last executing test programs: 7.89200388s ago: executing program 0 (id=2305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f0000000500)="3a2af4f5da35d7640a70a91f5a4f6cf8a515741b22e71f5022355ab7d9f093a4bc671f1c78cfeed1b70c9d4e723a31277896c5213adafed7bfd35cb707b8ecafa9a0efc65a1265f3fea03cd671fb2a332c131e90bd81631e3bb7accc0f25514d239b9b72009a4f7668703e41bf3f", &(0x7f0000000580)=""/84, &(0x7f0000000600)="d6bc98a69078f3051c7fef46b69c205a5bdcd1178f37e2c3b30a6a5dbde8698a35b6c40ac9746ffa5ea7201904", 0x0, 0x5, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000008c0)={{r0}, 0x0, 0x6, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5, {0xa, 0x8, 0x4, 0x7fffffff, 0x40}, [0x4]}}, @name="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"}) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c040000000000000000020000000900010073798030000000008300030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c00000000000005000000000000000000000000010000000000000000000000000000400000001100010000000000000000000200000a"], 0x104}}, 0x0) socket$rds(0x15, 0x5, 0x0) 7.617716628s ago: executing program 0 (id=2308): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x6, &(0x7f00000015c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x81, 0xac2}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x9}, &(0x7f0000000280)=0x5, &(0x7f00000002c0)=0x4, 0x7, 0x8, 0x7, 0x4, 0x1, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffffffc}, @rdma_args={0x48, 0x114, 0x1, {{0x213, 0x3ff}, {&(0x7f0000000300)=""/4096, 0x1000}, &(0x7f0000001400)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1, 0x64, 0x7d4826d7}}, @fadd={0x58, 0x114, 0x6, {{0xe}, &(0x7f0000001440)=0x7, &(0x7f0000001480)=0xfffffffffffffffc, 0xc, 0x200, 0x3, 0x200, 0x44, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, &(0x7f00000014c0)=0x4, &(0x7f0000001500)=0x2, 0xb, 0xc, 0x7, 0x0, 0x8, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x1000}, &(0x7f0000001540)=0x69, &(0x7f0000001580), 0x3fa, 0x9, 0x9, 0xa, 0x4a, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x5}}], 0x1f0, 0x8000}, 0x20004000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f0000001800), 0x800) pipe(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)=@mpls_newroute={0x5c, 0x18, 0x400, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x10, 0x0, 0x4, 0xfc, 0x3, 0xff, 0x1, 0x200}, [@RTA_VIA={0x14, 0x12, {0x6, "8cfc931cd48c1054101ff5f07c08"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2f}, @RTA_DST={0x8, 0x1, {0xfe000, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x8000, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x10, 0x2, 0xc}}, @RTA_DST={0x8, 0x1, {0x8, 0x0, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000019c0)=0x1) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000001a00)="8df0c0868c2ad57873a2763ed5e402dc1a6478a36ff94c149393ddd54b8e5a0bebff66a0670f05b09cebdab2676c0cc81675fb56202456f1b1b6d7be7a448c1f27d9632400225da51a4a8655d3db62b2ee2edd6b170f004d89f4b798cc0b4f7b5856e0c8439cc1acf0a31557f822af79290a8b1370ac16", 0x77) r5 = accept$phonet_pipe(r4, 0x0, &(0x7f0000001a80)) ioctl(r5, 0xf06, &(0x7f0000001ac0)="c68b551bda81ad7f909b0ee84179577071223d2117e4be9b556514cd54b4de66fc9f35a2705646c9e1b75d222269ff2ea5f97ec82c6485abee0d5cd0ef5887f96238c72240239039b48f12d8a1a757637934c8389838466624c06c752f34908d09ca8138c0eed02333b886d291fcf975202274cc3d36988593c3c01e2083e3adafef3021ba25411bcc2315a0bd64a5cfb96d69bccd3864afdb26cae4a560af33d151cffb00278d532059825a80e73ffb290ca61d627f") ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001c00)={'ip_vti0\x00', &(0x7f0000001b80)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x7, 0x8, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x66, 0x0, 0xc, 0x2f, 0x0, @empty, @local, {[@noop, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x6, [0x5, 0x2, 0xfdb]}, @generic={0x7, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001cc0)={'syztnl1\x00', &(0x7f0000001c40)={'ip6gre0\x00', r6, 0x2f, 0xa, 0xe3, 0x3, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x700, 0x401, 0x1}}) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002f80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000001d40)={0x11c4, 0x14, 0x8, 0x70bd25, 0x25dfdbfd, {0x27, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "e9de7fbd5d13a0cbac2bf2c01716834cec477f20ee3d3d10b1d1b5f9a41c74446235f0493d89a592707f5314fe5e9ef4f7"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "7512715b68f3c8ab2e362c239beb810d16cf9d99ed441a235cc1519dd9862f00cc0ba94d0b4412bc428aa065790620ddb87158b25c7c9f8b413f8ff674a5596ff1c86ee1122d5d34ab397d5e7e50101a789235651e0460d4a8e674c9a8417a26dbd1a4ba5572fc2a704497248808080a750d6bf7cee6d1862f8705e495aff7b482a47a68db3042c5700c4d6fe9041cb230d7527b022933638e055a25f06ec01b80b1f38d74f2b1f3bf"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "9c7d66da528bf79e84565d42d3da5845bed6d5e7577984d356f6ebe0b265e9f4f748537a64b7b71e4152b3d08a4779a6b9135e01d75354861ba239fceebf41070de6de945229fe2622fbae8a1f98728fd1356f812833887b28ffda44d08fb13ca9c243b27549fcdf1247acad9bfd00c162ac432948854c3ee8119da50ca3d6dd8225e2ef482b506b031a8f972c59bbc392d1ba92be7e70c72a4acedb5b10cc5197e82df46a17be0cc0e368f5934817fdfd86155dc0f8cc43cdda7c6b9ced5189"}]}, 0x11c4}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000031c0)={&(0x7f0000002fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15c, 0x15c, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x1}, @union={0xc, 0x4, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x4, 0x401}, {0xa, 0x0, 0x800}, {0x8, 0x3, 0x10001}, {0xe, 0x0, 0x4}]}, @var={0x5, 0x0, 0x0, 0xe, 0x2}, @struct={0x1, 0x5, 0x0, 0x4, 0x1, 0x2, [{0xf, 0x2, 0x9}, {0x0, 0x0, 0x3fb}, {0x3, 0x2}, {0xb, 0x0, 0x7}, {0xa, 0x5, 0x3c}]}, @volatile={0x9}, @union={0xd, 0xa, 0x0, 0x5, 0x0, 0x88, [{0xa, 0x4, 0x5}, {0x8, 0x2, 0x3}, {0x4, 0x5, 0x400}, {0x4, 0x3, 0x400}, {0x4, 0x3, 0x6}, {0xc, 0x4, 0x81}, {0xe, 0x1, 0x4a0}, {0x7, 0x1}, {0xf, 0x0, 0x1}, {0x5, 0x5, 0x5}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0x6}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000003140)=""/84, 0x17b, 0x54, 0x0, 0x7}, 0x28) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000003200)) r7 = accept4$llc(r3, 0x0, &(0x7f0000003240), 0x100800) r8 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000003280)=[{r3, 0x8000}, {r5, 0x1024}, {r3, 0x200}, {r7, 0x4}, {r2, 0x901}, {r8, 0x208}], 0x6, &(0x7f00000032c0)={0x77359400}, &(0x7f0000003300)={[0x5]}, 0x8) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000003340)={{0x9, 0x5}, 0x44}, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000003380)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000033c0)=0x2c) sendmsg$NFT_BATCH(r4, &(0x7f0000003a00)={&(0x7f0000003400), 