 391.993843][T18884] ? __pfx____ratelimit+0x10/0x10 [ 391.993865][T18884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.993889][T18884] ? __pfx__printk+0x10/0x10 [ 391.993923][T18884] ? __pfx___might_resched+0x10/0x10 [ 391.993941][T18884] ? fs_reclaim_acquire+0x7d/0x100 [ 391.993966][T18884] should_fail_ex+0x414/0x560 [ 391.994000][T18884] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 391.994026][T18884] should_failslab+0xa8/0x100 [ 391.994058][T18884] __kvmalloc_node_noprof+0x161/0x5f0 [ 391.994087][T18884] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 391.994114][T18884] ? __asan_memset+0x22/0x50 [ 391.994140][T18884] alloc_netdev_mqs+0x8a0/0x11b0 [ 391.994177][T18884] rtnl_create_link+0x31f/0xd10 [ 391.994223][T18884] rtnl_newlink_create+0x25c/0xb00 [ 391.994254][T18884] ? __mutex_lock+0x5bb/0x1350 [ 391.994281][T18884] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 391.994309][T18884] ? __pfx___mutex_lock+0x10/0x10 [ 391.994342][T18884] ? ns_capable+0x8a/0xf0 [ 391.994368][T18884] rtnl_newlink+0x16d6/0x1c70 [ 391.994391][T18884] ? netlink_sendmsg+0x805/0xb30 [ 391.994427][T18884] ? __pfx_rtnl_newlink+0x10/0x10 [ 391.994475][T18884] ? kasan_quarantine_put+0xdd/0x220 [ 391.994499][T18884] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.994532][T18884] ? nlmon_xmit+0xb0/0x100 [ 391.994553][T18884] ? kmem_cache_free+0x18f/0x400 [ 391.994588][T18884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 391.994609][T18884] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.994630][T18884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 391.994651][T18884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 391.994675][T18884] ? __dev_queue_xmit+0x27b/0x3b50 [ 391.994703][T18884] ? __dev_queue_xmit+0x27b/0x3b50 [ 391.994727][T18884] ? __dev_queue_xmit+0x27b/0x3b50 [ 391.994759][T18884] ? __dev_queue_xmit+0x1d79/0x3b50 [ 391.994792][T18884] ? __lock_acquire+0xab9/0xd20 [ 391.994848][T18884] ? __pfx_rtnl_newlink+0x10/0x10 [ 391.994867][T18884] rtnetlink_rcv_msg+0x7cc/0xb70 [ 391.994892][T18884] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 391.994912][T18884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 391.994931][T18884] ? ref_tracker_free+0x63a/0x7d0 [ 391.994950][T18884] ? __asan_memcpy+0x40/0x70 [ 391.994973][T18884] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.995005][T18884] netlink_rcv_skb+0x208/0x470 [ 391.995028][T18884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 391.995052][T18884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.995087][T18884] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.995118][T18884] netlink_unicast+0x82f/0x9e0 [ 391.995158][T18884] ? __pfx_netlink_unicast+0x10/0x10 [ 391.995191][T18884] ? netlink_sendmsg+0x642/0xb30 [ 391.995210][T18884] ? skb_put+0x11b/0x210 [ 391.995238][T18884] netlink_sendmsg+0x805/0xb30 [ 391.995270][T18884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.995296][T18884] ? aa_sock_msg_perm+0xf1/0x1d0 [ 391.995319][T18884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.995342][T18884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.995365][T18884] __sock_sendmsg+0x21c/0x270 [ 391.995398][T18884] ____sys_sendmsg+0x505/0x830 [ 391.995431][T18884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.995467][T18884] ? import_iovec+0x74/0xa0 [ 391.995497][T18884] ___sys_sendmsg+0x21f/0x2a0 [ 391.995530][T18884] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.995597][T18884] ? __fget_files+0x2a/0x420 [ 391.995614][T18884] ? __fget_files+0x3a0/0x420 [ 391.995644][T18884] __x64_sys_sendmsg+0x19b/0x260 [ 391.995673][T18884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.995708][T18884] ? __pfx_ksys_write+0x10/0x10 [ 391.995732][T18884] ? rcu_is_watching+0x15/0xb0 [ 391.995759][T18884] ? do_syscall_64+0xbe/0x3b0 [ 391.995786][T18884] do_syscall_64+0xfa/0x3b0 [ 391.995807][T18884] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.995827][T18884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.995848][T18884] ? clear_bhb_loop+0x60/0xb0 [ 391.995873][T18884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.995892][T18884] RIP: 0033:0x7fb2b998eba9 [ 391.995911][T18884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.995929][T18884] RSP: 002b:00007fb2ba744038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.995950][T18884] RAX: ffffffffffffffda RBX: 00007fb2b9bd5fa0 RCX: 00007fb2b998eba9 [ 391.995965][T18884] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 391.995979][T18884] RBP: 00007fb2ba744090 R08: 0000000000000000 R09: 0000000000000000 [ 391.995992][T18884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.996004][T18884] R13: 00007fb2b9bd6038 R14: 00007fb2b9bd5fa0 R15: 00007fffe115fd88 [ 391.996037][T18884] [ 392.013517][T18889] netlink: 'syz.7.4159': attribute type 1 has an invalid length. [ 392.056469][T18886] macvlan2: entered allmulticast mode [ 392.066822][T18889] netlink: 'syz.7.4159': attribute type 1 has an invalid length. [ 392.087216][T18890] netlink: 'syz.7.4159': attribute type 8 has an invalid length. [ 392.091988][T18886] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 392.285917][T18895] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4161'. [ 392.558978][T18895] gretap0: entered promiscuous mode [ 392.740290][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'. [ 392.767491][T18908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4166'. [ 392.888863][T18918] openvswitch: netlink: IP tunnel dst address not specified [ 392.965686][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4172'. [ 393.282121][T18946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.730332][T18972] netlink: 'syz.0.4187': attribute type 1 has an invalid length. [ 393.813921][T18974] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 394.213415][T18980] v: renamed from veth0_macvtap [ 394.376168][T18988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.311437][T19042] netlink: 'syz.0.4213': attribute type 10 has an invalid length. [ 395.573779][T19064] xt_l2tp: wrong L2TP version: 0 [ 395.602846][T19065] FAULT_INJECTION: forcing a failure. [ 395.602846][T19065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.627666][T19065] CPU: 0 UID: 0 PID: 19065 Comm: syz.8.4222 Not tainted syzkaller #0 PREEMPT(full) [ 395.627696][T19065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.627709][T19065] Call Trace: [ 395.627717][T19065] [ 395.627727][T19065] dump_stack_lvl+0x189/0x250 [ 395.627757][T19065] ? __pfx____ratelimit+0x10/0x10 [ 395.627779][T19065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.627803][T19065] ? __pfx__printk+0x10/0x10 [ 395.627830][T19065] ? __might_fault+0xb0/0x130 [ 395.627870][T19065] should_fail_ex+0x414/0x560 [ 395.627913][T19065] _copy_from_user+0x2d/0xb0 [ 395.627944][T19065] ___sys_sendmsg+0x158/0x2a0 [ 395.627972][T19065] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.628035][T19065] ? __fget_files+0x2a/0x420 [ 395.628052][T19065] ? __fget_files+0x3a0/0x420 [ 395.628082][T19065] __sys_sendmmsg+0x227/0x430 [ 395.628113][T19065] ? __pfx___sys_sendmmsg+0x10/0x10 [ 395.628135][T19065] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 395.628184][T19065] ? ksys_write+0x22a/0x250 [ 395.628212][T19065] ? __pfx_ksys_write+0x10/0x10 [ 395.628236][T19065] ? rcu_is_watching+0x15/0xb0 [ 395.628263][T19065] __x64_sys_sendmmsg+0xa0/0xc0 [ 395.628291][T19065] do_syscall_64+0xfa/0x3b0 [ 395.628311][T19065] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.628332][T19065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.628352][T19065] ? clear_bhb_loop+0x60/0xb0 [ 395.628377][T19065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.628396][T19065] RIP: 0033:0x7fe5c418eba9 [ 395.628414][T19065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.628431][T19065] RSP: 002b:00007fe5c50c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 395.628453][T19065] RAX: ffffffffffffffda RBX: 00007fe5c43d5fa0 RCX: 00007fe5c418eba9 [ 395.628469][T19065] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 395.628483][T19065] RBP: 00007fe5c50c3090 R08: 0000000000000000 R09: 0000000000000000 [ 395.628497][T19065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.628509][T19065] R13: 00007fe5c43d6038 R14: 00007fe5c43d5fa0 R15: 00007fff60ae6978 [ 395.628541][T19065] [ 395.903697][T19078] netlink: 'syz.8.4226': attribute type 1 has an invalid length. [ 395.911595][T19078] netlink: 'syz.8.4226': attribute type 2 has an invalid length. [ 395.930496][T19078] netlink: 'syz.8.4226': attribute type 1 has an invalid length. [ 395.962809][T19069] __nla_validate_parse: 11 callbacks suppressed [ 395.962831][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4224'. [ 395.993146][T19080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4227'. [ 396.080849][T19069] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.083344][T19086] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.4230'. [ 396.100285][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4229'. [ 396.119259][T19087] netlink: 'syz.0.4228': attribute type 10 has an invalid length. [ 396.201685][T19069] bridge_slave_1 (unregistering): left allmulticast mode [ 396.220340][T19069] bridge_slave_1 (unregistering): left promiscuous mode [ 396.237819][T19069] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.336501][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4231'. [ 396.371716][T19090] netlink: 'syz.8.4231': attribute type 1 has an invalid length. [ 396.379837][T19108] Unsupported Adiantum instantiation: (ecb(camellia),anubis,nhpoly1305) [ 396.519327][T19112] netlink: 'syz.6.4234': attribute type 21 has an invalid length. [ 396.529792][T19112] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 396.619820][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4235'. [ 396.895816][T19137] netlink: 'syz.6.4238': attribute type 1 has an invalid length. [ 396.945299][T19137] netlink: 'syz.6.4238': attribute type 1 has an invalid length. [ 396.959375][T19139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.960609][T19137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4238'. [ 397.587412][T19172] netlink: 'syz.6.4256': attribute type 6 has an invalid length. [ 398.222018][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4267'. [ 398.478964][T19214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.768205][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 398.780074][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 400.642176][T19330] syzkaller0: entered promiscuous mode [ 400.665728][T19330] syzkaller0: entered allmulticast mode [ 