last executing test programs: 5.88183523s ago: executing program 3 (id=5210): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f00000005c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f00000005c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 5.280009131s ago: executing program 3 (id=5217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xf6, &(0x7f00000000c0)=""/246}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[], 0x32600) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f00000001c0), 0x6f5, 0x2000000022, &(0x7f0000000200)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/17, 0x11}, 0x3}], 0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x52, &(0x7f00000002c0)=0x80000000, 0x4) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f00000005c0)) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000004c0)={0x0, r1, r0, 0x8, 0xac, '\x00', {0xf8, 0x3, 0x3, 0x5, 0x3, 0x8001, 0x8, 0x7fffffffffffffff, {0x8, 0xffff}, {0xe, 0x4}, {0x5, 0xfffffffe}, 0x8000000000000000, 0x0, 0x101, 0xfffffff1, 0x7, 0x3, 0x8001, 0x10, 0x1, 0x100, '\x00', 0x4, 0x81, 0x14, 0x1}}) 4.852356716s ago: executing program 3 (id=5221): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x10, 0x7ff, 0xd}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x7f, @private2, 0x14}}, 0xb5, 0x48, 0x101, 0x6, 0x5}, &(0x7f00000001c0)=0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20020090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000480)=@generic={0x2, 0x3, 0x100}) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000004c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000500)=0x2c) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="89ce851811e195eb9a36a983cfcc44181acd8fb28ffbe9773c"}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "11b04a81c9ea71410360605efa"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "29f13da29a8e72020871146f92"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "b459945fe4c6bb4e1951789e5ce660"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "f6ad0bc38abee51749c7acf8d4678f6b"}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x40004804}, 0x20040080) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000700)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@broadcast}, {@loopback}, {@empty}]}}) pselect6(0x40, &(0x7f0000000780)={0x3ff, 0x8, 0x10001, 0x5, 0x1, 0x9, 0x7, 0x100000001}, &(0x7f00000007c0)={0x8949, 0x2, 0x1c0000000000, 0x19, 0x10, 0x3, 0x3, 0x34}, &(0x7f0000000800)={0x1000, 0x9, 0x8, 0x5, 0xffffffff, 0x88c3, 0x97, 0x3}, &(0x7f0000000840)={0x0, 0x989680}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x2]}, 0x8}) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=0x1000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002100)={'sit0\x00', &(0x7f0000002080)={'gre0\x00', 0x0, 0x1, 0x7800, 0x180, 0x6, {{0xb, 0x4, 0x2, 0x38, 0x2c, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty, {[@noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x3, [{0x1, 0x8, "d20437e76a6f"}, {0x2, 0x2}]}]}}}}}) sendmmsg$inet(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001940)="02ddbc6a837ab5f7ccff64f22770b467", 0x10}, {&(0x7f0000001980)="94c04bcfb70bc9584e0dc9d40631933b177703162cf7909d74e32eebd6db9332820d1dd3142fa6480aaa1d9a2b2c86c9bb26c2c0a551ef4cd5b59797a08a0080ca3852b953eff4edc7f79ee07be727d288e522f156a65a10aa3a2c4b3761f20a0515cec4a5c7215edd69579695c01c3b5f0f2779b7e19157387d6e1f35795bd8161738070d423857ceb9abe5525e3d859b6e44f250e5982597cccf7552b09279e084c635327e4ad64ab45cd29c227d1018e2e1adf6788d890ee43e82859a316083e1f42ff9ee90c2", 0xc8}, {&(0x7f0000001a80)="7607aa12ebcc8163e56ccc18d5ce4499ee905659643c02edf7747ecabeaf2b46cc2107739dbb23962ce191d0b155a26cef22f05c1445b29f047df347c476a372f27e51f107ccf421aac9ebcfb15b1d0b58f7a9b5276764e91963f6048dc66520d185654e953bf3218d66305f6bacb2137a4f85c1e6ae82e210daf7c98ea8bc", 0x7f}, {&(0x7f0000001b00)="8e9203f5862f00c51779b3d3de40658d74bc8e62f3424e4031307b6f362eecec25a8be77c4c99164751637f6a123470f9dedabd9f6b072ec83d4aa04db3247549546f6ab997088cb9cb816bd9ae38df4da5c9fa813a6a7767112018b4599a18cdb70122a8e98c5b67b5309b9ca08c19415a1e2eaf8a53c74a68b406d8c", 0x7d}, {&(0x7f0000001b80)="7af0f311f9cbec54dbef976f044f58c68b063ac0af0cf9968b75cac1ab7a4146fb35be743c9ae642c8c23e8a603e7a61967c1e96b32756e9a3824e8902b7", 0x3e}, {&(0x7f0000001bc0)="0f54931a5b6a77abdb1e040fe6a964fadd896e33dcedc1dc76bfdad6fd418b4f182e47d9bf56028cba969de9045978df08575ed82323612e0ec5f2cb2a", 0x3d}, {&(0x7f0000001c00)="422b6a2837d9dcda5bbcb619717dd8445727c34155e70c8e70c7c19cb2469621b0d405650a6e46d1cea45e9d22", 0x2d}, {&(0x7f0000001c40)="572bcb9498ddc00abe21e1133c4f739567a8d19bb755c4dccfaa609c73d3d15516112ffe52c477c08a7f0e5b7b5f751bace484cb05fd4ed181bc3cb890d0027fe57527f8533e8cd7d9317311609d81b05001f212715c1d06fdc4bedbac377c9953070b4a01d92f8c33be501aeaa2b70410a2a804a25cdf2fb10d969121ccf2d8", 0x80}, {&(0x7f0000001cc0)="3a71cc658d9f0cf3e732db9cdea6940078611dcf772d9033c8853d75b99d9235874a5558076e8abd8386ee5477e6a90bd21948b9d9b2450373c48e98e4b3553135d034", 0x43}], 0x9, &(0x7f0000001e00)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0x3, 0x44}, @timestamp_addr={0x44, 0xc, 0x8, 0x1, 0x9, [{@broadcast, 0x1}]}]}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@rr={0x7, 0x13, 0xd3, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0xef, [@private=0xa010101, @loopback, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xd9, [@dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @broadcast, @private=0xa010102]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0xc, [0x1000, 0x5, 0x1, 0x3ff, 0x2, 0x6]}]}}}], 0xa0}}, {{&(0x7f0000001ec0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001f00)}, {&(0x7f0000001f40)="4c795ab1a65917ccb0d42ea374f17db50a89cda32791cb1b13fd970cd5ca015d17bcdd091378a14ceda836816a661f394389232ed4a23974a460a843a2e146d16feaac53ba57f8d2acfc499a1aa2e20d80f9087b90f1f74581fa20e1fc7d0ed8e787736d746b4110832e1be56835fe170ab91660e63d628d896ca84a2091d8f3cd35ba8c1c4ced450aa64cb834fa119658298405af73e3356017fd23aa8e156f6cfd4dd60af1d2ce4bc272c4efe30fe6cc05a3182dc5aff7493aaf9c119e12c4f456e3d3bffcf23f498c0068b24cd4941df929f82984bc4dfaea4eae", 0xdc}], 0x2, &(0x7f0000002140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x71}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @loopback}}}], 0x80}}, {{&(0x7f00000021c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002340)=[{&(0x7f0000002200)="199d00efbb86a4729c3d9ff2519aac76912e29fdbdda8313e0f5f712d1dc6b38dc98e3709cba0181b843e1714144d7a527038793032758aeee6b1dfa0a1c3aff5ec6010edc684fa337d1f09e027c78363fa2d69960f5e16cea120321aece2f0ef0bca1c3a6d599d46b37562a5de1c58ec3be6899cb3a09ed090d34ca59508bd05660239f562da8f542b2aa5715419d0fc28e6938c0f20ace9c86c3612bdf3837f57bfb64c4cd39b7f4ffaf40b082761d70e5eafcaf1514aad54165d08cbf154bacc00e03b4ae809876af76592115ba2a23801b4371fa7309d4ef78e0d629b35b1a55a43d4af0", 0xe6}, {&(0x7f0000002300)="b089b65deffb3778e56d0034d54e11d04077640f7802f1", 0x17}], 0x2, &(0x7f0000002380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4a25a07d}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x1b, 0x0, 0x4, [0x2, 0xf94, 0x1, 0x7ff, 0xffffffc0, 0x0, 0x3b8f]}, @timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0x3, [{@broadcast, 0xa37}, {@rand_addr=0x64010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xfffffff8}]}, @ssrr={0x89, 0x1f, 0xcb, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @cipso={0x86, 0x15, 0x2, [{0x1, 0xb, "796b99feb1138d4495"}, {0x0, 0x4, '\r '}]}]}}}], 0xc8}}], 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000002580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002680)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2840004}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x90, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x90}, 0x1, 0x0, 0x0, 0xfa6a5c2c07de6202}, 0x20008880) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000002800), 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r13, 0x89fb, &(0x7f0000002880)={'sit0\x00', &(0x7f0000002840)={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0x1c, 0x1d}}) ioctl$INCFS_IOC_CREATE_FILE(r13, 0xc058671e, &(0x7f0000002c80)={{'\x00', 0x3}, {0x6}, 0x26, 0x0, 0x0, &(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)="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", 0x1db, 0x0, &(0x7f0000002b40)={0x2, 0xc7, {0x0, 0xc, 0x93, "c76757f5b20c785a8307ee47a24e0cded1c004a73bc6fe630fe9fa75c5bb673345dbb0b7dc4386c0c14b96e3373270f58e0efbbb2ae2d3e6ede567061858063dc0faf7ec1f6be1793ceb8fb58cf58f5a42e5e9da9afe6528b49741d00a554c7bd61b68bd7a8f3133acaef78ce4def1a8fc3a283c8c30c1eb8706147a8359edbae2930a6ee94e0aabbb12e97e6f491d1236301b", 0x27, "599e3598b4ba460cc59138c1f8c7d2c239cb3b6746ea9521f1334ce184b50ab4c1050614a03457"}, 0x3d, "0e9a41ace8d8426e1c0b7a5b0a9bf6fa0d298277bdf93b246d88a5a2e2252cb6bca64440f2e73acc77853434ddd6fc0ba081599aab6d7261325866e0e6"}, 0x110}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003080)={&(0x7f0000002d80)={0x2c4, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80b80000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2e, 0x3, "8f4469c7fde5e246cebbc3be602e22082e4413c76403d5a91a6cc21d4823ac100e5deb67e70c67d66257"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3806}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x28}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20040010}, 0x800) 4.81974594s ago: executing program 0 (id=5222): socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) (async) pipe(&(0x7f0000000d40)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000f40)="3e0100e3", &(0x7f0000000480)=@tcp=r3, 0x1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000040)=0x3e1, 0x4) 4.630121921s ago: executing program 3 (id=5224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x8, 0xfc, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xb, &(0x7f0000000a40)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x700, 0xe, 0x0, &(0x7f0000000b80)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4c840) accept$inet(r2, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0x2}, 0x105}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010328bd7000fedbdf251c00cf62509352024ec1a742ee0000"], 0x14}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c050}, 0x8000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000540)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000580)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f00000006c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000700)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000002c00)=""/178, 0xb2}, 0x10}], 0x2, 0x23, 0x0) writev(r7, &(0x7f0000002cc0)=[{&(0x7f0000002d00)='.', 0x1}], 0x1) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000002d40)=0xffff1884, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xd0}}, 0x1) 4.497913039s ago: executing program 0 (id=5226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f00000009c0)={0x13, {{0x29, 0x0, 0x3e000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}}}, 0x88) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="5fdd601073a100c66af70be29063224041abca225f4ad4b9d2e1056e4a76f3c129e605d083e62d71c9b306b668dbe262b79a9df903bfe16329cb450c48c492be1318750d861291c1b501441f2ce5337e60e27608fca68b4f2f8f2dfb7bb5ec2b59ba77c400903105dc", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000008c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)="0b88a4af57e6160707c7d7233c9ddfc9a996866fe5f4ae9010a614e843ae5451639588566544ab6c89da9b44cdf859260e51f21ae7ba045057bc5900c03ec77d768644bfe500951a042fd3f3df9c87ede4e518b5b12a2032e26931ce1a9b2c144e6d2ca8479474c228ff37b256cf9bba4c1326402079adadfc5c599bc3bd9f33eea86d299e68a9985f3635edbff1d07aa79bad4dc462b1122e45969a652b7298f8110c817fc499e30227b6d8189460950f2b8d216356338d199ec39a417b7674b86396d1"}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="00008848ffffffffffffaaaaaaaaaaaa88a8110081002f00080045000020407f0000002f90787f000001ac141440a001880b"], 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e6400008105000100040000000600180000100000060019"], 0x4c}}, 0x4000000) (async) socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r9, 0x40085874, &(0x7f00000005c0)={r0, 0x5}) (async) r10 = socket$packet(0x11, 0x3, 0x300) bind$packet(r10, &(0x7f0000000d80)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001180)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000000e80)={0x29c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x26, 0xf18}}}}, [@NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "988e663380"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "658f7a3c5e28951842a8ebff6e"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "73d7f5a1a3"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "302a6580a5"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xdbdac48da28efe6b}, @NL80211_KEY_MODE={0x5}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "09b9c08df66ea89c6e64b1ac1020"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e597d995a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "bf96"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_IE={0x104, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @measure_req={0x26, 0x83, {0x8, 0x9, 0x8, "ec217b32f3d3531a2fde0058bc41d7dd147dfc9aaffb56526bd24dc53a79a7566f6732c9e2b476115af8cc558403231efc2b29e46ca1cd845d2f9bf02b0e425f35b4ba179dc4c1adb1a7a4aaacfe45f8512470f4509339b804bd2864c071cfc11c3d12941af8717eb1e35ed670e1892e435a031b154dbfa21edc5612a0e75a35"}}, @measure_req={0x26, 0x4b, {0xef, 0x5, 0x1, "e460c00f91220c1a43f2758bc6b84e281ba12afe73daab06a15623c704b94f0a4f07767b4ced175896e8de697478abfbef4db73a6fb8e9310febe39712c9aaf56cef6677017b70be"}}, @prep={0x83, 0x1f, {{}, 0x1, 0x6, @device_a, 0x80000001, @void, 0x2, 0x6, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x1}}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x116}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x2, 0x4, 0x0, {0x7fff, 0x10, 0x0, 0x4, 0x0, 0x1}, 0x800, 0x40, 0xfa}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) 3.837882508s ago: executing program 4 (id=5227): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000dc0)={0x64, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="385a03002f5204001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=0x0, @ANYBLOB="d9e26f57a0406304f9838ef6a68ab5cf62a97f7e081e9507934f7a290c0e9f81766a3c62f13e97efaa79583b11403248423ea25f16b3441a6624adadb9d7cfdc6a3efd6e9489f0a8a136cea1be75b0ac07951070b4db171f6348b4"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="54000000100001040000000000000000000000000abea3daf556321a20170a5a16f14c70e2173169b8b26e459185a39bb9dde5ebcf", @ANYRES64=r0, @ANYBLOB="000000000000000014000300697036746e6c30000000000000000000200012800b220100697036746e6c000010000280040013000800080000000400"], 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'syzkaller0\x00'}}, 0x1e) ioctl(r4, 0x4004743a, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000ffff2abd7000fbdbdf250000000077bf3bc2d3b08c1beea25a12f26654572f5f446d850a77c3115df3e84911ae3fec09833d715b224b2496b6ddb0748eef14052c29d277dd6a7a67f02e459b77ae258b192d170253d56f7f383428173fa0829fe9f396c375ed9bd1f104cb4e3f1175b6efaafc04eca07f7662740ac8fd6b6ab56b18a2eeeef2f9ae319b33fcea0d8b252ed7692bf2ff69f2f5dc24d4e021e0ad83177436c2c3e6fb37422f55dd56a61a7ff982dc6057a7a92382605a4fd1f14d9a94a1b3b7e1b8", @ANYRES32=0x0, @ANYBLOB="00000000271a0500"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20044060) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xb, 0xffff}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xcf}}]}, 0x2c}}, 0x24040880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delchain={0x58, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff3, 0xffff}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x18, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c4}, 0x4804) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0x5, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) socket(0x10, 0x3, 0x0) 3.825600407s ago: executing program 1 (id=5229): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x10, 0xffffffff, 0x3, 0x9, 0x2, 0x7, 0x200, 0x5412}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03010000000000140500000000000069163a0000000000bf07200000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.288058722s ago: executing program 3 (id=5230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2c0e4e", 0x3}], 0x1, 0x8040000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x338, 0x10, 0x4, 0x201, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x5}, [@generic="437c4c891c1d99fd967fe5d49d09f9d67bc5e78dd9859d2223e6ba39f6063a77c4d2df8a5f5e0a070d00d69aadfa2761da046bc9dffac229189b5c5c9e8a084ce37e2ade71d13830529d1c562def49826cebd00cf6be6b2bf88ca6100adb67032bcc1008d4590eafb4445ecacd0a09dbe16e1f89ea34245ceab3ce7e73797983fb11ce433d195aff31d99906d05c333f49c660f44f59cbdd5e4a35620c5dd3bb523a859e28563a4f82327bae7569ece7826cb0fba2eb588ac9a4aca56daba906643b2ad222ae82db4c89c1808008ebb238", @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@local}, @generic="fdb512b5ae43e319a332f812679c38a3b7a46f64f35f5a66986188a24b4ad7d10eaebe1e99ba6c211661b027d5a476fa3a587a05f29b3d5fa578e7860b7029234ddf09c8391ea823e2bfb2224407242a138aa93fe68fcbf2f8dce05d578175f1da528bf0ed6ad207d5680cd3ca9ea6d4ba97a81dcb4c15859f012723702cb95290a5b1bbc3b1c8cf47b41d562956177b9b87ab856f231e3c91b15a876cae41367ac3525b6254b607eda9360420ee1ffb0c1eb7c05368a179732e1144", @generic="9d37", @generic="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", @generic="98f4178f853f349bf96e89075023bd17c51486887f08f3a4c0381bbc8c9d99441c5979d5cd258579969d1b48ac1943c2acb74cb7ef067d053bed329c6c032b84b4e298982f76c2e27f35907dde6939992a10748eb4eb0eb4296e38a1a69a2353e436d8fe13214b64bcae19e40dbe81f82c7d93fb2b4f5d61693af0080cfa99ca3c42646d3dfda08b4b53b807"]}, 0x338}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x10000}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) 3.287762816s ago: executing program 1 (id=5231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) sendto$inet(r1, &(0x7f0000000380)="9aa9bdbfa97fb41a5aa5fee98b5b9f67665699f50bc0b1cc2f8e6b7bf9b50a27359ebf177ee8caac2fbfefd0d6025466f727825cbc1b6ece87f7147c35f7849e2df6cb172a8a14428f1d6c6ae1f86bdaa90fca123798f4ef911b932cc11260e4260d77f150c4b615b68e5c529cb008b68834d230ebb36351cdeba70f513f7148f2d66346a94aac5b14df1a2f0fa88e54245489cd4e32d2ad61250a3e2cc63f1f32c11d213fe71924cbc23e7fa717ecf3d4828f84a426902dc788403ac353cc670edb71bfb4f92f37", 0xc8, 0x4000000, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) 3.28665755s ago: executing program 0 (id=5232): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=@delchain={0x1a28, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x4}, {0x7, 0xfff1}, {0xe, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x1f}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @filter_kind_options=@f_fw={{0x7}, {0x83c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x200000, 0x0, 0x3, 0x10, 0x8, 0x3, 0xffffffff, 0x7, 0x7ff, 0x1eb, 0x9, 0x3, 0x0, 0x7, 0x0, 0x0, 0x7, 0x7, 0x0, 0x3, 0x7f, 0x4000, 0x6, 0x4, 0x3, 0x1, 0x6, 0x3, 0x0, 0x1, 0x1, 0x8001, 0x6, 0x583, 0xfffffffc, 0x80, 0xe, 0xfffffb29, 0x15, 0x1, 0x5, 0x2, 0x0, 0xfffffffd, 0xb29, 0x1, 0x8, 0x7, 0x4, 0x4, 0xb, 0x6, 0x3, 0x7, 0xc, 0x4, 0x6, 0x6, 0xffff, 0x7f, 0x2, 0xf8, 0x10000, 0x4, 0x1000, 0xde, 0xf, 0x4, 0x81, 0x9, 0x1, 0x9, 0x9, 0xffff, 0x8001, 0x9, 0xffffffff, 0x7, 0xffff, 0x8, 0x0, 0x2, 0xdd03, 0x7, 0x5, 0x4, 0xc, 0x6, 0x8, 0x2, 0x9, 0x9f, 0xffffffff, 0xd6, 0x7, 0x8, 0x55c, 0x8, 0x8000, 0xb0a, 0x80000000, 0x1, 0x7, 0x3, 0x2, 0xffff, 0x7, 0xa1, 0x1a5, 0x9, 0x8000, 0x3, 0x4, 0x9, 0x1, 0x101, 0x0, 0x5, 0x10001, 0x6, 0x7, 0x7, 0x7f, 0x8, 0x0, 0x3, 0x4, 0x1, 0x200, 0xffffffff, 0x9, 0x8cc3, 0x5fd, 0x10040, 0x10, 0x7, 0x8999, 0x7, 0x200, 0xfa0, 0x2, 0x6, 0x4, 0x483, 0x3, 0x5, 0x12000000, 0x0, 0x101, 0x4, 0x419c547, 0x691f, 0x3, 0x1, 0x91a9, 0x10, 0x1, 0x6c, 0x81, 0x68b, 0x8, 0x0, 0xfffffff7, 0x7, 0x8, 0x5, 0x5, 0x1, 0x8, 0x400, 0x10000, 0x80000, 0xbb7e04c3, 0x8, 0x655f, 0x4, 0x3, 0x8210, 0x1, 0x9, 0xff, 0x8, 0x6, 0x7, 0xea, 0x5, 0x200, 0x7, 0x5, 0x8, 0x1dbe7a89, 0x5, 0x7, 0xffff0000, 0x2, 0x6, 0x3, 0x1, 0x4, 0x0, 0x1, 0xfffffff7, 0x6, 0x63, 0x3, 0x0, 0x78b9000, 0x7, 0x10001, 0x10, 0x2, 0x2, 0xd1e, 0x1, 0x7, 0xb, 0x7fffffff, 0xfffffffe, 0x7, 0x0, 0x1, 0x74e9, 0x39a7, 0x1, 0x402, 0xc3, 0x8001, 0x5a2, 0xec, 0xeb, 0x3, 0x8, 0x7, 0x6, 0x40, 0x6, 0x9, 0x200, 0x23, 0xfffffff1, 0x8, 0xe, 0xfffffffe, 0x6, 0x6, 0x8e9, 0x40, 0x9, 0x9, 0x7, 0xfffffffa, 0x9, 0x1, 0x2, 0xff28]}]}, @TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x80, 0x8f7, 0x2, 0xfffffeff, 0x4, 0x8, 0xfffffff9, 0x8, 0x4d29, 0x6, 0x4, 0x6, 0x4, 0xb57, 0xb, 0x10000, 0x2503, 0x6, 0x8001, 0x3, 0x1, 0x6, 0xe16, 0x6, 0x7, 0x1000, 0x6c, 0x401, 0xf0c2, 0x5, 0x9, 0x4d, 0x9e, 0x5, 0x66d, 0x7f, 0x4, 0x3ff, 0x1, 0x8, 0x1, 0x7fffffff, 0x6, 0x1, 0x4, 0x4c58, 0x61, 0x2, 0x626, 0x7, 0x6, 0x5, 0xfffffffa, 0x3, 0x73, 0x7, 0xfff, 0x7, 0x9, 0x2, 0xc1b, 0xfffff800, 0x4, 0x1, 0xe1, 0xff, 0x1, 0x7, 0x6, 0xffffffff, 0x8000, 0x80000001, 0x8000, 0x3, 0x1000, 0x200, 0x2, 0x7, 0xffffff81, 0x865, 0x81, 0x10000, 0x9, 0x3, 0x9, 0x1, 0x7, 0x1, 0x5, 0x1ff, 0x1, 0xa, 0x5, 0x31, 0x25, 0x3, 0x8, 0x10000, 0x0, 0x2, 0x2, 0x8, 0x0, 0x10000, 0x5, 0x0, 0x71e1, 0x9af1, 0x8, 0xff, 0x40, 0x9, 0x8, 0xb8b, 0xcdcb, 0x2, 0x7, 0xfffffff7, 0x2, 0xffffffff, 0x8, 0x7, 0x7fffffff, 0x5, 0x3ff, 0x4, 0x52d, 0x7, 0x3, 0x8, 0x1000, 0x9, 0xa0d, 0x0, 0xfffffffa, 0x4c, 0x80000001, 0x6, 0x7, 0x23a, 0xfffe0000, 0x6, 0xe, 0x1, 0x3, 0x4, 0x0, 0xdf2, 0xbd, 0x2, 0x1223, 0x6, 0x8001, 0xc, 0x7fffffff, 0x4, 0x7, 0x2, 0x6, 0xed9, 0x2, 0x2, 0xffffffff, 0x2, 0xf2, 0xfffffff8, 0x3, 0x8, 0x4, 0x3, 0x8, 0x6, 0xffffff81, 0xe, 0x3, 0x5, 0x8b6, 0x40, 0x9, 0x80000000, 0x481, 0x7, 0xffffffff, 0x1, 0x101, 0xb, 0x3, 0x7fff, 0x101, 0x80000001, 0x0, 0x64e1, 0x0, 0x200, 0x5, 0x9c, 0x6, 0xbffb, 0x200, 0x6, 0x2, 0xc1, 0xa0dc82c1, 0x3, 0xc064, 0x4, 0x8001, 0x1000dea, 0xf9, 0x8000, 0xd, 0x7, 0x3, 0x7, 0xfffffffb, 0x11, 0x7, 0x400, 0xc2, 0x3, 0xff800000, 0x3, 0x1, 0x7, 0x4, 0x7, 0x7fffffff, 0x2, 0xb, 0x3, 0x7, 0x7fffffff, 0x0, 0x5, 0x1, 0x8, 0x9, 0x4, 0x40, 0x7, 0x81, 0x1, 0x2, 0x9, 0xa, 0x1, 0x702, 0x1, 0x4, 0xf, 0x7, 0x7, 0xdb2, 0x80000001]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_FW_MASK={0x8, 0x5, 0xa8}, @TCA_FW_POLICE={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1198, 