0xc, &(0x7f00000039c0)={&(0x7f0000003440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x1b8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x69, 0x7, 0x1, 0x0, "55cf514f63673c2626765a79485a7675136014723026e38f138755124ca4caef10ac46414ece3e41955f28818aea5d845806ab29e15411a79178847fad6b2e465440ed06a01b5bc4acbf6edf51675db637aa3e8014623d1fd8ebc2e15565ae4e10f1342d89"}, @NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x44}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}]}]}, @NFT_MSG_DELRULE={0x288, 0x8, 0xa, 0x101, 0x0, 0x0, {0x8, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xfc, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x82}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x154, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x24}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x95}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xbb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x86f8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x57c}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f0000003a40)=0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000003a80)=@assoc_value={0x0}, &(0x7f0000003ac0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000003b00)={0x0, 0x7, 0x2, [0x2, 0x2]}, 0xc) write$cgroup_subtree(r3, &(0x7f0000003b40)={[{0x2b, 'memory'}, {0x2d, 'hugetlb'}, {0x2d, 'cpu'}, {0x2b, 'perf_event'}, {0x0, 'rdma'}, {0x2d, 'rdma'}]}, 0x2e) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003bc0)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0x198, 0x100, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000003b80), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x21, 0x803, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4, 0x1, [0x23, 0x38, 0x36, 0x1d, 0x1, 0x29, 0x8, 0xe, 0x2b, 0x5, 0x1b, 0x27, 0x26, 0xa, 0x16, 0x8], 0x0, 0x5800000, 0x20000}}}, {{@ip={@rand_addr=0x64010100, @remote, 0xffffffff, 0xff, 'dummy0\x00', 'geneve1\x00', {0xff}, {}, 0x21, 0x1, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@loopback, @multicast2, 0xff, 0x80ffffff, 'pimreg1\x00', 'caif0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x122, 0x3, 0x1}}, @common=@icmp={{0x28}, {0xb, "db60"}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000003f40)={r10, 0x88, "35f33aafa17a29fc2ae120152162e48973667aa562fd428c44227166928167621c28e8085f227e9eb9f4ab7d339c54152d7b32798a140a49722c5d343e3370be13fe84667f63df95387a64d9d97947ec52a41a85418b10a4524bb3ab682056b172f1568512fa7cfbdfcae96e77cfa22cc33138ac1b60279fde1e40755194ae3c5990e61bc02c801f"}, &(0x7f0000004000)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000004040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000004080)=0x14) 7.295801958s ago: executing program 0 (id=2312): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) (async) socket$inet(0x2, 0x2, 0x0) socket(0x2b, 0x3, 0x1) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYRESOCT=r7], 0x32600) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x638, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5f0, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "58feac11e8447dc643273cb6230a9db96056c54e58a20714244d63778dbebdb8a07dcc2f0af82be3f2b530633ac879b20c26b41f42bc0e2a33501fca91c682b0a245ff88e6c45f4008a26310fee295ff6ba52a1e4161f24ccc6cb6d6d112579ba416832f17"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}]}, {0x178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "16cfccc7cae00639246a3a03600a71b656577db68b8e32f78728c778fe774dcf09f8c2f65708eb53bee099a5e511f511f01c7583882c4233b42ca4571b1ddf9b785033b68380fb0d18416933c235a3b778f45a43e144e045d113b5290077326b410b0a96b4c96464e5e8a1dd04b23916f6"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "f1e132535d37391a18d4493145f46b1a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x78, 0x1, "45107e14b4c2bb90d405adbd18f64777dedff469fa00ecd9d29c2b35db51e7a962c649008bc0034503eef4101dd9d4ba82138adf57101e82ab570a51c47ca0900a581fe6a04fff7303b19ad4d0b53442794b6c1cb8b422051941bc0613c223326fc15146457c115f405236982d28948dae4ae409"}]}]}, {0x4}, {0x3bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4d}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "4d7fb0e9a8f1873cc643dc105974af08c545321e29c9429276cdb9ed61067556e1c3169f0e311c5068d3c3d66259faa35008aaf8a778ecf30ecd276f241cfc96209c03932d510ba36363aee57d96e732498aa8419462665502d18a0f887effd8c3747d2c247cd5597c6961ed699223c02239fa1a7927439ffbb4ff87e35f16057fd915c76aae00db96d730cfcee19d9830b3a98db447e275101ffe630d2fceb21984e869d49a211bedc691d5f1a949b633a8a5595af5b3ceabedc35f39f9f2a38c9ec67db94cac9e947efeb5406d17ceae5053d99060f7a840939c3e64fee22125d3056333de7de865b5849c3e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "805d2edc41027842f57a4bbc51b7993fc8a2d1293d04767e4a4c951565a8972da7762f6d91adc921998e63641e345d22d3870d8aa57fbb83f62c5f21fed7d0d964e220d28483f07217a05ca84693ffe7a2f6fab05df1d85570af324b2dd162f9ba6424e87473e7e7a1704a4770b6297237d239bf900721e84e5f61e6fd57ea5e9a2b3e1bddd8"}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0xc4, 0x1, "be21708e981680293ce92f9635c3fd0a177429f112cbf15f9130150166bee7e300b6b230189dab8ded8971d2ccf64f4da1f42fc55638a17456bb2500765cb0c2e2872cf5a19941d6dbd034c21c9c6df4196707a1d9aab48c18246fc029a099fcc68b6a60a2750b0d8bc9814a17cd65b16adc3dcef4a1a4c6b1ef9871c9ef12628e548409a537235eab3fa6f8d3ad73ec9de5e9ec63c06579a55f57551d93085d3d13211d3bcc126e00c5164d2de8ed969b1a25f078e6989be9a125caa8a7bcf5"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x638}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x0) 4.947818138s ago: executing program 0 (id=2322): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f00090028bd7000fddbdf250600000008000a00", @ANYRES32=0x0, @ANYBLOB="296ff23bd9b59824f9fbbfb9806675b6881539d5b5ce405b1b5c84c983ecd033788931d20c6de5dc5dc29399c9eb52bc24493b02a8718f2f72822f849ef01fa41511c19d0377a741022e25566fc519c4d19fa4ff2b37a1e883c3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00002d7000000000000000000000010000000000000000000000000083571fc084a0c4604c1a87c064b965f435a493eb1c4e90393fb4180da03bc0cad7610e6a043606dd95f0f3353dd478a3c659abd9efc74684100f1fa54292cd5beb5c1fc073de7c3c1dafaf6407328977f1e9e03399b89f57d7"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085008bc5af20906c7a274453578b1d8d740000a0000000180100002025642500000000002020202d0f7b1af8ff00000000bfa100000000000007010000f8ffffe5b702000008000000"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x865}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@tcx}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/220, 0x3d, 0xdc, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000400)="b9ff03318944268cb89904f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}]]}, {0x4}, {0xc, 0xb}, {0x1, 0xa, {0x20}}}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffe6e) 4.411490653s ago: executing program 4 