403.738299][T19402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.267760][T19428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.458609][T19439] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 404.533882][T19443] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.704265][T19452] __nla_validate_parse: 4 callbacks suppressed [ 404.704288][T19452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4380'. [ 404.907897][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4388'. [ 404.986046][T19467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.095701][T19467] bond_slave_0: entered promiscuous mode [ 405.101812][T19467] bond_slave_1: entered promiscuous mode [ 405.122863][T19467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 405.147317][T19467] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 406.044583][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4410'. [ 406.072918][T19516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4410'. [ 406.088133][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4410'. [ 406.663870][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4424'. [ 406.685165][T19545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.793904][T19545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.241247][T19568] bond_slave_0: entered promiscuous mode [ 407.247370][T19568] bond_slave_1: entered promiscuous mode [ 407.273128][T19568] bond0: entered allmulticast mode [ 407.285440][T19568] bond_slave_0: entered allmulticast mode [ 407.303920][T19568] bond_slave_1: entered allmulticast mode [ 407.320414][T19568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.348995][T19568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.384938][T19568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.557186][T19568] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.572039][T19568] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.592782][ T7002] bond8: (slave ip6gretap2): link status up again after 0 ms [ 407.606439][T19568] 8021q: adding VLAN 0 to HW filter on device bond10 [ 407.615179][T19568] 8021q: adding VLAN 0 to HW filter on device bond11 [ 407.632743][ T7002] bond8: (slave ip6gretap2): link status up again after 0 ms [ 407.646746][T19568] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 407.655394][T19568] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 407.673396][ T3541] bond8: (slave ip6gretap2): link status up again after 0 ms [ 407.693762][ T9544] bond8: (slave ip6gretap2): link status up again after 0 ms [ 407.734794][ T9532] bond8: (slave ip6gretap2): link status up again after 0 ms [ 407.767482][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 407.807944][ T9532] bond8: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 407.831693][ T9532] bond8: active interface up! [ 407.858222][T19607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.717766][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4466'. [ 408.973344][ T1151] net_ratelimit: 6 callbacks suppressed [ 408.973365][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.109608][T19667] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4472'. [ 409.129569][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.252451][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.347743][T19678] !: renamed from bond_slave_0 (while UP) [ 409.372831][T19676] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 409.399733][T19685] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4478'. [ 409.413189][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.522896][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.662598][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.783044][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 409.804139][T19715] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 409.814823][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4486'. [ 409.829068][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4486'. [ 409.912568][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 410.033200][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 410.580340][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4503'. [ 410.611145][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4503'. [ 410.672385][T19760] validate_nla: 2 callbacks suppressed [ 410.672404][T19760] netlink: 'syz.4.4505': attribute type 5 has an invalid length. [ 410.687183][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4504'. [ 411.213745][T19790] macvlan3: entered allmulticast mode [ 411.219938][T19790] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 411.901757][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'. [ 411.951781][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'. [ 411.967224][T19837] netlink: 'syz.4.4533': attribute type 13 has an invalid length. [ 411.984872][T19837] veth0_macvtap: left promiscuous mode [ 412.014485][T19837] macvtap0: entered allmulticast mode [ 412.045062][T19837] macvtap0: refused to change device tx_queue_len [ 412.099812][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4535'. [ 412.180565][T19847] macvlan0: entered allmulticast mode [ 412.214459][T19847] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 412.537203][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4544'. [ 412.586743][T19875] FAULT_INJECTION: forcing a failure. [ 412.586743][T19875] name failslab, interval 1, probability 0, space 0, times 0 [ 412.625807][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4547'. [ 412.637356][T19875] CPU: 0 UID: 0 PID: 19875 Comm: syz.6.4545 Not tainted syzkaller #0 PREEMPT(full) [ 412.637398][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.637418][T19875] Call Trace: [ 412.637426][T19875] [ 412.637436][T19875] dump_stack_lvl+0x189/0x250 [ 412.637465][T19875] ? __pfx____ratelimit+0x10/0x10 [ 412.637484][T19875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.637507][T19875] ? __pfx__printk+0x10/0x10 [ 412.637531][T19875] ? netlink_unicast+0x82f/0x9e0 [ 412.637562][T19875] ? ___sys_sendmsg+0x21f/0x2a0 [ 412.637583][T19875] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 412.637618][T19875] should_fail_ex+0x414/0x560 [ 412.637652][T19875] should_failslab+0xa8/0x100 [ 412.637683][T19875] kmem_cache_alloc_noprof+0x73/0x3c0 [ 412.637709][T19875] ? skb_clone+0x212/0x3a0 [ 412.637737][T19875] skb_clone+0x212/0x3a0 [ 412.637766][T19875] __netlink_deliver_tap+0x404/0x850 [ 412.637798][T19875] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.637820][T19875] netlink_deliver_tap+0x19c/0x1b0 [ 412.637842][T19875] netlink_sendskb+0x68/0x140 [ 412.637874][T19875] netlink_unicast+0x397/0x9e0 [ 412.637901][T19875] ? __asan_memcpy+0x40/0x70 [ 412.637929][T19875] ? __pfx_netlink_unicast+0x10/0x10 [ 412.637966][T19875] netlink_rcv_skb+0x28c/0x470 [ 412.637986][T19875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.638008][T19875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.638039][T19875] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.638060][T19875] netlink_unicast+0x82f/0x9e0 [ 412.638089][T19875] ? __pfx_netlink_unicast+0x10/0x10 [ 412.638119][T19875] ? netlink_sendmsg+0x642/0xb30 [ 412.638138][T19875] ? skb_put+0x11b/0x210 [ 412.638161][T19875] netlink_sendmsg+0x805/0xb30 [ 412.638192][T19875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.638215][T19875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.638236][T19875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.638258][T19875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.638280][T19875] __sock_sendmsg+0x21c/0x270 [ 412.638312][T19875] ____sys_sendmsg+0x52d/0x830 [ 412.638344][T19875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.638382][T19875] ? import_iovec+0x74/0xa0 [ 412.638418][T19875] ___sys_sendmsg+0x21f/0x2a0 [ 412.638446][T19875] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.638511][T19875] ? __fget_files+0x2a/0x420 [ 412.638528][T19875] ? __fget_files+0x3a0/0x420 [ 412.638558][T19875] __sys_sendmmsg+0x227/0x430 [ 412.638589][T19875] ? __pfx___sys_sendmmsg+0x10/0x10 [ 412.638612][T19875] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 412.638664][T19875] ? ksys_write+0x22a/0x250 [ 412.638693][T19875] ? __pfx_ksys_write+0x10/0x10 [ 412.638717][T19875] ? rcu_is_watching+0x15/0xb0 [ 412.638745][T19875] __x64_sys_sendmmsg+0xa0/0xc0 [ 412.638773][T19875] do_syscall_64+0xfa/0x3b0 [ 412.638795][T19875] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.638815][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.638835][T19875] ? clear_bhb_loop+0x60/0xb0 [ 412.638860][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.638879][T19875] RIP: 0033:0x7fb2b998eba9 [ 412.638897][T19875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.638915][T19875] RSP: 002b:00007fb2ba744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.638936][T19875] RAX: ffffffffffffffda RBX: 00007fb2b9bd5fa0 RCX: 00007fb2b998eba9 [ 412.638952][T19875] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 412.638967][T19875] RBP: 00007fb2ba744090 R08: 0000000000000000 R09: 0000000000000000 [ 412.638980][T19875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.638993][T19875] R13: 00007fb2b9bd6038 R14: 00007fb2b9bd5fa0 R15: 00007fffe115fd88 [ 412.639025][T19875] [ 413.454852][T19910] tipc: Enabled bearer , priority 0 [ 413.483649][T19894] tipc: Enabled bearer , priority 0 [ 413.553207][T19909] tipc: Disabling bearer [ 413.593510][T19894] syzkaller0: entered promiscuous mode [ 413.599438][T19894] syzkaller0: entered allmulticast mode [ 413.619927][T19894] tipc: Resetting bearer [ 413.661080][T19920] macvlan3: entered allmulticast mode [ 413.685669][T19922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.688987][T19920] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 413.692972][T19922] IPv6: NLM_F_CREATE should be set when creating new route [ 413.720496][T19893] tipc: Resetting bearer [ 413.771589][T19893] tipc: Disabling bearer [ 414.048077][T19934] netlink: 'syz.0.4569': attribute type 21 has an invalid length. [ 414.083540][ T9532] net_ratelimit: 26 callbacks suppressed [ 414.083562][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 414.249446][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 414.394331][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 414.513794][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 414.653028][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 414.763150][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 414.915411][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 415.052542][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 415.076911][T19994] __nla_validate_parse: 5 callbacks