last executing test programs: 9.490237678s ago: executing program 0 (id=2675): socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x2c0e}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) 7.88864838s ago: executing program 0 (id=2695): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xf1, 0x4, 0x1, @loopback, @private2, 0x700, 0x40, 0x3, 0xb181}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x7, 0xa, 0x7f, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @private=0xa010102, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0xf0, 0x0, 0x8, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x10, 0x980, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x5, 0x9, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x40, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0x25, 0x0, [{0x7, 0x12, "a6e6f59c16498075cb72fa015203ebcf"}, {0x5, 0xd, "ffb56a53f0e7c83d18eff2"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x38c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r1}, {0x150, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x851, 0xc, 0x7, 0x7}, {0xec, 0x81, 0x6, 0x8}, {0x9, 0x6, 0x6, 0x4}, {0x9, 0x0, 0x66, 0x11}, {0x1, 0x1, 0x0, 0x1}, {0xa, 0x9f, 0xb, 0x9}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x5, 0x1, 0x400000}, {0x35, 0x6, 0xe1, 0x6}, {0x9, 0x3, 0x3b, 0x6}, {0x5, 0xe, 0x4, 0x4}, {0x6, 0x4, 0x5, 0x7}, {0x0, 0x1, 0xd, 0x2}, {0x10, 0xfe, 0x6, 0x9}]}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4866}}}]}}, {{0x8, 0x1, r6}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x8, 0x9e}, {0x2, 0x0, 0x0, 0x4}, {0xc, 0xb, 0x6, 0x8}, {0x140, 0xb3, 0x1, 0x7ff}, {0x10, 0xb3, 0x9, 0xffffff26}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x157}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x48004}, 0x4004011) r8 = accept(0xffffffffffffffff, &(0x7f0000000840)=@caif=@dbg, &(0x7f00000008c0)=0x80) sendto$inet(r8, &(0x7f0000000900)="1dead4e296d6eb4193ef", 0xa, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000940)={0x0, 0x1000, "ef03df8cf8912e2bb47941c0b05c417f1af4f1e72ec6d03de7733c48ea07fa460927ed7f92a172581dd47821d70722699e29b61746faf38333d292206db4839b3faf6b2c94bd8f9921db54ef769ca905cd96aae98a619d197b2af87607627114e40de95dc1d6a9c894b3f57b6f3821ea9b70e98cd2ef0b5526d88e3b0ae0a34991736cfefe2868e0a1fd0c7deb9305f59c23ec674be959a9618e6068573deda87d17d8e285156900938e56a18afeb1d2d65541bb539f223b857c049a5411957a9fc614d7b9700f397dd14af9f425032f486298aee006a38e4f6cfdba0d661cf357b2648be707838b93b546dd9728ef2c63a34b8d315cbc7f6e56d3800c1fe774f4259b3e0c49bf57b1d222ba9c24c8ae626db2d42b98434eac475734e6274eb137b7e72494ec6c247a3f7418573524f7fce7ca50ac83291fc5f41f4755db7f79374db5cec00d3cf249b92bac04dc058644894adda1927a10eab9bcc17f3806e797a7356fd057d4fe131a37ba74ca534bc344453f7ba755f84934adf077ccd14d87ec13f0cbc6a163e71fbf504b1a90969492a4351804960328f1bcb9f523adc601a8552f332e7960618e7dd090a8a275abc4870c506844f9e9f6f8871f6cd9cba40bc1c5a7f38397c4644d98dce3ccf26d358225ba1e54df6b5bb79ff6734673f53001c5a0d163657a9ecd125814acdf8ef543b827bd05c7a0fbf6cc2a2ba70b4eced7d11dd3f98753550b05749686bb36a6926bb703a64a55a3cb855cdc40dd851fad2412b429c26f6fd6648c42ec5a2fcd02d85d9f0a57f85dd64b0498c914859f4d093416f2ca88f21057668cb7b62230e9041b8ebc3a8352418b803edbf58a2315436ed0bd2f892c7a6c1dc1b821dc898e6336a194bc72506222c16e105d72b1c4d7e1ed0072ccc15684f79a3570763e045aebbe4ad4367a3f2d04cfb5cf4600bf39f2a89eb8de7de132569e297a5dac91df91d147f58a5904843301bc8683942249e2fa31d8addf7167c04156753c8d9794b5b248aa7052a05779802c5d65da33814d23fff5dd78d8a333fb68e396e2984caef97bc5f4db07245045bc2af767d7c8ce91bd9956f69c80cadbfe7d618f892a703f0f7e0457f060170a1125814a7d4cdbc63d231c9f9dc0ab600b893f1dce8d2bb643792e6c2ae3caa935430c9459e9e0e02a9d0c3f3a6d73f3c52cb8d12d7f66f09661215c731d764e01abdcbd6ef54ddae66e0ca50cdeb048ed3e623cf840dbb21f6a76e06161946b72efd8c4ad2350a2c50ffce669ba58e6650d443d01715a0b0dc566ec09ab6077136dbd2b0cc46827b1938e622643090a56f95891dd60cb6db889729a3e606a5c86c121931c623765cf5b0fc213784f864d80cbc8d49df137f37a0d5acfe834928ede624f7d625b56162fc92fa3ec710a17c1f00a0f4c85e42627e69931cdc7e0c26a8ceb12cc7a275adc5371ab97cdf2bb67ef7e732831138aa78f4e7ebceda4a7a2882255311ef4d7d3e351f0cc44e3fc7e5b0470386a2fa6a87fd43f9433f2d301ba41e36e5f8e1bbd17fc7f82f77788c4394f4d81a6e5a7ca98030c64991afe13fa8fa24a535f77e9b62d61e8b3fc0938526e2926f9f3253c12d82b69baf125725e10610bf505758eda4d45eea381c5a2bdda9c0bc25bfabe6cd2316d5221faebac924735884cd596b877436f38172e369da7302753246134e6d0eda682e500e01c6ed44b30899c42b5ec075b22237e624ab0f65203cc2241ac72e4d5e760e4bf318f9fb58bf1aabf3c64dfc6826a02051d66aa6821a52b4ca9095da7bb27d95dc1af4302f5249c05a4c7cc876cf05a1f171dcba39dc21de43657f6de9989793efc11c8562262ec378600b63efe4319e32f1fb60ae4669e472683a86a4d704161598e85bd5b6a2484215777728f9cd569e3528e9168db5310981f20cfc8b4a17f2b10171c12647ffdc13584d740979860a384ba138a63de7b41a78d79f2c5228b83d0bb04ed361741dbb098d6cac67a65902c9e8cc1387ea4fa05310f97d9c4d13717c47cececf806fda640a561174eb3bcda12ad251eadf6f32c94b9be3ac30af40c9c7d0239936ddaf3ae9eef7024621d15afb0fe4ff41323164e9cc695125626f8d347f5c9db1e28152c3dbb4d6d28fd3201fac099b711ab450f403e96d7bf30292a1290d339b9aed04c66b2122032ef9e100f6faead0ea0e22837e4f2b17cb2338003096d1e2da74ad04565e60a4506d1afb98e15dcf99256e9ead08d227b33ad821160fa966777ca701a746431316c69db0ba182910b1d53253f5351076155f61e09b9c2b7a68244b7edc2831c90fe9f38492f9c0c0e4c3ff1717be73a2082f9b5d9076237c1cc3273d15cee437d8ff308263394df96151b44ccc89dc735a7739bfe1addf696a07a872987209dfd2184996a6294b7910a090bd9bf602b49435f25650c9d086423551448b6c77216791d3396712775a545065d688f14e382737f20a4b573decf606804f21d8c38d031c30496a3ef8747f15a837f5fb63819bb4468894796306f88efb548586ccd756661517d37f1071f899c77cf4cb2f33da0c4ea40980bf062fba73e4a5a6255fc2ca98683cf2bafca9f8c1fb8a54aa63cd4a6873aaa38d5195d721d6c55d3923fe2de16a4b78b474070d4712c424ec2f2e1af6bd02f3e8736d2eada922fad711e7f2199bccbd6a7edfe782351773bc119a2c6f55bab1bd4930f027ef0b595cb69403903993fa5aa5d45759cc0429d509d0b15b16490581800ee8d8ed4689e07ab87350504d96ded8eb6c04950dd28a0c90e39a1abcfe19178c78ee04b7158c0cfcdfe72b0c8eb18490bb1ce070dd853f5e6342220cc89695155dedc272f0a7a73af110be1dd3417d9d491789ccbe25e6fe8f540f0839bf684ee31ffe496ad69f5f4cdf28ea7f48d239c1da973821c76c18103df54b7ca5fe213373b6640711511525074e8908d1e1479494405e06db97cf400f07b4daa4ad7e0ccc9db051272a46fd6a148d4624a815e6db25b022c92c3690cf0a677f044f610bd3b243e6280b191f1beda7edd4c2719fa21bf85e12a2352ff24a229ea034e37cfbe89378281c8ea51808471871567e9f9ed4f7dd711ff17c24b6394d60d2127b590102574cfbd07e72153e72263365314cde12670005da1a63ebfc7911470d26dae0cd3f9b99f684782d048dbf0deb8b8005c33ab7842c882d77a12fface57c7f832af55155e3e8ef5a56b4ac207f6d9aaaa5c4f63f21e74b1026bed3cbb7535cbbffbc69e07ff48160a2843a2d008efa0abf44c2f7ad551933fe2bb059b178b0665f3bf432f0dfb49a507c2d70a5e870a0ca7b23f4889073f42a5b6f5c7f7c7e3b6191183eea3ff897946bd4f23b32634b28923e2c2ee8d75fe8de04d1d27014b60bc8cfa1f924bb8927987f10ce93878d87d631a021757b3257e66e4048cf57457b22dadd57ccd883f3ced9b4a3da578764d3debe556e718b2bbd47a173da066542220f17f3dd2d6602efdb167ef699e2d25ee767b06c72b751916f5836202ea7fd8f978e807e3b630a966e7e12e8f5be264895125b665ea32dec1d6f00e137a8b5f2ff14b97bcb1c1720bd5df25b1840c5c846ef61f89a53eaaecdac0f0dfb6e1344cca2c757ed4fe994ac6181789cac98285d32eeb8952d2f8416b3f48f6f457c170491c4abc8c9fce944fa646247b774388eea182401d566d9e57ec583c598cfd5f596a49a9c54d15e72483111f51b0744f08726df80e81a2f6158e16c3147e2d6fc3421fcdb6507dc6c276ef01a8739273f9123fd030f41f2f8612305ceeecdf9eb42f371ea63c3e40482ba92145d25e8db57d257bd54d09e18b09470a4338c7745822e2c10ba5f8d07c8ffe08c62676fb5d38000ced4def334d1273c31bd2035df99f8a22b4d352ede97713141ee2cdeb9bae080a3de8cf49abdb6e1a77ef6a8c95dfdace6e315b5018558f9ce87268d04fe2c7bc72fb0ed2dde85a8ec29653a9803f64819ed3b0c12030023dadd94834529436e95ac167aa81c34ef27a97f92e1fc9b363b66760b75f46cad90cc792790465a478242dcfc962a76e4e672adc58e72d3077f578a12f964ec5f2e6b5dc614177eefaac213a42a2a9b8dccf5d870246f7ca840236d555d62e7db77f08ba5cda9893a2fda91b7361da01e567ac32d592f70d797548b6e629d4994a69869f0ed74d3676614be324184ff39cd75ef3e26c696cbee51bfa49053e3f7bcccc5cba4746b058bf898645fda391397972a3710aff73b8af56d5d030264afcab99451d6010e74d48333a46e2667c977bd1006bc1086b90396ac66a93d980e680c52d5671fcc6f3811a05c56745f5f5e11aa35a5f8dc5ae2c91f8b04acd41f8abe884ca1487069006b7faa6549232fcad76d2b12c5a77ed1a04285f9bb052aae4df114a53c62fad96852937a76d5a45646be783b49c226649962995a89858f24ac3af4b5f06b6d5b690657bf0871e7ce41af2968dc6e6b3f9457c006aca23839651d35a3132812d56fa7830852f25621f3088f36925451042cc3d6b29a80e7d6cab25218725372acfe2d71ec28210e2c766e5f87910f6fbb3873317a7295f554d5b9dfc64da617b4098121fd71bf143f9ea2c200c570466b92d4048ccdca539bd0bf69c833adfb4bcbe865be2708329d97b28094ca73f9d79768382729b87b279ca6ec5d8e68440dd434c4173eae3c41f5839857954bdc29989fa7255655ebc1c680600925f8aa2ec0bd545d2be806dcaaf467e59aeb9cb635995d41d77a651ef6b626e6f3454a5c5e95dc43b09cada9a4f6ba72a2e849ddee1e5418d36fa42c7cd4c37768c5895614868f78df3171b889e6d3f8ab39855a9776195ac02c4bc562c5f452ac4a0418560f00dd3b9bc9e1b9f7fe323e4964784c7b1d78750083229a1a98d691dad693e1285a00287f6659849041c4eb79d2c9361127d5d8874f79893c82760680ba32cfdd9d5b150062ea2c45de4f42f6e63a215ede84e54d3705ca436f6b8900a020fd4a0b222cec20ce5ffe1899390b4550d6394a0208bbafcb06889ff46831d90d96caaabc276286f016dbccb2f4595795cd79c518fa366a0806c1270cc39bd6d4c1fcfe815f69ec83ecfe9110016182a09b1ec056c2dab2bf71fcca69f40ebf20e9da0884a8a1f1222ffd72376dac49e109c43f1adbbe05b9fb7a5dd93e11215b7e4b74c87733ceb5d6b279bb54c2a75375a08a3c4dfebc3040d6881c691539f0da41dc627ef0f723328ed7b9fa2b1ba55adb09bbe2654917d2ce9c3a953922cccbdff6934d1a56c9e11256e198b73e70f67b82e486b7a313947945312f58d53cd08ed13047c0559129b2a55fe472c04e8990e349fe4e39c70762e9f17855cb56e1a46631773b6e2a0d597a01c0db04cce4d3fca6a314c2eb80b1168aecabb8437e4725722417e7253965103103d7ed1280c7441d521cb65caaf6a11a590c0e6016ef7737d80e7508abc9c1ec7d0a0669a9c688cc4cb305bc4256c7c4bdfcac4d8901dde75ff5784a71f19194dceee657892102313d23c88ec91b5b01a0b1b91d16cedb7dc81700fb3c93d2f3241b3ab9fa2671ca1e63f5953636bb9eb4fff16810c9feb62453db6725a8bc230706cb6f893883b3dde40eeed95974cafe4488793b371eb958900fee0d8d403f23de1711ea1ff8ca03f246d39da48abea6220d53f686f36216f8702df96771f16ab4b36cb3e9e8915d9385b8571e0452a9e98a165e8a6d1fe5c72ff3be0594273adccd18d1ff1cdc31fa5e0845a62f0bdc96"}, &(0x7f0000001980)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000019c0)={r9, 0x48}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000001b40)=0xe8) sendmsg$nl_netfilter(r8, &(0x7f0000001f00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001b80)={0x320, 0x4, 0x6, 0x81, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x2}, [@nested={0x5c, 0x153, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="8797dce6d5b3322007bd63a0958efbeffcb5f8a8d0340be7e293c747bdff369f8d87d120c090d7134c64ef11b132c726b44992bc2b54ce073dec4c90e1774826913d7a52fa78", @generic="686b667e514439955d5f"]}, @typed={0xc, 0xe1, 0x0, 0x0, @u64=0x8}, @generic="048284db06a3a48dae8f4c678254b6b8462fd7fe7ec58ee5f2674550842fde02c15b4029615da999f7c8926af688c4401b9c88c8c31a066561782359dcc81d03c0c0f2a559dafc457d26d665bf5006bb23081bc089720c944dd36720a8577b0d468b79be39dc9528d42627ea98f33a2299c61cf426f1ea10d7af5a8cc97b570216d0e6dcac8847cbcaac4628fd8a34fae4e343e9d1b2c87c4466502f454a20bfd50bb0275c69595d760f13bfe4283bccd0", @typed={0x8, 0x9b, 0x0, 0x0, @uid=r11}, @nested={0x111, 0x7, 0x0, 0x1, [@nested={0x4, 0xb5}, @typed={0xa, 0x2c, 0x0, 0x0, @str='team0\x00'}, @generic="33bbce2907d3f366dd5342b514dd72b7864cf237e7953c3a4e59c0a68be1d1122ec53143294b90429011bbfad643063ec91d11219de0931dec8f019b6308786f94b9f092965c3c5b62e4a65b2eead06dfdec55da3a514cf6176b32b25d5a0c46af2f65b833f845085dd9275ac5aa14886a1ebaf24ce8d74a3a13dbb3b49b06f46727f00258e5f6fc80c8c9d2f88b96d7e050abd47f9637c2d3c38cd1ea9b21779c70e8ab409c8efa96b7c0faf5a7db6fb79b67c16ee44c2ec2471befc067a3981853e96b98cff86787e704ca3c3bcc99174dadf37d61059e8286275b5c08072f0bfc92495b8f7687f49724ef4aa49b9540e3b47557bf64fbc7662898a9"]}, @typed={0xd4, 0xd2, 0x0, 0x0, @binary="ec868988b32c639e5e12bbd5faa49bffb54b7dff3e576cb3c8bea8899e3e6b71d85207865cc0825d97f852ce2edca29c711e6a987c446f0b99fc299e8657f680eca8410dccf3a16090680459e2794584dc7d6053617fae963b0c7afdfa99ef0db800ff9af43f7bcd3a87affd4f8db026d88a38f97bd1630a777bc7da0c955404141244a0ec2fba5bf9e0aa36171c5091951392fc39587404b048b33a8394b6312bc59867f4c2474d6a91a3491d9ed3818468b46fbc8b038869c55f5a744dc1d9289dfdcb6c3e7ad4038b0a1a014e04f9"}]}, 0x320}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001f40)={{{@in=@broadcast, @in6=@remote, 0x4e20, 0x9, 0x4e23, 0x7, 0x2, 0x29934f19d3d5c87, 0x80, 0x88, 0x0, r11}, {0x1, 0x2, 0x9, 0x3, 0xc4, 0x10, 0x401, 0x4}, {0x80000001, 0x1, 0x5f46, 0x3}, 0x10001, 0x6e6bbc, 0x1, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d2}, 0x2, @in=@empty, 0x3507, 0x4, 0x3, 0x80, 0x3ff, 0x1, 0x3}}, 0xe8) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r8) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x1) ioctl$sock_ifreq(r8, 0x8992, &(0x7f0000002180)={'pim6reg1\x00', @ifru_ivalue=0x795a}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x50, r14, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000002440)={r8, &(0x7f0000002340)=',)@.-\x00', 0x90000, &(0x7f0000002380)={@_ha_fsid={[0x3, 0x2]}, {0x0, 0x8, 0x2, 0x4}}, 0x4, &(0x7f00000023c0)={@_ha_fsid}, &(0x7f0000002400)}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000002480)={r9, 0xda67}, &(0x7f00000024c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r15, 0x84, 0x77, &(0x7f0000002500)={r16, 0x1, 0x2, [0x8000, 0x1]}, 0xc) r17 = syz_genetlink_get_family_id$team(&(0x7f0000002580), r8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000025c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r15, 0x89f8, &(0x7f0000002680)={'ip_vti0\x00', &(0x7f0000002600)={'syztnl0\x00', r2, 0x40, 0x8, 0x8, 0x3, {{0xd, 0x4, 0x3, 0x1f, 0x34, 0x68, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x12, "a86642049522fffa2cd52fd7e1cee3d5"}, @ssrr={0x89, 0xb, 0x9a, [@initdev={0xac, 0x1e, 0x8, 0x0}, @multicast2]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000026c0)={'veth0_to_team\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000002c80)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x9001960}, 0xc, &(0x7f0000002c40)={&(0x7f00000028c0)={0x364, r17, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r18}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r20}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x2, 0x9, 0x2c00000}, {0xff0e, 0x6, 0x4, 0x401}, {0x2, 0x8, 0x1, 0x7}, {0x3ff, 0xf, 0xa2, 0x9}, {0x4315, 0x4, 0x3, 0x9}, {0x8, 0x1, 0xc9, 0xffff}, {0x3, 0x7, 0x18, 0x9}, {0x1, 0x0, 0x1, 0x6}, {0xa03e, 0x34, 0x9, 0x66}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc9}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) 7.770556788s ago: executing program 0 (id=2697): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x32021) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e00000010500040001"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 7.601878537s ago: executing program 0 (id=2698): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000a00)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 7.480807464s ago: executing program 0 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newtclass={0x24, 0x28, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0xfff3, 0xfff3}, {0x1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x4010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000380)='@\x00', 0x0, &(0x7f00000004c0)={@_ha_fsid={[0xd, 0x3]}, {0x1, 0x2, 0x20007, 0xff}}, 0xfffff800, &(0x7f0000000500), &(0x7f0000000540)=0xf}) 5.587672622s ago: executing program 0 (id=2719): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4000000000000000000008500"], 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x0, 0x302, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x28}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x40004) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r11, 0x0, 0x4000) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a01776098bac5b561e041b4cad32201000000005e1affd5020000000900010073797a300000000008000240005fc1895ee139cd0615eff50000032c000000030a01030000e6ff00000000020000000900010073797a3000090003007b797a2d000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 4.709436786s ago: executing program 1 (id=2725): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000050007001200000006800a00010000000600083770550000"], 0x2c}, 0x1, 0x0, 0x0, 0x18005}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) poll(&(0x7f0000000240)=[{r3, 0x2220}], 0x1, 0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffff050000000001000040100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000"], 0x3c}}, 0x20000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000080)={0x1, 'gre0\x00', {}, 0x1f}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.410457266s ago: executing program 1 (id=2727): socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f00000011c0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000e83270968d0518aa4a29d6f2ec7e8a2a1ec6f9e2cf34", @ANYRES16=r2, @ANYBLOB="01072bbd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001380)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000001480)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e158de8ec087d5019fa509e1892f2", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="400000000206010400000000000000000000def42d71000005001c000000000095a0b0f5410500040000000000050078f84b0100070000000500880b5203724c269c21ada287b5ee97040002000000000000000000096d6e45236fd37cd0e721ed666aafa5fa52f43450f7a333c03e32ab03337590ecdd5db3a155ad5003094c3a64ee3816aae12dbb54be6ab12cce81efd887111e54b927ee18423e1d9f0bfe264ecf0c4896f35c6fc88aa1106f772d4369173f681561f30532568846884874d576"], 0x40}}, 0x4044070) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)={0x40, 0xa, 0x6, 0x401, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}, 0x40}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.215952007s ago: executing program 1 (id=2730): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1000b4"], 0x10}}], 0x2, 0x40088c5) (async) sendmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1000b4"], 0x10}}], 0x2, 0x40088c5) close(0x3) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8e73eda5a8caf70487ea6edede6b8337d5ff348bd874de5b9a5058b85c0659031d237abfcdc40bd6b45d4845b08adc7bdaefa8099bef8d5f6cae07abc605dc651a21b04ae53f6d89d9fac3ec696ca9508a681ca65a4524242fae4d79e40840ce54330107125a916b03459f58e4e6c3215a97e391c069926a24d9486909ef1f0c210514e2cd81cbaa6352a2de4f5829eb670a6500c83eb8c8bd5edbe4005bfb524fce3d4796d028acf27fb9df67851db5d59b2f88d97aa591d607d602dbb9bb4211abbc8641610aae237e8d47f8381dced80019a4e9b3d0e6e2a978ffeec19fe0a6077eb48d3d4d478801eb1902bb3f8552d402dd8de49cb6bb7c78600c75e3bcf53bf58e391d6484423cbfe17cf95f3b30a41b849af63ffd6a7b5aaab0ce5ac6d78519430c27415fd46f150671ee860341b9c473937c498cc9aae0cb64a73f24780b4771b1ea51816bd68f19c49747c4caf0acd418517e88e1f82cd9d2d870abb33624483670269aac3d2fe75fff726d60fe1be2fc2abc47b98eb75ef2f7f4eca0b50450ef48d71921cd10307563d120eed0416e3dcf4b198ec8424d857ab872d9de56e614e3fba275bae2c21793bebe86cdfbe822bffd2c9be6e623fcbb441e202cf8107da69cb06f93f7956a4ee88de99dc881fac8894ea5acaf4cac4c65de055017ab0dcd1adab2a22e1c2a12e73316be0f4d07b405d6bf4adda88fac3f081f8f180b403a067184b26e35860e1064d87748390e6f63217d7db40f002f85c57c125be768d68600e2c795a83a3477481a41b8392a6ae2c3a51cec2da15980c299f528e658641960ef2983ae3e30955586dd9e6a6591d81645ed451dfc14b2c648a89655af1f66067350c6fb356610469ae7b20ccd14cbb0fb04f58bfda8f28f90ebade9b6f8017094f1d467d9df73dfcc48cea0307ca833b72978e64651c8eb429f2b36adab59251452b4abaa2ecb42eaf674b12b49081b40c324d6da586212f187c51e32c42b00622b3fcb1acfecaeb603cec87a0010c199a80cf184894b0992fe709613c672ec91587afe94c637cce86a50dfe9c695c8398e963e68156537014405962d20610846691a352dad6204a33f07f175e5dbdc89aab549ef4150320084fd999a090d86affac5ac371dfe5dd595b7459b39bd78ba5bb77469da251d4f9906356667a27ac58025eed8d0ded3a69cd2a6cae52ac4dd5799802421fd8a818c5bc787da162a42f5dec2175b4ff37a543d214bdf0cc071de0b77c9902ce7dbb42ace340e64a020100b677a73bc4449655f4165f074cb1b85cd491f18f3fbeb03ca708a91fe041a46433d8d8e1693dbff6333981c243b1d412c87741aca8e790f3ebb3151e3b44870ba74c64cc5c3011d7ac138ef0bd48f197a32c31fac8d53ba54ae114119328eb9e8825555ba29e9d45cbe656eeff1b4e39600695d3911ab4f5075c3d5691b731c50adc226d3ebf50d3c38561a5d0cef2c9d16e071bb8221ab4f85a802a63b7071402f88c7cf39cfc916f8622357b3234f3761f89cfbf3aded40c512a614702ae867e197510d3bdb4ee60df96c4e51b5a338b58b07e8ee62be9822e0d166ff874b8d1f9e4486c601d9b56a26eb0b83a80704dee19d10cc05c63b95f7d1efef88177645bc30d8473983ed552926d219bd0c3dbcb0fb464649624ba7a57f5163f49f33fb79a46e7ac9797e300262a843f15f644f5230546f3c62450242fe12a79bd44c61fd946165662b0bfbcffd12deb93e0cb82dc8cc66bebf0721b94a5fa0d66381540246ff78c6225a952ab984c06c07902ed42e40fcc9151b0a59be83f454698f302f349014082ff08bcecbf0b9dea7e32b063449d573ca1b6efc812acf382ef7b7e6cd206185e063c985b8c44fe38d62d4a8d3d15228406f3abed51fe90bae3ddc283069d46e0ebd3a8bb87e4e0eb116dff6fc881e8fd0e5032e6a6494cadfd85652ed1c9c2d7aa00e18ccbde0aa3c857c50ee86975aff735f633471ab8e6db33bfcefeae661bd1bd6dfb55a9a4b4f9be01fd15e27e03fc943ccdb91a799d2eb168d9fdeecd32c19169cc0443ebb8e2f681d773efff72530f61a288cfb49c0217b9a9223ceb3798390e15fbe9475975c05f22a7c4d1990f9400a249d32eec4a5773bea0d15cc0df06d223e057b3693ac906cf632da8c9092e52718bd9f16af452dacfab22cfc2c58a3168de9914570f1035ae9b3092346db21dda270393a992cb967dc074ae2fe8b545df855b9e8b251cac7935a842bda9e850a9efb5309cc0fb83a630dcb3684fec4999ed6c4cc91aea72961420523be74711ff4c3f16a5f6ee906dae87d2bbc194b2d8b7743c157f6c8d80e6f4e377cf05810bef82e51fa5c1e442018466071f7d572cae794fab5cfbbd8e8d398c3a2823e8ce4357572a32123312d0d3976d63dc2a00b2d474ad288762e768e31ab7b4f09e7f3cfcb7a48adbdbca43d30c9bc8f67d115bc34f24eaf0318bb5e2994ff0f8b62c13f46abebdd0846da71a5d106e62266ec3e5a3f2c7166628220568807b595dc73920a0a7a9f2644db70fc53fac0a547cf6cbefe7aee975e0159fe8f413eab912925757581d2fe97cc5f19343f329b2ef081397737414a822432b5f9fa2044aebda92c1d6a065401b70c20a6867fb93e8f6f575aa9fae3e67b6fc6e0418f58731d932b3e5bd1dddbb9854a25144a334d00