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6erspan0\x00', 0x2000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", '\x00', "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) (async) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r2) (async) close(r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0x401, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) 3.828633429s ago: executing program 4 (id=2331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000213000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080000000000001c00128009000100626f6e64000000000c00028008001a00e0000002"], 0x3c}, 0x1, 0xba01}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) (async) close(r3) (async) write(r1, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000213000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080000000000001c00128009000100626f6e64000000000c00028008001a00e0000002"], 0x3c}, 0x1, 0xba01}, 0x0) (async) 3.827173899s ago: executing program 1 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', r3, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.767577614s ago: executing program 3 (id=2334): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140002800600010001000000060012"], 0x2c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8943, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a8ffbdd9fb0c2c38c0bd3f926b52c979c39dfec3c4de860f56e648fffcdcff5fec9b4672416b1b9363feaa1b4b5c573a59c9410e8276ea84bb7e97545a4e732f12e1dd9b33504cdfce5c6d3737d49e0cdfd4048421cd7e5e4e6a27ccf3b"], 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x5}], 0x1c) listen(r8, 0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xa781}, &(0x7f00000001c0)=0x8) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="2f000000000000008400000000002000000000000000840000000200000008000680fe0e000001000100", @ANYRES32=r9], 0x38}, 0x8050) 3.587504365s ago: executing program 1 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x6884}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x3, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01049fa22ce095a995", @ANYRES32=r9, @ANYBLOB="0a00f5000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44054) socket$unix(0x1, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800400a}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d80)) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f80)=0x14) recvfrom$packet(r10, &(0x7f0000000fc0)=""/15, 0xf, 0x40000102, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001380), r7) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0xf0, 0x10, 0x1, 0x1000000, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x55836224}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}}, 0xf0}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x5}, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf254a00000008000300000000000e0001003e692f767713b349b0496e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0xe197c544b658bbf7) socket$inet(0x2, 0x3, 0xff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="000827bd7000fbdbdf253d00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900000000004500000008005d000100000008005d000100000008005d000100000008005d000100000008005d000100000008005d000100000008005d000000000008005d0001000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008801) 3.107943675s ago: executing program 1 (id=2338): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000b00)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) 2.872756965s ago: executing program 1 (id=2339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0010114}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000fbdbdf000000000008000300030000001c001de7a1634515ac1473d6060005004e220000080004000600"/58], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f0000000f40)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], 0x0, 0x4, 0xa2, &(0x7f0000000540)=""/162, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x1, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1], 0x0, 0x10, 0x20000000}, 0x94) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x22020600) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x18, r7, 0x301, 0xf0bd29, 0x25dfdafc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) setsockopt$inet_int(r6, 0x0, 0x19, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={r4, r9, 0x8, 0x3, &(0x7f0000000180)="396606", 0xe, 0x0, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r10, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 2.539715342s ago: executing program 4 (id=2341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20ffffffffff00"/20, @ANYRES32=0x1, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) (async) bind$xdp(r1, &(0x7f0000000340)={0x2c, 0x3, 0x0, 0x6}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f13000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd72, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) bind$phonet(r3, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) (async) listen(r3, 0x5) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000280)={0x23, 0x2, 0xac, 0x1}, 0x10) connect$phonet_pipe(r4, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="54000000de0007d1c1758d5b294353631f74ac303d2a38b3fca3b648264f72053dd83481e02209bebe81b4ddac8ea6e7", @ANYRES16=r5, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c00900000000000000000000c0090000400000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r9) sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=ANY=[@ANYBLOB="7b248fbb2c000000", @ANYRES16=r10, @ANYBLOB="01002abd7000fddbdf250f000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000808}, 0x4044) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd41, &(0x7f0000001fc0)=ANY=[], 0x0) (async) accept$phonet_pipe(r3, 0x0, 0x0) 2.53231157s ago: executing program 2 (id=2342): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00h'], 0x20}}, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044800}, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, 0x0, 0x0, 0x44, 0x0, 0x0, 0xfffffffffffffd7a, 0xf7, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6401000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600803500000c00030008001700048a636ac383496e79bb8b618a554caae68c9d02ccab918b0a35be589d265eb3479238fe0432b3be09c33503e4023a97cfd26142ef4c88d58f929f9b7dc1317057c3e3b2c498a345370a048baa64c459f14aff30262fd684ee740653dd76710a86ce967dca21d24ae63b54e0a54471258314cbe82022907ee9cd830e3c7c96731bde2f880ec67af11f920323bc4e5ec6c784d25a03d769b5a7aeba25e7926f10aceb1cee4c2d921c199273e1e33a9658ed77284587f798df143c52ae1d92a607a56da70d10e5ad28611b503702627ca08d13dfd88e1757b5d73a71474be10694996c333b10129054260d07a79c6644f374042190f6402f185278270392c189baac4c6661233f6d3219cb8c4041000000dbded3cffb19f300c1ad0c60"], 