suppressed [ 415.076931][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4590'. [ 415.173203][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 415.304886][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 415.331036][T20005] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4595'. [ 415.574521][T20018] bridge_slave_0: default FDB implementation only supports local addresses [ 415.588493][T20018] netlink: 'syz.6.4597': attribute type 10 has an invalid length. [ 415.601781][T20018] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4597'. [ 415.617196][T20018] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 415.636054][T20018] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 415.985921][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 416.083941][T20050] tipc: Failed to remove unknown binding: 66,1,1/0:3623180105/3623180107 [ 416.653754][T20086] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4623'. [ 416.786449][ T5886] Bluetooth: hci5: command 0x0406 tx timeout [ 416.968069][T20102] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4630'. [ 417.543869][T20137] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 418.021946][T20153] bridge_slave_0: left allmulticast mode [ 418.033595][T20153] bridge_slave_0: left promiscuous mode [ 418.039486][T20153] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.090785][T20153] bond0: (slave bond_slave_0): Releasing backup interface [ 418.124560][T20153] bond0: (slave bond_slave_1): Releasing backup interface [ 418.175636][T20153] team0: Port device team_slave_0 removed [ 418.213677][T20153] team0: Port device team_slave_1 removed [ 418.220606][T20153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.252729][T20153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.332120][T20174] netlink: 'syz.0.4655': attribute type 21 has an invalid length. [ 418.359511][T20176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4656'. [ 418.369124][T20174] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4655'. [ 418.388743][T20174] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4655'. [ 418.411153][T20176] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4656'. [ 418.590145][T20189] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.924930][T20209] netlink: 'syz.8.4669': attribute type 1 has an invalid length. [ 419.067969][T20207] tipc: Enabled bearer , priority 0 [ 419.088759][T20207] syzkaller0: entered promiscuous mode [ 419.118249][T20207] syzkaller0: entered allmulticast mode [ 419.161072][T20207] tipc: Resetting bearer [ 419.237040][T20205] tipc: Resetting bearer [ 419.282103][T20205] tipc: Disabling bearer [ 419.373855][ T7002] net_ratelimit: 28 callbacks suppressed [ 419.373878][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 419.420507][T20240] netlink: 'syz.8.4681': attribute type 21 has an invalid length. [ 419.435583][T20240] netlink: 'syz.8.4681': attribute type 4 has an invalid length. [ 419.465546][T20240] netlink: 'syz.8.4681': attribute type 5 has an invalid length. [ 419.487304][T20243] netlink: 'syz.8.4681': attribute type 21 has an invalid length. [ 419.504316][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 419.534145][T20243] netlink: 'syz.8.4681': attribute type 4 has an invalid length. [ 419.558631][T20243] netlink: 'syz.8.4681': attribute type 5 has an invalid length. [ 419.674411][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 419.933066][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 420.028939][T20266] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 420.036948][T20266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.052221][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 420.077857][T20269] netlink: 'syz.7.4692': attribute type 1 has an invalid length. [ 420.150149][T20269] 8021q: adding VLAN 0 to HW filter on device bond13 [ 420.207132][T20276] bond13: (slave veth5): Enslaving as an active interface with a down link [ 420.225039][T20279] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 420.235526][T20279] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 420.248282][T20280] netlink: 'syz.4.4695': attribute type 3 has an invalid length. [ 420.295129][T20269] veth7: entered promiscuous mode [ 420.308756][T20269] bond13: (slave veth7): Enslaving as an active interface with a down link [ 420.364274][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 420.377517][T20262] infiniband syz2: set active [ 420.384402][T20262] infiniband syz2: added ipvlan1 [ 420.477312][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 420.535488][T20262] RDS/IB: syz2: added [ 420.541050][T20262] smc: adding ib device syz2 with port count 1 [ 420.548585][T20285] __nla_validate_parse: 9 callbacks suppressed [ 420.548668][T20285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4697'. [ 420.575974][T20262] smc: ib device syz2 port 1 has pnetid [ 420.615009][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 420.981394][T20306] 8021q: VLANs not supported on ip6tnl0 [ 420.996315][T20304] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4703'. [ 421.980925][T20350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.510055][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4726'. [ 423.281996][T20399] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4737'. [ 423.456885][T20398] tipc: Started in network mode [ 423.462076][T20398] tipc: Node identity 3ab22144cb4c, cluster identity 4711 [ 423.506157][T20398] tipc: Enabled bearer , priority 0 [ 423.537965][T20398] syzkaller0: entered promiscuous mode [ 423.576749][T20398] syzkaller0: entered allmulticast mode [ 423.717563][T20398] tipc: Resetting bearer [ 423.754061][T20396] tipc: Resetting bearer [ 423.820722][T20396] tipc: Disabling bearer [ 423.881949][T20416] validate_nla: 2 callbacks suppressed [ 423.881970][T20416] netlink: 'syz.4.4743': attribute type 1 has an invalid length. [ 424.341519][T20442] netlink: 'syz.6.4748': attribute type 5 has an invalid length. [ 424.487414][ T3502] net_ratelimit: 27 callbacks suppressed [ 424.487435][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 424.637332][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 424.757922][T20458] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 424.775528][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4755'. [ 424.786008][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4755'. [ 424.796199][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4755'. [ 424.809999][T20458] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 424.850042][T20465] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 424.883284][T20468] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 424.904264][T20468] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 424.945160][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.973480][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 425.133717][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 425.242982][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 425.280436][T20485] FAULT_INJECTION: forcing a failure. [ 425.280436][T20485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.327956][T20485] CPU: 1 UID: 0 PID: 20485 Comm: syz.6.4767 Not tainted syzkaller #0 PREEMPT(full) [ 425.327985][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.327998][T20485] Call Trace: [ 425.328007][T20485] [ 425.328016][T20485] dump_stack_lvl+0x189/0x250 [ 425.328046][T20485] ? __pfx____ratelimit+0x10/0x10 [ 425.328068][T20485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.328092][T20485] ? __pfx__printk+0x10/0x10 [ 425.328119][T20485] ? __might_fault+0xb0/0x130 [ 425.328158][T20485] should_fail_ex+0x414/0x560 [ 425.328192][T20485] _copy_from_user+0x2d/0xb0 [ 425.328221][T20485] kstrtouint_from_user+0xc4/0x170 [ 425.328247][T20485] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 425.328288][T20485] proc_fail_nth_write+0x88/0x200 [ 425.328312][T20485] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 425.328343][T20485] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 425.328367][T20485] vfs_write+0x27b/0xb30 [ 425.328404][T20485] ? __pfx_vfs_write+0x10/0x10 [ 425.328432][T20485] ? __fget_files+0x2a/0x420 [ 425.328457][T20485] ? __fget_files+0x3a0/0x420 [ 425.328474][T20485] ? __fget_files+0x2a/0x420 [ 425.328503][T20485] ksys_write+0x145/0x250 [ 425.328533][T20485] ? __pfx_ksys_write+0x10/0x10 [ 425.328556][T20485] ? rcu_is_watching+0x15/0xb0 [ 425.328582][T20485] ? do_syscall_64+0xbe/0x3b0 [ 425.328608][T20485] do_syscall_64+0xfa/0x3b0 [ 425.328629][T20485] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.328650][T20485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.328671][T20485] ? clear_bhb_loop+0x60/0xb0 [ 425.328695][T20485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.328714][T20485] RIP: 0033:0x7fb2b998d65f [ 425.328732][T20485] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 425.328751][T20485] RSP: 002b:00007fb2ba744030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 425.328773][T20485] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb2b998d65f [ 425.328788][T20485] RDX: 0000000000000001 RSI: 00007fb2ba7440a0 RDI: 0000000000000004 [ 425.328802][T20485] RBP: 00007fb2ba744090 R08: 0000000000000000 R09: 0000000000000000 [ 425.328815][T20485] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 425.328828][T20485] R13: 00007fb2b9bd6038 R14: 00007fb2b9bd5fa0 R15: 00007fffe115fd88 [ 425.328863][T20485] [ 425.385973][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 425.506580][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4772'. [ 425.637642][T20500] IPv6: sit1: Disabled Multicast RS [ 425.646594][T20500] sit1: entered allmulticast mode [ 425.817705][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4775'. [ 425.827586][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 425.904917][T20511] FAULT_INJECTION: forcing a failure. [ 425.904917][T20511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.946234][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 425.992040][T20511] CPU: 0 UID: 0 PID: 20511 Comm: syz.6.4777 Not tainted syzkaller #0 PREEMPT(full) [ 425.992070][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.992082][T20511] Call Trace: [ 425.992089][T20511] [ 425.992097][T20511] dump_stack_lvl+0x189/0x250 [ 425.992125][T20511] ? __pfx____ratelimit+0x10/0x10 [ 425.992146][T20511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.992169][T20511] ? __pfx__printk+0x10/0x10 [ 425.992198][T20511] ? fs_reclaim_acquire+0x7d/0x100 [ 425.992225][T20511] should_fail_ex+0x414/0x560 [ 425.992257][T20511] prepare_alloc_pages+0x213/0x610 [ 