bea2995d7a751d40a06c37372b05cc584aaf62b90fdd95f87ff53eab367600d50eebbbb4cf04f225824086cfaca6aa82b3e3433881f7ec32cd419780ed0de6fb2234368983282fb93b9d1a6bd96c3d14aff8272328db634b02bbbc5b8957c695e469f80fc50eac333b88303d0bf29c42c13a92a58a9bf30391cfe6a0c5df40cd5b7a8637cbece9a4f251e5aa4aa2fdf883d82d2a430f06416f0372911e426620b25d8839d2ac9d73cb782194f0daddd4caa68f1ff6892981c00d6812d21ffb5fcd9b1cd187d519040968aa2d7f4ccfcc236ffe2cae8d349f39feb3fa574272a428dfbfba0a735a349188b1396b96d1fc2e86069fc797de98985bf338e495d66cbed89c2f5f2cc78ec2b880f04627e5cd49e93bb606d241149b936ab29b790e22022361c483d760e07cabdfdd204114fc3808b7bb7cf977ffe0b8c58584364571578084f1dfbb592e47e0f01c020d02aafc8c83a56299f31836574923a706e7a46861502dfbf0e9d2893a38aca39a16cec44664541e092ec489abfa28128ebd73e7bbe062515384c69c656268ef42c37632ce2db76afd09e6de7928136cfaae1b4fdeaab590617584831a7eb19af64625ec2ca635f79f50caa48524b0fcd1e08a09bcf52e231f3487ab54fc77ae44e13a966976e9e9deaf8ab9da7f804fe6290e16629c6f83110f54e5c206798033c614be334a5ee04f4ecb30f58371eeb3664eab1d00f52725992897279d21d475cefbe2345a7f1df6e916a806e7c39b651866f6c1108d00990673ca858d8af73a26a74e1f8d7818859e7d0123224f866ed0745382b2a29f5374d7c6c0fa54ddf743d89c85dc56cfab74ee786d054a5f4f1db15d85e9fe1a7fdaa3746d9e7429735f2253cb2a600b81f969c7c7e56f22b47f15aa700b3369102ea105106b96cebd1161673ae4725a4d96421833f65f76c64de5aa7957b0df8ab64583e8d5018faa1f4e0376f1d38103ac78403f65f809619c3a9fe43c6b3493d29c52d4c230a39914b1b49c627fba1612c6479205c256ef023cb52ca142c6c37391ec9f74ba334ddebce6438cdf6e99527e68585324cbf6547872366d2d0b7db30a33528a745cbc8820e52a3cf77e50a76935ff4a7f41dfc58c86ff05e24436faf28f423467105b314bd6e4edbf1a352840728e8fe4dd79ee5f770dd987eb62ba3ff5c26c9de6685afefa5a227a4a6dfc1d23ba09eefab45402b138b53b83873a3797096d4b62450c579a894be0c05b947646ef2039ed37955155b58fae377c727605979505b037a0a72e622b883cd1001f69da95ffdd143e68e1fc2cc42db37bde33184ff85c89713a722e1eba4ad292ec9ccd1c8c18674e77bf6394edd47ad635b278ec09921020507104485a6453585c385d0cd4cf611d0c6da50ec3d34eecaf3bba0ae5051a55450ae2e40c4fd0ba420b04b2e1b4d1592e8b80f92d40d42de588e719fe2b022c30a5187c64cc5c48679f680387464d3681edea585006a2e852be2266e8c4230a6bf60dd8efb0e3c1b4dcfed2844d495957ae734470d0199a0e0278f80018a39e9c82c15cb9c73a3deb2579444b414ca7061bfb4f599fe3968334c0ebde54b9a046370bb7d3227c9dd23e8edcf8b07aabf328bb164c79c6df5f0bd46a276413dee370e32da823d5e9839937e72b6480ac0439d104cadba1a8d6d0542f73f720ecdafece52fc6fa291e44b3852af376a3aceb05c2c293a2576175a3b4135ff6799a232d9c3907fcdd49e0d97e80ece0135dac08c37a16a93046d7ca3f3db91d0c28447522759017980f4d3321981ab53000fbe5293b396f6163e3ae016329bc42f6c958d648a30ed5c6e14eeef235fb74cbc24e183a0f89ee89b3c51a8b7106afefb2e406a026619793fe4c3f4bdc7d66fbf98a740afb32485ae5451b905c22bf63f9b3b42b30a3287f266559db4067d1c00d2ffee58378a44614dafed9107d97d9c3048f2bdba374ccc827f302dae2a4637354cedfc0a2d7f2d2462f5ed43f1b682e8167a2081a20741ed8bb94791526355e14a6b191aee05ef45f5d5cd83cf8fa66e5c5b4f38d7bedc90da431a285b239e13a3f9e68399da38eda883b4e443c1d557fc4cec84ce9bccf67a652e7d94c8ff57c277fb0ce233ea35929d98467ea8643cfc0464827aa26e381293c0efc049b4707416551c7d57c40d232a660b2c8d722dcd1cde8629e2b30b476c2ea9da3beec02a6b38f507230ee700f871338007cdb06d3be80450fb20f8493668183d776c902d044d4152c8a4e9ffa909d82d1b6aa27ca390706d7690b307436de72b4a81c094688397281810e98053b8c622bdc1194f54aab47fe1d3d9512733ee3e6b5b7688a90960929a0afee9580440b8964c450e3caeefcbe24c1bf6e74336ad4954f62c874a4a1ba019cae59bd1eb2ffee6174e04324348d92b588a312", 0xf61}], 0x1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000800) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000800) 3.899664128s ago: executing program 1 (id=2732): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffef010}, {0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) 3.434267038s ago: executing program 2 (id=2737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x20008800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.300670824s ago: executing program 2 (id=2738): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r0}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0080000000001b0000000500000000bb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r0}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0080000000001b0000000500000000bb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) (async) sendmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) (async) 3.102912248s ago: executing program 2 (id=2741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@setlink={0x30, 0x13, 0x100, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8030, 0x100}, [@IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_PROMISCUITY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x48090) unshare(0x400) r2 = socket(0x1, 0x80802, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b00)={'IDLETIMER\x00'}, &(0x7f0000000b40)=0x1e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x4, r4}, 0x7) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7, 0x4) shutdown(r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="04000800", @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2b, 0x1, 0x1) (async) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@setlink={0x30, 0x13, 0x100, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8030, 0x100}, [@IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_PROMISCUITY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x48090) (async) unshare(0x400) (async) socket(0x1, 0x80802, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b00)={'IDLETIMER\x00'}, &(0x7f0000000b40)=0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x4, r4}, 0x7) (async) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7, 0x4) (async) shutdown(r2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r7, 0x0, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="04000800", @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) 2.92785719s ago: executing program 2 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000000c0)={'wlan0\x00', 0xf41b, 0x7fff}) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000ec0)={0x12c8, 0x12, 0x300, 0x70bd2a, 0x25dfdbff, {0x22, 0x5, 0x7b, 0x3, {0x4e23, 0x4e20, [0x2, 0x0, 0x18, 0x9], [0xfffffff7, 0x2, 0x0, 0x6], r3, [0xff, 0x1]}, 0x7, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "7a60dbcf7b189791408e9175b8f8311eafb47583ebb7e16c0b3de9576b0d74351f26961371ebf875d96eef9e0300e051fd6ae5f9210e7969d597ff1fe25c456d2937274ca54aef756895361c66bae6c60c259afde03d08ef50ae5f52e912cf583042cf669fa88ba9"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "bd2c839d97a9b89e50e84e1ea1faaff64b9bd8214c6e51dac1a239da15d65b2c3e6012ae11f1697df441462d0d42d7c588c61e81fa047fbf10c6eb8e05084969723577348c8c1d284751d0cc440789b9a6f55ae15156155ae9af61819b61aa95884bd471c12441bd8e3e19984c49ef66d938f5de703d46877a8391b53cf80204a691fd7ce2878e"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "54569d8e81cff0953c7fe4da9bcd605c939cf0f5c486eb3a727ea6f69a781026b214d0ea4916fc7116ba3e9d7150f150ce62ef400d5a44bb80c2ed0b5630cddea9766b8ddb2dfed9c47c7bcb8793d895ac4f114a7b6aa595574c5763936ebded1b2a2b05745c3840721181502a95ec0d7a33fdeb4f8ca95fd8a39d8442537c142080d2b98fdf9fe09a3be1653fe012c0af1675f8688beecc7de0e09bd7f4498682a0cfcb1ca90c3e8039f1fa16f811447be0290e6b37fb366ac03c1d31f308f3531cd27c138528ae6f"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "ba9665d502810bb6cb778154d8f405bc7a8911bfc373f508a6011c1ec3281eef6777feccc51155449aeb0388ef31ead69fe040f9738f9ca1b6f4e38f0ee38fafb441ba505ff91d913a1848cac1e0e65c0336b17a6d4e6347063020560dea78bbf36010232526c46bb26002789f027b2c71153aa5f55c43b317ad6981c8e437e2adf7e80aa0b78990a584740b4a0890c118297343dbf33e0517ae9b822f232d8df81aaf2dfc82b57eedce"}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4001) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x6d, 0x6, 0x0, 0x9271e982b144cacc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xe}, 0x8000, 0x10, 0x800, 0x7}}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="85100000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000017082ffd70a0000d8727af53113145316cfa44ae400"], &(0x7f0000000180)='GPL\x00', 0x6, 0x74, &(0x7f00000001c0)=""/116, 0x40f00, 0x42, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x80000001, 0x2}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000440)=[{0x4, 0x2, 0x6, 0x4}, {0x1, 0x3, 0x1}, {0x3, 0x1, 0x0, 0x9}, {0x2, 0x2, 0x4, 0x2}, {0x2, 0x2, 0xd, 0x6}, {0x2, 0x5, 0x10, 0xc}, {0x0, 0x1, 0xa, 0x1}, {0x2, 0x1, 0x7, 0x8}], 0x10, 0x3}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000740)={0x0, 0xf7, 0x2, [0xff81, 0x600]}, &(0x7f0000000780)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f00000007c0)=r9, 0x4) 2.926053385s ago: executing program 3 (id=2744): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80) bind$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x300, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x1c4, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xad}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xd0}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}]}}}, {0x60, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWRULE={0x1e4, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x8f, 0x7, 0x1, 0x0, "114f81bd6e70d4692e636d27048032d0efb3d077244b1124c21080f5c178f5f6c13b58fc1a33d3bfc5387a5095e1d5f05e8c179d1bc72ec201eb79618e99a148a3aaf666ec04a943b6f6500bc8d17e73772bd9997aec68db350e9b6cd2a281d62687003161f8baf3f320274219d2be6d4e470998dfaded630d176eee734bc9c78ca1083c2f2cee0267f5d9"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x64, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x18, 0x6, "cb9672d46c3cd410ac8cb56abe952fa706c26989"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x75, 0x6, "8e9320323e66b7cfe9583853db7d7441d55dd5706d71a397f3094ce0b8ec1d63dda51756c1671fb7e651f26857569e42671bfd80111c7a2d7f16323d0d19af205ced4335f6bd1cd453258a969a242811d751d63121cbac7b23f936fde2cb152421f1803b5c8a51d5a146ed356c7eed32bd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x16c, 0x3, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54973441}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x104, 0xc, "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"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x734}, 0x1, 0x0, 0x0, 0x4004}, 0x20048090) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000900)={0x0, r0, r0, 0x6, 0x303183ef, '\x00', {0x4, 0x6, 0x5, 0x9, 0xca, 0xfff, 0x8, 0xcbb9802, {0x6, 0x1}, {0x4, 0x6}, {0xf, 0x4}, 0x1, 0x3, 0x2, 0x7, 0xfffffff8, 0xfff, 0x8, 0x4, 0x3, 0x8, '\x00', 0x4, 0x6, 0xb6, 0x1}}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x8, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) sendmsg$nl_generic(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x15, 0x200, 0x70bd25, 0x25dfdbfe, {0x20}, [@typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe, 0x8}}}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@dsss={0x3, 0x1, 0xb6}, @challenge={0x10, 0x1, 0x11}, @mesh_chsw={0x76, 0x6, {0x7, 0x83, 0x14, 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x840) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000d40)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x34) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000f00)={0x0, @default, @rose={'rose', 0x0}, 0x6, 'syz0\x00', @default, 0x4, 0x4, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000f80), 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0xa380, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x44}}, 0x40010) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000001140)={0xe, 0xfffffa0a, 0x7, 0x9}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0xa05, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x1fffffe00}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa5}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x181}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040091) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000013c0)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000001400)={0x1d, r5}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001480), r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x8c, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8840}, 0x1) connect$inet6(r0, &(0x7f0000001600)={0xa, 0x4e24, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x7c, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c7180040bf509875258e0d50eccd50d9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="18c0959b08"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000017c0), 0x3) sendmsg$can_bcm(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x1d, r5}, 0x10, &(0x7f00000018c0)={&(0x7f0000001840)={0x6, 0x8, 0x1, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "5f708414deaf0fb1"}}, 0x48}, 0x1, 0x0, 0x0, 0xc400}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.812016824s ago: executing program 2 (id=2745): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f009e7acd19ac09258700f4ca5bd1b53b067f000000000000000002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe04000120f2262008001e000200"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) 2.743911875s ago: executing program 3 (id=2746): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000013800048034000180090001007866726d00000000240002800800044000000006080002400000000505000300a2000000080001400000000c0900020073797a32000000000900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.543176622s ago: executing program 3 (id=2749): sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x2010) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB="2400000018"], 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18029e000e479ec7acf43a4e2020d700000900000000000000000000001800000001000000000000000a0000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 1.498313745s ago: executing program 3 (id=2753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0503000000000000000007000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x24044080) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r8, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={r10, 0x6}, 0x8) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, 0x0, 0x400c0) (async) getsockopt$sock_buf(r11, 0x1, 0x3d, &(0x7f0000000080)=""/43, &(0x7f0000000100)=0x2b) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.08257161s ago: executing program 3 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e67, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0xfffffff8, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x9, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x810, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x9, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x4, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/196, 0xc4}], 0x5, &(0x7f0000000bc0)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000f80)=""/182, 0xb6}], 0x3}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000002500)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000002880)=""/142, 0x8e}, {0x0}, {0x0}], 0x4, &(0x7f0000002c40)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x4, 0x0, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r11, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$packet(r9, &(0x7f0000000180)={0x11, 0x5, r10, 0x1, 0x8, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x24044884) 1.074035433s ago: executing program 4 (id=2756): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x40000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f38773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="18", 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xc21, 0x0}, 0x8) r7 = socket(0x2, 0x3, 0xff) sendto$inet(r7, 0x0, 0x3b, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf01000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) 943.032391ms ago: executing program 4 (id=2757): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9001}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000001c0)=0xc56, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=@deltaction={0x80, 0x31, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040c1}, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x10, 0x0, r3, 0xb8a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', r7, 0x80, 0xf807, 0x0, 0xb2, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010100, {[@timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x2, [{@remote, 0xffff}, {@multicast1, 0xfffffffa}, {@loopback, 0x6}, {@remote, 0x100}, {@broadcast, 0x5}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0xfff}]}]}}}}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x0, 0x9) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/295], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) 395.5489ms ago: executing program 4 (id=2758): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00670900000000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040064e802001800348014003500627269646765300000000000000000001400030076657468315f746f5f626f6e64000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f00000003c0)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d8146c0ef9e0ed02900851298b0ab054e2913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e0b8042cd2dbad8a72d33e9e52af7949ab26fe1a758472759c5", 0x7a}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0xfffffd8c}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="c615271a9de4965515323d75357cb0914b03d9b18c63ca3692399e0aa8be01a5b9883f1e4830cd8b777bb75c27cba21f087b8a8a92bb4353b5e825f3837bfcce5681589bd0ce90380fed43b1ebc4d4c4e3efe4c1a60e3d56753ebac731ddf0a80a42e71cd2fa58a5779bd29d2b7e65156607f7ca769417e0f79d2dcc55c20e63117ccc11b7faea5291fc6099b1694de06c2a9f0b9e7b096784ffd831026ff8e1c65bb146f6d443a0dbf1e379b81cddca421133db702ba0b832784f9cff4679d7c639f779eabf51f99e63be27e73b9e823b1dc226481799c216b07b44265c35c25e233d5c4ea908010d96628e3bc81e0134d28f5ce875b9bc0a97dab94cb025b8c79d30e98c442d0e25711c70f4368e89daa677bd09d7fdb29c712c758b570304cfe142985c3a9de164cf56a473d09ccdc5ececde2856b684cd15201f0f575ff59d57e647e6fd7dc20538faf8ed3c816f1bcebb9fe53173f8066cdf4e98d87042924db327542497f991bc0f4a19bd587921b1d009bf7e1f649c5b22771494a9cdab7f773a6ccb95c795698b85a91236c885f0496aac6b6171aa37bb3bbe034dc56a5b24fe11538575471ab6584b5f63cb809e8f0f884fa6e83426d81a7f3ba526f194c6cd355ec7d2ffb179168ceaa2d5d668e404dd81c23741433bc98fe76195ca4e30769ee4cd9e54a2cd6cb7a6123d43569fa4d5200ec1d292c80531c1d19d2eeb6039eff8fccfb55322c07caf5f07e0037db7393fc914e7c0d4a8e4fa0486cb64a6204d2e1ac512660ca4ffdff51a9d807fc32511f02576247bcebc091273e80fa220c81df517436af3fc92fd395a78b0836561e673c4de4a40dc9e20861a6f87aa3a40d3bee5bc311ac17f434d", 0x27b}, {&(0x7f0000000cc0)="bd6da0bd46a67e8c2a3d543a4fa450b226da5f9481ab800025ea23e9d7a56f521541e97d4f1d383676059f660d7f6a42753aeb13a396059e44891d630189c8bd6ea5c7afd6f58cb9f90be3d0c355d7002cad13dab28d84a19127cfea54a0ee6ff2f7de284e54b464e1799f9b67176e5e7af67eab6bade0c22808aa7121e3c7bec7415fb675ea9ea6c1d05f37802408f0690cd93fabe33479183113ffe63babd039dc34c0a0a87ecde8a2d020056439bebcc8c647c9073620a6216f840424a6e68337655b339fc5afe5e29da95e661fa97070a24a5e19aa9de6493308aadceb947f05c3fddc809fb53e69a5c65c2354dc3bbe4c0a0a94ff78f9cf35fbbf19da62ee4f15e836a3483174a40e028cca49b061b7147bfb95ebfc2c8a15b3aa1bc31a97881054e01bbc80e3016798f61471ad53ec9a76d01f79df87b379cf590daae4eed8d996319fc30e38220a9a8c19cccd7bceb317c1019a5ca51c156c83cbe08e0b463cee4b1c6695a75fcbcc82c5365be16a33b58870397a7908933d5e28eaed4d0144380a761ed8a69bcaecc19dc1934a2416a0974c6717475726746abe9a3e6d1a9d24438594c0dce267a6388446538e3a81ed48e0c7c7fdb62d489cbcc0608a5ee8cfc35392c8dbea74256d2a182a618005bcdd8b3b957d751aac96a2170a6e4534863943da50ac23a0a84765a41d726faecd40c49c71af960f1c622ec17f5aa0d4b311015e760c10b02d99ece62f24fdb2266502b5002c5ff79fffed64fa19af9881a59aa08a7835f29ab2824cc68a9069d7b09262b25527a14212ae304f7896fdce51414b1998ba2cc96c595324bbb411d1101b5e1408d785c84d2eae893b1b8bfabe408dc49afa566410d37d06686bdbbd99cb1c8c7fcb48a372f2174b9ccbe782d2c0a6b080196fa0bcc96b5f273914e7ce0f146362c4ffcc75895b2f3912d3ed96230560222a27eaca42bfc7ec80f450b2c82726e8abccbc4626f4384a6c62cf41fc45a8409d52955f0a1b3b56090a537ca315bbd1865b960935e8e06cc1367aa77c32fd66ddad9bd19e9281164784e0696dbcf281c02286e3f235ddfaa62f4e76bf91851480b714809bed7d4721e89dba482205977c95b5523fd369678a59e6c62ab19ae2c90855051e97d46bbbf9f69a503886d3ab3d9c779e17cbcb4d8d46574f48a01cfaeefd65668b6c0dc5a0076251b944e9ceb5ebe246bb4173d09d4774584dd3b816d9129396df10415097878fa93db94eafad0080d4ee158f79bfbcd9564b008de7643fb7e3a06b383741b8a24ca02e64fae9c8ad67ae593701cf4687911e4d856c5f8be54257d6feec2a95ef3080ab7c3897abb5aad0ca0d286e3f6c185dcf85b3784f817d82d5a37e22eb407b77bfb1d3dab0bd49f7693c9a4115c99a7cbc569b731c34cac832048262cdc70e9379558d52175a6bddff9bb46cc866fd2e98d5e9665b0a2a46c4187c94782f3d868e3c42c853d141fc77dc30f0abf04c10fdf00ca203df6b6935ea6c47377201c02f10fd759ef71d290519a041333a75a0e4aa745484021bbc893b791bce0af4c1f7372c16502c26e5e60de278b209c0c7c65599fc4ed8c976e03e26f7024a2a597932afb6d8fff791f8bfd9d13d213034b5ef404a6082cc9a78a5f950704e3b08a0272f2976ede8321801350593f9ed6639e890c35522018b6a0e49d3df61e5a526240a35acba94cb92f289e7e8d57cf41aa6d29da77f32b13936e9e6070a89a4dd9ace57ea4299c81fa18a00f4abe72cf7d82074967a29a91fa351820f25defdde805567e9a68ffa0244d870f8f1cc6eb6a47c771c591932c98090051e908d241744a2a5ad82ff6291317a4cd67574e6c62b8ed7285eed7d5380e6846d4f0608e2844ba2ab38c84bd5f720e7eeb3a4ff260dbe99473d8a9f404c9e81aba1f76722a4cdfa387738f9b6306bc8918d9b7ad578ee4197ec19a42d07f67f33fa2bc65f43eb4e4f8eac33dd6b970cbd2dfcc43c433b05bcf797ccfcb4b9d06c8d5ab608612dddc1fe999865c5323fa7bf96dc259a152d8fdc785440dea23d67e4b3324f079e7ca69bdd42ff3aab914838aeb85e3cfd1cc94299a40ce38a107692133643ca53d31d7c6d4740b2f6a5bf5d568932c4fe0d0ecde2050056e342a2414c1590f2c1e922fd2883e121729709a1432b824ae0e04d2bfd66f8ef6e6d60287278eaee3c282cc62ae340f1efcf7237ed5ca9cbbdf2272a04d4060f53658c52ec33979a063f95725656baeec2fb4d08cbc35e7ef768d77601fa4f5859eeaefc461e54b35fd5f3b21a8a3bf4b967e7a9cf903d0c0b280562bdfc1132c4e3f7cf132ab617404212d8e991805df8a270800b29b66be5ee2ebaf8e21d49b2cf7ebfed2bd53