0x164}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e77b54f374de7f9c764360000ff8800135433f6e3be253cb3", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000380)=[@assoc={0xffffffffffffffdf, 0x117, 0x4, 0x1f580}], 0x18}], 0x1, 0x20040800) accept4$unix(r8, 0x0, 0x0, 0x180000) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000180)={r11, 0x5}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000040)={0x0, 0x0}, 0x10) 2.392469826s ago: executing program 3 (id=2343): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf00) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008048) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4404c880) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000500)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 2.283150388s ago: executing program 2 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2100000000000000000000000000004000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000096238d41e7ef6548731e0835e3499535d9ec5ed7869d2f36e9176a264a7e24f0483797f8f3de3c6c99d0a3b742a0dda216a9be718176d72a40ae29f2a5dd09f9656b3c181dee48bcc956a50f8c7648ce72d2a4996b9084f87aed3780307eeab76968a71356bdce2001eaf31d44adae2e50aca05dd5fad17d1113357544171b17e0629df478"], 0x48) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x50, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x0, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0xfffffffffffffec8, 0x2, 0x3}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000010000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a0000080003400000011c08000640ffffff000c000980080001400000003900000000000000000000000700000af492f0ded4bbcbbc4b635e2f68ba42fde884911c913b710a0fff91415b00000071f80000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xfc, 0x7, 0x8000000c}, {0x6, 0x9}]}) write$ppp(r6, &(0x7f00000001c0)="0002", 0x2) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300ad81366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={@mcast2, 0x75}) 2.155267681s ago: executing program 3 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.938297244s ago: executing program 3 (id=2346): ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="9930297dd09203532147861fad13e117072a44de5a67d95abdea68acac7ba7201302ce55aa420a7bebfb0267a1fd10bb8cc7634b7f68f0e3", 0x38}, {&(0x7f0000000080)="2334eb8cb35515b8da3026463fe3ea64140e4bf2d886c2523e43c3281dd3de8f1cbf49db168cfc", 0x27}], 0x2}, 0x40001) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x1044, 0x1, {}, {0x0, 0xea60}, {0x2}, 0x1, @can={{0x4, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "74d65843220b46ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000280)={'pim6reg0\x00', 0xa8}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000340), 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000380)={0x100, 0xfffffffffffffff8, 0x8000000000000001, 0x1, 0x8, 0x8850}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000400)=0x1, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000480)=r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x8, 0x10, 0x7fff, 0x63, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty, {[@generic={0x44, 0xb, "54396625ffad3c8519"}, @timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0x6, [{@remote, 0x2}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf2f}]}, @generic={0x44, 0x8, "2978ca289d36"}, @timestamp_prespec={0x44, 0x34, 0xaa, 0x3, 0x4, [{@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xe0}, {@private=0xa010101, 0xa31c}, {@multicast1}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa4, r5, 0x0, 0xffffffff, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x80) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r8, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4007010}, 0x841) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000bc0)={0x8, 0xea}, 0x2) r10 = accept4(r9, &(0x7f0000000c00)=@hci, &(0x7f0000000c80)=0x80, 0x81000) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000cc0)={{0xa, 0x4e21, 0x607, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x0, {[0x5, 0x0, 0x0, 0x6, 0x80, 0xe891, 0x81, 0x9c6]}}, 0x5c) connect$unix(r10, &(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$kcm(0x29, 0x6, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000e00)={@mcast1, 0x0}, &(0x7f0000000e40)=0x14) sendmsg$nl_xfrm(r10, &(0x7f0000002240)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f0000000fc0)=@allocspi={0x122c, 0x16, 0x300, 0x70bd2a, 0x25dfdbfe, {{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x6, 0x4e23, 0x1a1e, 0x2, 0x80, 0x60, 0x21, r11}, {@in6=@empty, 0x4d2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x1, 0xb8, 0xffffffffffff0000, 0x100000001, 0xa, 0x12cd, 0x100, 0x9}, {0xdc7, 0x6, 0x9}, {0x9540, 0x7, 0x7}, 0x70bd2a, 0x0, 0xa, 0x5, 0x7, 0x12}, 0x4000000, 0x2}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e22, @in=@multicast1}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd2d, 0x70bd27, 0x70bd27, 0x8, [0x3ff, 0x7, 0xfffff801, 0xffffffff, 0x7fff]}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "5933085623d0314635bbf5e4ffe847fe158308117f5f7d589d7b1f0fb74f2321c18b429eb8aababcec3cb0c5f1116ab54be23f2327b7cac50663a3b09f8a479e89e0e5e856db4a826e3987cbf6b8bf18a08db3765a3a59b97aefab24e44cddb857813e4c0832cf402e6e63da8d3128a6e25e9686e59f6d40ea3d42412b1859c6844c8307e9df51e50235d562b4d097a3d75704d21f8920c79cccbab0ce1fd4f745728dde2df702bd2b362f779383ae660d2acd631fa324740a77d1907ed519e89a094ced1453d9ef2668c8ed15d809153d1e49d1f4f242ce220cc9ad45bbd4309036e16bf290b422c242022436df95ba958d916f5eb36ec9efa6de67977a2d2bb48c9b06454a2a785e65fb12d043fcc64c7443338afbe18bb2b38f0de5e0840bfa959132c6e35047c8780a0d88ed43ae15db8a9d92e5e03d577c80a5693a2abfb327754e2a2a2f14064a0b3d91ab4133a449630c636a2b9a7f1f29f052db0042d7d4c8081001fece88fdd782bd44425f107a9e8a392ee988ab885b2f7a8c6be94dba3c0a1848730407c47b1a2e2bd8fe94bba2d4eaa1bb47b8c5efbab676ce931b82e1693afa6d682f91e6eea04124d5c9ccdbc92b417743872c90eb5bb0887994b21af797d418837deef4167985de14f16974f5423ed39fbd864e00b0f36f024c3a933f889c6163e6b94addf674ba4690cf0f113a7d037dacf9f41e99877af9bd2d574588beeaea4a177ebe740cf269caeaef5bcf20a88a516d7f4fd9b89b2fdc11ff9eac439310174ea728a1af41579c3934ae1267a358cf21e429b1556c0e547cca8587e62217b14088f4e14aa60abc9fd3fbcf7ff35040e62456d8d8429a67ad9f87dd94b06055740328d899d915c5dfe547688d599c49a80c8ed2e06603ea52195634f3ead5c45b4e4c40e541b6cc8cdd63c1e20d7967aa741aa475ca61df79a3f9b034232a803f90e572768e6e21cff83ca393b4e858dab6cb3a7efa7b560819e3fbfb82a5b2ea061d1d83576bd72b390097051403c0bf2f202fd34c636075705dd59323d5d592e802d14896475a500db3c9a864fd30a16919fdcb6bffb81eae3d083c3a2eb4dc7188a248ed88248b9176e9ac32f4621ba7fc948df48d7316d703afa90fcff2195b9427e2ced94e26e3f491ef12b51ce1fcece376dfd18e7ea5273fc789659ad2461b094710029ce5eb2938f5b012be8fa8206e0e755b9757a51845faf852b63bf9f49ad49e8f0faae02983