425.992286][T20511] __alloc_frozen_pages_noprof+0x123/0x370 [ 425.992310][T20511] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.992338][T20511] ? policy_nodemask+0x27c/0x720 [ 425.992370][T20511] alloc_pages_mpol+0x232/0x4a0 [ 425.992402][T20511] vma_alloc_folio_noprof+0xe4/0x200 [ 425.992429][T20511] ? kernel_text_address+0xa5/0xe0 [ 425.992457][T20511] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 425.992499][T20511] folio_prealloc+0x30/0x180 [ 425.992529][T20511] do_wp_page+0x1231/0x5800 [ 425.992576][T20511] ? __pfx_do_wp_page+0x10/0x10 [ 425.992595][T20511] ? do_raw_spin_lock+0x121/0x290 [ 425.992619][T20511] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.992649][T20511] __handle_mm_fault+0x1033/0x5440 [ 425.992690][T20511] ? __pfx___handle_mm_fault+0x10/0x10 [ 425.992732][T20511] ? find_vma+0xe7/0x160 [ 425.992755][T20511] ? __pfx_find_vma+0x10/0x10 [ 425.992781][T20511] handle_mm_fault+0x40a/0x8e0 [ 425.992823][T20511] do_user_addr_fault+0x764/0x1390 [ 425.992870][T20511] exc_page_fault+0x76/0xf0 [ 425.992894][T20511] asm_exc_page_fault+0x26/0x30 [ 425.992911][T20511] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 425.992933][T20511] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 01 45 03 00 90 90 90 90 90 90 90 90 90 90 [ 425.992949][T20511] RSP: 0018:ffffc9000ee5f8b8 EFLAGS: 00050206 [ 425.992968][T20511] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 000020000000e2b0 [ 425.992981][T20511] RDX: ffff88802e7fda00 RSI: 0000000000000042 RDI: 00000000ffffffff [ 425.992993][T20511] RBP: ffffc9000ee5fa30 R08: ffff88804bb7b4a7 R09: 1ffff1100976f694 [ 425.993008][T20511] R10: dffffc0000000000 R11: ffffed100976f695 R12: 0000000000000042 [ 425.993022][T20511] R13: dffffc0000000000 R14: 0000000000000000 R15: 000020000000e280 [ 425.993055][T20511] ____sys_recvmsg+0x2ab/0x460 [ 425.993108][T20511] ? __pfx_____sys_recvmsg+0x10/0x10 [ 425.993151][T20511] ? import_iovec+0x74/0xa0 [ 425.993182][T20511] ___sys_recvmsg+0x1b5/0x510 [ 425.993213][T20511] ? __pfx____sys_recvmsg+0x10/0x10 [ 425.993265][T20511] ? __fget_files+0x3a0/0x420 [ 425.993295][T20511] do_recvmmsg+0x307/0x770 [ 425.993329][T20511] ? __pfx_do_recvmmsg+0x10/0x10 [ 425.993369][T20511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.993410][T20511] __x64_sys_recvmmsg+0x190/0x240 [ 425.993439][T20511] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 425.993463][T20511] ? rcu_is_watching+0x15/0xb0 [ 425.993488][T20511] ? do_syscall_64+0xbe/0x3b0 [ 425.993593][T20511] do_syscall_64+0xfa/0x3b0 [ 425.993613][T20511] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.993631][T20511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.993649][T20511] ? clear_bhb_loop+0x60/0xb0 [ 425.993672][T20511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.993691][T20511] RIP: 0033:0x7fb2b998eba9 [ 425.993707][T20511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.993722][T20511] RSP: 002b:00007fb2ba744038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 425.993741][T20511] RAX: ffffffffffffffda RBX: 00007fb2b9bd5fa0 RCX: 00007fb2b998eba9 [ 425.993755][T20511] RDX: 000000000000058a RSI: 000020000000e280 RDI: 0000000000000003 [ 425.993767][T20511] RBP: 00007fb2ba744090 R08: 0000000000000000 R09: 0000000000000000 [ 425.993780][T20511] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 425.993792][T20511] R13: 00007fb2b9bd6038 R14: 00007fb2b9bd5fa0 R15: 00007fffe115fd88 [ 425.993824][T20511] [ 426.401052][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 426.425300][T20518] netlink: 'syz.0.4778': attribute type 1 has an invalid length. [ 426.448293][T20518] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4778'. [ 426.940254][T20533] vlan0: entered promiscuous mode [ 426.953142][T20533] vlan0: entered allmulticast mode [ 426.962930][T20533] veth0_vlan: entered allmulticast mode [ 427.013701][T20536] tipc: Enabled bearer , priority 0 [ 427.043810][T20536] syzkaller0: entered promiscuous mode [ 427.049314][T20536] syzkaller0: entered allmulticast mode [ 427.097610][T20535] tipc: Resetting bearer [ 427.154298][T20535] tipc: Disabling bearer [ 427.331146][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.342991][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.353972][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.367272][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.375562][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.494586][ T30] audit: type=1107 audit(1758153534.319:9): pid=20554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 427.591535][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4797'. [ 428.014944][T20577] tipc: Enabled bearer , priority 0 [ 428.027765][T20577] syzkaller0: entered promiscuous mode [ 428.051594][T20577] syzkaller0: entered allmulticast mode [ 428.175355][T20576] tipc: Resetting bearer [ 428.219825][T20576] tipc: Disabling bearer [ 428.280201][T20550] chnl_net:caif_netlink_parms(): no params data found [ 428.475326][T20550] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.487777][T20550] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.488220][T20599] netlink: 'syz.6.4809': attribute type 1 has an invalid length. [ 428.497508][T20550] bridge_slave_0: entered allmulticast mode [ 428.513948][T20550] bridge_slave_0: entered promiscuous mode [ 428.524525][T20550] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.530825][T20599] netlink: 236 bytes leftover after parsing attributes in process `syz.6.4809'. [ 428.531838][T20550] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.550444][T20550] bridge_slave_1: entered allmulticast mode [ 428.559433][T20550] bridge_slave_1: entered promiscuous mode [ 428.637328][T20550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.661438][T20550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.704279][T20605] IPv6: sit1: Disabled Multicast RS [ 428.710966][T20605] sit1: entered allmulticast mode [ 428.798984][T20550] team0: Port device team_slave_0 added [ 428.811186][T20550] team0: Port device team_slave_1 added [ 428.876441][T20550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.889773][T20550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.920699][T20550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.935311][T20550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.949038][T20550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.016298][T20550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.046704][T20614] tipc: Enabled bearer , priority 0 [ 429.057986][T20614] syzkaller0: entered promiscuous mode [ 429.064586][T20614] syzkaller0: entered allmulticast mode [ 429.102099][T20612] tipc: Resetting bearer [ 429.150817][T20612] tipc: Disabling bearer [ 429.387704][T20550] hsr_slave_0: entered promiscuous mode [ 429.400226][T20550] hsr_slave_1: entered promiscuous mode [ 429.419014][T20550] debugfs: 'hsr0' already exists in 'hsr' [ 429.426821][ T5185] Bluetooth: hci1: command tx timeout [ 429.444409][T20550] Cannot create hsr debugfs directory [ 429.616348][T20643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4829'. [ 429.669176][T20645] netlink: 'syz.0.4828': attribute type 2 has an invalid length. [ 429.705059][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4828'. [ 429.773887][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4829'. [ 429.784332][T20652] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4829'. [ 430.028283][T20550] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.049141][T20550] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 430.069246][T20550] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.245373][ T9544] net_ratelimit: 10 callbacks suppressed [ 430.245396][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 430.350162][T20550] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.361630][T20550] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 430.378590][T20550] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.420120][T20662] tipc: Enabled bearer , priority 0 [ 430.511609][T20654] syzkaller0: entered promiscuous mode [ 430.518556][T20654] syzkaller0: entered allmulticast mode [ 430.534443][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 430.590401][T20550] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.606167][T20550] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 430.617790][T20550] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.625929][T20689] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4840'. [ 430.691874][T20653] tipc: Resetting bearer [ 431.508535][ T5185] Bluetooth: hci1: command tx timeout [ 431.533593][T16800] tipc: Node number set to 2718488192 [ 432.943799][T20653] tipc: Disabling bearer [ 432.959611][T20693] netlink: 'syz.6.4839': attribute type 1 has an invalid length. [ 433.023620][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 433.097920][T20696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4842'. [ 433.120629][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4843'. [ 433.158589][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 433.207903][T20698] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4843'. [ 433.358443][T20708] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 433.516783][T20550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.538038][T20550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.557479][T20550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.578819][T20550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.590315][ T5886] Bluetooth: hci1: command tx timeout [ 433.646223][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 433.783886][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 433.865027][T20734] tipc: Enabled bearer , priority 0 [ 433.875591][T20734] syzkaller0: entered promiscuous mode [ 433.882035][T20734] syzkaller0: entered allmulticast mode [ 433.948733][T20733] tipc: Resetting bearer [ 434.046948][T20733] tipc: Disabling bearer [ 434.107056][T20550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.123832][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 434.166758][T20550] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.196728][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.204009][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.258461][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.265696][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.315155][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 434.355335][T20749] tipc: Enabled bearer , priority 0 [ 434.374637][T20749] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 434.418331][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4859'. [ 