ab9dafcd9219ce69cf6ec0be12e3f617cb5b1dfddba23d3dfe000499c808e1351b16659b6c25e622256554628ac7987e903ec556f12bd812532aedb729228eb0ef3d61cc1d39164e6b4c732a6c6c9268414b455e916e5ec3a0266f3fb66f6b161ee74fbf600fa06365c763b90a785fe21b6170b238992912bf452f9ef4769508d808c9be2f6905982d65743dd1d8d1ebd8be4a75f78631929d7f7dafcdccbf77822a734c0f32476900f4811737ee40cb80e9dbabe1b76fa0c70d2212c05a944b4e6e00e6771033f27c952e07a6bfdc2d12a7b2f0ce5e40acbfad7f775cde7d4dfb2b9aa04c54e2e8c7f9b586cb5da5645ee68a000553c1267e165f17788eeae020e9126f605ced93e31a18222be143993d30017877961e9851da18e024851e42e76ee2818d671533ea7728ee416560602924952735aef6658a28a5072ef0bbd7237537b01a2ef281931f0dbd737ce6c2613afceb38dd0451eb721548d5dce2a5362d6b2ef817cab1f79aa258ad78c91c78f7d51744b40d8a973c45beec2f68d9c9d5cb2e86689cd3dbc3d8ba8a8a5a64da949cf34870373e3934ce9571361577190a96015a7b91510ce965530850e8ff685307516c5f47b59d3b2895e890ed7cea1319ae241fd976da47a73645888f42495340b0cce6af2ae95297a53f256ebfff9574259f025d5fa9b6d0ee5d276b292d2d9e3afd9cb5d82f10bed459f4c745c8583daf656102ad4632f6ebc3be76da56ae50727f15526332ddf9ec94013c89869c7b33211b556a2ec054a5e92865def567b50e515e7a418219f41a10ecd6d4744a5213b04db4d5efa130a5c9ca577a361660d73e3c039dbe8b0b0c9030c0926001089ef4f746c3b0bc20282ccbe4ae00542b36d12555b8c20c246a618ebde432de83413d2ae632fffbaec086849df9189f2ccc5a6e8ae00ec97af1dd193b49a24c50aa3c5ebea28aac6f3af203ae66c25e69376fa94f31876c191bc2737707e6a81277511cc2ad7d00f4230e387308de5ad542475d3288cbf9d6abacea81675b03016029d27ecc805d80698e0111377e3a1b6babd0a4eacf17669ebb0c9efd439069ad6d34f5c6cca037f6b2aac0483f93f42f66c511c9ba6845c74667f9b5386794d792b307df0850d5a09c603e4f31498d398161b80507ae47b184567660fa800801634437323b47a0bf67c64125cb0e4a5777817422ec4ec8b924b4ba78535875c1341bdfe6a7c6ad36fdd3ca0dc261897025039f98add99c54bd3b0ecc0ce2d5a89de669303feaea75dfd1fed708c805c8e03390606b94f2ddb1326bc17e404f46fb4cf01e0f0c76fe7ec3ebac849f37998730b09a24afe53507d4b8d4843d8d515f3a5b36cc39c4c6948b8fffffcbcf573b6ea759e9c2cfe04277024cdea9895bbad4311e4c94a46126075f6bfbe7f649d06110a8015ef301af93882a32043b65d73d31a1c4347a6eff940bf7405af1d5fca4fa82f1f5461087a027aa6b4942284f404bec0151ae8b4fc5aa4318892861be31ddf131a00614d5fb102dd4a56f2c4bdec161cbe89c94d8ef7f938e98cb059e191c5652fa1c0ab43f0c198e08bdbfc87a2eca65e32a8c67ab8f0126b3daf4d6968f02b4a1a341382a5d509a3da4ba9b7a7dbe69027f757d131a0423c1f136f71827fb5a24050b62a6a663116aebc616a5097011ac4acca818bca1d7ef177d72feeabea90a09172f4f564bbd8d2e2c80ce04714654c811f0fc72b928af645e86a4f31d42f0a43655426fb2ce830d0c7211a1a75598834674e0701aec0b75d3ca35c43fd7c796717a6140f1b85c9232a89f03ab546099e5054dfa5a889b4bab0f166eb90ded503cd266abe2af52c252f2cf527793e61854590aa8f5f5309b998581c907d5d80d5b75d12cf55629e942342d0e6e4ec2099415e7229e67f0011b0ce0c990792277479177ecb333f836384a83dfe9069ae0deb574873bad82281484da33d922abaa60e46160c778cb8b6da7ee6587639a424fa176698e9a2777262c438f856ca0b3f3dbf37414843bc3547b3e5a53330ae37cc1a3dc71716bb253578ad7f5ceda557f7152910ffa5da05b8952d582755630f6eae94d18bd370d43301066a24ae2a9855d0fb88fac0e580244ffe523083d6674084419788ad44bfd4002821d4c48664488d0b1fe6b2b426110ba43c33c5eb60545561dc580efe619636939284b4995a1c9be228e8815fc9ad56a5d3ae2c2b3e4b86256abae7eba0dc1aa293c3a53c66adb6b5787af7e9c466db69015ac8a492352c53d28ed5c73c9a344d50fcd41c3b937ae1164a29355e8583e828dc4e39166ebad7f2d1e25de32ed3516d1de5cab788edd2ee284ffaa7764c0b6453ad136fa369eb47940912d499f85df972779af183ac1a44e340953b304edb55b6df9358ce34b8702ad5f31517d9794bd4d5f0597abddcd6a7a2f1b8add76453de8e966cd1af063c7c3c55286e208659a34289779214849e75651f198cdaddedfb4ca6826986703ec51ad454f1a6ceb3f571d48c91abeb73ad366aa6292498293b987151e6d358299dd82a8c5600b78fcdd4565d5449b91cb52af0c76e767da7f8d036b969e4c775b3dec74833fd887a02b870909372825252eab8b3c1f63417ed4cdaa3b5b4b7633831542667c21e667dd330bb394a3b6e5857f8f1c58b6f039605726c8f731f8aa0fee3e650ec6e7907b251063cd87802e8fe088c0f23facaab7f6b0f48337c3142310893", 0xe2c}], 0x5, 0x0, 0x0, 0x4001}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)="2c0327280832df978086ea65289d6186d359d503c7cd6fb9019e6880b917128b53c75696c5ffff65f9985525a499a16660e976cea55cd35a260a933a1226c5ad2f37f29eaf7362ce8d7172c9f57bc5731016be99111ded3bcf66f7cccdb290b5ea797b7fc2a97377413a2e001bcea65d8f1c0df53eeff88c9a5971542d56a16b0697ac6648d5d24eba930908983d52d450b613302aa250eee82c84139ffccdf3193b02be6a81ac62199b2a9d02cc97337a440b3e879530aa0464715c6c"}], 0x0, &(0x7f0000003040)=[@assoc={0x0, 0x117, 0x4, 0x1}, @op={0x0, 0x117, 0x3, 0x1}, @op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x0, "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"}], 0x0, 0x104}], 0x1, 0x48800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) 341.841274ms ago: executing program 1 (id=2759): socket$kcm(0x10, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4011) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 277.305783ms ago: executing program 4 (id=2760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x20008800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 177.942369ms ago: executing program 2 (id=2761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x29) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x16b) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x22, 0x0, 0x9, 0x5, 0x2, @random="8db8048a1053"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d", 0x1f) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x4c0486c7dd49ec8a) sendmmsg$alg(r6, 0x0, 0x0, 0x8040) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000c6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r9, @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000001c0)={@mcast2}, &(0x7f00000002c0)=0x14) 177.001949ms ago: executing program 4 (id=2762): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="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", 0x1000}], 0x1) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x3c, 0x301, 0x70bd24, 0x0, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 175.62468ms ago: executing program 1 (id=2763): syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@ipv4_newrule={0x24, 0x20, 0x101, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x4, 0x3, 0x0, 0x0, 0xf, 0x10000}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r3 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x14, 0xc1, 0x0, 0x1, [0x617, 0x7, 0x9, 0x4]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0xd27}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x14, 0xc1, 0x0, 0x1, [0x617, 0x7, 0x9, 0x4]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0xd27}}}}}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @broadcast}, &(0x7f00000000c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r6, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x0, 0xffffffff}, 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 115.645644ms ago: executing program 3 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x13b2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) recvmmsg(r4, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e23, 0xfffffff6, @mcast1, 0x2}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)="45d862ad196c13906582c8705dc73bc11cb53fb9cafd3121ca7438962461f42ce8d9c0d25fe7433e10cbfe47cdba4d4c72b60b060125bb7d93695fe4c8b9d5f285a478bfc306aac8b102d692681e1672a798acf0bcf4e4646332e9e86cdde5abc45b39038808d5b14693a1b673e2d0862f9f19476e29ad43760c289550ec030e2e60b29fe1343df1d29f310794d574f888ace2943893567d118a2d0d0b5b2a5ece6b4ad74b03d748f8f5d64cf55fbd9ea831ad6dd54b0661a365432aeb39", 0xbe}], 0x2, &(0x7f00000008c0)}, 0x0) 0s ago: executing program 4 (id=2765): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000040)='[\xef[(,\'^(\\]&', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x6e0]}, {0x7, 0x9, 0x7, 0xcb5f}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xff, 0x1e, &(0x7f0000000300)="3e2c7dd3b156533157aae637e8f0d9925471c3ed54d7062144dc557a9eaa2eddab93e2a33a15b57656d2b046dd3c5eb192176d59c931a6d4ccc086c5fe0059ebecb52e02e6ad576d521da27f458d25cef2bfe03fe8566e64b31f85f7623aff02fcebad4e6feeeb4309f09e9b5ce047411f7efe425c330f1f747154bd4d46af41f7154a7b32b04de5ce51341e3e7c33adb28b45b89b819abf9edb61f31d6fba320c519ffcfbef0a8ebe3ef38742e73164abc4c679b06c4853d2e1a9405aa24bec4a5d3212f077eee812b790436650c853a5b2bcea509b776fafe46264cb37114ee46eaef293dd367109d38a1a6d96b8b6a63a90ff185a2cb3834ea05b6a37ff", &(0x7f0000000280)=""/30, 0x0, 0x0, 0x77, 0x2, &(0x7f0000000400)="0784667d092faff187ebea03b7a6dd368821f410e80bf9a82c863bc3707761dae21633fc3b87214ab46a3614cc52cb0f6564fcdc68bb85615b04e423f8f75a1a5e30c98822a0ad226dea1274bb51d5f178065a8d6da8887c9bd5b3c7bd4a5260ccecf1142fd6314cfd01cf96279c79aa286aaf6925b281", &(0x7f0000000480)='S$', 0x6, 0x0, 0x44f}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) kernel console output (not intermixed with test programs): 0.048518][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 220.497466][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 220.509373][T10241] syzkaller0: entered promiscuous mode [ 220.515910][T10241] syzkaller0: entered allmulticast mode [ 220.698266][T10247] syzkaller0: entered promiscuous mode [ 220.703934][T10247] syzkaller0: entered allmulticast mode [ 220.990898][T10252] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 220.999681][T10252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.460997][T10265] ipvlan0: Caught tx_queue_len zero misconfig [ 222.288079][T10284] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 222.313816][T10284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.344024][T10284] bond3: (slave veth9): Enslaving as an active interface with a down link [ 222.372815][T10284] vlan1: entered allmulticast mode [ 222.378212][T10284] veth0_to_bond: entered allmulticast mode [ 222.384863][T10284] bond3: (slave vlan1): Opening slave failed [ 222.414793][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.684350][T10289] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 222.698149][T10289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.759178][T10203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.792374][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.970187][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 222.988068][T10297] netlink: 'syz.4.1199': attribute type 13 has an invalid length. [ 222.997281][T10297] netlink: 'syz.4.1199': attribute type 17 has an invalid length. [ 223.006668][T10302] lo: Caught tx_queue_len zero misconfig [ 223.015474][T10302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 223.049425][T10297] erspan0: left promiscuous mode [ 223.083884][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.094079][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.102110][T10297] dummy0: left promiscuous mode [ 223.128948][T10297] dummy0: left allmulticast mode [ 223.166496][T10297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.972804][T10330] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 223.982301][T10330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.231214][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 224.467374][T10340] syzkaller1: entered promiscuous mode [ 224.472921][T10340] syzkaller1: entered allmulticast mode [ 224.522021][T10340] gretap1: entered promiscuous mode [ 224.538743][T10340] batman_adv: batadv0: Adding interface: gretap1 [ 224.552665][T10340] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.689502][T10340] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 224.892735][T10356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1212'. [ 224.981932][T10357] netlink: 'syz.1.1212': attribute type 12 has an invalid length. [ 225.298010][T10364] lo speed is unknown, defaulting to 1000 [ 225.315843][T10364] lo speed is unknown, defaulting to 1000 [ 225.330866][T10364] lo speed is unknown, defaulting to 1000 [ 225.451603][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1214'. [ 225.948536][ T10] lo speed is unknown, defaulting to 1000 [ 225.956152][T10364] infiniband syz0: set active [ 226.001610][T10375] x_tables: duplicate underflow at hook 3 [ 226.005060][T10364] infiniband syz0: added lo [ 226.066384][T10379] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 226.074312][T10379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.330632][T10364] RDS/IB: syz0: added [ 226.336197][T10364] smc: adding ib device syz0 with port count 1 [ 226.343101][T10364] smc: ib device syz0 port 1 has no pnetid [ 226.408441][T10364] lo speed is unknown, defaulting to 1000 [ 226.416043][ T29] lo speed is unknown, defaulting to 1000 [ 226.458021][T10383] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1219'. [ 226.593309][T10389] geneve3: entered promiscuous mode [ 227.104252][T10364] lo speed is unknown, defaulting to 1000 [ 227.149541][T10400] netlink: 'syz.0.1223': attribute type 21 has an invalid length. [ 227.658364][T10364] lo speed is unknown, defaulting to 1000 [ 227.931005][T10308] Set syz1 is full, maxelem 65536 reached [ 228.240473][T10364] lo speed is unknown, defaulting to 1000 [ 228.310158][T10422] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 228.339758][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1230'. [ 228.355098][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.375387][T10423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1230'. [ 228.532374][T10427] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1231'. [ 229.146885][T10364] lo speed is unknown, defaulting to 1000 [ 229.408679][T10449] openvswitch: netlink: Message has 4 unknown bytes. [ 229.564927][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.572668][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.701197][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.728835][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.789421][T10449] hsr0: left promiscuous mode [ 229.983676][T10449] hsr1: left promiscuous mode [ 229.992395][T10449] bond1: left promiscuous mode [ 230.009105][T10449] geneve2: left promiscuous mode [ 230.014267][T10449] bond1: left allmulticast mode [ 230.035356][T10449] geneve2: left allmulticast mode [ 230.067085][T10466] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 230.082764][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.094042][T10449] bond2: left promiscuous mode [ 230.108480][T10449] bond2: left allmulticast mode [ 230.291878][T10473] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1243'. [ 230.306504][T10449] geneve3: left promiscuous mode [ 230.340075][ T8475] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.349339][T10477] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1244'. [ 230.365739][ T8475] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.366677][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 230.379414][ T8475] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.431608][ T8475] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.455468][ T8475] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.502932][ T8475] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.523476][ T8475] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.537647][ T8475] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.549288][ T8475] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.562536][ T8475] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.574084][ T8475] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.584110][ T8475] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.893287][T10498] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 230.901659][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.034394][T10502] netlink: 'syz.2.1255': attribute type 2 has an invalid length. [ 231.044393][T10502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1255'. [ 231.057662][T10502] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 231.066050][T10502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.180388][T10509] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1257'. [ 231.199540][T10511] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 231.319254][T10515] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1258'. [ 231.345836][T10502] lo: entered allmulticast mode [ 231.362237][T10518] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 231.512555][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 231.602196][T10535] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 231.647312][T10537] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 231.694933][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 231.705344][T10537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.717969][T10535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.727496][T10539] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 231.751676][T10539] bond3: entered allmulticast mode [ 231.819000][T10535] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 231.913889][T10539] netlink: 'syz.1.1262': attribute type 13 has an invalid length. [ 232.053150][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.067165][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.097299][T10557] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1270'. [ 232.141514][T10548] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 232.165397][ T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 232.356202][T10564] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1273'. [ 232.519123][T10561] bond5: option mode: invalid value (15) [ 232.557085][T10561] bond5 (unregistering): Released all slaves [ 232.592011][T10575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.671043][T10580] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 232.718045][ T10] IPVS: starting estimator thread 0... [ 232.806911][T10581] IPVS: using max 24 ests per chain, 57600 per kthread [ 233.050037][T10603] bridge0: entered promiscuous mode [ 233.059888][T10596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.125244][T10600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.612035][T10623] ipvlan2: entered promiscuous mode [ 233.627171][T10623] bridge0: port 3(ipvlan2) entered blocking state [ 233.633915][T10623] bridge0: port 3(ipvlan2) entered disabled state [ 233.643104][T10623] ipvlan2: entered allmulticast mode [ 233.649415][T10623] bridge0: entered allmulticast mode [ 233.661817][T10623] ipvlan2: left allmulticast mode [ 233.667698][T10623] bridge0: left allmulticast mode [ 233.816760][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.087352][T10647] tc_dump_action: action bad kind [ 234.447150][T10658] syzkaller1: entered promiscuous mode [ 234.472812][T10658] syzkaller1: entered allmulticast mode [ 234.535350][T10658] gretap1: entered promiscuous mode [ 234.566496][T10660] Cannot find del_set index 1 as target [ 234.576639][T10660] tipc: Enabling of bearer rejected, failed to enable media [ 235.840711][T10689] netlink: zone id is out of range [ 235.870123][T10689] netlink: zone id is out of range [ 235.888407][T10692] tunl0: Caught tx_queue_len zero misconfig [ 235.906289][T10689] netlink: zone id is out of range [ 235.922416][T10689] netlink: zone id is out of range [ 235.929529][T10694] __nla_validate_parse: 5 callbacks suppressed [ 235.929548][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 235.952247][T10689] netlink: zone id is out of range [ 235.981419][T10689] netlink: zone id is out of range [ 236.303748][T10711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1319'. [ 236.333623][T10716] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1321'. [ 236.354853][T10718] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1320'. [ 236.364342][T10711] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1319'. [ 236.415313][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 237.120941][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.746905][T10752] xt_hashlimit: size too large, truncated to 1048576 [ 237.827231][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.428184][T10731] hsr0: left allmulticast mode [ 238.433037][T10731] hsr_slave_0: left allmulticast mode [ 238.443949][T10731] hsr_slave_1: left allmulticast mode [ 238.468529][T10731] veth1_to_hsr: left allmulticast mode [ 238.665590][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 238.683963][T10774] xt_HMARK: spi-set and port-set can't be combined [ 238.716723][ T29] lo speed is unknown, defaulting to 1000 [ 238.722629][ T29] syz0: Port: 1 Link DOWN [ 238.737719][T10723] vlan0: entered allmulticast mode [ 238.743293][T10723] bridge0: port 3(vlan0) entered blocking state [ 238.752563][T10723] bridge0: port 3(vlan0) entered disabled state [ 238.762274][T10723] vlan0: entered promiscuous mode [ 238.777040][T10739] sit0: entered allmulticast mode [ 238.782295][T10742] sit0: left allmulticast mode [ 238.788434][ T194] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.798275][ T194] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.825976][ T194] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 238.872339][ T5938] lo speed is unknown, defaulting to 1000 [ 238.950620][ T194] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.014718][ T194] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.023657][ T194] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.064433][ T194] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.096674][ T194] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.107428][ T194] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.124058][ T194] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.135853][ T194] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.147314][ T194] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.287045][T10804] syzkaller1: entered promiscuous mode [ 239.292616][T10804] syzkaller1: entered allmulticast mode [ 239.381561][T10807] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1341'. [ 239.787578][T10816] syzkaller1: entered promiscuous mode [ 239.793142][T10816] syzkaller1: entered allmulticast mode [ 243.035286][T10820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.046940][T10829] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1346'. [ 