bf1f6313e581e9095ca4d4ab5712ac2bb8d5211554b6957c158e7bde75f0ab3c153141514401b8876aa4f4de41db078df1f714c473e806c6e5a96faa42860763dbcea249a92fe2c173b86542e9d8093da2613de62f5c730f7cdd0af6f4925212e4832e2e0d1a81a9886da425133651480b091bc73bd95d4b07d1e01e03495aff90dadb9bc44d9f789fdbb2c93cb947ae3611948f16900a5b21a035cb94e7d97f7f80c25b44c7cd382ac1823b3f82294a012fb0e25632218272a1e6f6e70c1a428249cd55401a0b8796e51a13e2656c91f253f96f67bef2619dbd70a19d8fdfa44245355f8ff1e0a38441cd2ff42b74e722e0fa293c4d1c2d61783f4586b27538ee844ac0358ad2ad35047aa10e498d6d16cf37b1bb0d23994ab3410edf052513ce10a543fa7e68ebe823e3f8a9fa78915e2de282da39e2022d756094b23dab87814237fae8cac1de0980101c4aca639b143b24174dd2077c9a887e4528314096963eaae6f3be2f54757fc75d0f4ac746fcba48897c595b66eb3f39310277f734568471c63c567ed31669b05ac2fcf98f22bb5b1b2baabf15070efc81c2785cda631f696e46e1cb89559df73de577e3d5012532ad6162e5518f9698ae743f1a2e5f05f06f127761f4cfd6025b6745e2ad65581e5f3e43ec531dde3f6b21952e15f5f0839ad880bcbecd9d768e4fda981cdf71f911d1179328900c6558c16b14201a174216d139e2aa21eeeb561d8a621f48be77641bc9b1b47c0e52a08503da7d7fcceb18ada8f19a781c41bfb30744ed9c33ab78891587affbeabfc8e4d2326d4171eb722bfba8f178880cb739cb82a580d4f873f4dd64957d988fbbfd734d23bb774f099837db63216f33d557d55df86cb854ff9d883a44e2f15e3c4dbb87dc773e0c8d8b34e1c60ae01e7b0d0a05e82b6a48e4af431d637c8514f3e1c960d55ec505044b0e6b32cd6d51e659cbb5fe3ba00599cbbaf147666094ebcf3789c858305340c7e20c6dbe34bbace4c68825387bcd2b496fc269c6aff405a5c244728841f3e2addebb8c2fcfa87b246843652689809a2be3dcde5e02690a752959189da1cc3ed99e4fbee91347a4dbeab51650cafa9848f2bb544c08e5d36337cde5681514b87f2751489a96223506f194cdd0783c52d7a0098e57e9bddf4f93ac8732d2933a6969b80bf0c81ab4f458b9554d3c9a27c048280969b7ce936aaf047129ca942dfdc68a9a99f7399e048ae164f2f3290a17bcd02517627d13da7de82b0911fb4e7d05742367c5ea0737c54de5095ac1e6c66d360e3b6b74d0b8b892872b636530af702227e48da15ebd4565741082dc52d6528a06bb4bb27a189a624b3de687f857fa0e67c72ebda336967d8682a1bacf9a2248f7acf866be23dcfadea9a9420982c743d8d2770ab6029f51672ee35d1f8c6cf3c39b2c516bf48142a68490f8c67bf66c327b563f4e8259fe5b3dd04e2ea0bef0df5481c2bce4f518151c403a0c0faae78a2b4e644d1845e5333d867553fb6b7b6f27d90143ca34068abe531314d3935ed72bcd770db9e7b08bf92ce46451fd9149185621db1f0979d46d8f526c61a2f24af8550eeb1dcccf4c30a02fb0f7af7b06a8ec98bea2df076031dd0bd7b2085649415922311b1f6a855fb489856305b56f0d278ecfd96a338f56f5ccece26e5eaf964722ae9c3b5d125b23d6590e13069fbf73489ed20b6821ec5f8c7589b2b6ac75ef210a4f7593cf0491e52481913ff159266a0b5fbe73f5c58e2e45047be853d7ca7373c929c42649f28ef14ca02bc05de76beb806274af2d33e8a82df89fc130ec13ab36a9807e478a29c4806c3ed39210420f860b21578b90101611ac2caf13102ea6826c1b5191e96c837cd213ad3a1f53090f5cb86d7431692231b7f8aa3ecf5526ab0e9a2d143eed3ef8b072bdd994d8ed3613ff4d2dc66abe03a1bb7b5d5ffbfdc6d520c99f67289a5e1cf73e52de287123ebb137624458aed748f8159dca219eb036add7d96d30e377bc97ad32ff3871c5c7a79d58f2eff3ef1c11a63828dc832793bf81cbf11d8c340a78c76664db8d5da0ad87ddf050d41f98ad9f96f9124d29b36f5a14166aa3315ad8ce0ff303fb8738a19ce100e06329f5b4a7b7432da2d1aca37d508675f4b23b8924be4b9b2c2b5bb0ef89ae233d626ec70f4dff452830e6d784320986bffbb8fe5b0ce3662c4599f5be64ce8380bf8fd4050150b379a60492a3f84660aa395aa4d8a779ce52827c4bc5fad3f2ef4bbfabe62544d656a861c4e651d250f68f247a93d6903a49a8eeb51fbd0d05693465e2ee1319e35a46356e3c1e7cf40b7df38010fc1f1bdff3deea3c0ad973384446a7228cb72b40b7081eefbed797541a52b71fee9f0eecd3b6c16b2bec820477d693c37ba90cf2597553a0c93c5641f1806529fc5a03fb8ca1682d111d5e7e2f2655711d7550f9592cecdd280ca047839b9f568c2fb8b42d3013a13820ed1cac87a31a2731241f1bf1bd00516b854368df65c2cf4612070c043bfa731c72586311ea206ce1fa3767896e0b135f083151680e8783969d17349807c4e4be7f1071b164734b2dedb6a2d869f94f4af20512fe802d2c6c5b123719f95732268b642522ad7ca31bed987b47a294b789c53f8f777f09cd903057b81d11f1193a7a7dee2ee5ab7fe93c71f2286dfca9e7d186d6723875fe55286966678cfacd2e9206b8a9a294202bc69d4c0e307b25765def0b58f3e141e0c03b9d6f76922028f9c80b12fcf6ee44c6bafa6ee3d6aa192b7ab4e9946d585396420558c3806634fb59e2adfcc289f757c9d0ac6b07943ab8bc9b2665a84f45e773e40b644e2181ba78907bb03d20aece68eada08ed0e690365d94335d51960a3eae6c28e15f2405e746079859deaabc93a9bcc8606ec90a9a762dbd95185476e57d714104bfc643328cafe08a58095e4c6caa3f31cda4e62b06a4a8074664e2975ee43754af930ae1cfbc7a53870590e2dbfda9749dda81b3ea0af466cc83f4719f32b372b43dac628ae5686cd0812b9603d90a243fa9ff97536ec8af28fe615810be8e6d1ca2d689115aa783ac6b2cfce6df80b85402dd9cc605c81490eef7d481a97d32a4f1865a9aeb63f18261836699d6155c864701e89ed86a6d387298d6ea8af8da1e3b08260e097d7a7863baddc787495e1fc5b3f784d63bdf9e1a5d64aa8bae975e00872fd024248f25f7b869e7c02fa2326b9d5d5ca479a9fdd2f9aa21fac4634da906d7b3b6c07b07e2653fc603a625852498150f5c5a381f7eea655db03f997244a0ed8ceb84df6c6d540c884c4f239579cacb7c36a5494d4394911f7de442b3dc86b0e370d64a8a68b6d4567ac43c6b57f7417fb6089747e83611a32fad50a6650007e4f8acfb34dc276afa262374a8b4b0b1790bcdd0963a62aedf9455586017ab06b279b5fd5207c9db85a74e1361cbd327a8f96d7a4a622c406e867503daccc92ffee0ed92565fc87f890bc2b8ab41558f5202ec00da8566fef87ae536f02dfee0db7d33126bdc39b809715ac3789b53658d2190cd5fdafa51444046f62108f61f821eff8de24a7422358d8360eec3ef77d56f6248ad220b7230df3951a4c2082e1e7c73e89e3a3e995100382f04e050b2264cfd95f041569595523bbc98c4da364fdf1872c794eb87602460a8dd1dc07aaff33609d3bae4925d3e91314ba12143c3273a77543a2a134ec00cb5394402d44526ce27d0849755407f6c1360614f4d49180fe742047bdfce6b801c29a10f7635a29dc54fabc1a4ec4b3ad33afbf73d61698615e9e486cf491ec6130d5632a1ab5a70fc6244af28bfbcfbedb67cbda2e4235ce47feb54f84e17fb12de6c80b32ae357aa164ac157b24c8e86f657b3d064ba6fbc81f61b7ad8029f14d0ffb5425f942c5c00cd345a7687ee77765f1464c034b53d287cd7d120c4f8ab090e95bc254a33907cda1f05dba2c03862752e7a634950f4ba20989548563bbfa8b6aa96f678d9bc5b3711292449ea566a0d065ecb93b77609ab2f2e1cdeb05b824ccc5f0c8baea69d14f996131ebbceb9544da0aed4726bf18c14cc627cd0d39cd90e7df84cd1285a4dd44c1e03234a5e301bb69b1591d61a45c46d58f6a4e147f8864e9993402f663c69d99ffdf50250ca9e8c51ba81fa32a3b849e12b6ec05d05b7637406b2d3697e75964d2d6189ef840726227194fb551928f59373f96735adbe2d58eccaa4dcb5fd0817eb68a177ee6475bbd7de8c863da5cb7de5b1374ba7192cec329b05f6f4a4fb0f2d5b0f3c7bf677bc05917e63da98b9f1b4ab50434986cd5e3daf0faf44cd3667a5c8d377c23e84ad02ec89e03559a801ae6b7b89b7f4707d5f4a2b8a112f91003d8d2bed97a78614298b358884ef1aaa8f1d52e1bd7293805c611750f40c636e63d4e164786c4e7dfc0980f111472f13968faa8298dc2300011d2f9dfd0e55ab9bce859595071cea7c256f6298e7255c4632282abef2320388bb821760db59bf94a33db6222ec61db21607b451b3d"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_aead={0x71, 0x12, {{'aegis128-generic\x00'}, 0x128, 0xc0, "cba717e497a9aae8e070d9391b45649e29acdf2685c4cf099758ffc6e79750f9769d874eaf"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @iptfs_init_delay={0x8, 0x27, 0xfffffffd}, @srcaddr={0x14, 0xd, @in=@loopback}]}, 0x122c}, 0x1, 0x0, 0x0, 0x8810}, 