0x2, [@TCA_BPF_ACT={0x4d8, 0x1, [@m_xt={0x120, 0x15, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xb3, 0x6, "15e04992f1226e022653a935ff7fe68bce8ef87cad407e5aac9ca615e6be88b080e3b39bf2f83fb28714f50d2fb7829cf676f27eb7437c632b25dc0a69494b48cd8d363a12feecfcb246ea4e65615a72cb29784d2d28778228f92baffe9cf3ffb05add645cfdaba1d1409cd6028fe8aa29a63bb6abdddc8b78f0db0ae0a139fcd4f412c468daf04c96f44c10d5904c828a31722fe7c1cc66be4d75ad2091e23069461b5d56da86d84161f29324b354"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x110, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffd5f, 0x0, 0x1, 0x5, 0x1}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2eb7, 0x4, 0x7, 0x7}, 0x9}}]}, {0xa5, 0x6, "141ef33ce5df70e197bf35c2bb824453ad1e5f7ed4f64102fadab3612403f8c66e36307dba9d3e0b4debfc6747b6e3d4d69537a769481893cdc15762d4f38ce746696015fce44c25fc987cbc9d83bef5adfe2cbe9ed406c1a50b54fde370a4a7f8308ec3f0dca58132cf0d0bb189c0523bc1ede8d6f943abd64c0add9499ba8d616cc63b4ff4f9a46b05ae088c03303eac498b09bd77978037e919012432212349"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x140, 0x16, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8bc7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000000}]}, {0xd4, 0x6, "a09edc55f5b82e3a81f2a63fe33b1acfcbd8e2064cb9435fbf0b118505d4c5ff1868f1b0b3ac5eca7282600f9669b950c9a943135f863069fe7f0ed333cb7f0b69d057f6cd81c2a03783e68fccb9ac82ca5c293e50d593ff9f7e628229e6680d8a9598410e003823e90c68d3df9f5423f77d4e82d9d88b47a809b01eabe668e27f97d169bf858dcd7f285690e93cfd48b9c1ed529f16dd7ae62d6e9c1209db1a8717186b33a566f0af7e7a013efb4a9d4828002204452f27f13b10ee1e9645dc272c053bcbb73bd57b7779943723e4d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x164, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xaf, 0x3, 0x7, 0x7f}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x7, 0x7, 0x2}, 0x43}}]}, {0xfd, 0x6, "570ae58449e6a4e58f7d221319a57b7a4077ac91084d14041c8e560c8a78c85f2cb062334eb1f7649b9bc6bd9bf582db3a750f2026bc7a787aa7a396a8e884dfa7829a5f951a842909cbfe7adbf5718c2bc1bcc6a829252af042c96600705ba8972ef048ceb5862fb93f7cb334c0f4c016349214d00415a2e635e066244c25fcb5d6db2aa7efa24629bd8403fe59b093122cb3baa48bb8367673fb62401194c3abbf0411fcb39195e517d33f8f14a65cb8a217d4dce34c18e5ab01b60c03b9f15b7134de6eccc67ec3920c0429725dc27bd9944c881e9224399734c1ec2d2464e89bd801aceba074f4f0296f16ae2dfc40a2c2a0f352c4521e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0xa4c0, 0x1, 0x7e}, {0xfff7, 0x2, 0xfc, 0x114}, {0x6, 0x7f, 0xfc, 0x5}, {0x6, 0x5, 0x0, 0x1000}, {0x0, 0x0, 0x5b, 0x8}, {0xa00, 0x7, 0x6, 0x6}, {0x4, 0x5, 0xd7, 0x7fff}, {0x2, 0x4a, 0x6, 0xada}, {0x8, 0x7f, 0x40, 0x5}]}}, @TCA_BPF_POLICE={0xc60, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x40, 0x6, 0x40, 0x80000001, 0x5, 0xffffffff, 0x6, 0x7f, 0x8, 0x3, 0x80, 0x4, 0x8, 0x7fff, 0x5, 0x80, 0x2b9c, 0x1, 0xfff, 0x9, 0x1ff, 0x7ff, 0xffffffff, 0x9, 0x9, 0x101, 0x200, 0x400, 0x0, 0x6, 0x5, 0xc37, 0x4, 0x10001, 0x1, 0xb, 0x7f, 0x9, 0x3, 0x7a781c2, 0x8001, 0xe2ea, 0x9, 0x81, 0x2, 0x5, 0x2, 0x5, 0x2e7047ca, 0x7fff, 0x1, 0x9, 0x7, 0x0, 0x6, 0x0, 0x5, 0x9, 0x100, 0xfffffc00, 0xb, 0x0, 0x7, 0x9, 0x6, 0x123, 0x400, 0x6db6, 0x7, 0x10000, 0xe8dc, 0x1c, 0xe0, 0x7e40, 0x3, 0x5b29, 0x9, 0x3, 0xafa3, 0xd150, 0xc, 0x6, 0x8, 0x4f3a54b8, 0x7ff, 0x4981, 0x10001, 0x6, 0x8, 0x7, 0x2, 0x5, 0x80000000, 0x3, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x5, 0x2, 0x4, 0x7, 0x200, 0x8001, 0x9, 0xc, 0x8, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0xcb6, 0x32, 0x3ff, 0xc8a, 0x6, 0x9, 0x1, 0x0, 0xfff, 0x8001, 0x3, 0x2, 0x293, 0xffff, 0x0, 0x6, 0x8000, 0xf, 0xa6, 0x6, 0x278f, 0x38, 0x1a, 0x40, 0x5, 0x81, 0x6, 0x401, 0x5, 0x6, 0x2, 0xe6bac4d, 0x89, 0x8, 0x3, 0x7, 0x6, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x921, 0x2, 0x8001, 0x4, 0x3, 0xf, 0x1, 0x1, 0xfffffff6, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x6, 0x96, 0x0, 0x7, 0x1ff, 0x3, 0xfffffffc, 0x40, 0x5, 0x9, 0x1, 0x12f, 0x88e6, 0x6b, 0x6a, 0xc, 0x7, 0x1, 0x1ff, 0x0, 0x5, 0xff, 0x401, 0x8, 0x2b, 0x2, 0x3, 0x7, 0x0, 0x2, 0x7, 0x8, 0x0, 0x6, 0x8aca, 0x6, 0x80, 0x1, 0x10, 0x7, 0x0, 0xb, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x1, 0x2eae, 0x6, 0x5, 0x9, 0xc000, 0x7fffffff, 0x9, 0x0, 0x400, 0x7, 0x5, 0x1, 0x0, 0xb2dd, 0x6, 0x80000000, 0x8, 0xbc, 0x3, 0x7, 0xff, 0x3, 0x8, 0x6, 0x1, 0x2, 0x4, 0x0, 0x2, 0xb9a3, 0x2, 0x7, 0x1, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0xe9, 0x1000, 0x15fc, {0x6, 0x0, 0x8, 0x0, 0xb, 0x80}, {0x0, 0x1, 0x3, 0x2, 0x7, 0x66e1f9d5}, 0xfffffffe, 0x1, 0x80000000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4f2f, 0x3, 0xffffffff, 0x7fff, 0xfffffff7, 0x3ff, 0x5, 0xffffffff, 0xc, 0xf, 0x4, 0x8, 0x50f5896, 0x9, 0x5, 0xc00, 0x59, 0x1, 0x1, 0x0, 0xec41, 0x2, 0x9, 0x8, 0x1000, 0x8, 0xc1f, 0x5, 0xf, 0x9, 0x0, 0x3, 0x1, 0x0, 0x7, 0x4, 0x8, 0xa, 0x1, 0x377, 0x3, 0x2, 0x95, 0x10, 0xc2, 0x9, 0x88, 0xf, 0x4, 0x155c6928, 0xfff, 0x7ff, 0x40, 0x8, 0x200, 0x0, 0x2, 0x6144, 0x7, 0x10001, 0x3, 0x79, 0x788, 0xceb1, 0x2, 0x8, 0x9, 0x20000000, 0x4, 0x43, 0x6, 0x1000, 0x42d, 0x0, 0xffff1bed, 0x81, 0x0, 0x7fff, 0x80, 0x0, 0x240, 0x2, 0x2, 0x5, 0x1, 0x3, 0x47a6, 0x1, 0x6, 0x3, 0x6, 0xff, 0x400, 0x0, 0x3, 0xfff, 0x7fc, 0x4, 0x6, 0xfff, 0xffff, 0x40000000, 0xc1, 0x6, 0x3, 0x4, 0x6, 0x9, 0x80000000, 0x7, 0x7, 0x0, 0x0, 0x10, 0x10, 0x400, 0x6, 0x400, 0x62a, 0x366, 0x4, 0x46c, 0xffffffff, 0x1, 0x4, 0x3, 0x100, 0xe, 0x1d, 0x7, 0x0, 0xdd9, 0x5, 0x1, 0x8, 0x5, 0xf, 0x3, 0x7, 0xd099, 0x6, 0x6, 0x400, 0x6, 0xffff, 0xfffffffb, 0xd3d, 0xffff, 0x0, 0x5, 0x800, 0x4, 0x5, 0x9, 0x0, 0x8, 0x4, 0x1ff, 0xded7, 0x2, 0x8, 0x0, 0x2, 0xff, 0xac3, 0xb1, 0x7f, 0x5c, 0x0, 0x3, 0x8, 0xa1, 0x10, 0x6, 0x6, 0x8, 0x1, 0x1, 0x9, 0xffffffc0, 0x1, 0x9, 0xe811, 0x1000, 0x1, 0x7ff, 0x7a, 0x1, 0x7ff, 0x5, 0x4, 0x6, 0xcd8, 0x4, 0x7c69, 0x2, 0x9, 0x7fffffff, 0xfffffc01, 0x3, 0xef02, 0x7fffffff, 0x2, 0x4, 0x8, 0x5, 0x2a, 0xd6, 0xfff, 0x52cd8653, 0x917, 0x9, 0x4, 0x5, 0x4, 0x0, 0xf, 0x3, 0x9, 0x800, 0xc, 0x400, 0x10000, 0x40, 0x8, 0x0, 0x279, 0x5, 0x4, 0x9, 0x5, 0x0, 0x3, 0x3, 0xe, 0xe3a, 0x8, 0x3, 0x10, 0x9, 0xfff, 0xffffffff, 0x4, 0x917a, 0x8, 0xfffffff0, 0xbe7b, 0xfff, 0xd, 0x7, 0x38eec00, 0x6, 0x2, 0x80000001, 0x5, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x5, 0x1, 0x0, 0x1ff, 0x3, 0xfff, 0x8db0, 0x1, 0x80, 0x7, 0x0, 0x6, 0x9, 0x0, 0x7, 0x200, 0x5a40, 0x5, 0xe4c, 0x1, 0xc, 0x1b, 0xc9, 0x8, 0x3, 0x8, 0x9, 0x8001, 0x0, 0x80000000, 0x7ff, 0xffff, 0x10, 0x5, 0x6, 0x2, 0xbc, 0x2, 0x3, 0xd7, 0x7, 0xe16, 0xffff, 0x9, 0x2, 0x0, 0x5, 0x5, 0x4, 0x8, 0x6, 0xa, 0x2, 0x5, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x10, 0xfffffffa, 0x1, 0xfffffffa, 0xfff, 0x9, 0x9, 0x9, 0x0, 0xe3aa, 0x1000, 0x3, 0x1000, 0x3ff, 0x8, 0x362, 0x1, 0x5, 0x4a90, 0x8000, 0x0, 0x75, 0x9, 0x8, 0xfffffffc, 0x100, 0x7, 0x1, 0x2, 0x1, 0x9, 0x1b9a, 0x8, 0xa5, 0xfffffff4, 0x5, 0x8, 0x0, 0x1, 0x5, 0x4, 0x1, 0x1, 0x7, 0x1ff, 0x8f, 0x460, 0x1000e, 0xf, 0x2, 0x700000, 0x8, 0x5, 0x240, 0x4, 0x9, 0xe5, 0x5, 0x5d853f47, 0xffffffff, 0x2, 0x3, 0xc7c, 0x96c, 0x3, 0x8, 0xff, 0x80000001, 0xffff045d, 0x41e, 0x90000, 0x9e, 0x2, 0x7, 0x1, 0x1, 0xffff, 0x4, 0x6, 0x3f, 0xc0, 0x101, 0x7ff, 0xb23, 0x2, 0xe, 0x5, 0x8000, 0xe7a5, 0x38, 0x8, 0x0, 0xfffffffa, 0x1, 0x4, 0x4c, 0x4, 0x9b, 0x57d, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffa, 0x8e8, 0x9, 0xff, 0x0, 0x6, 0xa2f, 0x9, 0x2c, 0x3, 0x4, 0xd, 0xfffffff8, 0xc, 0x273, 0x535, 0xea70, 0x62, 0x7, 0x5, 0xfffffff7, 0x4, 0x4, 0x5, 0xfffffffd, 0x9, 0xffffffff, 0x9, 0x81, 0x2ef, 0x7, 0x5, 0xfffffff9, 0x8, 0x40, 0x8000, 0x9, 0xcc5, 0x39, 0x400, 0x101, 0x8, 0xa, 0x48, 0x1000, 0x1164, 0x96, 0x3, 0x8, 0x0, 0x8, 0xffff, 0x6, 0x3, 0x6, 0x80000001, 0x1, 0xffffff72, 0x9, 0x10000, 0x7, 0x0, 0x8, 0x914, 0xf, 0x4, 0x50b, 0x8, 0x3, 0x5, 0x40, 0x7, 0xf3, 0x1, 0x7, 0x6, 0x3732, 0x9, 0x3000000, 0x8, 0x8, 0x7, 0xfffffffb, 0xa, 0x4000, 0xc, 0xd0, 0x3, 0x2, 0x3, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1a28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd2a, 0x255fdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x9}, {0x0, 0xfff3}, {0xfff1, 0x300}}, [@TCA_RATE={0x6, 0x5, {0x84, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2804d095}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x0, 0x9, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x8, 0x2, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xfa, 0x24e10ba6, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x80, 0x80000000, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000940)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf25090000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800010026a374e7912d8a3266661c76f60136dd44c9e87f5464486a491d08eb7811ba02b948b7cd025516a2826013b90dbdc14b44a886c1e860ace393f7ce2d028f2adb168fc3931f3e3c953975d0ba1fdc0fc9636143695571b114ff561497037ac78062dcddc919ee013e01792cdc7a02a61d60fd30578057745b360dd3510317286943092a7f59bed958e34849c7fd523f152f7880e5b01772aa4a797567fb1636d81e6be86ff794f56d24b979d192ab032e895f7544b38d96d0e6d471667afe22a1d9e1c8cbdea3cec9509d25b1052f4aacde442cd9dc87b05d", @ANYRES32=r5, @ANYBLOB="080003000000000014000200767863616e310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000200000060000180140002007465616d5f736c6176655f3000000000140002006261746164765f736c6176655f30000008000300030000000800030003000000140002007663616e300000000000000000000000080003000600000008000100", @ANYRES32=r7, @ANYBLOB="18000180140002007465616d5f736c6176655f3000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x90) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window, @window={0x3, 0x7, 0x2}, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0xa}], 0xb) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), 0x1b) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000000c00160007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000003c0)={r11, 0x0, &(0x7f0000000480)=""/53, 0x700}, 0x20) 2.996200302s ago: executing program 4 (id=5233): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x0, 0x81}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0) sendfile(r3, r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x81}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x4850}, 0x408d0) 2.953765231s ago: executing program 3 (id=5234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ce}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000004080101001600000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000001e00007f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000640), 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100001000010000000000000000007f0000010000000000000000000000007f0000010048ff00000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000980)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f00000009c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) unshare(0x6a040000) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8982, &(0x7f0000000b40)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r12, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES32=r5, @ANYRESHEX=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8800010}, 0xc, &(0x7f0000000d40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="000827bd7000fddbdf27150000005000018008000300010000001400020070696d72656730000000000000000000140002006d616376746170300000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="6400018008000100", @ANYRES32=r5, @ANYBLOB="0800030003000000140002006970766c616e3100000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32=r13, @ANYBLOB="c37d01e8", @ANYRES32=r13, @ANYBLOB="3400018008000100", @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0800030002000000080003000200000008000300020000003800018008000300010000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYRESDEC=r2, @ANYRES32=r5, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) bind$inet6(r7, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) 2.682307955s ago: executing program 1 (id=5236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095", @ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000000000000000000000010000", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000380)=0x8fa7, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0x215eb000) unshare(0x8040480) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000480)={0x2, 'rose0\x00', {0x57}, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250500000018000000000800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) 2.556281604s ago: executing program 4 (id=5237): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a00)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000a40)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000a80)={&(0x7f0000000ac0)=@name={0x1e, 0x2, 0x1, {{0x1, 0xfffffff5}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x40400) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x890b, 0x0) 2.328829858s ago: executing program 2 (id=5238): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x8, &(0x7f0000000480)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x3}, @call, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000004c0)='GPL\x00'}, 0x94) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="562579c21efc12417bb7bdd40d5e6a41adeeeedd0225b305289f58b358fd2ca14aa2503aa28efb093d294aa46283637846cb55d291606c1d0728ea4fbb863d7d689af3eb811277889f7ac35f018fd8c45fa092c70464ad67d726f0d00b8454115a268473c310d80200d1c4532c9acda18af6da814f431cb73f5accc1c3400834e6eb6bfe873533", 0x87}, {&(0x7f00000000c0)="80a2c69929c3761c39e92aca665b3539281b8d2a0e77b0478fdd03349b2dd9b0118811c7128eb31bf72b262a48d7e19fa2b86eb8bcc5121ecac6d12048b85e814365a9ccbca343d4e19c5c0820229925259fed3fd47ec036899b615a9c498129be789682f8515dbb", 0x68}, {&(0x7f0000000140)="ffbe2b44ad7abe3dc388a7563f5ec4b058fcf56e4e84bb860389", 0x1a}, {&(0x7f0000000180)="ba49043f4b04a6cfceb2c765ca8e4229a5536e9ecfa2f6b67f0611e20ff3b816ea3589f755de042aed29", 0x2a}, {&(0x7f0000000500)="e7fdc55c47e9774923283b8d9163b06db1ae4d510763b040030994e96dff11513a176cd8bbfa802e0b06842998f8fc4d848f2ddabbb5cdd14196dd1ba90c44a2c4c11aafcce194863f59cbfc47d0d31236fd79ab4d29e0e01f8eae28b123be9d61c0ae634c1cc3a3e3b14920cb25b97c6b0c602ea89c14508401d61f2e59c27fe5779c5db17ad4817668493f2e902c010ae713e825453552072920a61d6c2f28363f2ddae39c4dc9958ed2e6d56fb7da44cd5d67e42ec07065ee64ec55773eed27da35c3c5a93bf56f8710ae38e8abaa185ab1da1aed1565c9727c57f00a048edb1837dfc01a6694d9255024a52f7f89e48b7d12048fba09049cbb9412c1614c827ee4a92244fa924cad5d450f60d1b68399932ee26bd7b5c008e1eb5231ae37c4d6270f6f0475f2bbbac668f6cc6a53ff28054adae0ae8657aa5e378196249e9726df677c49b0d70e6ae1817d2d70bce89017ed412d4eb18d68431ab8cd0d517ad1f0652c5fa1697f9a510d2940fc82fd01537667b0ca2b7b09a11a2b4f79cad79190d4f1b975175156c62a4bc926630adc511eadf5978cc1d0340b026f9860e8f65212705b79b0c670aac26cb796f29f53781704ad02a8feceb6ed73007d2e8a8b5c3a6a19c9ee4915ffedfd1d8acda042d260eaeff113d60e2ac81cf0a571bd372578ab3b35cec44bb6e201bdc6a7d1b0f9d43cc83a892eff4aef12e403fe4a1a1519735e2b048a2e5b342a94b9b2aa3e6eadc3220325d6f9281b82d2e8780cc2f758de3a68cd240f8c9c7156ba185cef917114af4f7a988a8978305b96f89528cd59b878b0507c0d2a654964a51757ae1115f1749f8edc39580a7374a458baaeed5ed6b97771d9c8f5d57e683bbeffc822f7c8dda0a4721383bf0c3b92369a6ad90f70e8dfd531ff323912289dfe59046b4b89bf8bb7ad2e726f378f6beb25248c1eff417cd7e58ccd7bdbd581cf5d62a19f3b503b983f74985ce62a55f7b34eb6c534c851e65a48ef81132c7ce93aebba05d77f694ef020342e46c09c70443c9f83dbbe71687b204e595949f2af58d01f4abee18d3df7e4f1d34e30e6fce7ff8bdc708a91cf1701e5205fc9bf47cba781fa4733ce90f2ee1ab0ac6981e18cdf013357ff1772ade6a860032e7d01d2be9c1245f4a03240a0667da675e4963094cf518b7a44299fe8ae2ea8b0e57b84133ad1e97382b5ed38a13c26aab028953b573459eb06eb3b397f686a452b27f14ddccfcaae6e3879bbb348072c9f009526d892fb3ecf5b5f397c798c778e925ea0b4b4f01e6e36809037b4d036c63525396ce89539979a228fb0ef9da74c547b3c12ce4c4df2093f28a78549e826fca14dc7ceffdcbabb339181c19ce2ad52f806c41d75fef3ccf0fb621ad18df6537acbbfabbe4d96baa5b64a80f76d24a74d965a4c79734a3239b02b50c8f2aadba6abe38fa5389253ada2a75e8be422854f5f178f8a72338f9ecdef5820ddf74ad328e2ec13112218a6f2db18cd363621235e40eb234812ee81d8afc551a89f3a38f837484d7bc3657df682683a6c1db6472a680c19c5037328e9d8c113acae2f959a2cad3014770ce3486cccd0e05d5a6604e91b565d11dce56354023a53bd38eae8a5bb0a337c93470557259fc145fcef2697ec414bb967e5e8b1acd4237024ba2bfa6c2ca06fea44aaf68018754e1de4364e5e5c35c873d37b99246441ff0602689be887c4beccd235fe25ed85a725c5c4458fab9f812dcfb6508efd2f1848bcd115350655d425cc223575426f8b5058e617496b4a0544e917258110625949ccdab55a8ef54b2fbf062b06264ac2073d474b1ee0e1d1d1c745fe8d88e0dbd5d406254c57db588dd78d4f02859dc632358d2dba6c7c601238db2022d96aa67b5ec3e21ca994b08e0ecf31090e4458f80b5842f62adbb8bb4a6ecad198206904b6d206d896ab951b740d0a378ad3f479d7169474e1fea56afbfdf9183552c1e93a6738401a6ecfbfc38dc45830b85590f687faebb0ab65bd33ae83fd9a83587590be7723668574585093175a5cba9ef537f5fde3dfaf555c22e6e71c2bc89ee4593c6ba84a632003ac52e304698f69f054df386697f6fd3888867e05528d853c4c9d5641ce7afae1664b2fdd058bc176e971850553748c54b503d606ac09a5b08ac5cfac8302e427d39a07c3295cb7d586dea802a781ff8b58668b74ee4c46635504164afb9b9c046249079b703633d4db98249a4a4ba849883aa8218f7cf140fef539ec08023706c8835b1790fd11f311b8105c90f4c7e93e3920f9fbb820ffa4eee7e82ebc2e655df2cd55b5baa6b964cd61914bc93a34e863652a14821dc7a2ba03a88604174c5dd716c64e6c73e5487a525b892d5c519773531501d0f28d882ecf48667310e3b3b616bd6ab8399f9ff9cb91e86af89c4228542b060aea338f64a32df857bb38a58fb2b7fd882204e94257c2055b40066701541e5827c753d9fa9b42991389453edfab1dc797897463e38a988c87e2e0c918f8040075b07ca2e3ddb2a6c35ed0ffac84ef7bfa2689e7d9232be24b76b7a36dbe6b042863ba3e22c730c6664ed1c1568b79fa96720b289b94c1ea7dc86bbab3d704cb887fefa6f1cd2aef1f70746bbeafeb901bcc4a27153fa5360d47201dee056b7aea47ddcdc7139e51db2386f06a3f4644bec05d46ef0dc8c9ff8ef6ab5c80563591907abf8919b96ca45612c23866eac8dab55355cf756f25e7164f277df9ef30f5e7d1a82b97fcf039bb6b21c87d61595ac9fee5cb24fa231f2f5b527d87afded4bcef72a6d2613c7e856da94c60dffefa84c14a24d8852c9ec2b7369ea7e80abf725d6b21827130d51b03942b5985d6adb7bedad4e64bedffd0bdf4c1dd46a0200c1a33da07f01e01e03374e17255be9f6ae772a0c7bd62fc2081b6e6c8b0b71adf7fc553826d8f024f220a867128fb6d19b89976885e26c39fd6573f5cde067fd2bea97fdc633ce55e2eb7ea91dc908cff68602cf7219e7b74267842c45bf435cc560ff6c2c2a81a341bba25b12ec831bfcebc76c9ba1f51667ced7cdf2e938b2116625d3a09636503f13fb2f7f08c68656c13e324640415eddf4d6b59f666b91bb4498fbc7d725ceddfd383958aed42e9f98ab98727f0b823faa441c2791a7a596deccdb353b652848c4d1fd33d69848e21bdd4371e2a77b36ed10f7775621cc2267c4ecc5f8943ea1f8e4c65f6547da4bbd7be7d0b9e8d27b277e7405a55c93a40ecaa1c4cbffee284740b7e48fedabfac14fe6cef5b179e225cc90d7960a8d3fa4c15cdc0151d34c510699ec639da1ec8c21c1587c9cf09b6235fa4c94fc2c1f2b234b92272b009ddb5035d237590f435a2331769eb1ec52847b0ee92524109a24c3ede9ee4fd4c73d2fd3140561bbfb4303322a40e1ed2d7887991b6572cecfdf083a690216d2228d279f5d9c406964ab2f71e24862cd1bda417b7c2780c580b5de10d14847589599efc56ea12330342ca8834f38aba7d0bced8ef0f743420b7c19d57d902143f1464e4880637dbd7a05cfa957c5244492fe8cd7509cef9fe4dabd78da4c2818a75a638fa4050177018f6f2bdf146a093129c883c96ec3c4f4de66fbb6d455af8487bf4489ab51ec7200b11a43f6bee5a3402fbba5d1cbbca3253e660a86ee084486fbca80c74e46a1d1e259afa5ed7d46b64b852a885ab378ae9458e465de4d29de17de47b7606819cc69880a722436efd9e9249fe4382ab2710a924366bcb52390aba05ad31bc297b4214fb409a047f035a9bade95a359b8407b2a1b1a75d40dd5efaa18c2470e4857379e1cd54c0437a682f57fc5897c440c98e5b5a0ae45b88a736f3484f7774b9375502ac90f89b029c62584b1fde8a13398c4bdc0ebfd538317f06b7413402dc2d8a58772a69902c9044121c9159f23afd9603f9e1563589e2e0bd027133651131cf3c92b9b060d7e0ff2e61f96bcbb9a7b36f304d34806696311229d8d536da076e96ac2669559d8a3e6d63140e8bb4edbe645b91f07ba753d53923e1aadc88068a048b1f214e5557e7320a28370be76cea84243d49f662b8c9afa7262a670f4967512cd484974a8422d83a45b1476d47e3e53fa505c7e2081ddb47d9032fbf267c997f4d09eeae021733655604b7759110d4115ecfca8f6cf861e6c379fe5ea11d3a6b80b013643c03c3f04fe56397ba2d9c547e5d9df97dc553cc8c4ccd6774e1f84679d00da23896c845895819c1f716f3e7a9dc6c6effcea3af67df93ba475b3159fae0975eb1c2355de42d31f360d41b79e44d9263a6851dd72228a3a4321bbb8a25b213daa099a2360eca3fc3f23ee3c007430afed437e94195fdae9541dba6faeacb3f4e3f8541875ef98cf7775e4899c0657dba811245a53fecaee8af823bb6a0db206475c9de071ddff88760932fc70ca997f48d52278222984f02d929dccbc5d15b93ebf4609be375784e7e04d59787cdcc123fcdbc8d590dd1527fec22512d0039c9dec27af703a33582a587240860d2515e6bab23a74ac022d59a2c0a32e8333a2e48bfa1e792fb03e8a32f649750534df5e1217e3af7d0822a303ad4be97ec5a3c8bc7c3964e3874dd1198176312cb09175c3d43f902b2d45cd5f3578eeb28dfc609acb7fee403639b6ce80cd9b63bbdf658524f5acec8b3a56c42a26f3a28c7fa93fd82756fe7696c328e76c66f803bbb1193e1f1ae82847719f5eb74b8a345a6612c8209201f11e7228db7b4babf0370cd453d82bc60d5ba82d0d6730351920efe942ed7fe3127ac7fb37b1c0cd564034433cb503b83f129579c26e8786d8077f4bcb320eeee52f6b549592aff4538f2c5fd1e3870194f7fbc15b0fb00dd6a5750ac30d19ce5c2be11e347b441a9a78d9f17e65ba2df2c3c0daa12442aaf27a9459db64cdf55a88ec01e50487bdf96f2f8f766c811fa0a4c4ff45c391ce79dd217ba5bc3ec3e3ec90d15797ac35fcf625a660f9c9a7df79b5aab18646c017a0c2e90a399feba27666caa04b65db6b84cbf6b937b77e36105b8a7538c89ca9ffaf91c439e3f315f6dd2099620cdd82145bfe6c90fc23c4edd4d2ad5ef967c227452d9d96b4ac7447b8d0cdc94502511447505dceae8b3da584254e6b295521eb43303a321b0ed53368e9d4abbc095b538941b6b5100a1d55ac83b3da1cf20b0049ce769d91a7b46e4683b5d2d2c836b55afddfd481e9c8394d15c4444f53f93777706857c32fd10c7dd05ae71617e97eb6995526fbe4acd71414c9ae78f620d1d567d1f033b9b678cd03c721eedc1a4b5fb6c1fd8e52e5881b89de91519d77281e75892493d8a488951248be406e9f9dc9fd447b4d1bd90beb62f67a77afd29ad25d45e1240d0009d227eb37836bd5fe5b85238ed5a208fc19276dcede998e5010b615326777acb04341d3ea3dfd7bf811b78573a6fc25b8fa7a6c82d0d2814ad0c837c1847371a6076648ee7bba0937fb296d3dc1d1f231a6fe49ac8bd30eb1bf12c03c0ed4c4e47404f2d9ced53497607825d72e96393c078300d84e3888f48361691db38690e08e83e01ac210bdcc1987ed8175c9ef260da53af16d17129cd8231e71d682f84a6218910ff04f8af61bdb58941dc08b79297b478b2c3f48c9580986d50a1e5f74d24bd69a7bdf365515021ce5a872dc4bf29f625eb8b6e399872ae8d0dc637240ecb12c7e95a51c9387f059103638d09059e01208cc170404a89d0a5e39a937ca2a1fee4a950218bc8c50b3001f26c0c0d4835c3de285e67a4836e9f174302af50", 0x1000}], 0x5, 0x101, 0x10) 2.238461007s ago: executing program 4 (id=5239): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)=ANY=[@ANYBLOB="240000002e0029022ac77000fadbdf25", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) socketpair(0x21, 0x5, 