243.206671][T10855] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1356'. [ 243.240453][T10855] FAULT_INJECTION: forcing a failure. [ 243.240453][T10855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.285845][T10855] CPU: 1 UID: 0 PID: 10855 Comm: syz.0.1356 Not tainted syzkaller #0 PREEMPT(full) [ 243.285874][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.285894][T10855] Call Trace: [ 243.285903][T10855] [ 243.285912][T10855] dump_stack_lvl+0xe8/0x150 [ 243.285949][T10855] should_fail_ex+0x412/0x560 [ 243.285987][T10855] _copy_to_user+0x31/0xb0 [ 243.286015][T10855] simple_read_from_buffer+0xe1/0x170 [ 243.286052][T10855] proc_fail_nth_read+0x1bb/0x230 [ 243.286089][T10855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.286124][T10855] ? rw_verify_area+0x2a6/0x4d0 [ 243.286147][T10855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.286181][T10855] vfs_read+0x20c/0xa70 [ 243.286202][T10855] ? fdget_pos+0x246/0x320 [ 243.286228][T10855] ? __pfx___mutex_lock+0x10/0x10 [ 243.286255][T10855] ? __pfx_vfs_read+0x10/0x10 [ 243.286282][T10855] ? __fget_files+0x2a/0x420 [ 243.286319][T10855] ? __fget_files+0x3a0/0x420 [ 243.286349][T10855] ? __fget_files+0x2a/0x420 [ 243.286391][T10855] ksys_read+0x150/0x270 [ 243.286418][T10855] ? __pfx_ksys_read+0x10/0x10 [ 243.286453][T10855] do_syscall_64+0x14d/0xf80 [ 243.286487][T10855] ? trace_irq_disable+0x3b/0x150 [ 243.286518][T10855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.286540][T10855] ? clear_bhb_loop+0x40/0x90 [ 243.286567][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.286589][T10855] RIP: 0033:0x7f17cf55cfce [ 243.286610][T10855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.286628][T10855] RSP: 002b:00007f17cd7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.286650][T10855] RAX: ffffffffffffffda RBX: 00007f17cd7f66c0 RCX: 00007f17cf55cfce [ 243.286666][T10855] RDX: 000000000000000f RSI: 00007f17cd7f60a0 RDI: 0000000000000004 [ 243.286679][T10855] RBP: 00007f17cd7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.286692][T10855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.286705][T10855] R13: 00007f17cf816038 R14: 00007f17cf815fa0 R15: 00007ffc6f60f858 [ 243.286738][T10855] [ 244.059271][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 244.116164][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 244.417690][T10904] pim6reg1: entered promiscuous mode [ 244.423169][T10904] pim6reg1: entered allmulticast mode [ 244.690835][T10907] syzkaller1: entered promiscuous mode [ 244.698658][T10907] syzkaller1: entered allmulticast mode [ 244.814992][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.145795][T10941] lo speed is unknown, defaulting to 1000 [ 245.154105][T10941] lo speed is unknown, defaulting to 1000 [ 245.258264][T10948] macvtap0: entered promiscuous mode [ 245.291991][T10948] bond0: entered promiscuous mode [ 245.303929][T10948] bond_slave_0: entered promiscuous mode [ 245.317766][T10948] bond_slave_1: entered promiscuous mode [ 245.339815][T10948] batadv0: entered promiscuous mode [ 245.353432][T10948] debugfs: 'hsr1' already exists in 'hsr' [ 245.366131][T10948] Cannot create hsr debugfs directory [ 245.448366][T10945] lo speed is unknown, defaulting to 1000 [ 245.852249][T10960] lo speed is unknown, defaulting to 1000 [ 245.991133][T10945] lo speed is unknown, defaulting to 1000 [ 246.784208][T10960] lo speed is unknown, defaulting to 1000 [ 246.864918][T10986] pim6reg99999999: entered allmulticast mode [ 248.598451][T11043] pimreg9: entered allmulticast mode [ 248.709367][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'. [ 248.851265][T11054] net_ratelimit: 353 callbacks suppressed [ 248.851289][T11054] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 248.984292][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 249.119727][T11064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1405'. [ 249.132397][T11064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1405'. [ 249.276025][T11075] validate_nla: 4 callbacks suppressed [ 249.276047][T11075] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 249.308194][T11066] bridge0: left promiscuous mode [ 249.316449][T11075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.386766][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.433977][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.488976][T11066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.558380][T11082] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 249.576759][ T5895] lo speed is unknown, defaulting to 1000 [ 249.589203][ T5895] syz0: Port: 1 Link ACTIVE [ 249.596047][T11085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'. [ 249.605988][T11082] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1410'. [ 249.625412][T11082] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1410'. [ 249.697013][ T8386] lo speed is unknown, defaulting to 1000 [ 249.762298][T11088] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1412'. [ 249.976366][T11100] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1414'. [ 250.222642][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1418'. [ 250.386726][T11120] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 250.405344][T11120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.513117][T11124] netlink: 'syz.2.1423': attribute type 11 has an invalid length. [ 250.527901][T11124] netlink: 'syz.2.1423': attribute type 23 has an invalid length. [ 250.646546][ T5938] IPVS: starting estimator thread 0... [ 250.735470][T11136] IPVS: using max 25 ests per chain, 60000 per kthread [ 250.827383][T11131] gretap1: entered promiscuous mode [ 251.025661][T11143] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 251.555765][T11180] m1Ie5ия: entered promiscuous mode [ 252.212849][T11217] lo speed is unknown, defaulting to 1000 [ 252.235549][T11217] lo speed is unknown, defaulting to 1000 [ 252.245232][ T5938] IPVS: starting estimator thread 0... [ 252.302653][T11224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.345750][T11222] IPVS: using max 25 ests per chain, 60000 per kthread [ 252.397113][T11228] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.537220][T11232] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 253.352317][T11272] syzkaller0: entered promiscuous mode [ 253.371996][T11272] syzkaller0: entered allmulticast mode [ 253.962745][T11299] __nla_validate_parse: 14 callbacks suppressed [ 253.962767][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 253.980354][T11303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1472'. [ 254.059899][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 254.127694][T11305] nbd: device at index 64 is going down [ 254.206546][T11309] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 254.273492][ T7248] udevd[7248]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 254.287701][T11309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.414701][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.439156][T11323] syzkaller0: entered promiscuous mode [ 254.447118][T11323] syzkaller0: entered allmulticast mode [ 254.586406][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 254.596590][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 254.929139][T11347] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1487'. [ 255.156444][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1492'. [ 255.511345][T11377] syzkaller0: entered promiscuous mode [ 255.525402][T11377] syzkaller0: entered allmulticast mode [ 255.560144][T11381] netlink: 'syz.4.1496': attribute type 2 has an invalid length. [ 255.577685][T11381] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1496'. [ 255.700823][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.763040][T11386] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 255.776707][T11386] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20000 [ 255.786843][T11386] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 255.808594][T11386] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1498'. [ 255.837079][T11386] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1498'. [ 256.039794][T11401] tipc: Started in network mode [ 256.045469][T11401] tipc: Node identity 4ec03a009089, cluster identity 4711 [ 256.052944][T11401] tipc: Enabled bearer , priority 0 [ 256.429469][T11417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.464910][T11422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.487085][T11417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.198051][ T8386] tipc: Node number set to 3729340928 [ 257.206477][T11432] lo speed is unknown, defaulting to 1000 [ 257.221401][T11450] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.249978][T11432] lo speed is unknown, defaulting to 1000 [ 257.732787][T11474] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 260.647324][T11478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.404772][T11558] xt_ecn: cannot match TCP bits for non-tcp packets [ 261.773133][T11576] tipc: Resetting bearer [ 261.816975][T11576] syzkaller0: entered promiscuous mode [ 261.822527][T11576] syzkaller0: entered allmulticast mode [ 261.853825][T11576] tipc: Enabling of bearer rejected, already enabled [ 261.935462][T11575] tipc: Resetting bearer [ 262.094946][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.260514][T11595] lo speed is unknown, defaulting to 1000 [ 262.286475][T11595] lo speed is unknown, defaulting to 1000 [ 262.419137][T11608] dummy0: mtu less than device minimum [ 262.506960][ T8475] tipc: Resetting bearer [ 262.576653][T11608] IPVS: Scheduler module ip_vs_ not found [ 262.980010][T11631] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 263.059363][T11635] __nla_validate_parse: 6 callbacks suppressed [ 263.059384][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 263.084919][T11639] syzkaller1: entered promiscuous mode [ 263.090975][T11639] syzkaller1: entered allmulticast mode [ 263.178400][T11635] sock: sock_set_timeout: `syz.1.1562' (pid 11635) tries to set negative timeout [ 263.361903][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 263.368824][T11650] netlink: 'syz.1.1567': attribute type 5 has an invalid length. [ 263.403511][T11650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1567'. [ 263.435232][T11596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.751391][T11671] batadv_slave_0: Caught tx_queue_len zero misconfig [ 263.830987][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1573'. [ 263.857000][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 264.107227][T11685] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 264.194338][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 264.214379][T11685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1578'. [ 264.229015][T11688] batadv_slave_1: entered allmulticast mode [ 264.261033][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 264.289272][T11692] batadv_slave_1: left allmulticast mode [ 264.532885][T11703] xt_hashlimit: size too large, truncated to 1048576 [ 264.554457][T11705] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1583'. [ 264.632253][T11700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.668305][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 264.875068][ T8386] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.158085][T11723] syzkaller0: entered promiscuous mode [ 265.163779][T11723] syzkaller0: entered allmulticast mode [ 265.338077][T11733] netlink: 'syz.3.1592': attribute type 10 has an invalid length. [ 265.399518][T11721] bond3: Removing last ns target with arp_interval on [ 265.415391][ T8386] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.428487][T11737] netlink: 'syz.1.1593': attribute type 3 has an invalid length. [ 265.545267][T11737] block nbd1: NBD_DISCONNECT [ 265.587576][T11737] siw: device registration error -23 [ 265.663613][T11745] IPVS: Unknown mcast interface: dvmrp1 [ 265.744032][T11748] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 265.909838][T11757] lo speed is unknown, defaulting to 1000 [ 265.937247][T11757] lo speed is unknown, defaulting to 1000 [ 268.466823][T11839] xt_hashlimit: size too large, truncated to 1048576 [ 269.113396][T11870] __nla_validate_parse: 13 callbacks suppressed [ 269.113420][T11870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1623'. [ 269.133062][T11865] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 269.141842][T11865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 270.477450][T11872] lo speed is unknown, defaulting to 1000 [ 270.507468][T11872] lo speed is unknown, defaulting to 1000 [ 270.668635][T11892] netlink: 'syz.0.1633': attribute type 21 has an invalid length. [ 270.685449][T11892] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1633'. [ 270.708818][T11892] netlink: 'syz.0.1633': attribute type 5 has an invalid length. [ 270.727922][T11892] netlink: 'syz.0.1633': attribute type 6 has an invalid length. [ 270.738067][T11892] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1633'. [ 270.750656][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 270.763133][T11895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1634'. [ 270.788779][T11895] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1634'. [ 270.913339][T11902] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 271.037143][T11902] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.063587][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 271.100158][T11908] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 271.110952][T11908] bond5: (slave batadv1): making interface the new active one [ 271.121861][T11908] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 271.131699][T11903] veth0_to_bridge: entered promiscuous mode [ 271.192536][T11902] bond5 (unregistering): (slave batadv1): Releasing active interface [ 271.206367][T11902] bond5 (unregistering): Released all slaves [ 271.292136][T11901] veth0_to_bridge: left promiscuous mode [ 271.823022][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1646'. [ 271.926866][T11935] nbd: socks must be embedded in a SOCK_ITEM attr [ 271.934138][T11937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1646'. [ 271.949516][T11937] nbd: device at index 64 is going down [ 272.098811][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.151615][ T7248] udevd[7248]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.459913][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1645'. [ 272.498933][T11956] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 272.517602][T11956] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 272.569360][T11960] netlink: 'syz.4.1653': attribute type 1 has an invalid length. [ 272.658686][T11960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.754487][T11959] bond4: (slave geneve2): making interface the new active one [ 272.784175][T11959] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 272.807820][T11970] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 272.947331][T11964] ip6tnl0: Caught tx_queue_len zero misconfig [ 272.966583][T11983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.966595][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.988428][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.036159][T11975] bond3 (unregistering): Released all slaves [ 273.067246][T11980] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 273.068636][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.104662][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.238177][T11997] netlink: zone id is out of range [ 273.243455][T11997] netlink: zone id is out of range [ 273.249325][T11997] netlink: zone id is out of range [ 273.254481][T11997] netlink: zone id is out of range [ 273.260187][T11997] netlink: zone id is out of range [ 273.266158][T11995] block nbd1: Unsupported socket: should be TCP or UNIX. [ 273.308494][T11997] netlink: zone id is out of range [ 273.314108][T11997] netlink: zone id is out of range [ 273.320616][T11997] netlink: zone id is out of range [ 273.589085][T12019] xt_hashlimit: size too large, truncated to 1048576 [ 273.950777][T12030] dvmrp1: entered allmulticast mode [ 274.227503][T12049] __nla_validate_parse: 7 callbacks suppressed [ 274.227523][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 274.229996][T12045] net_ratelimit: 350 callbacks suppressed [ 274.230041][T12045] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 274.242164][T12049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.259254][T12045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.508894][T12064] xt_hashlimit: size too large, truncated to 1048576 [ 274.828512][T12078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1694'. [ 275.320651][T12095] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96 [ 275.730071][T12111] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1703'. [ 275.791929][T12113] xt_hashlimit: size too large, truncated to 1048576 [ 276.102924][T12125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 276.139508][T12094] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.416661][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 276.716940][T12156] sctp: [Deprecated]: syz.0.1717 (pid 12156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.716940][T12156] Use struct sctp_sack_info instead [ 276.735526][T12156] sctp: [Deprecated]: syz.0.1717 (pid 12156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.735526][T12156] Use struct sctp_sack_info instead [ 276.881518][T12159] bridge8: entered allmulticast mode [ 276.921501][T12160] batadv1: entered promiscuous mode [ 276.935604][T12160] batadv1: entered allmulticast mode [ 277.146867][T12163] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1720'. [ 277.554398][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1722'. [ 277.654174][T12152] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 277.740721][T12152] bond3: (slave lo): Enslaving as an active interface with an up link [ 277.810647][T12152] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 277.886569][T12193] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 277.922127][T12197] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1727'. [ 278.251258][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 278.261566][T12208] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 278.274331][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 278.381344][T12213] netlink: 'syz.1.1731': attribute type 8 has an invalid length. [ 278.537676][T12221] pim6reg: entered allmulticast mode [ 278.548171][T12221] pim6reg: left allmulticast mode [ 278.813069][T12233] xt_hashlimit: size too large, truncated to 1048576 [ 279.007231][T12243] xt_hashlimit: size too large, truncated to 1048576 [ 279.570925][T12269] netlink: 'syz.2.1745': attribute type 1 has an invalid length. [ 279.836541][T12279] __nla_validate_parse: 4 callbacks suppressed [ 279.836561][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 279.989037][T12317] pimreg: left allmulticast mode [ 280.151721][T12344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1752'. [ 280.229045][T12362] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 280.239230][T12362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1753'. [ 280.306502][T12369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1753'. [ 280.332958][T12362] team0: Port device geneve0 added [ 280.368009][T12346] lo speed is unknown, defaulting to 1000 [ 280.393436][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.458407][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.520183][T12346] lo speed is unknown, defaulting to 1000 [ 280.530998][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.599727][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.634736][T12397] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 280.655843][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 280.725830][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 280.776467][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1753'. [ 280.883813][T12369] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1753'. [ 280.893749][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1753'. [ 281.222437][T12439] netlink: 'syz.3.1759': attribute type 32 has an invalid length. [ 281.371109][T12431] veth1: entered promiscuous mode [ 281.380896][T12431] veth1: entered allmulticast mode [ 282.040473][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 282.447966][T12501] syzkaller1: entered promiscuous mode [ 282.453853][T12501] syzkaller1: entered allmulticast mode [ 283.056063][T12511] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 283.510460][T12522] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 283.601338][T12522] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.638477][T12522] tipc: Enabled bearer , priority 0 [ 283.928355][T12529] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 283.938181][T12529] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 283.960826][T12522] syzkaller0: entered promiscuous mode [ 283.991077][T12522] syzkaller0: entered allmulticast mode [ 284.017244][T12522] tipc: Resetting bearer [ 284.074072][T12520] tipc: Resetting bearer [ 285.787919][ T30] audit: type=1107 audit(1774425782.845:5): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?