434.435250][T20749] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4859'. [ 434.457236][T20749] tipc: Resetting bearer [ 434.478764][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4862'. [ 434.498582][T20748] tipc: Disabling bearer [ 434.574617][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 434.706567][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 434.817439][T20773] tipc: Enabled bearer , priority 0 [ 434.836864][T20773] syzkaller0: entered promiscuous mode [ 434.843966][T20773] syzkaller0: entered allmulticast mode [ 434.897443][T20773] tipc: Resetting bearer [ 434.916808][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4868'. [ 434.934142][T20772] tipc: Resetting bearer [ 434.980569][T20772] tipc: Disabling bearer [ 435.109748][T20550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.253960][ T9542] net_ratelimit: 3 callbacks suppressed [ 435.253983][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 435.413165][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 435.564699][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 435.576423][T20806] netlink: 'syz.8.4877': attribute type 2 has an invalid length. [ 435.620498][T20809] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4878'. [ 435.664359][ T5886] Bluetooth: hci1: command 0x0419 tx timeout [ 435.667394][T20809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4878'. [ 435.680873][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 435.726450][T20809] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4878'. [ 435.817220][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 435.827519][T20817] sctp: [Deprecated]: syz.4.4881 (pid 20817) Use of int in max_burst socket option deprecated. [ 435.827519][T20817] Use struct sctp_assoc_value instead [ 435.899169][T20550] veth0_vlan: entered promiscuous mode [ 435.910730][T20820] sctp: [Deprecated]: syz.4.4881 (pid 20820) Use of int in max_burst socket option deprecated. [ 435.910730][T20820] Use struct sctp_assoc_value instead [ 435.947294][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 435.968094][T20817] netlink: 'syz.4.4881': attribute type 39 has an invalid length. [ 436.077659][T20822] tipc: Enabled bearer , priority 0 [ 436.086846][T20822] syzkaller0: entered promiscuous mode [ 436.094174][T20822] syzkaller0: entered allmulticast mode [ 436.110402][T20550] veth1_vlan: entered promiscuous mode [ 436.121425][T20821] tipc: Resetting bearer [ 436.171921][T20821] tipc: Disabling bearer [ 436.206394][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 436.278998][T20550] veth0_macvtap: entered promiscuous mode [ 436.317197][T20550] veth1_macvtap: entered promiscuous mode [ 436.345041][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 436.414391][T20550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.456185][T20550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.509090][ T7000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.556713][ T7000] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.595211][ T7000] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.637774][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 436.721297][ T3541] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.810864][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 436.998519][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.016754][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.083638][ T9532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.092577][ T9532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.216701][T20867] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 437.366391][T20872] tipc: Enabled bearer , priority 0 [ 437.378462][T20872] tipc: Resetting bearer [ 437.425996][T20870] tipc: Disabling bearer [ 437.490459][T20880] siw: device registration error -23 [ 437.744862][ T5185] Bluetooth: hci1: command 0x0419 tx timeout [ 437.970718][T20907] netlink: 'syz.4.4912': attribute type 1 has an invalid length. [ 438.017135][T16800] IPVS: starting estimator thread 0... [ 438.113038][T20911] IPVS: using max 31 ests per chain, 74400 per kthread [ 438.140776][T20907] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 438.197889][T20924] __nla_validate_parse: 7 callbacks suppressed [ 438.197909][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4915'. [ 438.235847][T20927] netlink: 'syz.7.4913': attribute type 10 has an invalid length. [ 438.258185][T20928] netlink: 'syz.0.4914': attribute type 1 has an invalid length. [ 438.261155][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4915'. [ 438.297958][T20924] netlink: 'syz.6.4915': attribute type 14 has an invalid length. [ 438.316753][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4915'. [ 438.318560][T20924] netlink: 'syz.6.4915': attribute type 13 has an invalid length. [ 438.327448][T20927] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.351568][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4915'. [ 438.369199][T20932] netlink: 'syz.6.4915': attribute type 14 has an invalid length. [ 438.378902][T20932] netlink: 'syz.6.4915': attribute type 13 has an invalid length. [ 438.386981][T20927] bond0: (slave team0): Enslaving as an active interface with an up link [ 438.442235][T20928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.667243][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4920'. [ 438.705501][T20937] tipc: Enabled bearer , priority 0 [ 438.705990][T20947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4920'. [ 438.725260][T20946] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4920'. [ 438.750072][T20939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.759213][T20939] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 438.772078][T20939] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 438.808782][T20923] tipc: Disabling bearer [ 438.988248][T20954] IPVS: Error connecting to the multicast addr [ 439.399622][T20978] netlink: 'syz.0.4927': attribute type 10 has an invalid length. [ 439.566898][T20985] batadv_slave_1: entered promiscuous mode [ 439.679002][T20986] batadv_slave_1: left promiscuous mode [ 439.876082][T21001] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4935'. [ 439.905370][T21001] nbd: must specify a device to reconfigure [ 440.044356][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4942'. [ 440.217737][T21032] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4946'. [ 440.228227][T21032] unsupported nla_type 58 [ 440.274067][ T3541] net_ratelimit: 26 callbacks suppressed [ 440.274089][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 440.308195][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.393031][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 440.503132][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 440.625803][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 440.744392][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 440.791826][T21053] validate_nla: 3 callbacks suppressed [ 440.791847][T21053] netlink: 'syz.6.4955': attribute type 1 has an invalid length. [ 440.880190][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 441.025238][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 441.154084][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 441.273468][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 442.080773][ T3502] syzkaller0: tun_net_xmit 76 [ 442.114269][ T3502] syzkaller0: tun_net_xmit 48 [ 442.119802][T16800] syzkaller0: tun_net_xmit 76 [ 442.138614][T21122] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 442.164002][ T5955] syzkaller0: tun_net_xmit 76 [ 442.166592][T21122] syzkaller0: Linktype set failed because interface is up [ 444.971735][T21140] syzkaller0: entered promiscuous mode [ 444.979291][T21140] syzkaller0: entered allmulticast mode [ 445.182011][T21174] FAULT_INJECTION: forcing a failure. [ 445.182011][T21174] name failslab, interval 1, probability 0, space 0, times 0 [ 445.196526][T21174] CPU: 0 UID: 0 PID: 21174 Comm: syz.8.4991 Not tainted syzkaller #0 PREEMPT(full) [ 445.196553][T21174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.196565][T21174] Call Trace: [ 445.196574][T21174] [ 445.196583][T21174] dump_stack_lvl+0x189/0x250 [ 445.196612][T21174] ? __pfx____ratelimit+0x10/0x10 [ 445.196631][T21174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.196653][T21174] ? __pfx__printk+0x10/0x10 [ 445.196686][T21174] ? __pfx___find_rr_leaf+0x10/0x10 [ 445.196713][T21174] should_fail_ex+0x414/0x560 [ 445.196747][T21174] should_failslab+0xa8/0x100 [ 445.196774][T21174] ? __pfx_ip6_dst_gc+0x10/0x10 [ 445.196795][T21174] kmem_cache_alloc_noprof+0x73/0x3c0 [ 445.196819][T21174] ? dst_alloc+0x105/0x170 [ 445.196841][T21174] ? __pfx_ip6_dst_gc+0x10/0x10 [ 445.196863][T21174] dst_alloc+0x105/0x170 [ 445.196888][T21174] ip6_rt_cache_alloc+0x3ac/0xa40 [ 445.196922][T21174] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 445.196949][T21174] ? rt6_find_cached_rt+0x21c/0x270 [ 445.196976][T21174] ? ip6_pol_route+0x162/0x1180 [ 445.197000][T21174] ? ip6_pol_route+0x162/0x1180 [ 445.197022][T21174] ip6_pol_route+0xf5d/0x1180 [ 445.197053][T21174] ? __pfx_ip6_pol_route+0x10/0x10 [ 445.197087][T21174] ? __lock_acquire+0xab9/0xd20 [ 445.197128][T21174] fib6_rule_lookup+0x348/0x6f0 [ 445.197156][T21174] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 445.197177][T21174] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 445.197211][T21174] ? dev_get_by_index_rcu+0xf4/0x110 [ 445.197245][T21174] ip6_route_output_flags+0x364/0x5d0 [ 445.197273][T21174] ? ip6_route_output_flags+0x2e/0x5d0 [ 445.197305][T21174] ip6_dst_lookup_tail+0x299/0x1510 [ 445.197344][T21174] ? txopt_get+0x7a/0x3f0 [ 445.197371][T21174] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 445.197402][T21174] ? txopt_get+0x7a/0x3f0 [ 445.197422][T21174] ? txopt_get+0x7a/0x3f0 [ 445.197439][T21174] ? txopt_get+0x7a/0x3f0 [ 445.197459][T21174] ? txopt_get+0x335/0x3f0 [ 445.197478][T21174] ? aa_label_sk_perm+0x4cd/0x630 [ 445.197507][T21174] ? __pfx_txopt_get+0x10/0x10 [ 445.197532][T21174] ip6_dst_lookup_flow+0x47/0xe0 [ 445.197566][T21174] rawv6_sendmsg+0xdab/0x1820 [ 445.197604][T21174] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 445.197649][T21174] ? __lock_acquire+0xab9/0xd20 [ 445.197731][T21174] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.197764][T21174] ? sock_rps_record_flow+0x19/0x410 [ 445.197797][T21174] ? inet_sendmsg+0x2f4/0x370 [ 445.197823][T21174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.197849][T21174] __sock_sendmsg+0x19c/0x270 [ 445.197882][T21174] ____sys_sendmsg+0x52d/0x830 [ 