0xd, &(0x7f0000000040)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20}]}, @NFT_MSG_NEWSETELEM={0xe4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb8, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "04886ff2a92fca775e4a3ee88073421b9afd1c4d3948905e7fe7c20d1f30127c8bd0d4797c78fb5ba9f76d39803775da154bc4ce191149e90e64ab69b688330e4929366a2fa14a499916ee973405b97562747c9e2cf1ba5388d56ca0353dc386fc05145e16063ef3130cad8fce5694b149a6fca98c21327b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x190}}, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f00000004c0), 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21505, 0x200fdcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x1}, 0x10) (async) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={0x24, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r10, r7}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) shutdown(0xffffffffffffffff, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='devices.list\x00', 0x26e1, 0x0) 2.178031166s ago: executing program 0 (id=5240): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, 0xe8, 0x8) (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x0, 0x10, &(0x7f00000012c0), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 2.016516329s ago: executing program 2 (id=5241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xd, 0x20000000000000bb, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x4, 0x3, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000001440), 0x40000000000009f, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000f80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newtfilter={0x74, 0x2c, 0x601, 0x70bd29, 0x0, {0x0, 0x0, 0x2000, r9, {}, {0xfff1, 0xffff}, {0x300, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000007, 0x7, 0x9c5, 0x6, {0x4, 0x1, 0x10, 0x800, 0x4}, {0x0, 0x0, 0xffff, 0x3, 0x9, 0x2}, 0x7, 0x3, 0x4}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000010c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd4a}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 1.857528613s ago: executing program 0 (id=5242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa4, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff4c7d}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x0, 0x0, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab2592af06d2a594bd55044f3f8f4a6ee143d88640808cb5319e5982093b0f1e78cdb4585cb8822e00d4b509e74d3ebb43b153f2481c6e300"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="e85900000d0a01010000000000000000010000020900020073797a30000000000900020073797a32000000000900010073797a30"], 0x59e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c002}, 0x4800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e00000081000000010000000d0000000a220000", @ANYRES32, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05003109e781631c736a2fb2a2927c4800d00532a8900002000000000000000c00"/47], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x7, &(0x7f0000000c00)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff8}, @ldst={0x0, 0x1, 0x3, 0x9, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.727948708s ago: executing program 4 (id=5243): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) bind$tipc(r4, &(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r4, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x5}}, 0x10) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000700)={&(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x1, 0x10, 0x5a9, 0x7f, {{0x20, 0x4, 0x3, 0x6, 0x80, 0x68, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x15, 0x1, [{0x7, 0xf, "4f132668d0a3340ae80325e3f9"}]}, @lsrr={0x83, 0x17, 0x5f, [@dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @noop, @timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0x4, [{@loopback, 0x8}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8000}]}, @lsrr={0x83, 0x7, 0x81, [@empty]}, @rr={0x7, 0xb, 0xd2, [@loopback, @loopback]}, @ssrr={0x89, 0xf, 0x7c, [@rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ad000000bf09000000000000550901001f0001009500000000000000bf91000000000000b70200000200000085df4fb75f8d7d0300000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', r9, 0x0, r8}, 0x94) 1.435922516s ago: executing program 2 (id=5244): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x6e, 0x800) accept4$unix(r1, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x80000) listen(r0, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000001c80)="959c68e13fdefd2d0b529c87be079af7842693f79327324475aa2248d84ac9e0ff5e90d946fda4f354ddf3e3ecb35d74568f0b2d332c") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000000906110200000000000000000000fffe0900020073797a310000020005000100070000001c0007800c00018008000140310000010c0002800800014064"], 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 1.012674255s ago: executing program 0 (id=5245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) close(0x3) 985.785836ms ago: executing program 2 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x2, {0x2, 0xf0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xff}, {0x3, 0x2, {0x1, 0x1, 0x2}, {0x0, 0x10f}, 0xff, 0xfe}, {0x0, 0x3, {0x2, 0xf0}, {0x1, 0x1, 0x1}}], 0x60) (async) sendmsg$nl_generic(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="8a", 0x1}], 0x1, 0x0, 0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x11000000}}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x3, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xb, 0x100a, &(0x7f0000000380)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001cc0)=""/138, 0x8a}, {&(0x7f0000001d80)=""/209, 0xffffffffffffff3f}, {&(0x7f0000001e80)=""/4092, 0xffc}, {&(0x7f0000002e80)=""/258, 0x102}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x400000ff}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000003000)=""/4099, 0x1003}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x2}, 0x9}], 0x7, 0x0, 0x0) 928.524322ms ago: executing program 1 (id=5247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000500000200"/20, @ANYRES32=0x0, @ANYBLOB="20280000ef0000001c0012800b0001006d616373656300000c000280050007000100000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d858}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000780)=0x18, 0x4) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1800000056000100a56a0400000000000000000000000000c089a0eb734f531449dfe0d731f0bee810d5f0c1bafbea68d6f1b40efa3a21650445ed2b32a795d4b7a6f3fb420290ea4b2be6f4794430ac52230713e6ba1e4085c515b0754f8770fff7a6ae7db10c1d9c6b09e1c1b86fcb8ec448cc15019946f3cb766118e97dda38f53972f529933003b98551a1ffe86807880a2a9ba3b01b4b3e7129fce09dbd72315c7d2f136adcd92a678c52cb1d9893e675b59c5e8fad3861f05e5ebe14999def5a78e445f396699207749c9d893d7fe6a195d5cc597719"], 0x18}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r4) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="97f4ad0fddfd6010804d45134558219f51e5d01027c019ab62132a9567aa1b57f2c93a7ce48fd6d90b18ba2b1c6992a4b00b9e6ba710909e89dee356541b9a1d529d938d7f6fc3166d3379c548f84380c5f3ed78a4dfec500e609b2abed13c271020841b4bdca9d9e0fc6b9d13ea0e470060ec2bbf4573b5aacfd91abbad5fb756ce61fab4ea2e278c3516e843d0b51cf7a672ab90b8f9c3738e6b5a2fe29d19bf0ba9aeb7b4f1feb13d0b2223aa", @ANYBLOB="30b27f300c28be7b9a788faf665e4ae9f0f070941c39616a48f537dc6d638d46b09c207bf080919c9aff2343a099e8c0dfae63f20127ed8f791ceaeb5b54e5aefb2cf1396a48cec97da505fa8428aaf86ca064fa7b2f9707c9ff1efffda21bbcabec7b042eba09f77b9701aac76fd99cced780ca26dbbc059460aa364438dd7f63", @ANYRESOCT=r5, @ANYRES64=r3], 0x28}, 0x1, 0x0, 0x0, 0xe2536425f5522e88}, 0x18894) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000980)={0x41, 0x12}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000009c0)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x20000400) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="01002cbd7000fedbdf251b000000060021006100000008009a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) write(r9, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000b40)={0x41}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000b80)={0x41}, 0x1be) bind$tipc(r8, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000bc0)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000000c40)=[{{&(0x7f0000000cc0)={0xa, 0x4e20, 0x0, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000d40)="2f970340", 0x4}]}}, {{&(0x7f0000000d80)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 763.337673ms ago: executing program 4 (id=5248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x0, 0x0}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) syz_emit_ethernet(0x12a7, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f0000000080), &(0x7f00000000c0)=""/163}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x4001}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', 0x1}) write$tun(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000900003c"], 0x6a) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x38, r4, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) accept4(r7, &(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000900)=0x80, 0x777dc770ffcf1f14) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 716.809487ms ago: executing program 2 (id=5249): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @random="8e1cffec0431", @void, {@can={0xc, {{0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "135db9983796a9fa"}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r3}, 0xc) bind$netlink(r1, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfb}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x90}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x11, 0x6, 0x0, 0x0, @str='\x80\xb3\xb4\xc6\x92Y\xa6\xe6\xf6\x8c=\x01\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) 404.102159ms ago: executing program 1 (id=5250): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000c0000000000000008eaff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0040008500000083000000bf092000000000005509010040000000950000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x6, 0x1011, &(0x7f0000000580)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6000600, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 88.210851ms ago: executing program 1 (id=5251): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) 0s ago: executing program 2 (id=5252): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) bind$bt_hci(r0, &(0x7f0000000840)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000880)="1b00020008001122334455660001", 0xe) kernel console output (not intermixed with test programs): '. [ 603.365725][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3648'. [ 603.636733][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 603.637031][T23485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3651'. [ 604.020157][T23495] hsr0 speed is unknown, defaulting to 1000 [ 604.051322][T23495] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.140926][T23502] FAULT_INJECTION: forcing a failure. [ 604.140926][T23502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.140959][T23502] CPU: 1 UID: 0 PID: 23502 Comm: syz.0.3656 Not tainted syzkaller #0 PREEMPT(full) [ 604.140983][T23502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 604.140996][T23502] Call Trace: [ 604.141003][T23502] [ 604.141012][T23502] dump_stack_lvl+0xe8/0x150 [ 604.141052][T23502] should_fail_ex+0x3eb/0x540 [ 604.141085][T23502] _copy_from_iter+0x1d3/0x1680 [ 604.141110][T23502] ? __alloc_skb+0x27a/0x7a0 [ 604.141134][T23502] ? __alloc_skb+0x27a/0x7a0 [ 604.141167][T23502] ? __alloc_skb+0x27a/0x7a0 [ 604.141191][T23502] ? __pfx__copy_from_iter+0x10/0x10 [ 604.141214][T23502] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 604.141240][T23502] ? __alloc_skb+0x27a/0x7a0 [ 604.141259][T23502] ? __alloc_skb+0x27a/0x7a0 [ 604.141286][T23502] ? netlink_sendmsg+0x64f/0xb20 [ 604.141305][T23502] ? skb_put+0x112/0x210 [ 604.141331][T23502] netlink_sendmsg+0x6bb/0xb20 [ 604.141359][T23502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.141384][T23502] ? aa_sock_msg_perm+0x144/0x210 [ 604.141410][T23502] ? apparmor_socket_sendmsg+0x98/0x360 [ 604.141446][T23502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.141465][T23502] sock_sendmsg_nosec+0x14e/0x190 [ 604.141499][T23502] ____sys_sendmsg+0x54e/0x850 [ 604.141531][T23502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.141566][T23502] ? import_iovec+0x73/0xa0 [ 604.141598][T23502] ___sys_sendmsg+0x2a5/0x360 [ 604.141620][T23502] ? __lock_acquire+0x747/0x2de0 [ 604.141653][T23502] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.141719][T23502] ? __fget_files+0x3a2/0x420 [ 604.141746][T23502] ? __fget_files+0x2a/0x420 [ 604.141784][T23502] __x64_sys_sendmsg+0x1b1/0x290 [ 604.141813][T23502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.141881][T23502] do_syscall_64+0x166/0x520 [ 604.141911][T23502] ? trace_irq_disable+0x3b/0x140 [ 604.141943][T23502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.141966][T23502] ? clear_bhb_loop+0x70/0xc0 [ 604.141994][T23502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.142016][T23502] RIP: 0033:0x7f333519fb19 [ 604.142037][T23502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.142055][T23502] RSP: 002b:00007f333602f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.142078][T23502] RAX: ffffffffffffffda RBX: 00007f3335426090 RCX: 00007f333519fb19 [ 604.142095][T23502] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000009 [ 604.142109][T23502] RBP: 00007f333602f090 R08: 0000000000000000 R09: 0000000000000000 [ 604.142123][T23502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.142136][T23502] R13: 00007f3335426128 R14: 00007f3335426090 R15: 00007ffffe0e69e8 [ 604.142181][T23502] [ 604.478583][T23499] bond6: entered allmulticast mode [ 604.484190][T23506] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 604.535532][T23506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 604.611799][T23510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 604.616151][T23506] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 604.638715][T23495] lo speed is unknown, defaulting to 1000 [ 604.704806][T23471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3649'. [ 604.999649][T23520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3659'. [ 605.109501][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 605.991007][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3668'. [ 606.175518][T23564] FAULT_INJECTION: forcing a failure. [ 606.175518][T23564] name failslab, interval 1, probability 0, space 0, times 0 [ 606.175551][T23564] CPU: 0 UID: 0 PID: 23564 Comm: syz.3.3669 Not tainted syzkaller #0 PREEMPT(full) [ 606.175576][T23564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 606.175589][T23564] Call Trace: [ 606.175598][T23564] [ 606.175607][T23564] dump_stack_lvl+0xe8/0x150 [ 606.175648][T23564] should_fail_ex+0x3eb/0x540 [ 606.175682][T23564] should_failslab+0xa8/0x100 [ 606.175704][T23564] ? skb_clone+0x212/0x3a0 [ 606.175731][T23564] kmem_cache_alloc_noprof+0x9c/0x600 [ 606.175762][T23564] ? skb_clone+0x212/0x3a0 [ 606.175800][T23564] skb_clone+0x212/0x3a0 [ 606.175831][T23564] __netlink_deliver_tap+0x355/0x6e0 [ 606.175886][T23564] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.175922][T23564] netlink_deliver_tap+0x19c/0x1b0 [ 606.175958][T23564] netlink_unicast+0x8c1/0xa80 [ 606.176009][T23564] netlink_sendmsg+0x7f0/0xb20 [ 606.176038][T23564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.176064][T23564] ? aa_sock_msg_perm+0x144/0x210 [ 606.176092][T23564] ? apparmor_socket_sendmsg+0x98/0x360 [ 606.176126][T23564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.176146][T23564] sock_sendmsg_nosec+0x14e/0x190 [ 606.176181][T23564] ____sys_sendmsg+0x54e/0x850 [ 606.176214][T23564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.176250][T23564] ? import_iovec+0x73/0xa0 [ 606.176283][T23564] ___sys_sendmsg+0x2a5/0x360 [ 606.176306][T23564] ? __lock_acquire+0x747/0x2de0 [ 606.176341][T23564] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.176404][T23564] ? __fget_files+0x3a2/0x420 [ 606.176432][T23564] ? __fget_files+0x2a/0x420 [ 606.176471][T23564] __x64_sys_sendmsg+0x1b1/0x290 [ 606.176502][T23564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.176554][T23564] do_syscall_64+0x166/0x520 [ 606.176583][T23564] ? trace_irq_disable+0x3b/0x140 [ 606.176613][T23564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.176635][T23564] ? clear_bhb_loop+0x70/0xc0 [ 606.176662][T23564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.176682][T23564] RIP: 0033:0x7f687679fb19 [ 606.176703][T23564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.176722][T23564] RSP: 002b:00007f68775e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.176745][T23564] RAX: ffffffffffffffda RBX: 00007f6876a26090 RCX: 00007f687679fb19 [ 606.176762][T23564] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000009 [ 606.176776][T23564] RBP: 00007f68775e2090 R08: 0000000000000000 R09: 0000000000000000 [ 606.176790][T23564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.176802][T23564] R13: 00007f6876a26128 R14: 00007f6876a26090 R15: 00007ffd70a9b988 [ 606.176839][T23564] [ 606.229445][T23557] macvtap1: entered promiscuous mode [ 606.229518][T23557] erspan0: entered promiscuous mode [ 606.237429][T23557] macvtap1: entered allmulticast mode [ 606.237460][T23557] erspan0: entered allmulticast mode [ 606.587115][T23561] bond1: entered allmulticast mode [ 606.622770][T23562] erspan0: left allmulticast mode [ 606.633865][T23562] erspan0: left promiscuous mode [ 606.635487][T23562] macvtap1: left promiscuous mode [ 606.635508][T23562] macvtap1: left allmulticast mode [ 606.898291][T23580] syz_tun: entered allmulticast mode [ 607.157899][T23591] netlink: 'syz.3.3676': attribute type 9 has an invalid length. [ 607.480836][T23598] can: request_module (can-proto-0) failed. [ 607.809562][T23613] syzkaller0: entered promiscuous mode [ 607.809587][T23613] syzkaller0: entered allmulticast mode [ 608.414447][T23634] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 608.414488][T23634] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 608.414530][T23634] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 608.541881][T23637] __nla_validate_parse: 6 callbacks suppressed [ 608.541906][T23637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3686'. [ 608.935471][T23651] netlink: 'syz.3.3689': attribute type 1 has an invalid length. [ 609.026495][T23656] ip_tables: iptables: counters copy to user failed while replacing table [ 609.052459][T23651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.070713][T23652] batman_adv: batadv0: Adding interface: dummy0 [ 609.070734][T23652] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.070769][T23652] batman_adv: batadv0: Interface activated: dummy0 [ 609.185027][T23659] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 609.185053][T23659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3691'. [ 609.290012][T23665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3694'. [ 609.290051][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3694'. [ 609.290166][T23652] batadv0: mtu less than device minimum [ 609.291955][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.293528][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.295103][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.296638][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.298144][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.299629][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.301104][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.302611][T23652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 609.470592][T23659] batadv0: entered promiscuous mode [ 609.470619][T23659] batadv0: entered allmulticast mode [ 609.476053][T23659] bridge0: port 4(batadv0) entered blocking state [ 609.482633][T23659] bridge0: port 4(batadv0) entered disabled state [ 610.013831][T19657] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 610.013853][T19657] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 610.077971][T23688] veth0_macvtap: left promiscuous mode [ 610.090004][T23688] macvtap0: entered promiscuous mode [ 610.433556][T23698] bond7: entered allmulticast mode [ 610.441647][T23701] FAULT_INJECTION: forcing a failure. [ 610.441647][T23701] name failslab, interval 1, probability 0, space 0, times 0 [ 610.441679][T23701] CPU: 1 UID: 0 PID: 23701 Comm: syz.1.3701 Not tainted syzkaller #0 PREEMPT(full) [ 610.441703][T23701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 610.441716][T23701] Call Trace: [ 610.441725][T23701] [ 610.441734][T23701] dump_stack_lvl+0xe8/0x150 [ 610.441774][T23701] should_fail_ex+0x3eb/0x540 [ 610.441808][T23701] should_failslab+0xa8/0x100 [ 610.441828][T23701] ? skb_clone+0x212/0x3a0 [ 610.441854][T23701] kmem_cache_alloc_noprof+0x9c/0x600 [ 610.441886][T23701] ? skb_clone+0x212/0x3a0 [ 610.441919][T23701] skb_clone+0x212/0x3a0 [ 610.441959][T23701] __netlink_deliver_tap+0x355/0x6e0 [ 610.442006][T23701] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.442042][T23701] netlink_deliver_tap+0x19c/0x1b0 [ 610.442076][T23701] netlink_sendskb+0x68/0x140 [ 610.442109][T23701] netlink_rcv_skb+0x2a4/0x4a0 [ 610.442143][T23701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.442169][T23701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.442216][T23701] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.442249][T23701] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.442287][T23701] netlink_unicast+0x8ef/0xa80 [ 610.442338][T23701] netlink_sendmsg+0x7f0/0xb20 [ 610.442366][T23701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.442391][T23701] ? aa_sock_msg_perm+0x144/0x210 [ 610.442418][T23701] ? apparmor_socket_sendmsg+0x98/0x360 [ 610.442451][T23701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.442471][T23701] sock_sendmsg_nosec+0x14e/0x190 [ 610.442506][T23701] ____sys_sendmsg+0x54e/0x850 [ 610.442539][T23701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.442576][T23701] ? import_iovec+0x73/0xa0 [ 610.442609][T23701] ___sys_sendmsg+0x2a5/0x360 [ 610.442633][T23701] ? __lock_acquire+0x747/0x2de0 [ 610.442666][T23701] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.442735][T23701] ? __fget_files+0x3a2/0x420 [ 610.442764][T23701] ? __fget_files+0x2a/0x420 [ 610.442806][T23701] __x64_sys_sendmsg+0x1b1/0x290 [ 610.442835][T23701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.442887][T23701] do_syscall_64+0x166/0x520 [ 610.442917][T23701] ? trace_irq_disable+0x3b/0x140 [ 610.442956][T23701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.442979][T23701] ? clear_bhb_loop+0x70/0xc0 [ 610.443007][T23701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.443029][T23701] RIP: 0033:0x7f0303b9fb19 [ 610.443051][T23701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.443069][T23701] RSP: 002b:00007f0304b1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.443093][T23701] RAX: ffffffffffffffda RBX: 00007f0303e26090 RCX: 00007f0303b9fb19 [ 610.443108][T23701] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000009 [ 610.443121][T23701] RBP: 00007f0304b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 610.443134][T23701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.443147][T23701] R13: 00007f0303e26128 R14: 00007f0303e26090 R15: 00007ffe78148dd8 [ 610.443184][T23701] [ 610.772404][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3704'. [ 610.815137][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'. [ 611.125259][T23725] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3706'. [ 611.175829][T23723] tc_dump_action: action bad kind [ 611.176039][T23723] tc_dump_action: action bad kind [ 611.176227][T23723] tc_dump_action: action bad kind [ 611.177124][T23723] tc_dump_action: action bad kind [ 611.177307][T23723] tc_dump_action: action bad kind [ 611.178715][T23723] tc_dump_action: action bad kind [ 611.178905][T23723] tc_dump_action: action bad kind [ 611.179410][T23723] tc_dump_action: action bad kind [ 611.179681][T23723] tc_dump_action: action bad kind [ 611.179869][T23723] tc_dump_action: action bad kind [ 611.180055][T23723] tc_dump_action: action bad kind [ 611.180268][T23723] tc_dump_action: action bad kind [ 611.180462][T23723] tc_dump_action: action bad kind [ 611.180643][T23723] tc_dump_action: action bad kind [ 611.182045][T23723] tc_dump_action: action bad kind [ 611.182266][T23723] tc_dump_action: action bad kind [ 611.182465][T23723] tc_dump_action: action bad kind [ 611.182657][T23723] tc_dump_action: action bad kind [ 611.280016][T23723] tc_dump_action: action bad kind [ 611.280253][T23723] tc_dump_action: action bad kind [ 611.280447][T23723] tc_dump_action: action bad kind [ 611.280642][T23723] tc_dump_action: action bad kind [ 611.280838][T23723] tc_dump_action: action bad kind [ 611.281114][T23723] tc_dump_action: action bad kind [ 611.281306][T23723] tc_dump_action: action bad kind [ 611.281518][T23723] tc_dump_action: action bad kind [ 611.281705][T23723] tc_dump_action: action bad kind [ 611.281926][T23723] tc_dump_action: action bad kind [ 611.282201][T23723] tc_dump_action: action bad kind [ 611.282401][T23723] tc_dump_action: action bad kind [ 611.282588][T23723] tc_dump_action: action bad kind [ 611.337527][T23723] tc_dump_action: action bad kind [ 611.338224][T23723] tc_dump_action: action bad kind [ 611.338920][T23723] tc_dump_action: action bad kind [ 611.368582][T23723] tc_dump_action: action bad kind [ 611.368779][T23723] tc_dump_action: action bad kind [ 611.368964][T23723] tc_dump_action: action bad kind [ 611.369149][T23723] tc_dump_action: action bad kind [ 611.369343][T23723] tc_dump_action: action bad kind [ 611.369535][T23723] tc_dump_action: action bad kind [ 611.369721][T23723] tc_dump_action: action bad kind [ 611.369905][T23723] tc_dump_action: action bad kind [ 611.370090][T23723] tc_dump_action: action bad kind [ 611.370271][T23723] tc_dump_action: action bad kind [ 611.370467][T23723] tc_dump_action: action bad kind [ 611.370662][T23723] tc_dump_action: action bad kind [ 611.370843][T23723] tc_dump_action: action bad kind [ 611.371026][T23723] tc_dump_action: action bad kind [ 611.371210][T23723] tc_dump_action: action bad kind [ 611.661821][T23742] netlink: 'syz.0.3709': attribute type 83 has an invalid length. [ 611.748095][T23743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3710'. [ 611.992238][T23751] syzkaller0: entered promiscuous mode [ 611.992265][T23751] syzkaller0: entered allmulticast mode [ 611.994102][T23749] xt_IDLETIMER: timeout value is zero [ 612.048857][T23748] tipc: Started in network mode [ 612.048891][T23748] tipc: Node identity 1a67a4592092, cluster identity 4711 [ 612.049934][T23748] tipc: Enabled bearer , priority 0 [ 612.115998][T23752] netlink: 'syz.1.3711': attribute type 10 has an invalid length. [ 612.364068][T23730] tipc: Resetting bearer [ 612.437653][T23730] tipc: Disabling bearer [ 612.520649][T23642] udevd[23642]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.568306][T23608] udevd[23608]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.680681][T23762] syzkaller0: entered promiscuous mode [ 612.680709][T23762] syzkaller0: entered allmulticast mode [ 612.950303][T23785] tipc: Enabling of bearer rejected, failed to enable media [ 613.789385][T23815] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3726'. [ 614.015962][T23829] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 614.015983][T23829] netlink: 'syz.1.3729': attribute type 2 has an invalid length. [ 614.015998][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3729'. [ 614.079835][T23836] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 614.079863][T23836] netlink: 'syz.1.3729': attribute type 2 has an invalid length. [ 614.079878][T23836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3729'. [ 614.112086][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'. [ 614.112116][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'. [ 614.138200][T23818] syzkaller0: entered promiscuous mode [ 614.138228][T23818] syzkaller0: entered allmulticast mode [ 615.302338][T23877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3740'. [ 618.099130][T23900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3742'. [ 618.220566][T23903] bond3: entered allmulticast mode [ 618.237360][T23911] FAULT_INJECTION: forcing a failure. [ 618.237360][T23911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.237391][T23911] CPU: 1 UID: 0 PID: 23911 Comm: syz.3.3744 Not tainted syzkaller #0 PREEMPT(full) [ 618.237415][T23911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 618.237428][T23911] Call Trace: [ 618.237437][T23911] [ 618.237446][T23911] dump_stack_lvl+0xe8/0x150 [ 618.237488][T23911] should_fail_ex+0x3eb/0x540 [ 618.237523][T23911] _copy_to_user+0x31/0xb0 [ 618.237557][T23911] simple_read_from_buffer+0xe1/0x170 [ 618.237593][T23911] proc_fail_nth_read+0x1bb/0x230 [ 618.237625][T23911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.237652][T23911] ? rw_verify_area+0x24a/0x4c0 [ 618.237684][T23911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.237706][T23911] vfs_read+0x213/0xa80 [ 618.237739][T23911] ? __pfx___mutex_lock+0x10/0x10 [ 618.237766][T23911] ? __pfx_vfs_read+0x10/0x10 [ 618.237795][T23911] ? __fget_files+0x2a/0x420 [ 618.237820][T23911] ? __fget_files+0x3a2/0x420 [ 618.237846][T23911] ? __fget_files+0x2a/0x420 [ 618.237876][T23911] ? fdget+0x1ac/0x250 [ 618.237911][T23911] ksys_read+0x150/0x270 [ 618.237945][T23911] ? __pfx_ksys_read+0x10/0x10 [ 618.237989][T23911] do_syscall_64+0x166/0x520 [ 618.238018][T23911] ? trace_irq_disable+0x3b/0x140 [ 618.238048][T23911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.238071][T23911] ? clear_bhb_loop+0x70/0xc0 [ 618.238099][T23911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.238122][T23911] RIP: 0033:0x7f687676034e [ 618.238143][T23911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 618.238162][T23911] RSP: 002b:00007f68775e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.238185][T23911] RAX: ffffffffffffffda RBX: 00007f68775e26c0 RCX: 00007f687676034e [ 618.238202][T23911] RDX: 000000000000000f RSI: 00007f68775e20a0 RDI: 000000000000000a [ 618.238215][T23911] RBP: 00007f68775e2090 R08: 0000000000000000 R09: 0000000000000000 [ 618.238229][T23911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.238242][T23911] R13: 00007f6876a26128 R14: 00007f6876a26090 R15: 00007ffd70a9b988 [ 618.238288][T23911] [ 618.477543][T23916] syzkaller0: entered allmulticast mode [ 618.510105][T23917] x_tables: duplicate underflow at hook 2 [ 618.512142][T23917] netlink: 4308 bytes leftover after parsing attributes in process `syz.4.3743'. [ 618.512276][T23917] net_ratelimit: 11 callbacks suppressed [ 618.512291][T23917] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 619.473276][T23961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3753'. [ 619.892230][T23976] x_tables: duplicate underflow at hook 1 [ 619.949292][T23979] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3760'. [ 619.949351][T23979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3760'. [ 620.104650][T23981] bond5 (unregistering): Released all slaves [ 620.532518][ T30] audit: type=1804 audit(1794009285.556:23): pid=23996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3765" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=893 res=1 errno=0 [ 620.532579][ T30] audit: type=1800 audit(1794009285.556:24): pid=23996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3765" name="cgroup.controllers" dev="tmpfs" ino=893 res=0 errno=-22 [ 620.660903][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 620.709680][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 620.721776][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 620.733534][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 620.746490][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 620.754988][T24000] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 620.755050][T24000] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 620.776767][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 620.788299][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 621.143786][T24017] ip_tables: iptables: counters copy to user failed while replacing table [ 621.470726][T24035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 622.461844][T24069] syzkaller0: entered promiscuous mode [ 622.461962][T24069] syzkaller0: entered allmulticast mode [ 623.291287][T24098] openvswitch: netlink: IP tunnel dst address not specified [ 623.436415][T24105] : entered promiscuous mode [ 624.030915][T24149] bond0: (slave ip6tnl0): refused to change device type [ 624.032413][T24148] bond0: (slave ip6tnl0): refused to change device type [ 624.063997][T24148] x_tables: duplicate underflow at hook 3 [ 624.779035][ T30] audit: type=1107 audit(1794009289.806:25): pid=24172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='›ˆuÌ4Ì=ÕäAéÐIlÌ//³zL 敧o;’i¿¾7|í#o‰žQ(ƒ­û¥«ºKsúmŽ' [ 625.286594][T24163] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.287066][T24163] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.020483][T24163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.081235][T24163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.842699][ T7657] lo speed is unknown, defaulting to 1000 [ 626.842762][ T7657] syz0: Port: 1 Link DOWN [ 626.922223][ T7657] lo speed is unknown, defaulting to 1000 [ 626.953154][T14019] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.953223][T14019] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.953262][T14019] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.953298][T14019] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.185511][T24194] ip_tables: iptables: counters copy to user failed while replacing table [ 627.390919][T24191] __nla_validate_parse: 33 callbacks suppressed [ 627.390945][T24191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 627.409994][T24199] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3803'. [ 627.439467][T24206] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3802'. [ 628.017331][T24234] xfrm0: entered allmulticast mode [ 628.023587][T24234] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 628.030688][T24232] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 628.065832][T24232] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3809'. [ 628.097124][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3809'. [ 628.114799][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'. [ 628.118273][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'. [ 628.360933][T24247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.386584][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3814'. [ 628.600878][T24256] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3816'. [ 628.601047][T24256] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3816'. [ 629.171840][T24279] syzkaller1: entered promiscuous mode [ 629.171865][T24279] syzkaller1: entered allmulticast mode [ 629.229374][T24286] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 630.635164][T24321] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 630.677592][T24321] bond5 (unregistering): Released all slaves [ 631.126213][T24352] ip_tables: iptables: counters copy to user failed while replacing table [ 632.453572][T24399] netlink: 'syz.0.3852': attribute type 1 has an invalid length. [ 632.453613][T24399] __nla_validate_parse: 41 callbacks suppressed [ 632.453626][T24399] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3852'. [ 632.518364][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'. [ 632.678356][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 632.679822][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3851'. [ 632.880980][T24403] bond5: entered promiscuous mode [ 632.881007][T24403] bond5: entered allmulticast mode [ 633.145775][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3857'. [ 633.175942][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 633.256362][T24424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3858'. [ 633.635639][T24437] netlink: 'syz.0.3863': attribute type 1 has an invalid length. [ 633.878053][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3863'. [ 633.953718][T24442] bond7: (slave veth9): Enslaving as an active interface with a down link [ 634.013897][T24437] bond7: (slave veth0_to_bond): making interface the new active one [ 634.021772][T24437] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 634.078153][T24449] 8021q: adding VLAN 0 to HW filter on device bond7 [ 634.829385][T24486] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:21 [ 634.952413][T24490] netlink: 'syz.4.3869': attribute type 1 has an invalid length. [ 634.952437][T24490] netlink: 'syz.4.3869': attribute type 268 has an invalid length. [ 634.952452][T24490] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3869'. [ 634.953238][T24494] netlink: 'syz.4.3869': attribute type 1 has an invalid length. [ 634.953255][T24494] netlink: 'syz.4.3869': attribute type 268 has an invalid length. [ 634.953269][T24494] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3869'. [ 635.199888][T24505] netlink: 'syz.1.3875': attribute type 29 has an invalid length. [ 635.340798][T24511] bond8: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 635.355563][T24511] bond8 (unregistering): Released all slaves [ 635.602117][T24518] tipc: New replicast peer: 255.255.255.255 [ 635.609140][T24518] tipc: Enabled bearer , priority 10 [ 635.753437][T24531] netlink: 'syz.2.3876': attribute type 1 has an invalid length. [ 635.982720][T24531] bond2: entered promiscuous mode [ 635.992473][T24531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.077515][T24550] bond2: (slave bridge3): making interface the new active one [ 636.077544][T24550] bridge3: entered promiscuous mode [ 636.079143][T24550] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 636.917297][T24580] xt_bpf: check failed: parse error [ 636.918579][T24576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.239309][T24584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.589972][T24611] x_tables: duplicate underflow at hook 2 [ 637.602198][T24610] ip_tables: iptables: counters copy to user failed while replacing table [ 637.646843][T24610] syzkaller1: entered promiscuous mode [ 637.646870][T24610] syzkaller1: entered allmulticast mode [ 637.783220][T24612] __nla_validate_parse: 6 callbacks suppressed [ 637.783242][T24612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 637.811752][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3899'. [ 637.877981][T24626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3898'. [ 639.161306][T24665] bridge_slave_0: left allmulticast mode [ 639.161334][T24665] bridge_slave_0: left promiscuous mode [ 639.161900][T24665] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.209326][T24665] bridge_slave_1: left allmulticast mode [ 639.212016][T24665] bridge_slave_1: left promiscuous mode [ 639.212286][T24665] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.349242][T24665] bond0: (slave bond_slave_0): Releasing backup interface [ 639.385170][T24665] bond0: (slave bond_slave_1): Releasing backup interface [ 639.420881][T24665] team0: Port device team_slave_0 removed [ 639.446119][T24665] team0: Port device team_slave_1 removed [ 639.448343][T24665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.448368][T24665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.476561][T24665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.476589][T24665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.505312][T24665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 639.505762][T24673] vlan0: entered promiscuous mode [ 639.552378][T24673] team0: Port device vlan0 added [ 639.913188][T24689] xfrm0: entered promiscuous mode [ 639.913213][T24689] xfrm0: entered allmulticast mode [ 640.029980][T24691] ip_tables: iptables: counters copy to user failed while replacing table [ 640.047024][T24695] ip_tables: iptables: counters copy to user failed while replacing table [ 640.047959][T24697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3921'. [ 640.641170][T24725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3929'. [ 640.908806][T24733] xt_hashlimit: size too large, truncated to 1048576 [ 642.157247][T24787] FAULT_INJECTION: forcing a failure. [ 642.157247][T24787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.157281][T24787] CPU: 0 UID: 0 PID: 24787 Comm: syz.3.3948 Not tainted syzkaller #0 PREEMPT(full) [ 642.157307][T24787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 642.157320][T24787] Call Trace: [ 642.157329][T24787] [ 642.157339][T24787] dump_stack_lvl+0xe8/0x150 [ 642.157379][T24787] should_fail_ex+0x3eb/0x540 [ 642.157411][T24787] _copy_from_iter+0x1d3/0x1680 [ 642.157437][T24787] ? __alloc_skb+0x27a/0x7a0 [ 642.157460][T24787] ? __alloc_skb+0x27a/0x7a0 [ 642.157483][T24787] ? __alloc_skb+0x27a/0x7a0 [ 642.157506][T24787] ? __pfx__copy_from_iter+0x10/0x10 [ 642.157527][T24787] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 642.157565][T24787] ? __alloc_skb+0x27a/0x7a0 [ 642.157584][T24787] ? __alloc_skb+0x27a/0x7a0 [ 642.157612][T24787] ? netlink_sendmsg+0x64f/0xb20 [ 642.157632][T24787] ? skb_put+0x112/0x210 [ 642.157660][T24787] netlink_sendmsg+0x6bb/0xb20 [ 642.157688][T24787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.157714][T24787] ? aa_sock_msg_perm+0x144/0x210 [ 642.157742][T24787] ? apparmor_socket_sendmsg+0x98/0x360 [ 642.157775][T24787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.157796][T24787] sock_sendmsg_nosec+0x14e/0x190 [ 642.157831][T24787] ____sys_sendmsg+0x54e/0x850 [ 642.157863][T24787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.157900][T24787] ? import_iovec+0x73/0xa0 [ 642.157933][T24787] ___sys_sendmsg+0x2a5/0x360 [ 642.157955][T24787] ? __lock_acquire+0x747/0x2de0 [ 642.157988][T24787] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.158053][T24787] ? __fget_files+0x3a2/0x420 [ 642.158081][T24787] ? __fget_files+0x2a/0x420 [ 642.158117][T24787] __x64_sys_sendmsg+0x1b1/0x290 [ 642.158150][T24787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.158199][T24787] do_syscall_64+0x166/0x520 [ 642.158227][T24787] ? trace_irq_disable+0x3b/0x140 [ 642.158256][T24787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.158279][T24787] ? clear_bhb_loop+0x70/0xc0 [ 642.158307][T24787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.158328][T24787] RIP: 0033:0x7f687679fb19 [ 642.158349][T24787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.158369][T24787] RSP: 002b:00007f6877603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.158393][T24787] RAX: ffffffffffffffda RBX: 00007f6876a25fa0 RCX: 00007f687679fb19 [ 642.158410][T24787] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 642.158424][T24787] RBP: 00007f6877603090 R08: 0000000000000000 R09: 0000000000000000 [ 642.158438][T24787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.158452][T24787] R13: 00007f6876a26038 R14: 00007f6876a25fa0 R15: 00007ffd70a9b988 [ 642.158489][T24787] [ 642.920327][T24810] sctp: [Deprecated]: syz.1.3956 (pid 24810) Use of int in max_burst socket option. [ 642.920327][T24810] Use struct sctp_assoc_value instead [ 642.926296][T24811] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3954'. [ 642.928999][T24809] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3954'. [ 644.368968][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 644.482769][T24853] netlink: 'syz.4.3965': attribute type 10 has an invalid length. [ 644.507370][T24853] team0 (unregistering): Port device team_slave_0 removed [ 644.524135][T24853] team0 (unregistering): Port device team_slave_1 removed [ 645.110279][T24884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3972'. [ 645.406873][T24905] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 645.497055][T24910] FAULT_INJECTION: forcing a failure. [ 645.497055][T24910] name failslab, interval 1, probability 0, space 0, times 0 [ 645.504286][T24910] CPU: 0 UID: 0 PID: 24910 Comm: syz.4.3976 Not tainted syzkaller #0 PREEMPT(full) [ 645.504318][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 645.504332][T24910] Call Trace: [ 645.504340][T24910] [ 645.504350][T24910] dump_stack_lvl+0xe8/0x150 [ 645.504392][T24910] should_fail_ex+0x3eb/0x540 [ 645.504424][T24910] ? __alloc_skb+0x1db/0x7a0 [ 645.504446][T24910] should_failslab+0xa8/0x100 [ 645.504469][T24910] ? __alloc_skb+0x1db/0x7a0 [ 645.504488][T24910] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 645.504516][T24910] ? __alloc_skb+0x18d/0x7a0 [ 645.504539][T24910] ? __alloc_skb+0x1db/0x7a0 [ 645.504568][T24910] __alloc_skb+0x1db/0x7a0 [ 645.504595][T24910] netlink_dump+0x201/0xf20 [ 645.504640][T24910] ? __netlink_lookup+0x82e/0x8f0 [ 645.504663][T24910] ? __pfx_netlink_dump+0x10/0x10 [ 645.504718][T24910] ? netlink_lookup+0x30/0x200 [ 645.504751][T24910] ? netlink_lookup+0x30/0x200 [ 645.504783][T24910] ? nf_tables_dump_obj_start+0x154/0x200 [ 645.504817][T24910] __netlink_dump_start+0x589/0x7b0 [ 645.504856][T24910] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 645.504880][T24910] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 645.504908][T24910] nf_tables_getobj+0x1fe/0xae0 [ 645.504954][T24910] ? lock_acquire+0x115/0x350 [ 645.504985][T24910] ? __pfx_nf_tables_getobj+0x10/0x10 [ 645.505017][T24910] ? __pfx_nf_tables_dump_obj_start+0x10/0x10 [ 645.505044][T24910] ? __pfx_nf_tables_dump_obj+0x10/0x10 [ 645.505070][T24910] ? __pfx_nf_tables_dump_obj_done+0x10/0x10 [ 645.505107][T24910] ? __nla_parse+0x40/0x60 [ 645.505139][T24910] ? __pfx_nf_tables_getobj+0x10/0x10 [ 645.505174][T24910] nfnetlink_rcv_msg+0x8a9/0x12b0 [ 645.505210][T24910] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 645.505264][T24910] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 645.505333][T24910] ? __lock_acquire+0x747/0x2de0 [ 645.505365][T24910] ? hook_capable+0x1c3/0x5e0 [ 645.505400][T24910] netlink_rcv_skb+0x226/0x4a0 [ 645.505435][T24910] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 645.505470][T24910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.505518][T24910] ? bpf_lsm_capable+0x9/0x20 [ 645.505539][T24910] ? security_capable+0x7e/0x2c0 [ 645.505580][T24910] nfnetlink_rcv+0x2b9/0x28c0 [ 645.505615][T24910] ? is_bpf_text_address+0x292/0x2b0 [ 645.505639][T24910] ? is_bpf_text_address+0x26/0x2b0 [ 645.505666][T24910] ? kernel_text_address+0xa5/0xe0 [ 645.505705][T24910] ? __kernel_text_address+0xd/0x30 [ 645.505732][T24910] ? unwind_get_return_address+0x4d/0x90 [ 645.505766][T24910] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 645.505795][T24910] ? arch_stack_walk+0xfb/0x150 [ 645.505839][T24910] ? __lock_acquire+0x747/0x2de0 [ 645.505866][T24910] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 645.505903][T24910] ? __lock_acquire+0x747/0x2de0 [ 645.505945][T24910] ? __lock_acquire+0x747/0x2de0 [ 645.505997][T24910] ? __netlink_lookup+0xe6/0x8f0 [ 645.506031][T24910] ? lock_acquire+0x115/0x350 [ 645.506058][T24910] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.506098][T24910] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.506130][T24910] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.506170][T24910] netlink_unicast+0x8ef/0xa80 [ 645.506221][T24910] netlink_sendmsg+0x7f0/0xb20 [ 645.506249][T24910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.506274][T24910] ? aa_sock_msg_perm+0x144/0x210 [ 645.506301][T24910] ? apparmor_socket_sendmsg+0x98/0x360 [ 645.506335][T24910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.506354][T24910] sock_sendmsg_nosec+0x14e/0x190 [ 645.506389][T24910] ____sys_sendmsg+0x54e/0x850 [ 645.506420][T24910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.506456][T24910] ? import_iovec+0x73/0xa0 [ 645.506488][T24910] ___sys_sendmsg+0x2a5/0x360 [ 645.506511][T24910] ? __lock_acquire+0x747/0x2de0 [ 645.506543][T24910] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.506611][T24910] ? __fget_files+0x3a2/0x420 [ 645.506655][T24910] ? __fget_files+0x2a/0x420 [ 645.506708][T24910] __x64_sys_sendmsg+0x1b1/0x290 [ 645.506738][T24910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.506790][T24910] do_syscall_64+0x166/0x520 [ 645.506819][T24910] ? trace_irq_disable+0x3b/0x140 [ 645.506850][T24910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.506872][T24910] ? clear_bhb_loop+0x70/0xc0 [ 645.506900][T24910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.506923][T24910] RIP: 0033:0x7f527f59fb19 [ 645.506945][T24910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.506964][T24910] RSP: 002b:00007f5280443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.506988][T24910] RAX: ffffffffffffffda RBX: 00007f527f826090 RCX: 00007f527f59fb19 [ 645.507005][T24910] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 645.507018][T24910] RBP: 00007f5280443090 R08: 0000000000000000 R09: 0000000000000000 [ 645.507032][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.507045][T24910] R13: 00007f527f826128 R14: 00007f527f826090 R15: 00007fff708a6458 [ 645.507082][T24910] [ 646.315476][ T30] audit: type=1804 audit(1794009311.346:26): pid=24921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3983" name="/newroot/222/cgroup.controllers" dev="tmpfs" ino=1145 res=1 errno=0 [ 646.315622][ T30] audit: type=1800 audit(1794009311.346:27): pid=24921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3983" name="cgroup.controllers" dev="tmpfs" ino=1145 res=0 errno=-22 [ 646.393030][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 646.700855][T24934] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 646.742678][T24934] netlink: 'syz.1.3984': attribute type 1 has an invalid length. [ 646.751772][T24933] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3980'. [ 646.751916][T24933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3980'. [ 646.762086][T24933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3980'. [ 647.334693][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3986'. [ 647.377415][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 648.625913][T25002] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 648.625936][T25002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4001'. [ 648.945762][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4003'. [ 649.094515][T25009] netlink: 63 bytes leftover after parsing attributes in process `syz.2.4004'. [ 649.269552][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 649.269598][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 649.269746][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 649.269782][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 650.141092][T25050] team0: Port device vlan0 removed [ 650.269866][T25059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.757431][T25067] hsr0 speed is unknown, defaulting to 1000 [ 650.776070][T25067] rxe_eth0 speed is unknown, defaulting to 1000 [ 650.811478][T25081] xt_HMARK: spi-set and port-set can't be combined [ 650.827954][T25079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4023'. [ 650.827994][T25079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4023'. [ 651.319000][T25067] lo speed is unknown, defaulting to 1000 [ 652.229193][T25131] netlink: 'syz.1.4030': attribute type 39 has an invalid length. [ 652.994459][T25148] netlink: 'syz.0.4035': attribute type 21 has an invalid length. [ 653.088819][T25153] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 653.300498][T25153] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.360782][T25153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 653.475613][T25153] bridge4: entered promiscuous mode [ 653.507457][T25153] bond8: (slave bridge4): making interface the new active one [ 653.511846][T25153] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 653.945235][T25182] netlink: 'syz.4.4044': attribute type 1 has an invalid length. [ 653.945265][T25182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4044'. [ 654.797204][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4050'. [ 655.228819][T25243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.501068][T25262] tipc: Enabled bearer , priority 0 [ 655.677200][T25266] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4061'. [ 655.677229][T25266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.848496][T25271] tipc: Disabling bearer [ 656.072170][T25284] netlink: 'syz.3.4064': attribute type 1 has an invalid length. [ 656.130075][T25284] bond4: (slave geneve3): making interface the new active one [ 656.130820][T25284] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 656.194403][T12264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.194917][T12264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.195286][T12264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.195326][T12264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 657.282148][T25319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4068'. [ 657.394335][T25321] ip_tables: iptables: counters copy to user failed while replacing table [ 657.445065][T25324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 657.477046][T25326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4072'. [ 657.500066][T25326] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4072'. [ 657.989333][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 657.989363][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 658.664554][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4081'. [ 659.131917][T25391] __nla_validate_parse: 1 callbacks suppressed [ 659.131939][T25391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 659.311838][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 659.321926][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 659.450651][T25399] batman_adv: batadv0: Interface deactivated: syz_tun [ 659.450678][T25399] batadv0: mtu less than device minimum [ 659.452333][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.453858][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.455549][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.459158][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.462304][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.464276][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.467830][T25399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 659.849776][T25366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4080'. [ 660.593278][T25411] ip6erspan0: entered allmulticast mode [ 660.746299][T25423] macsec1: entered promiscuous mode [ 660.840312][T25440] net_ratelimit: 12 callbacks suppressed [ 660.840339][T25440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 662.115675][T25492] xt_HMARK: spi-set and port-set can't be combined [ 662.279965][T25492] syzkaller0: entered promiscuous mode [ 662.279992][T25492] syzkaller0: entered allmulticast mode [ 662.350264][T25497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4100'. [ 662.531568][T25513] û: renamed from vlan1 [ 662.569796][T25516] SET target dimension over the limit! [ 662.571132][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4102'. [ 662.571163][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 662.844273][T25524] netlink: zone id is out of range [ 662.844291][T25524] netlink: zone id is out of range [ 662.844299][T25524] netlink: zone id is out of range [ 662.913060][T25524] netlink: set zone limit has 4 unknown bytes [ 663.229393][T25539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4110'. [ 663.301336][T25540] bond5: invalid NS target :: specified for addition [ 663.301369][T25540] bond5: option ns_ip6_target: invalid value (18446744073709551615) [ 663.310153][T25540] bond5 (unregistering): Released all slaves [ 663.371153][T25547] netlink: 'syz.4.4111': attribute type 1 has an invalid length. [ 663.535657][T25547] 8021q: adding VLAN 0 to HW filter on device bond6 [ 663.543739][T25557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 663.553834][T25557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 663.764756][T25550] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 663.765638][T25535] hsr0 speed is unknown, defaulting to 1000 [ 663.841078][T25535] rxe_eth0 speed is unknown, defaulting to 1000 [ 664.958688][T25535] lo speed is unknown, defaulting to 1000 [ 665.560064][T25625] ip_tables: iptables: counters copy to user failed while replacing table [ 665.670227][T25631] ip_tables: iptables: counters copy to user failed while replacing table [ 665.946731][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880724c1800: rx timeout, send abort [ 666.016526][T25648] __nla_validate_parse: 1 callbacks suppressed [ 666.016549][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'. [ 666.449153][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880724c3800: rx timeout, send abort [ 666.449220][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880724c1800: abort rx timeout. Force session deactivation [ 666.949214][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880724c3800: abort rx timeout. Force session deactivation [ 667.052166][T25680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4136'. [ 667.584555][T25691] ip_tables: iptables: counters copy to user failed while replacing table [ 670.174426][T25714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4143'. [ 670.393906][T25708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4140'. [ 670.478982][T25736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'. [ 670.627777][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4145'. [ 670.627803][T25723] vxlan: RTM_NEWNEIGH with invalid state 0x9 [ 671.009445][T25760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4151'. [ 671.176918][T25763] bond9: entered promiscuous mode [ 671.195335][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4153'. [ 672.113380][T25815] netlink: 'syz.4.4160': attribute type 4 has an invalid length. [ 672.116037][T25816] netlink: 'syz.4.4160': attribute type 4 has an invalid length. [ 672.184619][T25819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4160'. [ 672.796696][T25828] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4161'. [ 672.798861][T25828] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4161'. [ 673.236274][T25858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4167'. [ 673.954201][T25882] siw: device registration error -23 [ 674.428046][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4176'. [ 674.893311][T25928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4182'. [ 675.032675][T25925] tipc: Enabled bearer , priority 0 [ 675.047810][T25925] syzkaller0: entered allmulticast mode [ 675.212581][T25937] tipc: Resetting bearer [ 675.869380][T25924] tipc: Disabling bearer [ 676.701938][T25963] bond5: option lp_interval: invalid value (0) [ 676.701965][T25963] bond5: option lp_interval: allowed values 1 - 2147483647 [ 676.736085][T25963] bond5 (unregistering): Released all slaves [ 676.814595][T25974] netlink: 'syz.1.4191': attribute type 23 has an invalid length. [ 677.217080][T25989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4194'. [ 677.294593][T25989] bond10: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 677.327429][T25992] netlink: 'syz.2.4196': attribute type 1 has an invalid length. [ 677.362724][T25989] bond10 (unregistering): Released all slaves [ 677.449273][T26001] netlink: 'syz.0.4197': attribute type 1 has an invalid length. [ 677.497869][T25992] bond3: entered promiscuous mode [ 677.498543][T25992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.658113][T25996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.658565][T25996] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 677.658587][T25996] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 677.668290][T25996] bond3: (slave gre1): Opening slave failed [ 677.814248][T26001] bond9: entered promiscuous mode [ 677.814744][T26001] 8021q: adding VLAN 0 to HW filter on device bond9 [ 677.912652][T26003] bond9: (slave bridge5): making interface the new active one [ 677.912682][T26003] bridge5: entered promiscuous mode [ 677.933696][T26003] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 678.068465][T25996] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 678.072234][T25996] bond3: (slave gre1): Opening slave failed [ 678.300930][T26026] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4200'. [ 678.806875][T26041] bond4: option mode: invalid value (7) [ 678.833465][T26041] bond4 (unregistering): Released all slaves [ 680.460767][T26109] netlink: 'syz.0.4220': attribute type 9 has an invalid length. [ 680.494921][T26113] netlink: 'syz.0.4220': attribute type 9 has an invalid length. [ 680.742535][T26121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4222'. [ 681.339139][T26140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4227'. [ 681.788677][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'. [ 681.963369][T26162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4231'. [ 682.889278][T26199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4235'. [ 683.438155][T26228] netlink: 'syz.3.4239': attribute type 1 has an invalid length. [ 683.438183][T26228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4239'. [ 683.761150][T26236] netlink: 'syz.1.4241': attribute type 1 has an invalid length. [ 683.926208][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'. [ 684.159448][T26261] tipc: Enabling of bearer rejected, failed to enable media [ 684.671229][T26287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4251'. [ 684.909869][T26298] Cannot find map_set index 135 as target [ 684.922107][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 684.965073][T26293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.013919][T26291] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4251'. [ 685.057403][T26311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4255'. [ 685.057441][T26311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4255'. [ 685.084551][T26309] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4256'. [ 685.084678][T26309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4256'. [ 687.611812][T26391] netlink: 'syz.4.4274': attribute type 26 has an invalid length. [ 687.622581][T26391] netlink: 'syz.4.4274': attribute type 26 has an invalid length. [ 688.178279][T26416] netlink: 'syz.4.4280': attribute type 29 has an invalid length. [ 688.232760][T26416] ip_tables: iptables: counters copy to user failed while replacing table [ 689.110185][T26450] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 689.519750][T26470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 689.709816][T26481] netlink: 'syz.3.4294': attribute type 1 has an invalid length. [ 689.847767][T26481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 689.862417][T26480] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 689.897797][T26484] bond5: entered promiscuous mode [ 689.897825][T26484] bond5: entered allmulticast mode [ 689.943548][T26485] macvlan2: entered promiscuous mode [ 689.943572][T26485] macvlan2: entered allmulticast mode [ 689.944881][T26485] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 690.063880][T26489] syzkaller0: entered promiscuous mode [ 690.063905][T26489] syzkaller0: entered allmulticast mode [ 690.428793][T26496] __nla_validate_parse: 8 callbacks suppressed [ 690.428817][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4299'. [ 690.584534][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4302'. [ 690.585208][T26509] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 690.703255][T26507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4301'. [ 690.703283][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 691.518853][T26549] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 691.760208][T26564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 691.845842][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4314'. [ 691.877921][T26568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4312'. [ 691.995535][T26573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4312'. [ 692.183445][T26549] 8021q: adding VLAN 0 to HW filter on device bond10 [ 692.536315][T26585] netlink: 'syz.2.4318': attribute type 1 has an invalid length. [ 693.547490][T26625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4325'. [ 693.805665][T26639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4327'. [ 693.880566][ T30] audit: type=1804 audit(1794009358.906:28): pid=26639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4327" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1117 res=1 errno=0 [ 693.884216][ T30] audit: type=1800 audit(1794009358.916:29): pid=26639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4327" name="cgroup.controllers" dev="tmpfs" ino=1117 res=0 errno=-22 [ 693.935638][T26641] geneve4: entered promiscuous mode [ 693.978269][T14030] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36588 - 0 [ 693.979998][T14030] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36588 - 0 [ 693.980049][T14030] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36588 - 0 [ 693.980088][T14030] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36588 - 0 [ 694.564745][T26671] netlink: 'syz.0.4338': attribute type 21 has an invalid length. [ 694.594740][T26672] syz_tun: entered promiscuous mode [ 694.616320][T26672] syz_tun: left promiscuous mode [ 694.795618][T26685] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 695.632690][T26717] __nla_validate_parse: 6 callbacks suppressed [ 695.632714][T26717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4350'. [ 695.827243][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4352'. [ 695.843369][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4351'. [ 695.873813][T26726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4353'. [ 696.278129][T26732] tipc: Resetting bearer [ 696.781667][T26766] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003 [ 696.991884][T26780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4364'. [ 697.001157][T26782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'. [ 697.073864][T26789] pim6reg99999999: entered allmulticast mode [ 697.075333][T26789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4365'. [ 698.017248][T26813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4371'. [ 698.017282][T26813] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4371'. [ 698.036937][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4372'. [ 698.772166][T26819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.790495][T26819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.881483][T26819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.895669][T26819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.895697][T26819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.901071][T26819] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 