еe ѓ*bџЃ њ ’pBsВ®љЮLvbэм”©$Rd>¦¦7йgѓ:АА‰Ъs2vљгlшмИbж [ 288.738379][ T8392] tipc: Node number set to 1992456846 [ 288.797579][T12577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1788'. [ 289.037155][T12586] xt_hashlimit: size too large, truncated to 1048576 [ 289.395816][T12600] lo speed is unknown, defaulting to 1000 [ 289.441312][T12600] lo speed is unknown, defaulting to 1000 [ 289.757603][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 290.329365][T12633] netlink: 'syz.3.1803': attribute type 2 has an invalid length. [ 290.675681][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 290.861247][T12643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1807'. [ 291.018114][T12654] FAULT_INJECTION: forcing a failure. [ 291.018114][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.065407][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.3.1809 Not tainted syzkaller #0 PREEMPT(full) [ 291.065441][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.065456][T12654] Call Trace: [ 291.065465][T12654] [ 291.065474][T12654] dump_stack_lvl+0xe8/0x150 [ 291.065514][T12654] should_fail_ex+0x412/0x560 [ 291.065563][T12654] _copy_from_iter+0x1d3/0x1670 [ 291.065602][T12654] ? rcu_is_watching+0x15/0xb0 [ 291.065639][T12654] ? __pfx__copy_from_iter+0x10/0x10 [ 291.065681][T12654] ? netlink_sendmsg+0x650/0xb40 [ 291.065703][T12654] ? skb_put+0x11b/0x210 [ 291.065731][T12654] netlink_sendmsg+0x6c0/0xb40 [ 291.065762][T12654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.065788][T12654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.065822][T12654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.065851][T12654] ____sys_sendmsg+0x972/0x9f0 [ 291.065887][T12654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.065925][T12654] ? import_iovec+0x73/0xa0 [ 291.065955][T12654] ___sys_sendmsg+0x2a5/0x360 [ 291.065988][T12654] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.066053][T12654] ? __fget_files+0x2a/0x420 [ 291.066086][T12654] ? __fget_files+0x3a0/0x420 [ 291.066130][T12654] __x64_sys_sendmsg+0x1bd/0x2a0 [ 291.066161][T12654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.066206][T12654] ? __pfx_ksys_write+0x10/0x10 [ 291.066245][T12654] do_syscall_64+0x14d/0xf80 [ 291.066271][T12654] ? trace_irq_disable+0x3b/0x150 [ 291.066302][T12654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.066324][T12654] ? clear_bhb_loop+0x40/0x90 [ 291.066351][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.066373][T12654] RIP: 0033:0x7f4f3b19c799 [ 291.066395][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.066415][T12654] RSP: 002b:00007f4f3c0b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.066439][T12654] RAX: ffffffffffffffda RBX: 00007f4f3b415fa0 RCX: 00007f4f3b19c799 [ 291.066454][T12654] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 291.066467][T12654] RBP: 00007f4f3c0b0090 R08: 0000000000000000 R09: 0000000000000000 [ 291.066481][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.066494][T12654] R13: 00007f4f3b416038 R14: 00007f4f3b415fa0 R15: 00007fffd4c58ed8 [ 291.066528][T12654] [ 291.527067][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 292.059073][T12665] vlan1: entered promiscuous mode [ 292.860534][T12710] FAULT_INJECTION: forcing a failure. [ 292.860534][T12710] name failslab, interval 1, probability 0, space 0, times 0 [ 292.915430][T12710] CPU: 0 UID: 0 PID: 12710 Comm: syz.3.1822 Not tainted syzkaller #0 PREEMPT(full) [ 292.915475][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.915489][T12710] Call Trace: [ 292.915498][T12710] [ 292.915508][T12710] dump_stack_lvl+0xe8/0x150 [ 292.915550][T12710] should_fail_ex+0x412/0x560 [ 292.915589][T12710] should_failslab+0xa8/0x100 [ 292.915618][T12710] ? skb_clone+0x212/0x3a0 [ 292.915648][T12710] kmem_cache_alloc_noprof+0x87/0x650 [ 292.915671][T12710] ? __netlink_lookup+0xc6/0x8b0 [ 292.915705][T12710] skb_clone+0x212/0x3a0 [ 292.915738][T12710] __netlink_deliver_tap+0x404/0x850 [ 292.915776][T12710] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.915801][T12710] netlink_deliver_tap+0x19c/0x1b0 [ 292.915826][T12710] netlink_unicast+0x7e3/0x9b0 [ 292.915869][T12710] ? __pfx_netlink_unicast+0x10/0x10 [ 292.915905][T12710] ? netlink_sendmsg+0x650/0xb40 [ 292.915926][T12710] ? skb_put+0x11b/0x210 [ 292.915956][T12710] netlink_sendmsg+0x813/0xb40 [ 292.915991][T12710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.916019][T12710] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.916053][T12710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.916084][T12710] ____sys_sendmsg+0x972/0x9f0 [ 292.916123][T12710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.916162][T12710] ? import_iovec+0x73/0xa0 [ 292.916191][T12710] ___sys_sendmsg+0x2a5/0x360 [ 292.916225][T12710] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.916294][T12710] ? __fget_files+0x2a/0x420 [ 292.916327][T12710] ? __fget_files+0x3a0/0x420 [ 292.916371][T12710] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.916405][T12710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.916450][T12710] ? __pfx_ksys_write+0x10/0x10 [ 292.916488][T12710] do_syscall_64+0x14d/0xf80 [ 292.916515][T12710] ? trace_irq_disable+0x3b/0x150 [ 292.916548][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.916571][T12710] ? clear_bhb_loop+0x40/0x90 [ 292.916598][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.916620][T12710] RIP: 0033:0x7f4f3b19c799 [ 292.916657][T12710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.916677][T12710] RSP: 002b:00007f4f3c0b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.916701][T12710] RAX: ffffffffffffffda RBX: 00007f4f3b415fa0 RCX: 00007f4f3b19c799 [ 292.916718][T12710] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 292.916732][T12710] RBP: 00007f4f3c0b0090 R08: 0000000000000000 R09: 0000000000000000 [ 292.916746][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.916758][T12710] R13: 00007f4f3b416038 R14: 00007f4f3b415fa0 R15: 00007fffd4c58ed8 [ 292.916794][T12710] [ 293.466490][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1823'. [ 293.503861][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 293.513694][T12717] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1823'. [ 293.547981][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'. [ 293.779234][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 293.819373][T12732] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1826'. [ 294.002164][T12717] ip6gretap0: left allmulticast mode [ 294.104065][T12717] veth1: left promiscuous mode [ 294.110050][T12717] veth1: left allmulticast mode [ 294.120692][T12717] macsec0: left promiscuous mode [ 294.128051][T12717] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 294.139739][T12717] bond2: left promiscuous mode [ 294.145617][T12717] bridge4: left promiscuous mode [ 294.162397][T12717] ipvlan0: left allmulticast mode [ 294.168488][T12717] bond2: left allmulticast mode [ 294.173405][T12717] bridge4: left allmulticast mode [ 294.200789][T12717] gretap1: left promiscuous mode [ 294.222974][T12738] netlink: 572 bytes leftover after parsing attributes in process `syz.2.1828'. [ 294.299525][T12717] bridge8: left allmulticast mode [ 294.305979][T12717] vlan1: left promiscuous mode [ 294.858076][T12763] FAULT_INJECTION: forcing a failure. [ 294.858076][T12763] name failslab, interval 1, probability 0, space 0, times 0 [ 294.877945][T12763] CPU: 0 UID: 0 PID: 12763 Comm: syz.0.1835 Not tainted syzkaller #0 PREEMPT(full) [ 294.877978][T12763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.877993][T12763] Call Trace: [ 294.878002][T12763] [ 294.878012][T12763] dump_stack_lvl+0xe8/0x150 [ 294.878052][T12763] should_fail_ex+0x412/0x560 [ 294.878091][T12763] should_failslab+0xa8/0x100 [ 294.878121][T12763] __kmalloc_cache_noprof+0x88/0x660 [ 294.878148][T12763] ? nfnetlink_rcv+0xfe1/0x27b0 [ 294.878186][T12763] nfnetlink_rcv+0xfe1/0x27b0 [ 294.878217][T12763] ? is_bpf_text_address+0x26/0x2b0 [ 294.878276][T12763] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 294.878319][T12763] ? __lock_acquire+0x6b5/0x2cf0 [ 294.878384][T12763] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.878428][T12763] netlink_unicast+0x80f/0x9b0 [ 294.878472][T12763] ? __pfx_netlink_unicast+0x10/0x10 [ 294.878506][T12763] ? netlink_sendmsg+0x650/0xb40 [ 294.878526][T12763] ? skb_put+0x11b/0x210 [ 294.878556][T12763] netlink_sendmsg+0x813/0xb40 [ 294.878590][T12763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.878618][T12763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 294.878652][T12763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.878682][T12763] ____sys_sendmsg+0x972/0x9f0 [ 294.878720][T12763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.878769][T12763] ? import_iovec+0x73/0xa0 [ 294.878799][T12763] ___sys_sendmsg+0x2a5/0x360 [ 294.878833][T12763] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.878900][T12763] ? __fget_files+0x2a/0x420 [ 294.878933][T12763] ? __fget_files+0x3a0/0x420 [ 294.878978][T12763] __x64_sys_sendmsg+0x1bd/0x2a0 [ 294.879009][T12763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.879048][T12763] ? __pfx_ksys_write+0x10/0x10 [ 294.879086][T12763] do_syscall_64+0x14d/0xf80 [ 294.879113][T12763] ? trace_irq_disable+0x3b/0x150 [ 294.879145][T12763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.879168][T12763] ? clear_bhb_loop+0x40/0x90 [ 294.879194][T12763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.879216][T12763] RIP: 0033:0x7f17cf59c799 [ 294.879236][T12763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.879254][T12763] RSP: 002b:00007f17cd7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.879278][T12763] RAX: ffffffffffffffda RBX: 00007f17cf815fa0 RCX: 00007f17cf59c799 [ 294.879293][T12763] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 294.879307][T12763] RBP: 00007f17cd7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.879320][T12763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.879333][T12763] R13: 00007f17cf816038 R14: 00007f17cf815fa0 R15: 00007ffc6f60f858 [ 294.879367][T12763] [ 295.241521][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1834'. [ 295.323141][T12775] tipc: New replicast peer: 255.255.255.255 [ 295.330434][T12775] tipc: Enabled bearer , priority 10 [ 296.443922][T12804] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 296.664693][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.719966][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 296.837783][T12829] ip6tnl2: entered promiscuous mode [ 296.843067][T12829] ip6tnl2: entered allmulticast mode [ 296.897153][T12831] netlink: 'syz.3.1850': attribute type 27 has an invalid length. [ 296.919332][T12831] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 296.934131][T12833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.950189][T12827] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 297.607042][T12863] xt_hashlimit: size too large, truncated to 1048576 [ 298.145494][T12880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.234365][T12884] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 298.289116][T12885] IPVS: sed: FWM 3 0x00000003 - no destination available [ 299.071963][T12923] bond0: Caught tx_queue_len zero misconfig [ 299.423109][T12927] lo speed is unknown, defaulting to 1000 [ 299.459674][T12927] lo speed is unknown, defaulting to 1000 [ 299.459693][T12931] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1885'. [ 299.519438][T12930] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1885'. [ 299.698104][T12939] netlink: 'syz.2.1886': attribute type 2 has an invalid length. [ 299.725457][T12939] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1886'. [ 299.754193][T12942] openvswitch: netlink: Duplicate key (type 21). [ 300.156234][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 300.186174][T12931] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 300.833938][T12960] FAULT_INJECTION: forcing a failure. [ 300.833938][T12960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.914568][T12960] CPU: 1 UID: 0 PID: 12960 Comm: syz.2.1896 Not tainted syzkaller #0 PREEMPT(full) [ 300.914600][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.914611][T12960] Call Trace: [ 300.914619][T12960] [ 300.914628][T12960] dump_stack_lvl+0xe8/0x150 [ 300.914663][T12960] should_fail_ex+0x412/0x560 [ 300.914696][T12960] _copy_from_user+0x2d/0xb0 [ 300.914719][T12960] kstrtouint_from_user+0xd6/0x180 [ 300.914750][T12960] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 300.914795][T12960] proc_fail_nth_write+0x8e/0x210 [ 300.914823][T12960] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 300.914855][T12960] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 300.914883][T12960] vfs_write+0x29a/0xb90 [ 300.914914][T12960] ? __pfx_vfs_write+0x10/0x10 [ 300.914935][T12960] ? __fget_files+0x2a/0x420 [ 300.914969][T12960] ? __fget_files+0x3a0/0x420 [ 300.914994][T12960] ? __fget_files+0x2a/0x420 [ 300.915029][T12960] ksys_write+0x150/0x270 [ 300.915052][T12960] ? __pfx_ksys_write+0x10/0x10 [ 300.915083][T12960] do_syscall_64+0x14d/0xf80 [ 300.915106][T12960] ? trace_irq_disable+0x3b/0x150 [ 300.915132][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.915152][T12960] ? clear_bhb_loop+0x40/0x90 [ 300.915175][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.915193][T12960] RIP: 0033:0x7fc66655cfce [ 300.915210][T12960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.915226][T12960] RSP: 002b:00007fc6673a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.915247][T12960] RAX: ffffffffffffffda RBX: 00007fc6673a66c0 RCX: 00007fc66655cfce [ 300.915260][T12960] RDX: 0000000000000001 RSI: 00007fc6673a60a0 RDI: 0000000000000004 [ 300.915279][T12960] RBP: 00007fc6673a6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.915290][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.915300][T12960] R13: 00007fc666816038 R14: 00007fc666815fa0 R15: 00007fff8bcaa478 [ 300.915331][T12960] [ 301.198585][T12966] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 301.451156][T12962] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 301.460289][T12962] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1897'. [ 301.565710][T12962] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1897'. [ 302.121970][T12985] geneve1: entered promiscuous mode [ 302.140572][T12985] geneve1: entered allmulticast mode [ 302.168848][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.233960][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.277006][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.299345][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.406239][T13000] lo speed is unknown, defaulting to 1000 [ 302.487024][T13000] lo speed is unknown, defaulting to 1000 [ 302.757375][T13009] lo speed is unknown, defaulting to 1000 [ 302.824144][T13009] lo speed is unknown, defaulting to 1000 [ 303.547176][T13034] netlink: 208712 bytes leftover after parsing attributes in process `syz.4.1912'. [ 303.587888][T13032] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 303.605398][T13032] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 303.613903][T13032] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 303.860343][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 303.907564][T13041] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 304.144982][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 304.339370][T10765] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 304.682759][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 305.170632][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 305.220032][T13096] xt_hashlimit: size too large, truncated to 1048576 [ 305.225575][T10765] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 305.308300][T12816] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 306.300811][T13133] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1939'. [ 306.315423][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'. [ 306.321785][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 306.362562][ T79] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 306.372805][T13133] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1939'. [ 306.382550][ T79] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 306.404919][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 306.413934][T13133] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1939'. [ 306.697850][ T29] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 306.759891][T13152] xt_hashlimit: size too large, truncated to 1048576 [ 306.813031][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1949'. [ 306.917790][T13164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1949'. [ 307.406028][T13175] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.535886][T13182] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 307.543736][T13182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.577824][T13186] FAULT_INJECTION: forcing a failure. [ 307.577824][T13186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.632918][T13186] CPU: 0 UID: 0 PID: 13186 Comm: syz.2.1957 Not tainted syzkaller #0 PREEMPT(full) [ 307.632953][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.632968][T13186] Call Trace: [ 307.632978][T13186] [ 307.632988][T13186] dump_stack_lvl+0xe8/0x150 [ 307.633029][T13186] should_fail_ex+0x412/0x560 [ 307.633069][T13186] _copy_from_user+0x2d/0xb0 [ 307.633096][T13186] ___sys_sendmsg+0x1c6/0x360 [ 307.633132][T13186] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.633200][T13186] ? __fget_files+0x2a/0x420 [ 307.633232][T13186] ? __fget_files+0x3a0/0x420 [ 307.633277][T13186] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.633307][T13186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.633346][T13186] ? __pfx_ksys_write+0x10/0x10 [ 307.633384][T13186] do_syscall_64+0x14d/0xf80 [ 307.633415][T13186] ? trace_irq_disable+0x3b/0x150 [ 307.633447][T13186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.633469][T13186] ? clear_bhb_loop+0x40/0x90 [ 307.633497][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.633518][T13186] RIP: 0033:0x7fc66659c799 [ 307.633540][T13186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.633559][T13186] RSP: 002b:00007fc6673a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.633583][T13186] RAX: ffffffffffffffda RBX: 00007fc666815fa0 RCX: 00007fc66659c799 [ 307.633599][T13186] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 307.633613][T13186] RBP: 00007fc6673a6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.633627][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.633639][T13186] R13: 00007fc666816038 R14: 00007fc666815fa0 R15: 00007fff8bcaa478 [ 307.633674][T13186] [ 308.249298][T13206] xt_hashlimit: size too large, truncated to 1048576 [ 308.282670][ T30] audit: type=1107 audit(1774425805.345:6): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 308.328092][T13213] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 308.461928][T13217] tipc: Enabling of bearer rejected, failed to enable media [ 308.513047][T13228] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 308.532450][T13230] tipc: Enabling of bearer rejected, failed to enable media [ 308.689285][T13234] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 308.706281][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.046536][T13251] syzkaller1: entered allmulticast mode [ 309.613438][T13268] Unsupported ieee802154 address type: 0 [ 309.644973][T13268] netlink: 'syz.0.1983': attribute type 4 has an invalid length. [ 309.835785][T13284] netlink: 'syz.4.1989': attribute type 1 has an invalid length. [ 309.875016][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.925458][T13287] xt_hashlimit: size too large, truncated to 1048576 [ 309.950719][T13291] tipc: Enabling of bearer rejected, failed to enable media [ 310.031567][T13291] __nla_validate_parse: 14 callbacks suppressed [ 310.031590][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 310.118306][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 310.135587][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 310.191807][T13291] bridge0: entered promiscuous mode [ 310.344687][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 310.458957][T13307] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.506154][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1995'. [ 310.535599][T13307] 8021q: VLANs not supported on ip6_vti0 [ 310.606547][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 310.648810][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 310.745116][T13317] netlink: 'syz.4.1996': attribute type 6 has an invalid length. [ 310.752925][T13317] netlink: 'syz.4.1996': attribute type 5 has an invalid length. [ 310.865008][T12816] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.883550][T12816] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.012872][T13338] netlink: 'syz.0.2003': attribute type 9 has an invalid length. [ 311.037779][T13338] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2003'. [ 311.082468][T13340] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 311.103059][T13340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.221021][T12816] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.237531][T12816] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.447973][T13351] lo speed is unknown, defaulting to 1000 [ 311.479730][T13358] xt_hashlimit: size too large, truncated to 1048576 [ 311.489766][T13351] lo speed is unknown, defaulting to 1000 [ 311.650726][T13362] tipc: Enabled bearer , priority 0 [ 311.688371][T13362] syzkaller0: entered promiscuous mode [ 311.718950][T13362] syzkaller0: entered allmulticast mode [ 311.747538][T13366] syzkaller0: entered promiscuous mode [ 311.753084][T13366] syzkaller0: entered allmulticast mode [ 311.771575][T13366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2012'. [ 311.859277][T13367] tipc: Resetting bearer [ 311.986243][T13367] tipc: Resetting bearer [ 312.077062][T13367] tipc: Disabling bearer [ 312.392056][T13375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2014'. [ 312.483297][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 312.569297][T13389] FAULT_INJECTION: forcing a failure. [ 312.569297][T13389] name failslab, interval 1, probability 0, space 0, times 0 [ 312.614575][T13389] CPU: 1 UID: 0 PID: 13389 Comm: syz.4.2019 Not tainted syzkaller #0 PREEMPT(full) [ 312.614608][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.614623][T13389] Call Trace: [ 312.614632][T13389] [ 312.614643][T13389] dump_stack_lvl+0xe8/0x150 [ 312.614684][T13389] should_fail_ex+0x412/0x560 [ 312.614724][T13389] should_failslab+0xa8/0x100 [ 312.614753][T13389] ? skb_clone+0x212/0x3a0 [ 312.614792][T13389] kmem_cache_alloc_noprof+0x87/0x650 [ 312.614817][T13389] ? __netlink_lookup+0xc6/0x8b0 [ 312.614855][T13389] skb_clone+0x212/0x3a0 [ 312.614890][T13389] __netlink_deliver_tap+0x404/0x850 [ 312.614927][T13389] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.614953][T13389] netlink_deliver_tap+0x19c/0x1b0 [ 312.615000][T13389] netlink_unicast+0x7e3/0x9b0 [ 312.615044][T13389] ? __pfx_netlink_unicast+0x10/0x10 [ 312.615076][T13389] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 312.615104][T13389] ? netlink_sendmsg+0x650/0xb40 [ 312.615126][T13389] ? skb_put+0x11b/0x210 [ 312.615156][T13389] netlink_sendmsg+0x813/0xb40 [ 312.615191][T13389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.615219][T13389] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.615253][T13389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.615282][T13389] ____sys_sendmsg+0x972/0x9f0 [ 312.615322][T13389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.615360][T13389] ? import_iovec+0x73/0xa0 [ 312.615390][T13389] ___sys_sendmsg+0x2a5/0x360 [ 312.615425][T13389] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.615491][T13389] ? __fget_files+0x2a/0x420 [ 312.615524][T13389] ? __fget_files+0x3a0/0x420 [ 312.615567][T13389] __x64_sys_sendmsg+0x1bd/0x2a0 [ 312.615598][T13389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.615635][T13389] ? __pfx_ksys_write+0x10/0x10 [ 312.615671][T13389] do_syscall_64+0x14d/0xf80 [ 312.615698][T13389] ? trace_irq_disable+0x3b/0x150 [ 312.615729][T13389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.615752][T13389] ? clear_bhb_loop+0x40/0x90 [ 312.615786][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.615809][T13389] RIP: 0033:0x7fc620b9c799 [ 312.615830][T13389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.615848][T13389] RSP: 002b:00007fc621aa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.615871][T13389] RAX: ffffffffffffffda RBX: 00007fc620e15fa0 RCX: 00007fc620b9c799 [ 312.615886][T13389] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 312.615899][T13389] RBP: 00007fc621aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 312.615912][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.615924][T13389] R13: 00007fc620e16038 R14: 00007fc620e15fa0 R15: 00007fff31738c58 [ 312.615957][T13389] [ 312.616302][T13389] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 312.671540][T13380] vlan2: entered promiscuous mode [ 312.741137][T13389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.866059][T13380] erspan0: entered promiscuous mode [ 313.201935][T13405] netlink: 'syz.1.2024': attribute type 1 has an invalid length. [ 313.229997][T13401] xt_hashlimit: size too large, truncated to 1048576 [ 313.237017][T13405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.360672][T13408] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 313.398137][T13408] syzkaller1: linktype set to 768 [ 313.466781][T13413] IPVS: length: 62 != 24 [ 313.532379][T13415] batadv_slave_1: entered promiscuous mode [ 313.698515][T13416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.894892][T13416] batadv_slave_1: left promiscuous mode [ 314.637334][T13427] netlink: 'syz.4.2030': attribute type 5 has an invalid length. [ 314.649729][T13427] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 315.006940][T13472] xt_hashlimit: size too large, truncated to 1048576 [ 315.127763][T13476] tipc: Resetting bearer [ 315.945997][T13475] tipc: Resetting bearer [ 315.953389][T12816] tipc: Resetting bearer [ 316.992014][T13437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.138238][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.171255][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.172477][T13486] netlink: 'syz.2.2041': attribute type 10 has an invalid length. [ 317.277072][T13486] team0: Port device dummy0 added [ 317.312834][T13493] netlink: 'syz.4.2043': attribute type 3 has an invalid length. [ 317.393246][T13497] bond3: option mode: unable to set because the bond device has slaves [ 317.445801][T13497] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 317.730401][T13514] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 317.786767][T13514] netlink: 'syz.3.2050': attribute type 2 has an invalid length. [ 317.826517][T13514] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 318.215717][T13531] xt_hashlimit: size too large, truncated to 1048576 [ 318.414707][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 318.849110][T13560] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 319.023138][T13560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.107040][T13568] bond7: entered allmulticast mode [ 319.122890][T13560] __nla_validate_parse: 2 callbacks suppressed [ 319.122919][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2060'. [ 319.208944][T13560] bond7: (slave ip6gretap1): making interface the new active one [ 319.217826][T13560] ip6gretap1: entered allmulticast mode [ 319.226632][T13560] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 319.377408][T13578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2066'. [ 319.409471][T13578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2066'. [ 319.468867][T13581] lo speed is unknown, defaulting to 1000 [ 319.518110][T13581] lo speed is unknown, defaulting to 1000 [ 319.540530][T13585] lo speed is unknown, defaulting to 1000 [ 320.011244][T13585] lo speed is unknown, defaulting to 1000 [ 320.018937][T13604] PKCS7: Unknown OID: [4] (bad) [ 320.032115][T13604] PKCS7: Only support pkcs7_signedData type [ 320.072126][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 320.091716][T13604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2070'. [ 320.368501][T13614] syz.2.2073 uses old SIOCAX25GETINFO [ 320.469620][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 320.708790][T13620] xt_hashlimit: size too large, truncated to 1048576 [ 321.334196][T13629] 8021q: VLANs not supported on ip6_vti0 [ 322.184138][T13668] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 322.350882][T13680] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2085'. [ 322.361804][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 322.474124][T13668] bond5: entered promiscuous mode [ 322.483621][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 322.500990][T13668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.610691][T13660] geneve0: entered promiscuous mode [ 322.671514][T13660] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.751335][T13679] bond5: (slave bridge9): making interface the new active one [ 322.778302][T13679] bridge9: entered promiscuous mode [ 322.805416][T13695] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2089'. [ 322.825517][T13679] bridge9: left promiscuous mode [ 322.918522][T13661] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 323.050340][T13669] lo speed is unknown, defaulting to 1000 [ 323.092965][T13669] lo speed is unknown, defaulting to 1000 [ 323.138476][T13698] netlink: 'syz.4.2090': attribute type 62 has an invalid length. [ 323.346500][T13706] tipc: MTU too low for tipc bearer [ 323.645997][T13712] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.473867][T13739] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 324.494661][T13736] __nla_validate_parse: 2 callbacks suppressed [ 324.494691][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 324.515026][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 324.577367][T13741] vlan2: entered promiscuous mode [ 324.588518][T13741] batadv_slave_0: entered promiscuous mode [ 324.602043][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 324.957765][T13755] bond4: entered promiscuous mode [ 324.980203][T13755] bond4: entered allmulticast mode [ 324.987979][T13755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.014604][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 325.075979][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 325.212914][T13764] syzkaller1: entered promiscuous mode [ 325.230467][T13764] syzkaller1: entered allmulticast mode [ 325.359654][T13774] lo speed is unknown, defaulting to 1000 [ 325.371589][T13774] lo speed is unknown, defaulting to 1000 [ 325.558879][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2117'. [ 325.581529][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 326.523848][T13817] lo speed is unknown, defaulting to 1000 [ 326.756254][T13817] lo speed is unknown, defaulting to 1000 [ 327.482235][T13849] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 327.865754][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 327.905018][T13863] openvswitch: netlink: Unknown nsh attribute 0 [ 328.890211][T13886] netlink: 'syz.3.2139': attribute type 12 has an invalid length. [ 329.112682][T13897] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.668130][T13903] syzkaller0: entered promiscuous mode [ 329.683979][T13903] syzkaller0: entered allmulticast mode [ 329.715814][T13903] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2142'. [ 329.868518][T13910] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2144'. [ 330.107344][T13916] netlink: 'syz.0.2146': attribute type 2 has an invalid length. [ 330.136276][T13916] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2146'. [ 332.178136][T13943] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2152'. [ 333.058800][T13970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2158'. [ 333.113922][T13973] syzkaller0: entered promiscuous mode [ 333.133376][T13973] syzkaller0: entered allmulticast mode [ 333.266346][T13975] macsec2: entered promiscuous mode [ 333.386102][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 334.414696][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 334.461665][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 334.505963][T14011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'. [ 334.766228][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2168'. [ 334.787151][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2168'. [ 334.863179][T14024] lo speed is unknown, defaulting to 1000 [ 334.921526][T14024] lo speed is unknown, defaulting to 1000 [ 365.784754][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 368.335061][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.414664][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 378.580742][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.506118][T14055] syzkaller0: entered promiscuous mode [ 393.511682][T14055] syzkaller0: entered allmulticast mode [ 393.591143][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 394.395355][T14082] xt_hashlimit: size too large, truncated to 1048576 [ 395.604683][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 395.919605][T14110] netlink: 'syz.2.2192': attribute type 2 has an invalid length. [ 395.936742][T14110] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.2192'. [ 396.036082][T14092] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 396.064677][T14092] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2188'. [ 396.285341][T14114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.384257][T14117] lo: entered allmulticast mode [ 396.423450][T14117] lo: left allmulticast mode [ 396.803859][T14131] netlink: 'syz.3.2197': attribute type 6 has an invalid length. [ 396.812711][T14131] netlink: 'syz.3.2197': attribute type 7 has an invalid length. [ 396.844637][T14131] netlink: 'syz.3.2197': attribute type 8 has an invalid length. [ 396.872168][T14131] netlink: 'syz.3.2197': attribute type 15 has an invalid length. [ 397.015278][T14139] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 397.247414][T14155] xt_hashlimit: size too large, truncated to 1048576 [ 397.400484][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2203'. [ 397.407574][T14157] netlink: 'syz.2.2202': attribute type 1 has an invalid length. [ 397.467356][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2202'. [ 397.743999][T14162] bond8: (slave bridge2): making interface the new active one [ 397.803956][T14162] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 398.536714][T14192] netlink: 'syz.4.2212': attribute type 4 has an invalid length. [ 398.569244][T14192] netlink: 'syz.4.2212': attribute type 4 has an invalid length. [ 398.707609][T14195] FAULT_INJECTION: forcing a failure. [ 398.707609][T14195] name failslab, interval 1, probability 0, space 0, times 0 [ 398.760792][T14195] CPU: 1 UID: 0 PID: 14195 Comm: syz.3.2213 Not tainted syzkaller #0 PREEMPT(full) [ 398.760824][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.760843][T14195] Call Trace: [ 398.760930][T14195] [ 398.760941][T14195] dump_stack_lvl+0xe8/0x150 [ 398.761117][T14195] should_fail_ex+0x412/0x560 [ 398.761245][T14195] should_failslab+0xa8/0x100 [ 398.761300][T14195] __kmalloc_cache_noprof+0x88/0x660 [ 398.761333][T14195] ? nft_delflowtable+0x57/0x470 [ 398.761498][T14195] nft_delflowtable+0x57/0x470 [ 398.761536][T14195] nf_tables_delflowtable+0x1136/0x1980 [ 398.761590][T14195] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 398.761620][T14195] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 398.761722][T14195] ? nfnl_pernet+0x23/0x240 [ 398.761789][T14195] ? __nla_parse+0x40/0x60 [ 398.761817][T14195] nfnetlink_rcv+0x1240/0x27b0 [ 398.761886][T14195] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 398.761936][T14195] ? ref_tracker_free+0x693/0x840 [ 398.762001][T14195] ? __netlink_deliver_tap+0x807/0x850 [ 398.762065][T14195] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.762106][T14195] netlink_unicast+0x80f/0x9b0 [ 398.762181][T14195] ? __pfx_netlink_unicast+0x10/0x10 [ 398.762217][T14195] ? netlink_sendmsg+0x650/0xb40 [ 398.762239][T14195] ? skb_put+0x11b/0x210 [ 398.762338][T14195] netlink_sendmsg+0x813/0xb40 [ 398.762371][T14195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.762399][T14195] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.762502][T14195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.762558][T14195] ____sys_sendmsg+0x972/0x9f0 [ 398.762633][T14195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.762671][T14195] ? import_iovec+0x73/0xa0 [ 398.762729][T14195] ___sys_sendmsg+0x2a5/0x360 [ 398.762759][T14195] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.762824][T14195] ? __fget_files+0x2a/0x420 [ 398.762873][T14195] ? __fget_files+0x3a0/0x420 [ 398.762914][T14195] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.762946][T14195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.762983][T14195] ? __pfx_ksys_write+0x10/0x10 [ 398.763030][T14195] do_syscall_64+0x14d/0xf80 [ 398.763104][T14195] ? trace_irq_disable+0x3b/0x150 [ 398.763148][T14195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.763189][T14195] ? clear_bhb_loop+0x40/0x90 [ 398.763216][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.763244][T14195] RIP: 0033:0x7f4f3b19c799 [ 398.763272][T14195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.763292][T14195] RSP: 002b:00007f4f3c0b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.763351][T14195] RAX: ffffffffffffffda RBX: 00007f4f3b415fa0 RCX: 00007f4f3b19c799 [ 398.763365][T14195] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 398.763378][T14195] RBP: 00007f4f3c0b0090 R08: 0000000000000000 R09: 0000000000000000 [ 398.763392][T14195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.763404][T14195] R13: 00007f4f3b416038 R14: 00007f4f3b415fa0 R15: 00007fffd4c58ed8 [ 398.763439][T14195] [ 399.237771][T14207] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 400.041370][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 400.116807][T14215] : renamed from veth0_to_bond [ 400.351981][T14225] IPv6: addrconf: prefix option has invalid lifetime [ 400.449915][T14229] sch_fq: defrate 0 ignored. [ 400.463878][T14228] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2224'. [ 400.899571][T14238] FAULT_INJECTION: forcing a failure. [ 400.899571][T14238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.927062][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 400.937301][T14238] CPU: 1 UID: 0 PID: 14238 Comm: syz.2.2227 Not tainted syzkaller #0 PREEMPT(full) [ 400.937332][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.937346][T14238] Call Trace: [ 400.937355][T14238] [ 400.937364][T14238] dump_stack_lvl+0xe8/0x150 [ 400.937415][T14238] should_fail_ex+0x412/0x560 [ 400.937454][T14238] _copy_from_iter+0x1d3/0x1670 [ 400.937602][T14238] ? rcu_is_watching+0x15/0xb0 [ 400.937658][T14238] ? __pfx__copy_from_iter+0x10/0x10 [ 400.937700][T14238] ? netlink_sendmsg+0x650/0xb40 [ 400.937724][T14238] ? skb_put+0x11b/0x210 [ 400.937754][T14238] netlink_sendmsg+0x6c0/0xb40 [ 400.937789][T14238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.937817][T14238] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.937850][T14238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.937881][T14238] ____sys_sendmsg+0x972/0x9f0 [ 400.937919][T14238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.937957][T14238] ? import_iovec+0x73/0xa0 [ 400.937985][T14238] ___sys_sendmsg+0x2a5/0x360 [ 400.938020][T14238] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.938085][T14238] ? __fget_files+0x2a/0x420 [ 400.938117][T14238] ? __fget_files+0x3a0/0x420 [ 400.938161][T14238] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.938191][T14238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.938230][T14238] ? __pfx_ksys_write+0x10/0x10 [ 400.938269][T14238] do_syscall_64+0x14d/0xf80 [ 400.938297][T14238] ? trace_irq_disable+0x3b/0x150 [ 400.938334][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.938356][T14238] ? clear_bhb_loop+0x40/0x90 [ 400.938384][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.938414][T14238] RIP: 0033:0x7fc66659c799 [ 400.938437][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.938456][T14238] RSP: 002b:00007fc6673a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.938480][T14238] RAX: ffffffffffffffda RBX: 00007fc666815fa0 RCX: 00007fc66659c799 [ 400.938497][T14238] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 400.938511][T14238] RBP: 00007fc6673a6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.938525][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.938537][T14238] R13: 00007fc666816038 R14: 00007fc666815fa0 R15: 00007fff8bcaa478 [ 400.938573][T14238] [ 401.318009][T14240] validate_nla: 1 callbacks suppressed [ 401.318039][T14240] netlink: 'syz.1.2228': attribute type 12 has an invalid length. [ 401.666672][T14251] netlink: 'syz.3.2229': attribute type 7 has an invalid length. [ 401.701670][T14250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.721901][T14251] netlink: 'syz.3.2229': attribute type 8 has an invalid length. [ 401.735280][T14253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.769962][T14251] netlink: 'syz.3.2229': attribute type 9 has an invalid length. [ 402.377204][T14268] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2237'. [ 402.417231][T14272] x_tables: duplicate underflow at hook 3 [ 402.450207][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2239'. [ 402.479470][T14280] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2238'. [ 402.534001][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 402.996085][T14303] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.2242'. [ 403.280080][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 403.662709][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2248'. [ 404.039234][T14342] vxcan5: entered promiscuous mode [ 404.445986][T14357] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.555273][T14359] pim6reg: entered allmulticast mode [ 404.562507][T14360] pim6reg: left allmulticast mode [ 404.832677][T14377] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 404.842416][T14377] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 404.876873][ T194] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xf5 [ 405.018571][T14383] FAULT_INJECTION: forcing a failure. [ 405.018571][T14383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.056137][T14383] CPU: 0 UID: 0 PID: 14383 Comm: syz.4.2266 Not tainted syzkaller #0 PREEMPT(full) [ 405.056171][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.056186][T14383] Call Trace: [ 405.056195][T14383] [ 405.056205][T14383] dump_stack_lvl+0xe8/0x150 [ 405.056248][T14383] should_fail_ex+0x412/0x560 [ 405.056288][T14383] _copy_from_user+0x2d/0xb0 [ 405.056393][T14383] kstrtouint_from_user+0xd6/0x180 [ 405.056430][T14383] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 405.056483][T14383] proc_fail_nth_write+0x8e/0x210 [ 405.056537][T14383] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.056574][T14383] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.056608][T14383] vfs_write+0x29a/0xb90 [ 405.056645][T14383] ? __pfx_vfs_write+0x10/0x10 [ 405.056672][T14383] ? __fget_files+0x2a/0x420 [ 405.056710][T14383] ? __fget_files+0x3a0/0x420 [ 405.056742][T14383] ? __fget_files+0x2a/0x420 [ 405.056785][T14383] ksys_write+0x150/0x270 [ 405.056812][T14383] ? __pfx_ksys_write+0x10/0x10 [ 405.056850][T14383] do_syscall_64+0x14d/0xf80 [ 405.056877][T14383] ? trace_irq_disable+0x3b/0x150 [ 405.056910][T14383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.056933][T14383] ? clear_bhb_loop+0x40/0x90 [ 405.056961][T14383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.056983][T14383] RIP: 0033:0x7fc620b5cfce [ 405.057005][T14383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.057024][T14383] RSP: 002b:00007fc621aa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.057048][T14383] RAX: ffffffffffffffda RBX: 00007fc621aa86c0 RCX: 00007fc620b5cfce [ 405.057072][T14383] RDX: 0000000000000001 RSI: 00007fc621aa80a0 RDI: 0000000000000004 [ 405.057086][T14383] RBP: 00007fc621aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 405.057100][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.057112][T14383] R13: 00007fc620e16038 