445.197913][T21174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.197948][T21174] ? import_iovec+0x74/0xa0 [ 445.197978][T21174] ___sys_sendmsg+0x21f/0x2a0 [ 445.198006][T21174] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.198078][T21174] ? __fget_files+0x2a/0x420 [ 445.198095][T21174] ? __fget_files+0x3a0/0x420 [ 445.198125][T21174] __sys_sendmmsg+0x227/0x430 [ 445.198156][T21174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 445.198178][T21174] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 445.198230][T21174] ? ksys_write+0x22a/0x250 [ 445.198259][T21174] ? __pfx_ksys_write+0x10/0x10 [ 445.198283][T21174] ? rcu_is_watching+0x15/0xb0 [ 445.198311][T21174] __x64_sys_sendmmsg+0xa0/0xc0 [ 445.198339][T21174] do_syscall_64+0xfa/0x3b0 [ 445.198360][T21174] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.198380][T21174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.198400][T21174] ? clear_bhb_loop+0x60/0xb0 [ 445.198424][T21174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.198445][T21174] RIP: 0033:0x7fe5c418eba9 [ 445.198464][T21174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.198483][T21174] RSP: 002b:00007fe5c50c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 445.198505][T21174] RAX: ffffffffffffffda RBX: 00007fe5c43d5fa0 RCX: 00007fe5c418eba9 [ 445.198521][T21174] RDX: 0000000000000001 RSI: 00002000000061c0 RDI: 0000000000000003 [ 445.198533][T21174] RBP: 00007fe5c50c3090 R08: 0000000000000000 R09: 0000000000000000 [ 445.198544][T21174] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000001 [ 445.198555][T21174] R13: 00007fe5c43d6038 R14: 00007fe5c43d5fa0 R15: 00007fff60ae6978 [ 445.198585][T21174] [ 448.067438][T21169] lo: MTU too low for tipc bearer [ 448.073529][T21169] tipc: Enabling of bearer rejected, failed to enable media [ 448.116797][ T9544] net_ratelimit: 5 callbacks suppressed [ 448.116821][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 448.257618][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 448.298008][T21190] __nla_validate_parse: 5 callbacks suppressed [ 448.298034][T21190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4996'. [ 448.349087][T21190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4996'. [ 448.427755][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 448.573856][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 448.669471][T21215] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 448.697269][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 448.839501][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5007'. [ 448.868753][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5007'. [ 448.891641][T21222] netlink: 'syz.6.5007': attribute type 3 has an invalid length. [ 448.916247][T21224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.947589][T21226] syzkaller0: entered promiscuous mode [ 448.970718][T21226] syzkaller0: entered allmulticast mode [ 449.161131][T21239] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5013'. [ 449.161259][T21235] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5013'. [ 449.379477][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 449.493777][ T5185] block nbd2: Receive control failed (result -32) [ 449.524108][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 449.567790][T21258] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5021'. [ 449.621837][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5020'. [ 449.634106][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 449.764711][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 449.787670][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5023'. [ 450.446369][T21310] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5036'. [ 451.741163][T21364] netlink: 'syz.0.5049': attribute type 8 has an invalid length. [ 454.146022][T21319] bridge1: entered promiscuous mode [ 454.151292][T21319] bridge1: entered allmulticast mode [ 454.274010][ T9544] net_ratelimit: 3 callbacks suppressed [ 454.274030][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 454.399865][T21374] __nla_validate_parse: 2 callbacks suppressed [ 454.399885][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'. [ 454.438815][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 454.499066][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'. [ 454.503505][ T7002] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.558941][ T7002] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.593632][ T7002] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.638670][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 454.677257][ T9542] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.787410][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 454.927880][T21400] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5061'. [ 454.940798][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 454.968652][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5061'. [ 455.104381][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 455.232989][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 455.350591][T21420] tipc: Enabling of bearer rejected, failed to enable media [ 455.394014][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 455.503984][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 455.614593][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 455.637603][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5073'. [ 455.648382][T21432] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5073'. [ 455.659297][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5073'. [ 455.881488][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5078'. [ 455.892237][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5078'. [ 456.489293][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5088'. [ 456.560262][T21470] xfrm1: entered allmulticast mode [ 458.125988][T21541] netlink: 'syz.7.5111': attribute type 2 has an invalid length. [ 458.150959][T21541] netlink: 'syz.7.5111': attribute type 1 has an invalid length. [ 459.290748][T21611] syzkaller1: entered promiscuous mode [ 459.298140][T21611] syzkaller1: entered allmulticast mode [ 459.564453][ T1151] net_ratelimit: 25 callbacks suppressed [ 459.564486][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 459.904073][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 460.579040][T21637] syzkaller0: entered promiscuous mode [ 460.586559][T21637] syzkaller0: entered allmulticast mode [ 460.785925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 463.295057][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 463.454565][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 463.585955][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 463.714764][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 463.835543][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 463.954043][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 464.004190][T21713] netlink: 'syz.7.5169': attribute type 1 has an invalid length. [ 464.085389][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 464.126196][T21718] __nla_validate_parse: 11 callbacks suppressed [ 464.126215][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5171'. [ 464.186282][T21722] TCP: TCP_TX_DELAY enabled [ 464.309443][T21728] netlink: 'syz.4.5172': attribute type 1 has an invalid length. [ 464.506171][T21732] syzkaller0: entered promiscuous mode [ 464.525777][T21732] syzkaller0: entered allmulticast mode [ 464.667427][ T7002] net_ratelimit: 3 callbacks suppressed [ 464.667449][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 464.776962][T21755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.794042][ T9532] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 464.826645][T21750] can: request_module (can-proto-0) failed. [ 464.954003][ T9542] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 465.055031][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5186'. [ 465.104078][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 465.479949][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5196'. [ 465.509340][T21789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5196'. [ 465.538437][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5196'. [ 465.556567][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5196'. [ 465.585819][T21793] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.595649][T21793] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.607481][T21793] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.617346][T21793] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.628445][T21793] openvswitch: netlink: Actions may not be safe on all matching packets [ 467.869397][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5202'. [ 467.892150][T21814] netlink: 'syz.4.5200': attribute type 8 has an invalid length. [ 467.893400][T21812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5203'. [ 467.931331][T21812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5203'. [ 468.085699][T21825] netlink: 212388 bytes leftover after parsing attributes in process `syz.8.5205'. [ 468.558867][T21848] macvlan3: entered allmulticast mode [ 468.577493][T21848] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 468.780482][T21843] netlink: 'syz.0.5213': attribute type 4 has an invalid length. [ 468.955477][T21872] netlink: 'syz.4.5220': attribute type 1 has an invalid length. [ 469.007134][T21872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.137288][T21879] bond2: (slave veth5): Enslaving as an active interface with a down link [ 469.210529][T21895] netlink: 'syz.0.5226': attribute type 4 has an invalid length. [ 469.228564][T21895] __nla_validate_parse: 3 callbacks suppressed [ 469.228586][T21895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5226'. [ 469.234351][T21880] bond2: (slave veth7): Enslaving as an active interface with a down link [ 469.423669][T21887] netlink: 'syz.0.5226': attribute type 1 has an invalid length. [ 469.548068][T21909] netlink: 'syz.6.5228': attribute type 1 has an invalid length. [ 469.646972][T21912] bond1: (slave gretap1): making interface the new active one [ 469.657115][T21912] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 469.681238][T21909] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5228'. [ 469.760322][T21909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.804849][ T9544] net_ratelimit: 73 callbacks suppressed [ 469.804871][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 469.984104][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 470.008150][T21929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5238'. [ 