699.291138][T26851] syzkaller0: entered promiscuous mode [ 699.291167][T26851] syzkaller0: entered allmulticast mode [ 699.321466][ T8898] s`z1: Port: 1 Link ACTIVE [ 699.328595][T26315] bridge0: port 3(veth0) entered blocking state [ 699.328789][T26315] bridge0: port 3(veth0) entered forwarding state [ 699.355202][T26315] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.355302][T26315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.381320][T26315] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.381413][T26315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.919304][T26927] tipc: Enabling of bearer rejected, failed to enable media [ 703.013274][T26927] syzkaller0: entered promiscuous mode [ 703.013301][T26927] syzkaller0: entered allmulticast mode [ 703.326845][T26948] __nla_validate_parse: 8 callbacks suppressed [ 703.326871][T26948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 703.326888][T26948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4399'. [ 703.744229][T26960] netlink: 'syz.4.4403': attribute type 1 has an invalid length. [ 703.744255][T26960] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4403'. [ 703.744273][T26960] NCSI netlink: No device for ifindex 0 [ 703.809237][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4403'. [ 703.809261][T26960] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4403'. [ 703.849477][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4403'. [ 703.852440][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4403'. [ 703.862234][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4403'. [ 704.007119][T26965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.147916][T26973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'. [ 704.163715][T26973] netlink: 'syz.4.4407': attribute type 1 has an invalid length. [ 704.233993][T26973] bond7: entered promiscuous mode [ 704.238967][T26973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 704.350493][T26973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4407'. [ 707.167650][T27008] ip_tables: iptables: counters copy to user failed while replacing table [ 707.930341][T27053] netlink: 'syz.3.4424': attribute type 4 has an invalid length. [ 707.958203][T27053] netlink: 'syz.3.4424': attribute type 4 has an invalid length. [ 708.426675][T27066] __nla_validate_parse: 9 callbacks suppressed [ 708.426698][T27066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4427'. [ 708.454547][T27066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4427'. [ 708.502175][T27083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4431'. [ 708.780258][T27093] tc_dump_action: action bad kind [ 709.272406][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4438'. [ 709.528938][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4438'. [ 709.528965][T27119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4438'. [ 709.637433][T27119] veth13: entered allmulticast mode [ 709.664867][T27119] bond11: (slave veth13): Enslaving as an active interface with an up link [ 709.730873][T27123] bond11 (unregistering): (slave veth13): Releasing backup interface [ 709.764352][T27123] bond11 (unregistering): Released all slaves [ 710.386236][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4446'. [ 710.555518][T27166] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4448'. [ 710.581931][T27160] bond10 (unregistering): Released all slaves [ 710.608194][T27166] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.838301][T27186] netlink: 'syz.2.4457': attribute type 2 has an invalid length. [ 711.838328][T27186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4457'. [ 711.894171][T27185] netlink: 'syz.4.4455': attribute type 1 has an invalid length. [ 712.782285][T27225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4465'. [ 712.973345][T27222] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 713.011865][T27222] bond6: (slave lo): Enslaving as an active interface with an up link [ 713.036062][T27222] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 713.038300][ T5734] lo speed is unknown, defaulting to 1000 [ 713.038341][ T5734] syz0: Port: 1 Link ACTIVE [ 713.038414][ T5734] lo speed is unknown, defaulting to 1000 [ 713.133854][T27243] tipc: New replicast peer: 172.20.20.187 [ 713.134949][T27243] tipc: Enabled bearer , priority 10 [ 713.308759][T27253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.310984][T27253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.450625][T27256] __nla_validate_parse: 1 callbacks suppressed [ 713.450649][T27256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4474'. [ 713.540409][T27263] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 713.540482][T27259] syzkaller1: entered promiscuous mode [ 713.540502][T27259] syzkaller1: entered allmulticast mode [ 713.822424][T27269] netlink: 'syz.3.4477': attribute type 4 has an invalid length. [ 713.936347][T27269] team0 (unregistering): Port device team_slave_0 removed [ 713.956118][T27269] team0 (unregistering): Port device team_slave_1 removed [ 714.030655][T27282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4481'. [ 714.030708][T27282] netlink: 'syz.4.4481': attribute type 7 has an invalid length. [ 714.030723][T27282] netlink: 'syz.4.4481': attribute type 8 has an invalid length. [ 714.030737][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4481'. [ 714.079510][T27282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4481'. [ 714.079588][T27282] netlink: 'syz.4.4481': attribute type 7 has an invalid length. [ 714.079604][T27282] netlink: 'syz.4.4481': attribute type 8 has an invalid length. [ 714.079617][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4481'. [ 714.380393][ T5734] tipc: Node number set to 989176921 [ 714.495518][T27305] raw_sendmsg: syz.3.4486 forgot to set AF_INET. Fix it! [ 714.984940][ T5745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.041382][T27330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4492'. [ 715.237087][T14030] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.639073][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4500'. [ 715.639099][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4500'. [ 715.695210][T27366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4502'. [ 715.725376][ T5745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.251799][T27390] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 716.289539][T20502] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.289807][T20502] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.373222][ T5746] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.465594][T27404] netlink: 'syz.2.4511': attribute type 4 has an invalid length. [ 717.480921][T27449] gre0: left promiscuous mode [ 717.480950][T27449] gre0: left allmulticast mode [ 717.764021][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4522'. [ 717.868806][T27449] batman_adv: batadv0: Interface deactivated: dummy0 [ 718.093600][T27449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.110885][T27475] SET target dimension over the limit! [ 718.121012][T27449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.142296][T27449] xfrm0: left allmulticast mode [ 718.518976][T27449] macvtap0: left promiscuous mode [ 718.564723][T27449] geneve1: left promiscuous mode [ 718.703563][T27449] bond4: left promiscuous mode [ 718.703589][T27449] wireguard0: left promiscuous mode [ 718.733012][T27449] vxlan0: left promiscuous mode [ 718.733037][T27449] vxlan0: left allmulticast mode [ 718.738228][T27449] vxlan1: left promiscuous mode [ 718.738256][T27449] vxlan1: left allmulticast mode [ 718.795892][T27449] bond5: left promiscuous mode [ 718.795918][T27449] xfrm1: left promiscuous mode [ 718.801138][T27449] geneve3: left promiscuous mode [ 718.819099][T27449] bond6: left allmulticast mode [ 718.894201][T27449] bridge4: left promiscuous mode [ 718.895758][T27449] bond9: left promiscuous mode [ 718.895779][T27449] bridge5: left promiscuous mode [ 718.921947][T27449] geneve4: left promiscuous mode [ 718.934656][T27449] veth13: left allmulticast mode [ 719.173258][T14019] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.173522][T14019] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.173561][T14019] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.173598][T14019] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.173644][T14019] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.173673][T14019] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.173701][T14019] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 36588 - 0 [ 719.173737][T14019] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.173766][T14019] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.173794][T14019] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 36588 - 0 [ 719.173831][T14019] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.173875][T14019] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.173903][T14019] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 36588 - 0 [ 719.173940][T14019] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.173967][T14019] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.173994][T14019] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 36588 - 0 [ 719.680770][T27518] lo: entered allmulticast mode [ 720.043067][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 721.207462][T27569] __nla_validate_parse: 1 callbacks suppressed [ 721.207484][T27569] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4540'. [ 721.321512][T27581] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4543'. [ 722.213124][T27593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4545'. [ 722.239017][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 722.343399][T27620] tipc: Enabled bearer , priority 0 [ 722.447422][T27628] netlink: 'syz.0.4554': attribute type 10 has an invalid length. [ 722.698550][T27619] syzkaller0: entered promiscuous mode [ 722.698576][T27619] syzkaller0: entered allmulticast mode [ 722.717678][T27639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4556'. [ 722.722431][T27638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4557'. [ 723.136229][T27615] tipc: Resetting bearer [ 723.205046][T27615] tipc: Disabling bearer [ 723.404437][T27648] bridge0: port 3(veth0) entered disabled state [ 723.404956][T27648] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.405425][T27648] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.782325][T27648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.167115][T27659] syzkaller0: entered promiscuous mode [ 724.167143][T27659] syzkaller0: entered allmulticast mode [ 724.187568][T18342] s`z1: Port: 1 Link DOWN [ 724.442509][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4564'. [ 724.506083][T27697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4563'. [ 725.316518][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4569'. [ 726.100091][T27734] x_tables: duplicate underflow at hook 2 [ 726.224919][T27741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4573'. [ 726.397867][T27754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4577'. [ 727.797689][T27808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4586'. [ 727.929720][T27776] syzkaller0: entered promiscuous mode [ 727.929746][T27776] syzkaller0: entered allmulticast mode [ 728.324413][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4587'. [ 728.716481][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4596'. [ 728.716513][T27841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4596'. [ 731.273145][T14019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.273199][T14019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.273239][T14019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.273278][T14019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.274375][T27841] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 731.674115][T27880] netlink: 'syz.2.4599': attribute type 10 has an invalid length. [ 731.765585][T27880] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 731.777018][T27884] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 731.901713][T27894] netlink: 'syz.0.4604': attribute type 1 has an invalid length. [ 732.021703][T27896] gretap1: entered allmulticast mode [ 732.040968][T27896] bond11: (slave gretap1): making interface the new active one [ 732.061614][T27896] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 732.347794][T27907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4608'. [ 732.757605][T27925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4610'. [ 732.874241][T27907] tipc: Enabled bearer , priority 23 [ 733.194233][T27941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.319874][T27947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'. [ 733.379786][T27946] macvlan1: entered promiscuous mode [ 733.381909][T27946] macvlan1: entered allmulticast mode [ 733.381932][T27946] veth1_vlan: entered allmulticast mode [ 733.436619][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'. [ 733.448109][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'. [ 733.460540][T27948] syzkaller1: entered promiscuous mode [ 733.460563][T27948] syzkaller1: entered allmulticast mode [ 733.543923][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 733.546103][T27948] ip_tables: iptables: counters copy to user failed while replacing table [ 733.855018][T27967] netlink: 'syz.1.4624': attribute type 1 has an invalid length. [ 733.867686][T27967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4624'. [ 734.042164][T27967] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 734.231275][T14024] IPVS: starting estimator thread 0... [ 734.258074][T27976] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 734.277029][T27976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4625'. [ 734.323259][T27983] IPVS: using max 27 ests per chain, 64800 per kthread [ 734.367220][T27989] ip_tables: iptables: counters copy to user failed while replacing table [ 735.446544][T28040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.447232][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4637'. [ 735.511338][T28042] ip_tables: iptables: counters copy to user failed while replacing table [ 735.567123][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4637'. [ 736.020635][T28066] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 736.020663][T28066] nbd: error processing sock list [ 736.020947][T28066] block nbd6: shutting down sockets [ 736.745228][T28094] ip_tables: iptables: counters copy to user failed while replacing table [ 737.301496][T28114] netlink: 'syz.0.4658': attribute type 1 has an invalid length. [ 737.991425][T28123] netlink: 'syz.1.4660': attribute type 2 has an invalid length. [ 738.242069][T28109] netlink: 'syz.4.4657': attribute type 1 has an invalid length. [ 738.856147][T28157] netlink: 'syz.3.4669': attribute type 10 has an invalid length. [ 739.076886][T28172] netlink: 'syz.1.4670': attribute type 4 has an invalid length. [ 739.153558][T28172] __nla_validate_parse: 6 callbacks suppressed [ 739.153595][T28172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4670'. [ 740.048080][T28207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4680'. [ 740.492881][T19657] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.492932][T19657] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.493007][T19657] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.493044][T19657] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.764844][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4684'. [ 740.764909][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4684'. [ 740.765938][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4684'. [ 740.771108][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4684'. [ 742.292673][T28292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4696'. [ 742.873367][T28314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4701'. [ 743.064254][T28321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4703'. [ 743.070160][T28319] bond7 (unregistering): Released all slaves [ 743.694569][T28353] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.697385][T28353] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.731408][T28353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4710'. [ 743.757828][T28358] netlink: 'syz.4.4711': attribute type 11 has an invalid length. [ 744.027492][T28378] ipt_ah: unknown flags FF [ 744.179352][T28385] netlink: 'syz.2.4716': attribute type 1 has an invalid length. [ 744.397772][T28385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 744.582165][T28399] __nla_validate_parse: 1 callbacks suppressed [ 744.582189][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 744.655796][T28403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4720'. [ 744.806431][T28405] tipc: Failed to remove unknown binding: 66,1,1/0:369370460/369370462 [ 744.834288][T28405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4722'. [ 745.208119][T28426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4727'. [ 745.832125][T28463] netlink: 'syz.4.4734': attribute type 4 has an invalid length. [ 745.832152][T28463] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4734'. [ 745.877369][T28463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.968913][T28464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 746.536980][T28486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4737'. [ 746.593391][T28489] netlink: 872 bytes leftover after parsing attributes in process `syz.4.4737'. [ 746.593417][T28489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4737'. [ 747.029034][T28478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4735'. [ 747.647786][T28517] netlink: 'syz.1.4743': attribute type 1 has an invalid length. [ 747.888882][T28517] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 748.274064][T28502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 749.370243][T28587] netlink: 'syz.0.4758': attribute type 1 has an invalid length. [ 749.533946][T28587] 8021q: adding VLAN 0 to HW filter on device bond14 [ 749.786351][T28593] bond7: (slave veth0_to_bond): Releasing active interface [ 750.026006][T28607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4759'. [ 750.070838][T28593] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 750.270721][T28607] vlan0: entered promiscuous mode [ 750.359123][T28611] netlink: 'syz.0.4760': attribute type 5 has an invalid length. [ 750.512521][T28622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4761'. [ 751.176579][T28666] netlink: 'syz.2.4769': attribute type 7 has an invalid length. [ 751.176602][T28666] netlink: 'syz.2.4769': attribute type 8 has an invalid length. [ 751.210266][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4772'. [ 751.658417][T28685] netlink: 5716 bytes leftover after parsing attributes in process `syz.0.4776'. [ 751.658484][T28685] netlink: 5716 bytes leftover after parsing attributes in process `syz.0.4776'. [ 751.685849][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4776'. [ 751.685874][T28688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4776'. [ 752.151698][T28696] syzkaller0: entered promiscuous mode [ 752.151724][T28696] syzkaller0: entered allmulticast mode [ 752.174196][T28696] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4778'. [ 752.530989][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 752.531016][T28708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4782'. [ 752.660831][T28718] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 752.811074][T28718] 8021q: adding VLAN 0 to HW filter on device bond9 [ 752.826080][T28721] macvlan3: entered promiscuous mode [ 752.826106][T28721] macvlan3: entered allmulticast mode [ 752.828447][T28721] bond9: entered promiscuous mode [ 752.828653][T28721] bond9: entered allmulticast mode [ 752.829217][T28721] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 752.900855][T28721] bond9: left allmulticast mode [ 752.900903][T28721] bond9: left promiscuous mode [ 753.409148][T28743] siw: device registration error -23 [ 754.313837][T28781] netlink: 'syz.4.4795': attribute type 21 has an invalid length. [ 754.639010][T28790] ip_tables: iptables: counters copy to user failed while replacing table [ 754.850023][T28796] ip_tables: iptables: counters copy to user failed while replacing table [ 756.431954][T28781] __nla_validate_parse: 7 callbacks suppressed [ 756.431977][T28781] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4795'. [ 756.432013][T28781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4795'. [ 756.654423][T28778] hsr0 speed is unknown, defaulting to 1000 [ 756.670806][T28778] rxe_eth0 speed is unknown, defaulting to 1000 [ 756.756245][T28810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4798'. [ 756.831851][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4798'. [ 756.998334][T28819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 757.232209][T28815] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4800'. [ 757.248352][T28778] lo speed is unknown, defaulting to 1000 [ 757.760182][T28844] netlink: 'syz.1.4804': attribute type 1 has an invalid length. [ 757.794274][T28841] xfrm0: left promiscuous mode [ 757.811980][T28841] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 757.962137][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4807'. [ 757.991143][T28856] bridge_slave_0: left allmulticast mode [ 757.991175][T28856] bridge_slave_0: left promiscuous mode [ 757.993274][T28856] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.978658][T28886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 759.097415][T28889] rdma_rxe: rxe_newlink: failed to add lo [ 759.240434][T28896] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 759.505905][T28906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4816'. [ 759.507953][T28907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4816'. [ 759.630702][T28912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4817'. [ 759.743637][T28919] FAULT_INJECTION: forcing a failure. [ 