R14: 00007fc620e15fa0 R15: 00007fff31738c58 [ 405.057147][T14383] [ 405.347420][T14389] __nla_validate_parse: 3 callbacks suppressed [ 405.347470][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2267'. [ 405.442561][T14391] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.2268'. [ 405.612155][T14372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.849552][T14398] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 405.876809][T14398] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 406.100607][ T29] IPVS: starting estimator thread 0... [ 406.286293][T14419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2275'. [ 406.305537][T14415] IPVS: using max 28 ests per chain, 67200 per kthread [ 406.439794][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 407.308849][T14447] syzkaller1: entered promiscuous mode [ 407.314391][T14447] syzkaller1: entered allmulticast mode [ 407.362459][T14455] sit2: entered promiscuous mode [ 408.059252][ T79] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.067914][ T79] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.088095][ T79] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.124926][ T79] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.191345][ T79] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.211445][ T79] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.249912][ T79] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.269651][ T79] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.315865][T14468] lo speed is unknown, defaulting to 1000 [ 408.336856][T14468] lo speed is unknown, defaulting to 1000 [ 408.593795][T14488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2289'. [ 408.626460][T14487] lo: left allmulticast mode [ 408.635302][T14487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.861174][T14496] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 408.889099][T14498] batadv_slave_1: entered promiscuous mode [ 409.016459][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 409.040263][T14495] batadv_slave_1: left promiscuous mode [ 409.837597][T14521] netlink: 'syz.2.2300': attribute type 33 has an invalid length. [ 409.855266][T14521] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2300'. [ 409.891373][T14521] `: renamed from team0 (while UP) [ 410.123039][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2302'. [ 410.286204][T14546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2304'. [ 410.946449][T14570] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2310'. [ 410.967644][T14570] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 411.117242][T14574] netlink: 'syz.3.2312': attribute type 39 has an invalid length. [ 412.385477][T14580] syzkaller1: entered promiscuous mode [ 412.391071][T14580] syzkaller1: entered allmulticast mode [ 412.681611][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 416.094055][T14620] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 416.150266][T14621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2319'. [ 416.167924][T14603] syzkaller0: entered promiscuous mode [ 416.174145][T14603] syzkaller0: entered allmulticast mode [ 416.206375][T14628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2319'. [ 416.267514][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2319'. [ 416.278940][T14631] openvswitch: netlink: IP tunnel dst address not specified [ 416.582651][T14636] netlink: 'syz.3.2322': attribute type 2 has an invalid length. [ 416.604681][T14636] netlink: 'syz.3.2322': attribute type 8 has an invalid length. [ 416.625071][T14636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2322'. [ 418.145266][T14620] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 418.232575][T14632] 8021q: VLANs not supported on lo [ 418.492436][T14643] bridge0: entered allmulticast mode [ 418.550009][T14649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.679049][T14645] geneve0: left promiscuous mode [ 418.732679][T14645] tipc: Resetting bearer [ 418.844556][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.853083][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.895865][ T79] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.933305][ T79] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.969518][T14654] lo speed is unknown, defaulting to 1000 [ 419.088606][T14654] lo speed is unknown, defaulting to 1000 [ 419.125593][T14662] lo speed is unknown, defaulting to 1000 [ 419.179114][T14667] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 419.190485][T14671] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 419.198428][T14671] netlink: 63 bytes leftover after parsing attributes in process `syz.3.2332'. [ 419.228457][T14667] bridge4: entered allmulticast mode [ 419.643132][T14664] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2330'. [ 419.677704][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 419.840682][T14687] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2338'. [ 419.861646][T14688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2338'. [ 419.943132][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 420.018297][T14662] lo speed is unknown, defaulting to 1000 [ 421.150489][T14723] netlink: 'syz.1.2349': attribute type 2 has an invalid length. [ 421.564302][T14735] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 421.649455][T14735] veth1_macvtap: left promiscuous mode [ 421.656466][T14735] team0: Device veth1_macvtap failed to register rx_handler [ 421.838508][T14742] __nla_validate_parse: 2 callbacks suppressed [ 421.838535][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 422.586679][T14732] lo speed is unknown, defaulting to 1000 [ 422.720884][T14763] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 422.756028][T14732] lo speed is unknown, defaulting to 1000 [ 423.348730][T14780] lo speed is unknown, defaulting to 1000 [ 423.633105][T14799] lo speed is unknown, defaulting to 1000 [ 423.706230][T14780] lo speed is unknown, defaulting to 1000 [ 423.971670][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2364'. [ 424.136430][T14799] lo speed is unknown, defaulting to 1000 [ 424.936159][T14824] tipc: Enabling of bearer rejected, failed to enable media [ 425.283870][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 425.513720][T14835] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2378'. [ 425.770880][T14830] lo speed is unknown, defaulting to 1000 [ 425.828522][T14830] lo speed is unknown, defaulting to 1000 [ 426.642205][T14856] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 426.873594][T14862] lo speed is unknown, defaulting to 1000 [ 427.050536][T14862] lo speed is unknown, defaulting to 1000 [ 427.514859][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 427.545057][T14877] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2388'. [ 427.568419][T14880] IPVS: stopping backup sync thread 12397 ... [ 427.581521][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 427.706178][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 428.121415][T14901] netlink: 'syz.3.2392': attribute type 13 has an invalid length. [ 428.145089][T14901] netlink: 'syz.3.2392': attribute type 17 has an invalid length. [ 428.184717][T14901] netlink: 'syz.3.2392': attribute type 27 has an invalid length. [ 428.501439][T14899] lo speed is unknown, defaulting to 1000 [ 428.562426][T14899] lo speed is unknown, defaulting to 1000 [ 429.045787][T14920] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2399'. [ 429.070072][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2393'. [ 429.092514][T14920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2399'. [ 429.121771][T14920] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2399'. [ 429.347976][T14915] lo speed is unknown, defaulting to 1000 [ 429.356485][T14915] lo speed is unknown, defaulting to 1000 [ 429.958161][T14923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.260783][T14928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 430.861643][T14944] sock: sock_set_timeout: `syz.1.2406' (pid 14944) tries to set negative timeout [ 431.081650][T14951] sctp: [Deprecated]: syz.3.2409 (pid 14951) Use of int in maxseg socket option. [ 431.081650][T14951] Use struct sctp_assoc_value instead [ 431.507848][T14961] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2413'. [ 432.052216][T14983] --map-set only usable from mangle table [ 432.372498][T14994] lo speed is unknown, defaulting to 1000 [ 432.406106][T14994] lo speed is unknown, defaulting to 1000 [ 432.762920][T14996] __nla_validate_parse: 2 callbacks suppressed [ 432.762945][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2423'. [ 434.531873][T14968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.758412][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 434.788820][T15033] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.2433'. [ 434.849496][T15034] tipc: Resetting bearer [ 435.012756][T15041] lo speed is unknown, defaulting to 1000 [ 435.026848][T15038] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 435.039465][T15044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2438'. [ 435.048668][T15041] lo speed is unknown, defaulting to 1000 [ 435.519477][T15065] netlink: 'syz.3.2441': attribute type 25 has an invalid length. [ 435.688876][T15068] bridge13: entered promiscuous mode [ 435.694253][T15068] bridge13: entered allmulticast mode [ 435.703853][T15068] team0: Port device bridge13 added [ 435.740784][T15069] bridge0: port 3(team0) entered blocking state [ 435.753671][T15069] bridge0: port 3(team0) entered disabled state [ 435.790063][T15069] team0: entered allmulticast mode [ 435.807045][T15069] team_slave_0: entered allmulticast mode [ 435.822704][T15069] team_slave_1: entered allmulticast mode [ 435.868061][T15069] team0: left allmulticast mode [ 435.872996][T15069] team_slave_0: left allmulticast mode [ 435.902371][T15069] team_slave_1: left allmulticast mode [ 435.935389][T15068] bridge0: port 3(team0) entered blocking state [ 435.959802][T15068] bridge0: port 3(team0) entered disabled state [ 435.984845][T15068] team0: entered allmulticast mode [ 435.990038][T15068] team_slave_0: entered allmulticast mode [ 436.004940][T15068] team_slave_1: entered allmulticast mode [ 436.018535][T15068] team0: left allmulticast mode [ 436.023569][T15068] team_slave_0: left allmulticast mode [ 436.029804][T15068] team_slave_1: left allmulticast mode [ 436.044041][ T49] tipc: Resetting bearer [ 436.264233][T15094] bond7: option ad_user_port_key: invalid value (65535) [ 436.271419][T15094] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 436.301559][T15094] bond7 (unregistering): Released all slaves [ 437.473283][ T51] block nbd1: Receive control failed (result -32) [ 437.488206][ T51] block nbd1: Receive control failed (result -32) [ 437.505546][ T51] block nbd1: Receive control failed (result -32) [ 437.512384][ T51] block nbd1: Receive control failed (result -32) [ 437.514784][ T5835] block nbd1: Receive control failed (result -32) [ 438.449160][T15140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.018611][T15154] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 439.063458][T15153] lo speed is unknown, defaulting to 1000 [ 439.077979][T15156] tipc: Enabling of bearer rejected, failed to enable media [ 439.095153][T15153] lo speed is unknown, defaulting to 1000 [ 439.466581][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 439.546377][T15167] macvlan2: entered allmulticast mode [ 439.573174][T15167] hsr0: entered allmulticast mode [ 439.590502][T15167] hsr_slave_0: entered allmulticast mode [ 439.607863][T15167] hsr_slave_1: entered allmulticast mode [ 440.020208][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.046343][T15175] lo speed is unknown, defaulting to 1000 [ 440.054038][T15175] lo speed is unknown, defaulting to 1000 [ 442.739260][T15237] netlink: 'syz.4.2486': attribute type 6 has an invalid length. [ 442.752445][T15239] netlink: 'syz.1.2485': attribute type 29 has an invalid length. [ 442.768017][T15239] netlink: 'syz.1.2485': attribute type 29 has an invalid length. [ 442.778711][T15239] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2485'. [ 442.779325][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 442.985534][T15243] netlink: 'syz.2.2487': attribute type 2 has an invalid length. [ 442.993354][T15243] netlink: 'syz.2.2487': attribute type 8 has an invalid length. [ 443.019564][T15243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2487'. [ 443.137605][T15252] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2488'. [ 443.235558][T15257] tipc: Enabling of bearer rejected, failed to enable media [ 443.390084][T15263] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 443.417151][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 443.575353][T15276] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2494'. [ 443.652463][T15280] syzkaller0: entered promiscuous mode [ 443.685132][T15280] syzkaller0: entered allmulticast mode [ 443.810330][T15289] sctp: [Deprecated]: syz.0.2501 (pid 15289) Use of int in max_burst socket option. [ 443.810330][T15289] Use struct sctp_assoc_value instead [ 443.876998][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 443.890986][T15290] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2500'. [ 443.927929][T15293] sctp: [Deprecated]: syz.0.2501 (pid 15293) Use of int in max_burst socket option. [ 443.927929][T15293] Use struct sctp_assoc_value instead [ 444.248545][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.264275][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.270049][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.275448][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.280615][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.286617][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.293758][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.301621][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.308689][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.314060][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.319921][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.325704][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.331156][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.336978][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.342440][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.348292][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.353716][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.359622][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.365374][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.370719][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.392689][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.408501][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.414108][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.420673][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.444696][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.451006][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.456790][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.462466][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.468338][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.473699][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.479509][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.485684][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.490899][T15316] pimreg: tun_chr_ioctl cmd 35108 [ 444.645328][T15328] bond3: (slave lo): Releasing backup interface [ 444.663326][T15328] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 444.679348][T15328] bond0: (slave bridge0): Releasing backup interface [ 444.690334][T15328] bridge_slave_0: left promiscuous mode [ 444.696685][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.710390][T15328] bridge_slave_1: left allmulticast mode [ 444.716870][T15328] bridge_slave_1: left promiscuous mode [ 444.722895][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.741076][T15328] bond0: (slave bond_slave_0): Releasing backup interface [ 444.753516][T15328] bond0: (slave bond_slave_1): Releasing backup interface [ 444.771616][T15328] team0: Port device team_slave_0 removed [ 444.793330][T15328] team0: Port device team_slave_1 removed [ 444.801208][T15328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.817776][T15328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.841710][T15328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.897830][T15339] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 445.167199][T15354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2521'. [ 445.522502][T15372] m1Ie5ия: entered promiscuous mode [ 445.620776][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2526'. [ 445.682660][T15376] lo speed is unknown, defaulting to 1000 [ 445.712348][T15376] lo speed is unknown, defaulting to 1000 [ 445.718758][T15381] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 445.740634][T15382] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2528'. [ 445.768054][T15381] netlink: 'syz.2.2527': attribute type 13 has an invalid length. [ 445.779801][T15381] gretap0: refused to change device tx_queue_len [ 445.787058][T15381] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 445.869724][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 445.892623][T15382] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2528'. [ 446.053518][T15391] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 446.151640][T15391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.346732][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2535'. [ 446.703614][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'. [ 447.389601][T15468] netlink: 'syz.4.2551': attribute type 2 has an invalid length. [ 447.409229][T15470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2552'. [ 447.420411][T15468] netlink: 'syz.4.2551': attribute type 8 has an invalid length. [ 447.434046][T15468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2551'. [ 447.480617][T15465] lo speed is unknown, defaulting to 1000 [ 447.489227][T15465] lo speed is unknown, defaulting to 1000 [ 447.730444][T15483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2555'. [ 447.829657][T15483] netlink: 'syz.3.2555': attribute type 9 has an invalid length. [ 448.023994][T15490] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 448.240108][T15496] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 448.442864][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.450276][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.457632][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.464981][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.472248][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.479585][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.486904][T15502] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 448.707886][T15523] Cannot find map_set index 65503 as target [ 448.896873][T15507] lo speed is unknown, defaulting to 1000 [ 448.907138][T15507] lo speed is unknown, defaulting to 1000 [ 449.388266][T15543] lo speed is unknown, defaulting to 1000 [ 449.394148][T15547] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 449.399448][T15543] lo speed is unknown, defaulting to 1000 [ 449.479274][T15539] batman_adv: batadv0: Removing interface: gretap1 [ 449.559141][T15550] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 449.560593][T15551] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 449.858872][T15572] ieee802154 phy1 wpan1: encryption failed: -90 [ 450.207029][T15588] __nla_validate_parse: 6 callbacks suppressed [ 450.207055][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 450.566270][T15598] netlink: 'syz.2.2586': attribute type 3 has an invalid length. [ 451.393926][T15621] net_ratelimit: 3258 callbacks suppressed [ 451.393948][T15621] veth0_to_batadv: mtu less than device minimum [ 451.412524][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2591'. [ 451.477093][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 452.160557][T15667] batadv_slave_0: entered promiscuous mode [ 452.189587][T15669] lo speed is unknown, defaulting to 1000 [ 452.205409][T15669] lo speed is unknown, defaulting to 1000 [ 452.293628][T15667] batadv_slave_0: left promiscuous mode [ 452.541738][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 452.604802][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 452.627218][T15699] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2611'. [ 452.662560][T15699] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2611'. [ 452.951000][T15714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2615'. [ 453.386052][T15727] syzkaller0: entered promiscuous mode [ 453.391721][T15727] syzkaller0: entered allmulticast mode [ 453.451230][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 455.073513][T15751] batadv_slave_0: entered promiscuous mode [ 455.113748][T15749] batadv_slave_0: left promiscuous mode [ 455.159367][T15752] lo speed is unknown, defaulting to 1000 [ 455.163833][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2623'. [ 455.189691][T15752] lo speed is unknown, defaulting to 1000 [ 455.769373][T15780] Set syz1 is full, maxelem 65536 reached [ 456.260741][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 456.295847][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 456.501266][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 456.518720][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 456.583482][T15818] team_slave_1: Caught tx_queue_len zero misconfig [ 456.925701][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 456.946852][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 456.965815][T15831] netlink: 'syz.4.2643': attribute type 2 has an invalid length. [ 456.984078][T15831] netlink: 'syz.4.2643': attribute type 8 has an invalid length. [ 457.004525][T15831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2643'. [ 