470.028378][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5238'. [ 470.128686][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 470.266514][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 470.855568][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 470.983481][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 471.061623][T21967] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5253'. [ 471.107148][ T7002] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 471.239947][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 471.374585][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 471.497763][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 471.621259][T22003] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5264'. [ 471.729584][T22003] tipc: Enabling of bearer rejected, failed to enable media [ 472.331714][T22036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5276'. [ 472.356607][T22036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5276'. [ 472.669774][T22057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5283'. [ 472.905371][T22065] sctp: [Deprecated]: syz.8.5287 (pid 22065) Use of int in max_burst socket option. [ 472.905371][T22065] Use struct sctp_assoc_value instead [ 473.144128][T22078] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 473.151737][T22079] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 473.434502][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5296'. [ 473.456739][T22096] netlink: 'syz.6.5296': attribute type 11 has an invalid length. [ 474.344863][T22139] netlink: 'syz.6.5311': attribute type 10 has an invalid length. [ 474.377838][T22139] __nla_validate_parse: 2 callbacks suppressed [ 474.377866][T22139] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5311'. [ 474.577493][T22139] dummy0: entered promiscuous mode [ 474.615251][T22139] bridge0: port 1(dummy0) entered blocking state [ 474.632172][T22139] bridge0: port 1(dummy0) entered disabled state [ 474.666014][T22139] dummy0: entered allmulticast mode [ 474.727571][T22130] udevd[22130]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 474.834601][ T9544] net_ratelimit: 21 callbacks suppressed [ 474.834624][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 474.975270][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5319'. [ 475.026742][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5319'. [ 475.093967][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 475.260569][T22170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5323'. [ 475.377798][T22170] xfrm2: entered allmulticast mode [ 475.407709][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 475.533445][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 475.653902][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 475.796250][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 475.878042][T22195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5333'. [ 475.913975][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 475.934694][T22193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5332'. [ 476.001756][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5334'. [ 476.042012][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5334'. [ 476.053881][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 476.099099][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5337'. [ 476.123928][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5337'. [ 476.376952][T22209] tipc: Started in network mode [ 476.381862][T22209] tipc: Node identity , cluster identity 4711 [ 476.388456][T22209] tipc: Failed to obtain node identity [ 476.399317][T22209] tipc: Enabling of bearer rejected, failed to enable media [ 476.605182][T22218] syzkaller0: entered promiscuous mode [ 476.610718][T22218] syzkaller0: entered allmulticast mode [ 476.635516][T22223] macvlan3: entered allmulticast mode [ 476.641722][T22223] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 476.714624][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 476.891758][T22238] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 476.978832][T22245] netlink: 'syz.6.5350': attribute type 16 has an invalid length. [ 477.004409][T22245] netlink: 'syz.6.5350': attribute type 17 has an invalid length. [ 479.312180][T22245] gretap0: left promiscuous mode [ 479.331472][T22245] bridge0: port 1(dummy0) entered blocking state [ 479.338327][T22245] bridge0: port 1(dummy0) entered forwarding state [ 479.351848][T22245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.501364][T22263] __nla_validate_parse: 5 callbacks suppressed [ 479.501386][T22263] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5356'. [ 479.572169][T22270] !: renamed from dummy0 (while UP) [ 479.694843][T22276] macvlan3: entered allmulticast mode [ 479.708559][T22276] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 479.853941][ T1151] net_ratelimit: 3 callbacks suppressed [ 479.853961][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.014822][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.136427][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.221670][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5371'. [ 480.266530][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.330769][T22309] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 480.341251][T22309] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 480.385650][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.392899][T22312] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 480.401716][T22312] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 480.514496][ T6996] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.634424][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.747763][T22335] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5378'. [ 480.958285][ T7000] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 480.998030][T22350] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5381'. [ 481.035508][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5378'. [ 481.074130][ T6996] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 481.110193][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5382'. [ 481.215255][ T6996] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 481.280103][T22363] netlink: 'syz.6.5386': attribute type 5 has an invalid length. [ 482.110277][T22397] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5396'. [ 482.380366][T22421] netlink: 'syz.4.5404': attribute type 2 has an invalid length. [ 482.967845][T22450] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 483.085929][T22456] netlink: 'syz.8.5418': attribute type 23 has an invalid length. [ 483.405087][T22467] tipc: Enabling of bearer rejected, failed to enable media [ 483.549200][T22478] Unsupported ieee802154 address type: 0 [ 483.594778][T22481] netlink: 'syz.6.5428': attribute type 8 has an invalid length. [ 483.723941][T22473] [ 483.726317][T22473] ====================================================== [ 483.733337][T22473] WARNING: possible circular locking dependency detected [ 483.740370][T22473] syzkaller #0 Not tainted [ 483.744777][T22473] ------------------------------------------------------ [ 483.751782][T22473] syz.4.5424/22473 is trying to acquire lock: [ 483.757930][T22473] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 483.767519][T22473] [ 483.767519][T22473] but task is already holding lock: [ 483.774888][T22473] ffff888143b8c558 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 483.785164][T22473] [ 483.785164][T22473] which lock already depends on the new lock. [ 483.785164][T22473] [ 483.795555][T22473] [ 483.795555][T22473] the existing dependency chain (in reverse order) is: [ 483.804558][T22473] [ 483.804558][T22473] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 483.813164][T22473] lock_acquire+0x120/0x360 [ 483.818209][T22473] blk_alloc_queue+0x538/0x620 [ 483.823498][T22473] __blk_mq_alloc_disk+0x15c/0x340 [ 483.829129][T22473] nbd_dev_add+0x46c/0xae0 [ 483.834059][T22473] nbd_init+0x168/0x1f0 [ 483.838743][T22473] do_one_initcall+0x233/0x820 [ 483.844025][T22473] do_initcall_level+0x104/0x190 [ 483.849487][T22473] do_initcalls+0x59/0xa0 [ 483.854332][T22473] kernel_init_freeable+0x334/0x4b0 [ 483.860047][T22473] kernel_init+0x1d/0x1d0 [ 483.864893][T22473] ret_from_fork+0x436/0x7d0 [ 483.869995][T22473] ret_from_fork_asm+0x1a/0x30 [ 483.875274][T22473] [ 483.875274][T22473] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 483.882486][T22473] lock_acquire+0x120/0x360 [ 483.887518][T22473] fs_reclaim_acquire+0x72/0x100 [ 483.893065][T22473] prepare_alloc_pages+0x153/0x610 [ 483.898694][T22473] __alloc_frozen_pages_noprof+0x123/0x370 [ 483.905023][T22473] __alloc_pages_noprof+0xa/0x30 [ 483.910478][T22473] pcpu_populate_chunk+0x182/0xb30 [ 483.916111][T22473] pcpu_alloc_noprof+0xcbf/0x1720 [ 483.921669][T22473] bpf_map_alloc_percpu+0xbc/0x1b0 [ 483.927301][T22473] prealloc_init+0x225/0x630 [ 483.932417][T22473] htab_map_alloc+0x6ce/0xc70 [ 483.937620][T22473] map_create+0xaa0/0x14d0 [ 483.942556][T22473] __sys_bpf+0x60f/0x870 [ 483.947324][T22473] __x64_sys_bpf+0x7c/0x90 [ 483.952259][T22473] do_syscall_64+0xfa/0x3b0 [ 483.957283][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.963779][T22473] [ 483.963779][T22473] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 483.971504][T22473] validate_chain+0xb9b/0x2140 [ 483.976796][T22473] __lock_acquire+0xab9/0xd20 [ 483.982016][T22473] lock_acquire+0x120/0x360 [ 483.987054][T22473] __mutex_lock+0x187/0x1350 [ 483.992168][T22473] pcpu_alloc_noprof+0x286/0x1720 [ 483.997718][T22473] sbitmap_init_node+0x1e1/0x630 [ 484.003268][T22473] sbitmap_queue_init_node+0x3e/0x4d0 [ 484.009165][T22473] blk_mq_init_tags+0x110/0x280 [ 484.014559][T22473] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 484.020541][T22473] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 484.026877][T22473] nbd_start_device+0x17f/0xb10 [ 484.032247][T22473] nbd_genl_connect+0x135b/0x18f0 [ 484.037783][T22473] genl_family_rcv_msg_doit+0x212/0x300 [ 484.043861][T22473] genl_rcv_msg+0x60e/0x790 [ 484.048890][T22473] netlink_rcv_skb+0x208/0x470 [ 484.054169][T22473] genl_rcv+0x28/0x40 [ 484.058676][T22473] netlink_unicast+0x82f/0x9e0 [ 484.063963][T22473] netlink_sendmsg+0x805/0xb30 [ 484.069250][T22473] __sock_sendmsg+0x21c/0x270 [ 484.074444][T22473] ____sys_sendmsg+0x505/0x830 [ 484.079719][T22473] ___sys_sendmsg+0x21f/0x2a0 [ 484.084911][T22473] __x64_sys_sendmsg+0x19b/0x260 [ 484.090366][T22473] do_syscall_64+0xfa/0x3b0 [ 484.095382][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.101792][T22473] [ 