0x40014) 1.914579587s ago: executing program 2 (id=2347): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x5) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 1.739934985s ago: executing program 2 (id=2348): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000b340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f000000d440)={0x0, 0x0, &(0x7f000000d400)={&(0x7f000000d3c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x200040cc) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0xe}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000c000000140003800400040008000200fd7f01000400010018000180140002006e657464657673696d3000"], 0x40}}, 0x0) sendmmsg$sock(r9, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r10, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x4000800) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) (async) unshare(0x22020400) pipe(&(0x7f0000000080)) 1.69473394s ago: executing program 3 (id=2349): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe9}]}, 0x38}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x100003}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000340)={0x17bf0d7acc1b9916}) sendmsg$inet(r10, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r12, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 1.389653059s ago: executing program 4 (id=2350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r3, 0x25, 0x2, @val=@netfilter={0x610dd41aca0b82fa, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x16, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000800000000000000000000ffffffff020000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffff001, 0x6, 0x0, 0x0, 0x20000000000000}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4004d8, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r6}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 1.247928372s ago: executing program 2 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10003}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ffffffff00"], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r9, 0x1, 0x70bd63, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc01}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x710000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf230}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x40800) 1.209129528s ago: executing program 1 (id=2352): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010008506000000ff0700040000000000", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.104459317s ago: executing program 0 (id=2353): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xa020480) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$rds(0x15, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) r11 = socket(0x1, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="80000000070a050000000000000000000100000908000b40000000041c000580080001400000000408000140000000160800014000004a3e0c00034000000000000000010900020073797a310000000024000480100001800a00010071756f7461000000100001800b00010072656a65637400000900010073797a30000000541c1f1e4606f66c1500"], 0x80}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 668.671629ms ago: executing program 4 (id=2354): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50583}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffc}}, 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) r1 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) 649.457624ms ago: executing program 3 (id=2355): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20024080}, 0x4000) 252.327324ms ago: executing program 1 (id=2356): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x188}, 0x1, 0x7}, 0x24008050) r7 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000370fd23a00840100000000000000020000000000002000000009000000060000c6e8c0c69e485d8bb4bf6aa3e4f5088d2cb0d4f553d1069d6fc88e1318c355feaae733a3daeabab1261a370f2316f10726b4cddc3f7ad6212cd22b3fbc3b93a1db3731bb15d0d1e07931ffa2915604acf42c4d61e78ff02d6487ff1bc6ba96fbb05bd793b306abf1d28ed0331b7f5816205fa7c710ee0cb9a09ccd4c237a41d7398b26451ed54bdb1e28524e1499418eb011cdeef9477b59e7b1c5097f"], 0x0, 0x3e}, 0x28) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000"], 0x70}}, 0x0) (async) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="3b000300010001", 0x7) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="050020015500000022fffe009f73b2320b3bf3a2ac09fdd7534b78aa1400fe605c3e66191c8fd4f2ac9ea50000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a0002"], 0x24}}, 0x0) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 104.414436ms ago: executing program 0 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x704, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014841}, 0x48085) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 86.201717ms ago: executing program 2 (id=2358): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000800000002"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=ANY=[@ANYBLOB="3c00000013000500fefffbff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637365633000000000000000000000001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a'], 0x10) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000200)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4}, {0x3, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{}, {0x4, 0x1, 0x1, 0x1}}, {{0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x30) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x9000001d}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="41ee00000000000001000603000014000300060a0006090300f006e812000000000108000700263a0903140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x24008090) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000240)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x20000402, r2}, 0x38) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0xa0000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000800)={0xa0000006}) epoll_pwait(r8, &(0x7f0000000000)=[{}, {}], 0x2, 0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) close(0x4) 0s ago: executing program 4 (id=2359): r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000340)=0x1, 0x12) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000500)={{&(0x7f0000000080)=[{0x4, 0x2, 0x6ac0694b, {0x100000001, 0x2}, 0x4, 0x86, 0x7}], 0x1, 0x40, 0x9, 0x1bc}, {&(0x7f00000000c0)=[{0x7fffffffffffffff, 0x7fffffff}, {0x7f, 0x2}, {0xfffffffffffffff9, 0x2}, {0x7f, 0x9}], 0x4, 0x10, 0x6, 0x9}, {&(0x7f0000000100)=[0x9, 0x40, 0xfffffffffffff6bf], 0x3, 0x8, 0xa, 0x3}, {&(0x7f0000000380)=[{0x7, 0xfc0, 0x1000, 0x2, 0x3}, {0x0, 0x1, 0x758, 0xa8, 0x2}, {0x5, 0x8, 0x9, 0x7, 0xfffffff8}, {0x9, 0xfffffffffffffffd, 0x4, 0x7f, 0x1}, {0x4, 0x800b, 0x4, 0x7, 0x8}, {0xca, 0x5, 0xaa, 0x3, 0x200}, {0x872, 0x4, 0x7, 0x401, 0xff}], 