759.743637][T28919] name failslab, interval 1, probability 0, space 0, times 0 [ 759.743673][T28919] CPU: 0 UID: 0 PID: 28919 Comm: syz.4.4818 Not tainted syzkaller #0 PREEMPT(full) [ 759.743699][T28919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 759.743713][T28919] Call Trace: [ 759.743723][T28919] [ 759.743734][T28919] dump_stack_lvl+0xe8/0x150 [ 759.743777][T28919] should_fail_ex+0x3eb/0x540 [ 759.743811][T28919] ? __alloc_skb+0x1db/0x7a0 [ 759.743835][T28919] should_failslab+0xa8/0x100 [ 759.743859][T28919] ? __alloc_skb+0x1db/0x7a0 [ 759.743879][T28919] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 759.743909][T28919] ? __alloc_skb+0x18d/0x7a0 [ 759.743932][T28919] ? __alloc_skb+0x1db/0x7a0 [ 759.743963][T28919] __alloc_skb+0x1db/0x7a0 [ 759.743991][T28919] netlink_sendmsg+0x5cd/0xb20 [ 759.744023][T28919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.744050][T28919] ? aa_sock_msg_perm+0x144/0x210 [ 759.744083][T28919] ? apparmor_socket_sendmsg+0x98/0x360 [ 759.744124][T28919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.744145][T28919] sock_sendmsg_nosec+0x14e/0x190 [ 759.744187][T28919] ____sys_sendmsg+0x54e/0x850 [ 759.744220][T28919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.744257][T28919] ? import_iovec+0x73/0xa0 [ 759.744298][T28919] ___sys_sendmsg+0x2a5/0x360 [ 759.744323][T28919] ? __lock_acquire+0x747/0x2de0 [ 759.744358][T28919] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.744427][T28919] ? __fget_files+0x3a2/0x420 [ 759.744455][T28919] ? __fget_files+0x2a/0x420 [ 759.744495][T28919] __x64_sys_sendmsg+0x1b1/0x290 [ 759.744525][T28919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.744576][T28919] do_syscall_64+0x166/0x520 [ 759.744606][T28919] ? trace_irq_disable+0x3b/0x140 [ 759.744637][T28919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.744661][T28919] ? clear_bhb_loop+0x70/0xc0 [ 759.744689][T28919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.744712][T28919] RIP: 0033:0x7f527f59fb19 [ 759.744733][T28919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.744760][T28919] RSP: 002b:00007f5280443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.744784][T28919] RAX: ffffffffffffffda RBX: 00007f527f826090 RCX: 00007f527f59fb19 [ 759.744801][T28919] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 759.744815][T28919] RBP: 00007f5280443090 R08: 0000000000000000 R09: 0000000000000000 [ 759.744829][T28919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.744842][T28919] R13: 00007f527f826128 R14: 00007f527f826090 R15: 00007fff708a6458 [ 759.744880][T28919] [ 760.170926][T28925] netlink: 'syz.3.4820': attribute type 1 has an invalid length. [ 760.245843][T28925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 760.250446][T28925] bond7: (slave bond8): making interface the new active one [ 760.269071][T28925] bond7: (slave bond8): Enslaving as an active interface with an up link [ 760.294655][T28928] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 760.299950][T28925] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 760.922220][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 761.152264][T28966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 761.388546][T28950] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 761.424517][T28950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.439463][T28950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 761.845691][T28950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.845732][T28950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.102979][T28950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.103020][T28950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.314512][T28950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.314553][T28950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.653421][ T31] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.653460][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 762.860621][ T31] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.860662][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 762.862993][ T31] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.863044][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 762.863095][ T31] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.863122][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 763.257168][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.257198][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.257218][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.260447][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.260510][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.260555][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.260605][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.260656][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.260700][T29017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 763.440566][T29017] veth1_to_bond: entered promiscuous mode [ 764.629130][T29028] Bluetooth: MGMT ver 1.23 [ 764.965057][T29040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4840'. [ 765.236243][T29055] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4842'. [ 765.826949][T29040] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 765.912294][T29040] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 766.886712][T29115] netlink: 'syz.1.4851': attribute type 1 has an invalid length. [ 767.164205][T29122] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 767.164205][T29122] Please contact the netfilter-devel mailing list or update your nftables rules. [ 770.228891][T14024] IPVS: starting estimator thread 0... [ 770.313000][T29177] IPVS: using max 26 ests per chain, 62400 per kthread [ 770.367037][T29179] netlink: 'syz.0.4863': attribute type 1 has an invalid length. [ 770.368001][T29174] netlink: 'syz.0.4863': attribute type 1 has an invalid length. [ 770.477286][T29179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4863'. [ 770.561012][T29191] bond15: (slave geneve6): making interface the new active one [ 770.587843][T29191] bond15: (slave geneve6): Enslaving as an active interface with an up link [ 770.610528][T29179] 8021q: adding VLAN 0 to HW filter on device bond15 [ 770.696094][T29174] tipc: Resetting bearer [ 770.704923][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4867'. [ 770.766585][T14027] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.766639][T14027] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.766678][T14027] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.766717][T14027] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 771.125953][T29214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4868'. [ 771.465725][T29227] xfrm0: entered allmulticast mode [ 772.238643][T29265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4880'. [ 772.634441][T29278] netlink: 'syz.2.4883': attribute type 4 has an invalid length. [ 772.750774][T29286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4883'. [ 773.448362][T29313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 774.118801][T29344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4898'. [ 774.442424][T29367] xt_hashlimit: invalid interval [ 774.460500][T29364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4896'. [ 774.569112][T29364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4896'. [ 774.600576][T29364] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21 [ 774.723704][T29361] syzkaller0: entered promiscuous mode [ 774.723728][T29361] syzkaller0: entered allmulticast mode [ 774.767602][T29382] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4896'. [ 775.271883][T29401] hsr0 speed is unknown, defaulting to 1000 [ 775.296059][T29401] rxe_eth0 speed is unknown, defaulting to 1000 [ 776.051240][T29401] lo speed is unknown, defaulting to 1000 [ 776.835700][T29447] __nla_validate_parse: 2 callbacks suppressed [ 776.835724][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4916'. [ 776.905982][T29451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4916'. [ 776.906008][T29451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4916'. [ 778.973697][T29451] veth5: entered allmulticast mode [ 778.982397][T29451] bond10: (slave veth5): Enslaving as an active interface with an up link [ 779.027287][T29448] bond10 (unregistering): (slave veth5): Releasing backup interface [ 779.097907][T29448] bond10 (unregistering): Released all slaves [ 779.167448][T29475] netlink: 'syz.2.4918': attribute type 1 has an invalid length. [ 779.322690][T29480] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4919'. [ 779.515085][T29475] bond6: entered promiscuous mode [ 779.515593][T29475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 779.522653][T29476] ip6_vti0: entered allmulticast mode [ 779.766630][T29482] bond6: (slave bridge6): making interface the new active one [ 779.766660][T29482] bridge6: entered promiscuous mode [ 779.778843][T29482] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 779.780853][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4921'. [ 779.862958][T29489] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4922'. [ 780.181146][T29502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4924'. [ 780.210727][T29502] bridge0: port 5(veth0) entered blocking state [ 780.210849][T29502] bridge0: port 5(veth0) entered disabled state [ 780.211017][T29502] veth0: entered allmulticast mode [ 780.247608][T29502] veth0: entered promiscuous mode [ 780.349431][T29507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4926'. [ 780.471154][T29502] veth1_vlan: left allmulticast mode [ 780.518095][ T30] audit: type=1804 audit(1794009445.546:30): pid=29513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4927" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1757 res=1 errno=0 [ 780.520699][ T30] audit: type=1800 audit(1794009445.546:31): pid=29513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4927" name="cgroup.controllers" dev="tmpfs" ino=1757 res=0 errno=-22 [ 780.551182][T29510] tipc: Enabling of bearer rejected, failed to enable media [ 780.560140][T14019] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.560243][T14019] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.560315][T14019] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 780.561952][ T1012] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.562025][ T1012] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.562096][ T1012] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 780.562203][ T1012] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.562274][ T1012] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.562408][ T1012] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 780.562506][ T1012] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.562594][ T1012] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.562672][ T1012] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 781.045913][T29526] netlink: 'syz.4.4928': attribute type 1 has an invalid length. [ 781.046914][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4928'. [ 781.087043][ T30] audit: type=1804 audit(1794009446.106:32): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4929" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2311 res=1 errno=0 [ 781.087105][ T30] audit: type=1800 audit(1794009446.106:33): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4929" name="cgroup.controllers" dev="tmpfs" ino=2311 res=0 errno=-22 [ 781.171238][T29527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4929'. [ 781.980779][T29569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4939'. [ 781.995472][T29571] net_ratelimit: 24 callbacks suppressed [ 781.995495][T29571] openvswitch: netlink: Message has -3 unknown bytes. [ 782.597657][T29599] vlan0: entered promiscuous mode [ 782.597683][T29599] bridge0: entered promiscuous mode [ 782.810765][T29568] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 782.919280][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4949'. [ 782.920160][T29613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4949'. [ 783.864515][T29660] netlink: 'syz.1.4961': attribute type 21 has an invalid length. [ 783.864543][T29660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4961'. [ 783.864661][T29660] netlink: 'syz.1.4961': attribute type 4 has an invalid length. [ 783.864677][T29660] netlink: 'syz.1.4961': attribute type 3 has an invalid length. [ 783.864691][T29660] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4961'. [ 784.013426][T29656] syzkaller0: entered promiscuous mode [ 784.013454][T29656] syzkaller0: entered allmulticast mode [ 784.041473][T29656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4962'. [ 784.277273][T29677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4966'. [ 784.998148][T29713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4973'. [ 784.998189][T29713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4973'. [ 785.056751][T29718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4973'. [ 785.125243][T29720] xt_CT: No such helper "snmp" [ 787.221758][T29792] netlink: 'syz.1.4984': attribute type 9 has an invalid length. [ 787.325442][T29798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 787.432630][T29797] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 787.466237][T29797] bond1: (slave macvlan0): making interface the new active one [ 787.468957][T29797] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 787.470199][ T7661] veth0_to_bond: entered promiscuous mode [ 787.470716][T29803] bond1: option mode: unable to set because the bond device has slaves [ 787.531308][T29806] xt_TCPMSS: Only works on TCP SYN packets [ 787.594463][T29801] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 787.903653][T29821] __nla_validate_parse: 5 callbacks suppressed [ 787.903676][T29821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 787.907820][ T30] audit: type=1804 audit(1794009452.936:34): pid=29823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4992" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2172 res=1 errno=0 [ 787.907877][ T30] audit: type=1800 audit(1794009452.936:35): pid=29823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4992" name="cgroup.controllers" dev="tmpfs" ino=2172 res=0 errno=-22 [ 787.909568][ T30] audit: type=1800 audit(1794009452.936:36): pid=29824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4992" name="cgroup.controllers" dev="tmpfs" ino=2172 res=0 errno=-22 [ 788.012091][T29821] syz_tun: entered promiscuous mode [ 788.021967][T29821] macvtap1: entered allmulticast mode [ 788.021993][T29821] syz_tun: entered allmulticast mode [ 788.047839][T29821] syz_tun: left allmulticast mode [ 788.047871][T29821] syz_tun: left promiscuous mode [ 788.115167][T29824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4992'. [ 788.182381][T29830] netlink: 'syz.3.4993': attribute type 2 has an invalid length. [ 788.397153][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4995'. [ 788.470815][T29845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4995'. [ 788.851525][T29857] bond0: (slave veth0_to_bond): Releasing backup interface [ 788.865845][T29857] veth0_to_bond: left promiscuous mode [ 788.903942][T29857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 789.213790][T29868] netlink: 'syz.2.5000': attribute type 1 has an invalid length. [ 789.284144][T29870] SET target dimension over the limit! [ 789.292984][T29870] netlink: 'syz.1.5001': attribute type 39 has an invalid length. [ 789.469940][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5002'. [ 789.836698][T29898] netlink: 'syz.2.5006': attribute type 1 has an invalid length. [ 789.890346][T29898] 8021q: adding VLAN 0 to HW filter on device bond7 [ 789.900912][T29901] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 789.953998][T29898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5006'. [ 789.977072][T29898] bridge8: entered promiscuous mode [ 789.991314][T29898] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 790.352439][T29923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5009'. [ 791.075745][T29953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5011'. [ 791.427203][T29959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5015'. [ 791.427240][T29959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 792.586437][T30017] openvswitch: netlink: Flow actions attr not present in new flow. [ 793.022206][T30027] netlink: 'syz.0.5029': attribute type 16 has an invalid length. [ 793.022235][T30027] netlink: 'syz.0.5029': attribute type 17 has an invalid length. [ 793.121234][T30032] hsr_slave_0: left promiscuous mode [ 793.129178][T30032] hsr_slave_1: left promiscuous mode [ 793.183080][T30040] __nla_validate_parse: 6 callbacks suppressed [ 793.183102][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 794.018618][T30060] tipc: Enabled bearer , priority 10 [ 794.065928][T30062] ip_tables: iptables: counters copy to user failed while replacing table [ 794.167229][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5040'. [ 794.188765][T30067] bond14: (slave veth0_to_bond): Releasing active interface [ 794.473767][T30089] netlink: Unknown conntrack attr (type=28, max=9) [ 794.964465][T14019] IPVS: starting estimator thread 0... [ 794.999621][T30099] netlink: 'syz.4.5044': attribute type 4 has an invalid length. [ 795.053653][T30101] IPVS: using max 26 ests per chain, 62400 per kthread [ 795.055203][T30099] 8021q: adding VLAN 0 to HW filter on device bond10 [ 795.055944][T30099] bridge0: port 1(bond10) entered blocking state [ 795.056178][T30099] bridge0: port 1(bond10) entered disabled state [ 795.056390][T30099] bond10: entered allmulticast mode [ 795.059362][T30099] bond10: entered promiscuous mode [ 795.361023][T30109] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5046'. [ 795.961321][T30134] ipvlan0: entered promiscuous mode [ 795.978621][T30134] bridge0: port 3(ipvlan0) entered blocking state [ 795.980932][T30134] bridge0: port 3(ipvlan0) entered disabled state [ 795.981154][T30134] ipvlan0: entered allmulticast mode [ 795.981176][T30134] bridge0: entered allmulticast mode [ 796.044279][T30134] ipvlan0: left allmulticast mode [ 796.054830][T30134] bridge0: left allmulticast mode [ 796.212223][T30144] macvtap1: entered allmulticast mode [ 796.663076][T30167] netlink: 'syz.4.5054': attribute type 49 has an invalid length. [ 796.996277][T30167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.426628][T30207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5058'. [ 797.426654][T30207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5058'. [ 797.620333][T30197] netlink: 'syz.3.5058': attribute type 1 has an invalid length. [ 797.620359][T30197] netlink: 'syz.3.5058': attribute type 3 has an invalid length. [ 797.620374][T30197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5058'. [ 798.395133][T30242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 798.439412][T30242] FAULT_INJECTION: forcing a failure. [ 798.439412][T30242] name failslab, interval 1, probability 0, space 0, times 0 [ 798.439448][T30242] CPU: 1 UID: 0 PID: 30242 Comm: syz.0.5064 Not tainted syzkaller #0 PREEMPT(full) [ 798.439483][T30242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 798.439502][T30242] Call Trace: [ 798.439511][T30242] [ 798.439521][T30242] dump_stack_lvl+0xe8/0x150 [ 798.439564][T30242] should_fail_ex+0x3eb/0x540 [ 798.439596][T30242] ? __alloc_skb+0x1db/0x7a0 [ 798.439619][T30242] should_failslab+0xa8/0x100 [ 798.439643][T30242] ? __alloc_skb+0x1db/0x7a0 [ 798.439662][T30242] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 798.439695][T30242] ? __alloc_skb+0x1db/0x7a0 [ 798.439726][T30242] __alloc_skb+0x1db/0x7a0 [ 798.439754][T30242] tipc_msg_build+0x15f/0xf50 [ 798.439785][T30242] ? tipc_node_find+0xb3/0x490 [ 798.439815][T30242] ? tipc_node_find+0x3bd/0x490 [ 798.439845][T30242] ? __pfx_tipc_msg_build+0x10/0x10 [ 798.439895][T30242] tipc_send_group_msg+0x266/0x560 [ 798.439941][T30242] ? __pfx_tipc_send_group_msg+0x10/0x10 [ 798.439968][T30242] ? lockdep_hardirqs_on+0x7b/0x110 [ 798.440020][T30242] __tipc_sendmsg+0x1dc9/0x2b60 [ 798.440058][T30242] ? unwind_get_return_address+0x4d/0x90 [ 798.440101][T30242] ? __pfx___tipc_sendmsg+0x10/0x10 [ 798.440135][T30242] ? __lock_acquire+0x747/0x2de0 [ 798.440177][T30242] ? ima_match_policy+0x21aa/0x2230 [ 798.440224][T30242] ? lock_acquire+0x115/0x350 [ 798.440272][T30242] ? process_measurement+0x7b2/0x1c10 [ 798.440318][T30242] ? __lock_acquire+0x747/0x2de0 [ 798.440350][T30242] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 798.440397][T30242] __tipc_sendstream+0x105f/0x12a0 [ 798.440423][T30242] ? __lock_acquire+0x747/0x2de0 [ 798.440466][T30242] ? __lock_acquire+0x747/0x2de0 [ 798.440511][T30242] ? do_raw_spin_lock+0x12b/0x2f0 [ 798.440539][T30242] ? __pfx___tipc_sendstream+0x10/0x10 [ 798.440572][T30242] ? tipc_send_packet+0x6e/0xa0 [ 798.440604][T30242] ? __local_bh_enable_ip+0xd6/0x140 [ 798.440642][T30242] tipc_send_packet+0x7c/0xa0 [ 798.440670][T30242] ? __pfx_tipc_send_packet+0x10/0x10 [ 798.440696][T30242] sock_sendmsg_nosec+0x14e/0x190 [ 798.440733][T30242] ____sys_sendmsg+0x54e/0x850 [ 798.440765][T30242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.440804][T30242] ? import_iovec+0x73/0xa0 [ 798.440838][T30242] ___sys_sendmsg+0x2a5/0x360 [ 798.440862][T30242] ? __lock_acquire+0x747/0x2de0 [ 798.440897][T30242] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.440977][T30242] ? __fget_files+0x3a2/0x420 [ 798.441007][T30242] ? __fget_files+0x2a/0x420 [ 798.441047][T30242] __x64_sys_sendmsg+0x1b1/0x290 [ 798.441076][T30242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.441131][T30242] do_syscall_64+0x166/0x520 [ 798.441160][T30242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.441184][T30242] ? clear_bhb_loop+0x70/0xc0 [ 798.441214][T30242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.441237][T30242] RIP: 0033:0x7f333519fb19 [ 798.441259][T30242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.441279][T30242] RSP: 002b:00007f3336050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.441303][T30242] RAX: ffffffffffffffda RBX: 00007f3335425fa0 RCX: 00007f333519fb19 [ 798.441321][T30242] RDX: 0000000024000080 RSI: 0000200000000a80 