457.215204][T15839] syzkaller0: entered promiscuous mode [ 457.220899][T15839] syzkaller0: entered allmulticast mode [ 457.686712][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 457.706700][T15860] netlink: 'syz.0.2654': attribute type 2 has an invalid length. [ 457.724597][T15860] netlink: 'syz.0.2654': attribute type 8 has an invalid length. [ 457.732403][T15860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2654'. [ 457.797282][T15865] netlink: 'syz.1.2655': attribute type 2 has an invalid length. [ 457.808502][T15865] netlink: 'syz.1.2655': attribute type 8 has an invalid length. [ 457.817582][T15865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2655'. [ 457.877841][T15872] --map-set only usable from mangle table [ 458.227245][T15891] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 458.383977][T15898] syzkaller1: entered promiscuous mode [ 458.389681][T15898] syzkaller1: entered allmulticast mode [ 458.521942][T15903] netlink: 'syz.3.2668': attribute type 2 has an invalid length. [ 458.545313][T15903] netlink: 'syz.3.2668': attribute type 8 has an invalid length. [ 458.553248][T15904] syzkaller0: entered promiscuous mode [ 458.562566][T15904] syzkaller0: entered allmulticast mode [ 458.581143][T15904] TC_ACT_REPEAT abuse ? [ 458.978997][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.004264][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.015280][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.027324][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.038489][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.049299][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.062194][T15927] bond8 (unregistering): Released all slaves [ 459.068767][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.094987][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.105928][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.131480][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.147026][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.157920][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.169285][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.202288][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.224731][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.246741][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.275822][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.280813][T15942] pimreg: tun_chr_ioctl cmd 1074025677 [ 459.305056][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.324804][T15942] pimreg: linktype set to 774 [ 459.332914][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.343908][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.355463][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.368075][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.416315][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.437722][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.484277][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.507678][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.527226][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.561626][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.578474][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.590077][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.601121][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.613241][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.633074][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.646199][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.697068][T15949] netlink: 'syz.1.2683': attribute type 2 has an invalid length. [ 459.705020][T15949] netlink: 'syz.1.2683': attribute type 8 has an invalid length. [ 459.717837][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.728923][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.740053][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.991036][T15965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.998390][T15965] IPv6: NLM_F_CREATE should be set when creating new route [ 460.005736][T15965] IPv6: NLM_F_CREATE should be set when creating new route [ 460.039695][T15968] IPVS: set_ctl: invalid protocol: 58 172.20.20.46:20002 [ 460.052585][T15968] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 460.429832][T15991] lo speed is unknown, defaulting to 1000 [ 460.438686][T15991] lo speed is unknown, defaulting to 1000 [ 461.288444][T16019] __nla_validate_parse: 14 callbacks suppressed [ 461.301971][T16019] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2703'. [ 461.761976][T16027] lo speed is unknown, defaulting to 1000 [ 461.906435][T16027] lo speed is unknown, defaulting to 1000 [ 462.086102][T16055] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2711'. [ 462.449359][T16065] lo speed is unknown, defaulting to 1000 [ 462.475334][T16065] lo speed is unknown, defaulting to 1000 [ 462.795990][T16077] validate_nla: 1 callbacks suppressed [ 462.796016][T16077] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 463.029041][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 463.367609][T16099] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2723'. [ 463.388506][T16100] tipc: Resetting bearer [ 463.573173][T16094] tipc: Resetting bearer [ 463.574016][T16108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2724'. [ 463.716700][T16114] netlink: 'syz.3.2726': attribute type 2 has an invalid length. [ 463.725288][T16114] netlink: 'syz.3.2726': attribute type 8 has an invalid length. [ 463.733066][T16114] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2726'. [ 463.770885][T16115] nbd2: detected capacity change from 0 to 63 [ 463.787983][ T5835] block nbd2: Receive control failed (result -32) [ 463.815448][T14644] block nbd2: Dead connection, failed to find a fallback [ 463.823366][T14644] block nbd2: shutting down sockets [ 463.855822][T14644] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.884644][T16118] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.924009][T14644] Buffer I/O error on dev nbd2, logical block 0, async page read [ 463.924101][T16118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2727'. [ 463.955241][T14644] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.989103][T14644] Buffer I/O error on dev nbd2, logical block 1, async page read [ 464.005689][T14644] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.038039][T14644] Buffer I/O error on dev nbd2, logical block 2, async page read [ 464.055064][T14644] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.085872][T14644] Buffer I/O error on dev nbd2, logical block 3, async page read [ 464.124604][T14644] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.144756][T14644] Buffer I/O error on dev nbd2, logical block 0, async page read [ 464.172450][T14644] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.196509][T14644] Buffer I/O error on dev nbd2, logical block 1, async page read [ 464.205726][T14644] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.250193][T14644] Buffer I/O error on dev nbd2, logical block 2, async page read [ 464.267943][T14644] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.300066][T14644] Buffer I/O error on dev nbd2, logical block 3, async page read [ 464.317162][T14644] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.338045][T14644] Buffer I/O error on dev nbd2, logical block 0, async page read [ 464.368067][T14644] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 464.414883][T14644] Buffer I/O error on dev nbd2, logical block 1, async page read [ 464.427153][ T8478] tipc: Resetting bearer [ 464.445776][T14644] ldm_validate_partition_table(): Disk read failed. [ 464.465192][T14644] Dev nbd2: unable to read RDB block 0 [ 464.471579][T14644] nbd2: unable to read partition table [ 464.518964][T14644] ldm_validate_partition_table(): Disk read failed. [ 464.546469][T14644] Dev nbd2: unable to read RDB block 0 [ 464.573526][T14644] nbd2: unable to read partition table [ 464.636509][T16150] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2733'. [ 464.679375][T16149] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2733'. [ 464.717303][T16149] siw: device registration error -23 [ 464.871088][T16156] netlink: 'syz.3.2736': attribute type 2 has an invalid length. [ 464.895436][T16156] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2736'. [ 465.615273][T16190] lo speed is unknown, defaulting to 1000 [ 465.631043][T16190] lo speed is unknown, defaulting to 1000 [ 466.316028][T16191] __nla_validate_parse: 1 callbacks suppressed [ 466.316050][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2745'. [ 466.408898][T16212] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 466.430055][T16212] netlink: 'syz.4.2751': attribute type 2 has an invalid length. [ 466.450062][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 467.019942][T16224] tap0: tun_chr_ioctl cmd 2147767521 [ 467.644238][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 468.177857][T16264] macvlan0: entered promiscuous mode [ 468.192379][T16264] bond0: entered promiscuous mode [ 468.215472][T16264] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 468.244360][T16264] team0: Port device macvlan0 added [ 468.304183][T16264] [ 468.306586][T16264] ====================================================== [ 468.313638][T16264] WARNING: possible circular locking dependency detected [ 468.320766][T16264] syzkaller #0 Not tainted [ 468.325252][T16264] ------------------------------------------------------ [ 468.332293][T16264] syz.3.2764/16264 is trying to acquire lock: [ 468.338370][T16264] ffff888051e58340 (&mm->mmap_lock){++++}-{4:4}, at: gup_fast_fallback+0x20d/0x22e0 [ 468.347865][T16264] [ 468.347865][T16264] but task is already holding lock: [ 468.355280][T16264] ffff88802a6e0fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 468.364722][T16264] [ 468.364722][T16264] which lock already depends on the new lock. [ 468.364722][T16264] [ 468.375142][T16264] [ 468.375142][T16264] the existing dependency chain (in reverse order) is: [ 468.384169][T16264] [ 468.384169][T16264] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 468.392065][T16264] lock_sock_nested+0x41/0x100 [ 468.397387][T16264] inet_shutdown+0x6a/0x390 [ 468.402496][T16264] nbd_mark_nsock_dead+0x2e9/0x560 [ 468.408214][T16264] recv_work+0x1c7f/0x1d90 [ 468.413355][T16264] process_scheduled_works+0xb6e/0x18c0 [ 468.419472][T16264] worker_thread+0xa53/0xfc0 [ 468.424613][T16264] kthread+0x388/0x470 [ 468.429239][T16264] ret_from_fork+0x51e/0xb90 [ 468.434384][T16264] ret_from_fork_asm+0x1a/0x30 [ 468.439699][T16264] [ 468.439699][T16264] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 468.447386][T16264] __mutex_lock+0x19f/0x1300 [ 468.452546][T16264] nbd_queue_rq+0x37b/0x1100 [ 468.457686][T16264] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 468.463888][T16264] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 468.470821][T16264] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 468.477358][T16264] blk_mq_run_hw_queue+0x348/0x4f0 [ 468.483370][T16264] blk_mq_dispatch_list+0xd16/0xe10 [ 468.489114][T16264] blk_mq_flush_plug_list+0x48d/0x570 [ 468.495064][T16264] __blk_flush_plug+0x3ed/0x4d0 [ 468.500518][T16264] __submit_bio+0x28d/0x580 [ 468.505600][T16264] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 468.511782][T16264] block_read_full_folio+0x599/0x830 [ 468.517615][T16264] filemap_read_folio+0x137/0x3b0 [ 468.523183][T16264] do_read_cache_folio+0x358/0x590 [ 468.528842][T16264] read_part_sector+0xb6/0x2b0 [ 468.534149][T16264] adfspart_check_ICS+0xa5/0xa40 [ 468.539629][T16264] bdev_disk_changed+0x7ba/0x1550 [ 468.545194][T16264] blkdev_get_whole+0x380/0x510 [ 468.550689][T16264] bdev_open+0x31e/0xd30 [ 468.555478][T16264] blkdev_open+0x470/0x610 [ 468.560445][T16264] do_dentry_open+0x785/0x14e0 [ 468.565751][T16264] vfs_open+0x3b/0x340 [ 468.570462][T16264] path_openat+0x2e08/0x3860 [ 468.575619][T16264] do_file_open+0x23e/0x4a0 [ 468.580778][T16264] do_sys_openat2+0x113/0x200 [ 468.586365][T16264] __x64_sys_openat+0x138/0x170 [ 468.591960][T16264] do_syscall_64+0x14d/0xf80 [ 468.597100][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.603539][T16264] [ 468.603539][T16264] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 468.610781][T16264] __mutex_lock+0x19f/0x1300 [ 468.615930][T16264] nbd_queue_rq+0xc6/0x1100 [ 468.621173][T16264] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 468.627273][T16264] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 468.634154][T16264] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 468.640780][T16264] blk_mq_run_hw_queue+0x348/0x4f0 [ 468.646437][T16264] blk_mq_dispatch_list+0xd16/0xe10 [ 468.652177][T16264] blk_mq_flush_plug_list+0x48d/0x570 [ 468.658093][T16264] __blk_flush_plug+0x3ed/0x4d0 [ 468.663492][T16264] __submit_bio+0x28d/0x580 [ 468.668536][T16264] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 468.674752][T16264] block_read_full_folio+0x599/0x830 [ 468.680586][T16264] filemap_read_folio+0x137/0x3b0 [ 468.686517][T16264] do_read_cache_folio+0x358/0x590 [ 468.692169][T16264] read_part_sector+0xb6/0x2b0 [ 468.697476][T16264] adfspart_check_ICS+0xa5/0xa40 [ 468.702952][T16264] bdev_disk_changed+0x7ba/0x1550 [ 468.708527][T16264] blkdev_get_whole+0x380/0x510 [ 468.713925][T16264] bdev_open+0x31e/0xd30 [ 468.718706][T16264] blkdev_open+0x470/0x610 [ 468.723663][T16264] do_dentry_open+0x785/0x14e0 [ 468.728992][T16264] vfs_open+0x3b/0x340 [ 468.733597][T16264] path_openat+0x2e08/0x3860 [ 468.738719][T16264] do_file_open+0x23e/0x4a0 [ 468.743783][T16264] do_sys_openat2+0x113/0x200 [ 468.749057][T16264] __x64_sys_openat+0x138/0x170 [ 468.754470][T16264] do_syscall_64+0x14d/0xf80 [ 468.759742][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.766190][T16264] [ 468.766190][T16264] -> #4 (set->srcu){.+.+}-{0:0}: [ 468.773347][T16264] __synchronize_srcu+0xca/0x3e0 [ 468.778839][T16264] elevator_switch+0x1e8/0x7a0 [ 468.784159][T16264] elevator_change+0x2cc/0x450 [ 468.789473][T16264] elevator_set_default+0x36c/0x430 [ 468.795211][T16264] blk_register_queue+0x366/0x430 [ 468.800794][T16264] __add_disk+0x677/0xd50 [ 468.805671][T16264] add_disk_fwnode+0xfb/0x480 [ 468.810898][T16264] nbd_dev_add+0x72c/0xb50 [ 468.815854][T16264] nbd_init+0x168/0x1f0 [ 468.820700][T16264] do_one_initcall+0x250/0x8d0 [ 468.826081][T16264] do_initcall_level+0x104/0x190 [ 468.831690][T16264] do_initcalls+0x59/0xa0 [ 468.836562][T16264] kernel_init_freeable+0x2a6/0x3e0 [ 468.842307][T16264] kernel_init+0x1d/0x1d0 [ 468.847201][T16264] ret_from_fork+0x51e/0xb90 [ 468.852348][T16264] ret_from_fork_asm+0x1a/0x30 [ 468.857679][T16264] [ 468.857679][T16264] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 468.865794][T16264] __mutex_lock+0x19f/0x1300 [ 468.871117][T16264] elevator_change+0x1b3/0x450 [ 468.876529][T16264] elevator_set_none+0xb5/0x140 [ 468.882193][T16264] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 468.888583][T16264] nbd_start_device+0x17f/0xb10 [ 468.894000][T16264] nbd_genl_connect+0x165b/0x1cf0 [ 468.899565][T16264] genl_family_rcv_msg_doit+0x22a/0x330 [ 468.905660][T16264] genl_rcv_msg+0x61c/0x7a0 [ 468.910721][T16264] netlink_rcv_skb+0x232/0x4b0 [ 468.916110][T16264] genl_rcv+0x28/0x40 [ 468.920634][T16264] netlink_unicast+0x80f/0x9b0 [ 468.925953][T16264] netlink_sendmsg+0x813/0xb40 [ 468.931255][T16264] ____sys_sendmsg+0x972/0x9f0 [ 468.936563][T16264] ___sys_sendmsg+0x2a5/0x360 [ 468.941787][T16264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.947269][T16264] do_syscall_64+0x14d/0xf80 [ 468.952404][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.958835][T16264] [ 468.958835][T16264] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 468.967560][T16264] blk_alloc_queue+0x546/0x680 [ 468.972912][T16264] __blk_mq_alloc_disk+0x197/0x390 [ 468.978594][T16264] nbd_dev_add+0x499/0xb50 [ 468.983585][T16264] nbd_init+0x168/0x1f0 [ 468.988306][T16264] do_one_initcall+0x250/0x8d0 [ 468.993639][T16264] do_initcall_level+0x104/0x190 [ 468.999139][T16264] do_initcalls+0x59/0xa0 [ 469.004024][T16264] kernel_init_freeable+0x2a6/0x3e0 [ 469.009769][T16264] kernel_init+0x1d/0x1d0 [ 469.014667][T16264] ret_from_fork+0x51e/0xb90 [ 469.019813][T16264] ret_from_fork_asm+0x1a/0x30 [ 469.025138][T16264] [ 469.025138][T16264] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 469.032387][T16264] fs_reclaim_acquire+0x71/0x100 [ 469.037879][T16264] kmem_cache_alloc_noprof+0x40/0x650 [ 469.043798][T16264] mas_alloc_nodes+0x291/0x350 [ 469.049193][T16264] mas_preallocate+0x2d6/0x640 [ 469.054541][T16264] vma_link+0x123/0x470 [ 469.059264][T16264] insert_vm_struct+0x199/0x260 [ 469.064687][T16264] create_init_stack_vma+0x304/0x670 [ 469.070540][T16264] alloc_bprm+0x495/0x5c0 [ 469.075431][T16264] kernel_execve+0x87/0x930 [ 469.080483][T16264] try_to_run_init_process+0x13/0x60 [ 469.086822][T16264] kernel_init+0xad/0x1d0 [ 469.091710][T16264] ret_from_fork+0x51e/0xb90 [ 469.096845][T16264] ret_from_fork_asm+0x1a/0x30 [ 469.102261][T16264] [ 469.102261][T16264] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 469.109857][T16264] __lock_acquire+0x15a5/0x2cf0 [ 469.115375][T16264] lock_acquire+0xf0/0x2e0 [ 469.120360][T16264] gup_fast_fallback+0x226/0x22e0 [ 469.125949][T16264] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 469.132385][T16264] iov_iter_get_pages2+0x5e/0xa0 [ 469.137949][T16264] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 469.144199][T16264] tls_sw_sendmsg+0x9da/0x2360 [ 469.149513][T16264] __sys_sendto+0x4a3/0x710 [ 469.154558][T16264] __x64_sys_sendto+0xde/0x100 [ 469.159862][T16264] do_syscall_64+0x14d/0xf80 [ 469.165000][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.171433][T16264] [ 469.171433][T16264] other info that might help us debug this: [ 469.171433][T16264] [ 469.181851][T16264] Chain exists of: [ 469.181851][T16264] &mm->mmap_lock --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 469.181851][T16264] [ 469.195489][T16264] Possible unsafe locking scenario: [ 469.195489][T16264] [ 469.203126][T16264] CPU0 CPU1 [ 469.208512][T16264] ---- ---- [ 469.213953][T16264] lock(sk_lock-AF_INET6); [ 469.218491][T16264] lock(&nsock->tx_lock); [ 469.225452][T16264] lock(sk_lock-AF_INET6); [ 469.232493][T16264] rlock(&mm->mmap_lock); [ 469.236930][T16264] [ 469.236930][T16264] *** DEADLOCK *** [ 469.236930][T16264] [ 469.245188][T16264] 2 locks held by syz.3.2764/16264: [ 469.250421][T16264] #0: ffff888038fb6cf0 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x12f/0x2360 [ 469.259971][T16264] #1: ffff88802a6e0fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 469.269762][T16264] [ 469.269762][T16264] stack backtrace: [ 469.275677][T16264] CPU: 0 UID: 0 PID: 16264 Comm: syz.3.2764 Not tainted syzkaller #0 PREEMPT(full) [ 469.275698][T16264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.275716][T16264] Call Trace: [ 469.275726][T16264] [ 469.275736][T16264] dump_stack_lvl+0xe8/0x150 [ 469.275768][T16264] print_circular_bug+0x2e1/0x300 [ 469.275802][T16264] check_noncircular+0x12e/0x150 [ 469.275832][T16264] __lock_acquire+0x15a5/0x2cf0 [ 469.275869][T16264] lock_acquire+0xf0/0x2e0 [ 469.275891][T16264] ? gup_fast_fallback+0x20d/0x22e0 [ 469.275921][T16264] ? __page_table_check_zero+0x397/0x3e0 [ 469.275941][T16264] ? __page_table_check_zero+0x6a/0x3e0 [ 469.275962][T16264] ? gup_fast_fallback+0x20d/0x22e0 [ 469.275987][T16264] gup_fast_fallback+0x226/0x22e0 [ 469.276013][T16264] ? gup_fast_fallback+0x20d/0x22e0 [ 469.276041][T16264] ? get_page_from_freelist+0x24f5/0x2580 [ 469.276075][T16264] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 469.276244][T16264] ? __pfx_gup_fast_fallback+0x10/0x10 [ 469.276275][T16264] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 469.276295][T16264] ? is_valid_gup_args+0x11f/0x200 [ 469.276322][T16264] ? get_user_pages_fast+0x4d/0xb0 [ 469.276350][T16264] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 469.276377][T16264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 469.276403][T16264] iov_iter_get_pages2+0x5e/0xa0 [ 469.276424][T16264] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 469.276452][T16264] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 469.276487][T16264] tls_sw_sendmsg+0x9da/0x2360 [ 469.276513][T16264] ? __lock_acquire+0x6b5/0x2cf0 [ 469.276547][T16264] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 469.276566][T16264] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.276665][T16264] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 469.276747][T16264] ? sock_rps_record_flow+0x19/0x350 [ 469.276777][T16264] ? inet_getname+0x3a7/0x3c0 [ 469.276797][T16264] ? __pfx_inet6_sendmsg+0x10/0x10 [ 469.276913][T16264] ? inet6_sendmsg+0x101/0x120 [ 469.276935][T16264] ? __pfx_inet6_sendmsg+0x10/0x10 [ 469.276958][T16264] __sys_sendto+0x4a3/0x710 [ 469.276981][T16264] ? __pfx___sys_sendto+0x10/0x10 [ 469.277013][T16264] ? exc_page_fault+0x6a/0xc0 [ 469.277035][T16264] ? do_user_addr_fault+0xc6f/0x1340 [ 469.277063][T16264] __x64_sys_sendto+0xde/0x100 [ 469.277085][T16264] do_syscall_64+0x14d/0xf80 [ 469.277107][T16264] ? trace_irq_disable+0x3b/0x150 [ 469.277138][T16264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.277156][T16264] ? clear_bhb_loop+0x40/0x90 [ 469.277178][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.277197][T16264] RIP: 0033:0x7f4f3b15cfce [ 469.277217][T16264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.277233][T16264] RSP: 002b:00007f4f3c0aee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 469.277254][T16264] RAX: ffffffffffffffda RBX: 00007f4f3c0b06c0 RCX: 00007f4f3b15cfce [ 469.277267][T16264] RDX: 0000000000000020 RSI: 00007f4f3c0af000 RDI: 0000000000000005 [ 469.277279][T16264] RBP: 0000000000000000 R08: 00007f4f3c0aef04 R09: 000000000000000c [ 469.277291][T16264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 469.277301][T16264] R13: 00007f4f3c0aef58 R14: 00007f4f3c0af000 R15: 0000000000000000 [ 469.277323][T16264]