0x7, 0x28, 0x80, 0x75}, {&(0x7f00000004c0)=[0x8, 0x8000000000000001], 0x2, 0x8, 0x9, 0x9}}) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000000000000000000000000200010000000000050009077fffffff030005000000000002000000ac1414aa0000000000000000020008000800000034000000000000003cac0e81736ea5bf62d78ae0e7e8d67a10c11a3fc0430f2f9b0ba4bc28e1e7f3d6a7597ed0222e3b2fce0871dcba6f056dec952981884dc185d1"], 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): ailed(directio) comm="syz.4.1147" name=B702 dev="tmpfs" ino=1132 res=0 errno=0 [ 224.568743][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 224.618438][ T59] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 224.619474][ T1176] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 224.619512][ T1176] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 224.619544][ T1176] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 224.631696][T10887] sctp: [Deprecated]: syz.3.1149 (pid 10887) Use of int in maxseg socket option. [ 224.631696][T10887] Use struct sctp_assoc_value instead [ 224.989531][T10910] team0: left allmulticast mode [ 224.989557][T10910] team_slave_0: left allmulticast mode [ 224.989575][T10910] team_slave_1: left allmulticast mode [ 225.015279][T10910] team0: left promiscuous mode [ 225.015305][T10910] team_slave_0: left promiscuous mode [ 225.015549][T10910] team_slave_1: left promiscuous mode [ 225.034928][T10910] bridge0: port 5(team0) entered disabled state [ 225.099224][T10910] dummy0: left allmulticast mode [ 225.102584][T10910] bridge0: port 4(dummy0) entered disabled state [ 225.143600][T10910] bridge_slave_0: left allmulticast mode [ 225.143625][T10910] bridge_slave_0: left promiscuous mode [ 225.143809][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.176133][T10910] bridge_slave_1: left allmulticast mode [ 225.176163][T10910] bridge_slave_1: left promiscuous mode [ 225.176379][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.223844][T10910] bond0: (slave bond_slave_0): Releasing backup interface [ 225.243582][T10910] bond0: (slave bond_slave_1): Releasing backup interface [ 225.268041][T10910] team0: Port device team_slave_0 removed [ 225.276079][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 225.293446][T10910] team0: Port device team_slave_1 removed [ 225.294096][T10910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.294110][T10910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.309182][T10910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.309204][T10910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.319465][T10910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.353180][T10915] team0: No ports can be present during mode change [ 225.360495][T10925] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 225.567335][T10925] xt_CT: No such helper "netbios-ns" [ 225.623846][ T476] tipc: Subscription rejected, illegal request [ 225.813170][T10924] team0: Port device team_slave_0 removed [ 225.852017][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1163'. [ 225.852042][T10949] openvswitch: netlink: Flow key attr not present in new flow. [ 225.954127][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 226.145197][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 226.190541][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 226.233592][T10959] vlan3: entered promiscuous mode [ 226.233618][T10959] macvlan0: entered promiscuous mode [ 226.636396][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'. [ 226.680039][T10988] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 226.824028][T10988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.934178][T10998] netlink: 'syz.2.1171': attribute type 54 has an invalid length. [ 227.111603][T11001] xt_MASQUERADE: bad rangesize 20224 [ 227.558729][T11009] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 228.077363][T11035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.092471][T11035] Bluetooth: hci0: unsupported parameter 1280 [ 228.092493][T11035] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 228.797356][T11030] batman_adv: batadv1: IGMP Querier appeared [ 228.797376][T11030] batman_adv: batadv1: MLD Querier appeared [ 228.943779][T11052] __nla_validate_parse: 2 callbacks suppressed [ 228.943801][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 229.021269][T11051] netlink: 'syz.1.1189': attribute type 29 has an invalid length. [ 229.021294][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 229.125498][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 229.125524][T11053] nbd: device at index 64 is going down [ 229.149749][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 229.210518][T11064] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 229.245223][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 229.245252][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 229.482374][ T5879] udevd[5879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.515017][ T5879] udevd[5879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.546204][T11069] bond8: option arp_validate: invalid value (1048579) [ 229.561652][T11069] bond8 (unregistering): Released all slaves [ 229.685495][T11079] bond8: option arp_validate: invalid value (1048579) [ 229.689111][T11079] bond8 (unregistering): Released all slaves [ 229.702331][T11094] netlink: 'syz.1.1198': attribute type 10 has an invalid length. [ 229.702353][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1198'. [ 229.892099][T11100] xt_l2tp: invalid flags combination: 0 [ 229.984294][T11111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1203'. [ 230.034652][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 230.185485][T11118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1204'. [ 230.323116][T11120] netlink: 'syz.0.1206': attribute type 29 has an invalid length. [ 230.443295][T11130] tipc: Enabling not permitted [ 230.443333][T11130] tipc: Enabling of bearer rejected, failed to enable media [ 230.640079][T11143] openvswitch: netlink: Message has 8 unknown bytes. [ 