RDI: 0000000000000007 [ 798.441336][T30242] RBP: 00007f3336050090 R08: 0000000000000000 R09: 0000000000000000 [ 798.441351][T30242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.441365][T30242] R13: 00007f3335426038 R14: 00007f3335425fa0 R15: 00007ffffe0e69e8 [ 798.441405][T30242] [ 799.003717][T30224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5060'. [ 799.213604][T30224] 8021q: adding VLAN 0 to HW filter on device bond11 [ 799.399376][T30253] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5065'. [ 799.687362][T30266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 800.171987][T30284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 800.185404][T30284] xt_l2tp: v2 tid > 0xffff: 4294901760 [ 800.199525][T30284] openvswitch: netlink: nsh attr 329 is out of range max 3 [ 800.386936][T30293] TC_ACT_REPEAT abuse ? [ 800.583978][T30300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 801.507046][T30329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 802.244947][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 802.268927][T30347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5090'. [ 802.362126][T30357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 802.369853][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 802.370528][T30354] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 802.569979][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5094'. [ 802.570070][T30363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5094'. [ 802.570105][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5094'. [ 802.799244][T30372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5095'. [ 802.807401][T26318] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 802.807491][T26318] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 802.807550][T26318] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 802.872281][T30382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 804.683624][T30397] __nla_validate_parse: 1 callbacks suppressed [ 804.683648][T30397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5104'. [ 805.161203][T30448] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 805.210559][T30453] netlink: 'syz.1.5113': attribute type 63 has an invalid length. [ 805.210587][T30453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5113'. [ 805.397305][T30453] pim6reg: entered allmulticast mode [ 805.429608][T30453] pim6reg: left allmulticast mode [ 805.455637][T30463] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5115'. [ 805.458439][T30465] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5115'. [ 805.511499][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5116'. [ 805.575001][T30466] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 805.758997][T30483] x_tables: duplicate underflow at hook 2 [ 806.181510][T30496] netlink: 'syz.3.5120': attribute type 1 has an invalid length. [ 806.651197][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5124'. [ 806.857022][T30520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5125'. [ 807.489878][T30559] netlink: 'syz.2.5134': attribute type 3 has an invalid length. [ 807.551380][T30562] netlink: 'syz.2.5134': attribute type 3 has an invalid length. [ 807.962386][T30571] netlink: 'syz.2.5136': attribute type 10 has an invalid length. [ 808.364412][T30579] TCP: TCP_TX_DELAY enabled [ 808.434206][T30588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5140'. [ 808.636869][T30591] syzkaller0: entered promiscuous mode [ 808.636911][T30591] syzkaller0: entered allmulticast mode [ 808.666947][T30591] syzkaller0: left promiscuous mode [ 808.666973][T30591] syzkaller0: left allmulticast mode [ 808.940539][T30599] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5142'. [ 809.343019][T30616] lo: entered allmulticast mode [ 809.662941][T30625] tipc: Invalid UDP bearer configuration [ 809.662992][T30625] tipc: Enabling of bearer rejected, failed to enable media [ 809.961377][T30636] netlink: 1480 bytes leftover after parsing attributes in process `syz.4.5151'. [ 810.330876][T30655] Cannot find add_set index 2 as target [ 811.224071][T30651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5153'. [ 812.086973][T30717] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 812.201070][ T7661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.287649][ T30] audit: type=1800 audit(1794009477.316:37): pid=30693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5162" name="memory.events" dev="tmpfs" ino=1792 res=0 errno=-22 [ 812.341085][T14024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.457326][T30729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 812.731701][T30745] sock: sock_set_timeout: `syz.0.5171' (pid 30745) tries to set negative timeout [ 813.322281][T30763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5177'. [ 813.364990][T30763] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 813.365438][T30763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.370090][T30763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 813.405954][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.406275][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.455203][ T7661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.491480][T30763] batman_adv: batadv0: Adding interface: syz_tun [ 813.491502][T30763] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.491539][T30763] batman_adv: batadv0: Interface activated: syz_tun [ 813.509055][ T7661] s`z1: Port: 1 Link ACTIVE [ 814.256169][T30748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5173'. [ 814.452932][T30792] sctp: [Deprecated]: syz.4.5185 (pid 30792) Use of int in max_burst socket option. [ 814.452932][T30792] Use struct sctp_assoc_value instead [ 814.501712][T30795] smc: smcd device lo applied user defined pnetid SYZ0 [ 815.069635][T30812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5189'. [ 815.634485][T30832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5193'. [ 816.242234][T30861] syzkaller0: entered promiscuous mode [ 816.242270][T30861] syzkaller0: entered allmulticast mode [ 816.266177][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.410358][T30861] tipc: Enabled bearer , priority 0 [ 816.871771][T30892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5209'. [ 817.112540][T30897] bond1: option mode: unable to set because the bond device has slaves [ 817.625128][T30918] syzkaller0: entered promiscuous mode [ 817.625156][T30918] syzkaller0: entered allmulticast mode [ 817.627392][T30921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 817.676168][T30921] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5215'. [ 817.678254][T30921] ip_tables: iptables: counters copy to user failed while replacing table [ 818.004558][T30939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 818.244047][T30943] Bluetooth: MGMT ver 1.23 [ 818.718046][T30973] bridge9: entered promiscuous mode [ 818.718086][T30973] bridge9: entered allmulticast mode [ 818.807853][T30977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5226'. [ 819.121599][T30968] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 819.350553][T30990] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 819.352579][T30990] bond13 (unregistering): Released all slaves [ 819.388103][T30997] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5227'. [ 819.591652][T30992] bridge_slave_0: default FDB implementation only supports local addresses [ 819.775673][T31006] netlink: 'syz.1.5231': attribute type 1 has an invalid length. [ 819.991337][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5231'. [ 820.040561][T31014] bond10: (slave bridge3): making interface the new active one [ 820.041026][T31014] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 820.206824][T31025] hsr0 speed is unknown, defaulting to 1000 [ 820.226094][T31025] rxe_eth0 speed is unknown, defaulting to 1000 [ 820.570408][T31045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 820.911516][T31054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5239'. [ 820.989505][T31054] gtp1: entered promiscuous mode [ 821.011824][T31055] openvswitch: netlink: Key type 31 is not supported [ 821.270890][T31025] lo speed is unknown, defaulting to 1000 [ 821.272572][T31069] netlink: 22960 bytes leftover after parsing attributes in process `syz.0.5242'. [ 822.037269][T31073] siw: device registration error -23 [ 822.578300][T31113] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 822.590576][T31093] syzkaller0: entered promiscuous mode [ 822.590604][T31093] syzkaller0: entered allmulticast mode [ 822.853267][T31114] nbd4: detected capacity change from 0 to 63 [ 822.855883][T31105] block nbd4: NBD_DISCONNECT [ 822.983328][T31105] block nbd4: Disconnected due to user request. [ 822.991929][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 822.992150][ T1744] Buffer I/O error on dev nbd4, logical block 0, async page read [ 822.992428][ T1744] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 822.992456][ T1744] Buffer I/O error on dev nbd4, logical block 1, async page read [ 822.992473][ T1744] Buffer I/O error on dev nbd4, logical block 2, async page read [ 822.992489][ T1744] Buffer I/O error on dev nbd4, logical block 3, async page read [ 822.999599][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 822.999685][ T1744] Buffer I/O error on dev nbd4, logical block 0, async page read [ 822.999737][ T1744] Buffer I/O error on dev nbd4, logical block 1, async page read [ 822.999781][ T1744] Buffer I/O error on dev nbd4, logical block 2, async page read [ 822.999823][ T1744] Buffer I/O error on dev nbd4, logical block 3, async page read [ 823.000879][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.000906][ T1744] Buffer I/O error on dev nbd4, logical block 0, async page read [ 823.000923][ T1744] Buffer I/O error on dev nbd4, logical block 1, async page read [ 823.001075][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.001266][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.001502][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.001820][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.002602][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.002856][T31120] ldm_validate_partition_table(): Disk read failed. [ 823.003229][ T1744] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 823.006723][T31120] Dev nbd4: unable to read RDB block 0 [ 823.015784][T31120] nbd4: unable to read partition table [ 823.017694][T31105] block nbd4: shutting down sockets [ 823.193322][T31120] ldm_validate_partition_table(): Disk read failed. [ 823.207454][T31120] Dev nbd4: unable to read RDB block 0 [ 823.219929][T31120] nbd4: unable to read partition table [ 823.309780][T31120] [ 823.312188][T31120] ====================================================== [ 823.319236][T31120] WARNING: possible circular locking dependency detected [ 823.326304][T31120] syzkaller #0 Not tainted [ 823.330749][T31120] ------------------------------------------------------ [ 823.337799][T31120] udevd/31120 is trying to acquire lock: [ 823.343459][T31120] ffffffff90294f80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600 [ 823.353380][T31120] [ 823.353380][T31120] but task is already holding lock: [ 823.360860][T31120] ffffffff91a35440 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 823.371465][T31120] [ 823.371465][T31120] which lock already depends on the new lock. [ 823.371465][T31120] [ 823.381893][T31120] [ 823.381893][T31120] the existing dependency chain (in reverse order) is: [ 823.390936][T31120] [ 823.390936][T31120] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 823.398957][T31120] __mutex_lock+0x197/0x15a0 [ 823.404115][T31120] kobject_uevent_net_broadcast+0x27e/0x560 [ 823.410599][T31120] kobject_uevent_env+0x566/0x9e0 [ 823.416188][T31120] device_add+0x544/0xb80 [ 823.421073][T31120] device_create+0x269/0x300 [ 823.426223][T31120] msr_device_create+0x33/0x50 [ 823.431553][T31120] cpuhp_invoke_callback+0x434/0x810 [ 823.437388][T31120] cpuhp_thread_fun+0x362/0x780 [ 823.442786][T31120] smpboot_thread_fn+0x5f8/0xb30 [ 823.448259][T31120] kthread+0x38b/0x480 [ 823.452877][T31120] ret_from_fork+0x514/0xb70 [ 823.458008][T31120] ret_from_fork_asm+0x1a/0x30 [ 823.463325][T31120] [ 823.463325][T31120] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 823.470917][T31120] cpuhp_thread_fun+0x127/0x780 [ 823.476311][T31120] smpboot_thread_fn+0x5f8/0xb30 [ 823.481787][T31120] kthread+0x38b/0x480 [ 823.486392][T31120] ret_from_fork+0x514/0xb70 [ 823.491523][T31120] ret_from_fork_asm+0x1a/0x30 [ 823.496838][T31120] [ 823.496838][T31120] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 823.504582][T31120] cpus_read_lock+0x3d/0x160 [ 823.509728][T31120] static_key_slow_inc+0x12/0x30 [ 823.515201][T31120] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 823.521456][T31120] nbd_genl_foreach_sock+0x265/0x450 [ 823.527288][T31120] nbd_genl_reconfigure+0xbbb/0x1040 [ 823.533123][T31120] genl_family_rcv_msg_doit+0x233/0x340 [ 823.539239][T31120] genl_rcv_msg+0x614/0x7a0 [ 823.544286][T31120] netlink_rcv_skb+0x226/0x4a0 [ 823.549598][T31120] genl_rcv+0x28/0x40 [ 823.554144][T31120] netlink_unicast+0x8ef/0xa80 [ 823.559466][T31120] netlink_sendmsg+0x7f0/0xb20 [ 823.564775][T31120] sock_sendmsg_nosec+0x14e/0x190 [ 823.570344][T31120] ____sys_sendmsg+0x54e/0x850 [ 823.575645][T31120] ___sys_sendmsg+0x2a5/0x360 [ 823.580886][T31120] __x64_sys_sendmsg+0x1b1/0x290 [ 823.586449][T31120] do_syscall_64+0x166/0x520 [ 823.591585][T31120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.598032][T31120] [ 823.598032][T31120] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 823.605694][T31120] __mutex_lock+0x197/0x15a0 [ 823.610831][T31120] nbd_queue_rq+0x373/0xff0 [ 823.615873][T31120] blk_mq_dispatch_rq_list+0x499/0x1990 [ 823.621972][T31120] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 823.628840][T31120] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 823.635379][T31120] blk_mq_run_work_fn+0x167/0x2f0 [ 823.640945][T31120] process_scheduled_works+0xc3d/0x1630 [ 823.647034][T31120] worker_thread+0xa47/0xfb0 [ 823.652167][T31120] kthread+0x38b/0x480 [ 823.656775][T31120] ret_from_fork+0x514/0xb70 [ 823.661911][T31120] ret_from_fork_asm+0x1a/0x30 [ 823.667214][T31120] [ 823.667214][T31120] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 823.674438][T31120] __mutex_lock+0x197/0x15a0 [ 823.679581][T31120] nbd_queue_rq+0xc1/0xff0 [ 823.684559][T31120] blk_mq_dispatch_rq_list+0x499/0x1990 [ 823.690668][T31120] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 823.697537][T31120] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 823.704063][T31120] blk_mq_run_work_fn+0x167/0x2f0 [ 823.709629][T31120] process_scheduled_works+0xc3d/0x1630 [ 823.715716][T31120] worker_thread+0xa47/0xfb0 [ 823.720855][T31120] kthread+0x38b/0x480 [ 823.725467][T31120] ret_from_fork+0x514/0xb70 [ 823.730597][T31120] ret_from_fork_asm+0x1a/0x30 [ 823.735895][T31120] [ 823.735895][T31120] -> #3 (set->srcu){.+.+}-{0:0}: [ 823.743070][T31120] __synchronize_srcu+0xca/0x2f0 [ 823.748564][T31120] elevator_switch+0x1e8/0x7b0 [ 823.753890][T31120] elevator_change+0x2fa/0x480 [ 823.759269][T31120] elevator_set_default+0x375/0x440 [ 823.765050][T31120] blk_register_queue+0x404/0x4f0 [ 823.770631][T31120] __add_disk+0x6b8/0xdb0 [ 823.775508][T31120] add_disk_fwnode+0x100/0x3a0 [ 823.780819][T31120] nbd_dev_add+0x733/0xb60 [ 823.785794][T31120] nbd_init+0x168/0x1f0 [ 823.790520][T31120] do_one_initcall+0x250/0x870 [ 823.795827][T31120] do_initcall_level+0x10a/0x1a0 [ 823.801302][T31120] do_initcalls+0x59/0xa0 [ 823.806169][T31120] kernel_init_freeable+0x29d/0x3e0 [ 823.811910][T31120] kernel_init+0x22/0x1d0 [ 823.816770][T31120] ret_from_fork+0x514/0xb70 [ 823.821907][T31120] ret_from_fork_asm+0x1a/0x30 [ 823.827230][T31120] [ 823.827230][T31120] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 823.835069][T31120] __mutex_lock+0x197/0x15a0 [ 823.840203][T31120] elevator_change+0x1af/0x480 [ 823.845520][T31120] elevator_set_none+0xb5/0x140 [ 823.850927][T31120] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 823.857291][T31120] nbd_start_device+0x189/0xb30 [ 823.862690][T31120] nbd_genl_connect+0x167d/0x1cd0 [ 823.868251][T31120] genl_family_rcv_msg_doit+0x233/0x340 [ 823.874339][T31120] genl_rcv_msg+0x614/0x7a0 [ 823.879470][T31120] netlink_rcv_skb+0x226/0x4a0 [ 823.884785][T31120] genl_rcv+0x28/0x40 [ 823.889321][T31120] netlink_unicast+0x8ef/0xa80 [ 823.894640][T31120] netlink_sendmsg+0x7f0/0xb20 [ 823.899945][T31120] sock_sendmsg_nosec+0x14e/0x190 [ 823.905518][T31120] ____sys_sendmsg+0x54e/0x850 [ 823.910823][T31120] ___sys_sendmsg+0x2a5/0x360 [ 823.916039][T31120] __x64_sys_sendmsg+0x1b1/0x290 [ 823.921518][T31120] do_syscall_64+0x166/0x520 [ 823.926653][T31120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.933087][T31120] [ 823.933087][T31120] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 823.941728][T31120] blk_alloc_queue+0x544/0x690 [ 823.947058][T31120] __blk_mq_alloc_disk+0x194/0x390 [ 823.952711][T31120] nbd_dev_add+0x494/0xb60 [ 823.957674][T31120] nbd_init+0x168/0x1f0 [ 823.962424][T31120] do_one_initcall+0x250/0x870 [ 823.967740][T31120] do_initcall_level+0x10a/0x1a0 [ 823.973216][T31120] do_initcalls+0x59/0xa0 [ 823.978080][T31120] kernel_init_freeable+0x29d/0x3e0 [ 823.983818][T31120] kernel_init+0x22/0x1d0 [ 823.988689][T31120] ret_from_fork+0x514/0xb70 [ 823.993817][T31120] ret_from_fork_asm+0x1a/0x30 [ 823.999116][T31120] [ 823.999116][T31120] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 824.006370][T31120] __lock_acquire+0x164c/0x2de0 [ 824.011768][T31120] lock_acquire+0x115/0x350 [ 824.016810][T31120] fs_reclaim_acquire+0x71/0x100 [ 824.022289][T31120] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 824.028643][T31120] __alloc_skb+0x1db/0x7a0 [ 824.033594][T31120] alloc_uevent_skb+0x7d/0x230 [ 824.038902][T31120] kobject_uevent_net_broadcast+0x2fa/0x560 [ 824.045328][T31120] kobject_uevent_env+0x566/0x9e0 [ 824.050887][T31120] nbd_config_put+0x2c8/0x7e0 [ 824.056096][T31120] nbd_release+0xfe/0x140 [ 824.060965][T31120] bdev_release+0x571/0x690 [ 824.066016][T31120] blkdev_release+0x15/0x20 [ 824.071077][T31120] __fput+0x408/0xa40 [ 824.075613][T31120] fput_close_sync+0x11f/0x240 [ 824.080919][T31120] __se_sys_close+0xa2/0x160 [ 824.086057][T31120] do_syscall_64+0x166/0x520 [ 824.091207][T31120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.097633][T31120] [ 824.097633][T31120] other info that might help us debug this: [ 824.097633][T31120] [ 824.107875][T31120] Chain exists of: [ 824.107875][T31120] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 824.107875][T31120] [ 824.120580][T31120] Possible unsafe locking scenario: [ 824.120580][T31120] [ 824.128036][T31120] CPU0 CPU1 [ 824.133411][T31120] ---- ---- [ 824.138798][T31120] lock(uevent_sock_mutex); [ 824.143421][T31120] lock(cpuhp_state-up); [ 824.150292][T31120] lock(uevent_sock_mutex); [ 824.157514][T31120] lock(fs_reclaim); [ 824.161514][T31120] [ 824.161514][T31120] *** DEADLOCK *** [ 824.161514][T31120] [ 824.169664][T31120] locks held by udevd/31120: 3, last CPU#1: [ 824.175569][T31120] #0: ffff8880952c0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 824.185166][T31120] #1: ffff888038256260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 824.195895][T31120] #2: ffffffff91a35440 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 824.206919][T31120] [ 824.206919][T31120] stack backtrace: [ 824.212906][T31120] CPU: 1 UID: 0 PID: 31120 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 824.221855][T31120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 824.231921][T31120] Call Trace: [ 824.235248][T31120] [ 824.238194][T31120] dump_stack_lvl+0xe8/0x150 [ 824.242830][T31120] print_circular_bug+0x2e2/0x300 [ 824.247881][T31120] check_noncircular+0x12f/0x150 [ 824.252847][T31120] __lock_acquire+0x164c/0x2de0 [ 824.257726][T31120] ? __lock_acquire+0x1511/0x2de0 [ 824.262780][T31120] lock_acquire+0x115/0x350 [ 824.267303][T31120] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 824.273311][T31120] ? lock_acquire+0x115/0x350 [ 824.278029][T31120] ? __alloc_skb+0x1db/0x7a0 [ 824.282664][T31120] fs_reclaim_acquire+0x71/0x100 [ 824.287636][T31120] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 824.293657][T31120] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 824.299486][T31120] ? __alloc_skb+0x18d/0x7a0 [ 824.304096][T31120] ? __alloc_skb+0x1db/0x7a0 [ 824.308717][T31120] __alloc_skb+0x1db/0x7a0 [ 824.313155][T31120] alloc_uevent_skb+0x7d/0x230 [ 824.317971][T31120] kobject_uevent_net_broadcast+0x2fa/0x560 [ 824.323889][T31120] kobject_uevent_env+0x566/0x9e0 [ 824.328958][T31120] nbd_config_put+0x2c8/0x7e0 [ 824.333669][T31120] ? __pfx_nbd_config_put+0x10/0x10 [ 824.338903][T31120] ? do_raw_spin_unlock+0xf5/0x200 [ 824.344037][T31120] nbd_release+0xfe/0x140 [ 824.348385][T31120] ? __pfx_nbd_release+0x10/0x10 [ 824.353351][T31120] bdev_release+0x571/0x690 [ 824.357882][T31120] ? __pfx_blkdev_release+0x10/0x10 [ 824.363097][T31120] blkdev_release+0x15/0x20 [ 824.367626][T31120] __fput+0x408/0xa40 [ 824.371631][T31120] fput_close_sync+0x11f/0x240 [ 824.376421][T31120] ? __pfx_fput_close_sync+0x10/0x10 [ 824.381729][T31120] ? do_raw_spin_unlock+0xf5/0x200 [ 824.386877][T31120] __se_sys_close+0xa2/0x160 [ 824.391514][T31120] do_syscall_64+0x166/0x520 [ 824.396125][T31120] ? trace_irq_disable+0x3b/0x140 [ 824.401174][T31120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.407253][T31120] ? clear_bhb_loop+0x70/0xc0 [ 824.411943][T31120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.417857][T31120] RIP: 0033:0x7fc9b76a7407 [ 824.422285][T31120] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 824.441998][T31120] RSP: 002b:00007fff9c5aad70 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 824.450437][T31120] RAX: ffffffffffffffda RBX: 00007fc9b7d5e880 RCX: 00007fc9b76a7407 [ 824.458449][T31120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 824.466609][T31120] RBP: 00007fc9b7d5e6e8 R08: 0000000000000000 R09: 0000000000000000 [ 824.474599][T31120] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 824.482686][T31120] R13: 0000564e9ba32190 R14: 0000000000000008 R15: 0000564e9ba41b90 [ 824.490691][T31120]