484.101792][T22473] other info that might help us debug this: [ 484.101792][T22473] [ 484.112019][T22473] Chain exists of: [ 484.112019][T22473] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 484.112019][T22473] [ 484.125676][T22473] Possible unsafe locking scenario: [ 484.125676][T22473] [ 484.133129][T22473] CPU0 CPU1 [ 484.138487][T22473] ---- ---- [ 484.143855][T22473] lock(&q->q_usage_counter(io)#53); [ 484.149235][T22473] lock(fs_reclaim); [ 484.155737][T22473] lock(&q->q_usage_counter(io)#53); [ 484.163633][T22473] lock(pcpu_alloc_mutex); [ 484.168143][T22473] [ 484.168143][T22473] *** DEADLOCK *** [ 484.168143][T22473] [ 484.176277][T22473] 6 locks held by syz.4.5424/22473: [ 484.181461][T22473] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 484.189646][T22473] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 484.198622][T22473] #2: ffff888024e0e188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 484.210035][T22473] #3: ffff888024e0e0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 484.221009][T22473] #4: ffff888143b8c558 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 484.231728][T22473] #5: ffff888143b8c590 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 484.242716][T22473] [ 484.242716][T22473] stack backtrace: [ 484.248617][T22473] CPU: 1 UID: 0 PID: 22473 Comm: syz.4.5424 Not tainted syzkaller #0 PREEMPT(full) [ 484.248654][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.248671][T22473] Call Trace: [ 484.248680][T22473] [ 484.248690][T22473] dump_stack_lvl+0x189/0x250 [ 484.248715][T22473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.248734][T22473] ? __pfx__printk+0x10/0x10 [ 484.248757][T22473] ? print_lock_name+0xde/0x100 [ 484.248780][T22473] print_circular_bug+0x2ee/0x310 [ 484.248800][T22473] check_noncircular+0x134/0x160 [ 484.248820][T22473] validate_chain+0xb9b/0x2140 [ 484.248852][T22473] __lock_acquire+0xab9/0xd20 [ 484.248879][T22473] ? pcpu_alloc_noprof+0x286/0x1720 [ 484.248902][T22473] lock_acquire+0x120/0x360 [ 484.248924][T22473] ? pcpu_alloc_noprof+0x286/0x1720 [ 484.248953][T22473] __mutex_lock+0x187/0x1350 [ 484.248972][T22473] ? pcpu_alloc_noprof+0x286/0x1720 [ 484.248995][T22473] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 484.249021][T22473] ? kasan_save_track+0x4f/0x80 [ 484.249040][T22473] ? kasan_save_track+0x3e/0x80 [ 484.249059][T22473] ? __kasan_kmalloc+0x93/0xb0 [ 484.249079][T22473] ? blk_mq_init_tags+0x85/0x280 [ 484.249101][T22473] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 484.249118][T22473] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 484.249137][T22473] ? pcpu_alloc_noprof+0x286/0x1720 [ 484.249159][T22473] ? nbd_genl_connect+0x135b/0x18f0 [ 484.249175][T22473] ? genl_family_rcv_msg_doit+0x212/0x300 [ 484.249197][T22473] ? genl_rcv_msg+0x60e/0x790 [ 484.249218][T22473] ? __pfx___mutex_lock+0x10/0x10 [ 484.249235][T22473] ? ____sys_sendmsg+0x505/0x830 [ 484.249254][T22473] ? do_syscall_64+0xfa/0x3b0 [ 484.249272][T22473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.249295][T22473] pcpu_alloc_noprof+0x286/0x1720 [ 484.249324][T22473] sbitmap_init_node+0x1e1/0x630 [ 484.249343][T22473] ? __kasan_kmalloc+0x93/0xb0 [ 484.249366][T22473] sbitmap_queue_init_node+0x3e/0x4d0 [ 484.249386][T22473] blk_mq_init_tags+0x110/0x280 [ 484.249409][T22473] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 484.249429][T22473] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 484.249448][T22473] ? kfree+0x18e/0x440 [ 484.249469][T22473] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 484.249497][T22473] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 484.249524][T22473] ? sysfs_add_file_mode_ns+0x259/0x300 [ 484.249553][T22473] nbd_start_device+0x17f/0xb10 [ 484.249572][T22473] ? device_create_file+0xf4/0x1c0 [ 484.249591][T22473] nbd_genl_connect+0x135b/0x18f0 [ 484.249612][T22473] ? __pfx_nbd_genl_connect+0x10/0x10 [ 484.249632][T22473] ? __nla_parse+0x40/0x60 [ 484.249651][T22473] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 484.249677][T22473] genl_family_rcv_msg_doit+0x212/0x300 [ 484.249702][T22473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 484.249730][T22473] ? stack_trace_save+0x9c/0xe0 [ 484.249752][T22473] genl_rcv_msg+0x60e/0x790 [ 484.249776][T22473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.249796][T22473] ? __pfx_nbd_genl_connect+0x10/0x10 [ 484.249818][T22473] netlink_rcv_skb+0x208/0x470 [ 484.249837][T22473] ? __lock_acquire+0xab9/0xd20 [ 484.249860][T22473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.249882][T22473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.249905][T22473] ? down_read+0x1ad/0x2e0 [ 484.249925][T22473] genl_rcv+0x28/0x40 [ 484.249944][T22473] netlink_unicast+0x82f/0x9e0 [ 484.249972][T22473] ? __pfx_netlink_unicast+0x10/0x10 [ 484.249997][T22473] ? netlink_sendmsg+0x642/0xb30 [ 484.250014][T22473] ? skb_put+0x11b/0x210 [ 484.250033][T22473] netlink_sendmsg+0x805/0xb30 [ 484.250055][T22473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.250074][T22473] ? aa_sock_msg_perm+0xf1/0x1d0 [ 484.250091][T22473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.250109][T22473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.250127][T22473] __sock_sendmsg+0x21c/0x270 [ 484.250152][T22473] ____sys_sendmsg+0x505/0x830 [ 484.250174][T22473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.250197][T22473] ? import_iovec+0x74/0xa0 [ 484.250219][T22473] ___sys_sendmsg+0x21f/0x2a0 [ 484.250240][T22473] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.250274][T22473] ? __fget_files+0x2a/0x420 [ 484.250289][T22473] ? __fget_files+0x3a0/0x420 [ 484.250307][T22473] __x64_sys_sendmsg+0x19b/0x260 [ 484.250328][T22473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.250353][T22473] ? rcu_is_watching+0x15/0xb0 [ 484.250371][T22473] ? do_syscall_64+0xbe/0x3b0 [ 484.250390][T22473] do_syscall_64+0xfa/0x3b0 [ 484.250408][T22473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.250424][T22473] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 484.250440][T22473] ? clear_bhb_loop+0x60/0xb0 [ 484.250458][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.250474][T22473] RIP: 0033:0x7f4dcf78eba9 [ 484.250491][T22473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.250507][T22473] RSP: 002b:00007f4dd06e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.250525][T22473] RAX: ffffffffffffffda RBX: 00007f4dcf9d5fa0 RCX: 00007f4dcf78eba9 [ 484.250537][T22473] RDX: 0000000000000040 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 484.250549][T22473] RBP: 00007f4dcf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 484.250559][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.250570][T22473] R13: 00007f4dcf9d6038 R14: 00007f4dcf9d5fa0 R15: 00007ffeff9a9a88 [ 484.250588][T22473] [ 484.811267][T22490] base_sock_release(ffff8880545abc00) sk=ffff888043312000 [ 484.818056][ T5886] block nbd4: Receive control failed (result -32) [ 484.828173][ T5886] block nbd4: Receive control failed (result -32) [ 484.893526][T22473] nbd4: detected capacity change from 0 to 127 [ 484.901382][T22310] block nbd4: Dead connection, failed to find a fallback [ 484.903787][ T1151] net_ratelimit: 21 callbacks suppressed [ 484.903806][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 484.925491][T22310] block nbd4: shutting down sockets [ 484.933775][T22310] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.945207][T22310] Buffer I/O error on dev nbd4, logical block 0, async page read [ 484.954701][T22310] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.964509][T22310] Buffer I/O error on dev nbd4, logical block 1, async page read [ 484.974563][T22310] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.985600][T22310] Buffer I/O error on dev nbd4, logical block 2, async page read [ 484.994877][T22310] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.006252][T22310] Buffer I/O error on dev nbd4, logical block 3, async page read [ 485.015575][T22310] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.026739][T22310] Buffer I/O error on dev nbd4, logical block 0, async page read [ 485.036711][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.037154][T22310] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.055411][T22310] Buffer I/O error on dev nbd4, logical block 1, async page read [ 485.063931][T22310] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.074320][T22310] Buffer I/O error on dev nbd4, logical block 2, async page read [ 485.082977][T22310] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.092107][T22310] Buffer I/O error on dev nbd4, logical block 3, async page read [ 485.101655][T22310] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.111858][T22310] Buffer I/O error on dev nbd4, logical block 0, async page read [ 485.120562][T22310] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.129942][T22310] Buffer I/O error on dev nbd4, logical block 1, async page read [ 485.139882][T22310] ldm_validate_partition_table(): Disk read failed. [ 485.148374][T22310] Dev nbd4: unable to read RDB block 0 [ 485.155158][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.166019][T22310] nbd4: unable to read partition table [ 485.177436][T22310] ldm_validate_partition_table(): Disk read failed. [ 485.186789][T22310] Dev nbd4: unable to read RDB block 0 [ 485.195043][T22310] nbd4: unable to read partition table [ 485.274453][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.384588][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.494389][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.613060][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.723248][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.833468][ T6996] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 485.943323][ T9544] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 489.933966][ T1151] net_ratelimit: 35 callbacks suppressed [ 489.933989][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.053131][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.162964][ T3502] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.273773][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.382894][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.504351][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.613490][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.723959][ T6996] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.833003][ T3541] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 490.943009][ T1151] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 493.582416][ T5185] Bluetooth: hci2: command 0x0406 tx timeout