230.674497][T11134] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.713616][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713690][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713723][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713755][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713785][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713817][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713857][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713889][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713920][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713950][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.713981][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714013][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714044][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714075][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714107][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714138][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714170][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714200][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714231][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714262][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714332][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714365][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714395][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714426][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714458][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714489][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714520][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714551][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714582][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714613][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714675][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714707][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714739][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714770][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714801][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714831][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714872][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714903][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714935][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714966][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.714997][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.715027][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.715076][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.715130][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.715162][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.715193][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745770][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745810][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745834][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745857][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745880][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745922][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745959][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.745983][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746017][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746040][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746063][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746087][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746110][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746133][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746156][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746179][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746201][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746235][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 230.746258][T11144] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 231.342849][T11159] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 232.100698][T11197] openvswitch: netlink: Message has 8 unknown bytes. [ 232.655139][T11213] netlink: Unknown conntrack attr (0) [ 232.783452][T11218] x_tables: duplicate underflow at hook 3 [ 233.323627][T11235] block nbd0: shutting down sockets [ 233.363129][T11235] block nbd1: shutting down sockets [ 233.396995][T11243] openvswitch: netlink: Message has 8 unknown bytes. [ 233.669035][T11234] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 234.383999][T11272] __nla_validate_parse: 41 callbacks suppressed [ 234.384022][T11272] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1242'. [ 234.392284][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 234.546217][T11282] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1245'. [ 234.610430][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 234.848817][T11295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1248'. [ 234.870672][T11295] veth1_macvtap: left promiscuous mode [ 234.946480][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 235.769540][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 235.843375][T11368] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 235.984674][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1263'. [ 235.985019][T11374] unsupported nlmsg_type 40 [ 236.108972][T11387] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1263'. [ 236.194369][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 236.293252][T11378] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 236.471688][T11378] bond3 (unregistering): Released all slaves [ 236.505780][T11403] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 236.687262][T11409] openvswitch: netlink: Missing key (keys=40, expected=100) [ 236.980468][T11416] FAULT_INJECTION: forcing a failure. [ 236.980468][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.980503][T11416] CPU: 0 UID: 0 PID: 11416 Comm: syz.1.1273 Not tainted syzkaller #0 PREEMPT(full) [ 236.980526][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.980538][T11416] Call Trace: [ 236.980546][T11416] [ 236.980555][T11416] dump_stack_lvl+0xe8/0x150 [ 236.980591][T11416] should_fail_ex+0x410/0x560 [ 236.980626][T11416] _copy_from_user+0x2d/0xb0 [ 236.980655][T11416] ___sys_sendmsg+0x1c6/0x360 [ 236.980682][T11416] ? __lock_acquire+0x747/0x2de0 [ 236.980710][T11416] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.980776][T11416] ? __fget_files+0x2a/0x420 [ 236.980803][T11416] ? __fget_files+0x3a2/0x420 [ 236.980842][T11416] __x64_sys_sendmsg+0x1b1/0x290 [ 236.980872][T11416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.980923][T11416] do_syscall_64+0x166/0x520 [ 236.980949][T11416] ? trace_irq_disable+0x3b/0x140 [ 236.980970][T11416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.980990][T11416] ? clear_bhb_loop+0x70/0xc0 [ 236.981016][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.981035][T11416] RIP: 0033:0x7fc4d7d9e159 [ 236.981054][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.981071][T11416] RSP: 002b:00007fc4d8cfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.981093][T11416] RAX: ffffffffffffffda RBX: 00007fc4d8025fa0 RCX: 00007fc4d7d9e159 [ 236.981107][T11416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 236.981120][T11416] RBP: 00007fc4d8cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 236.981133][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.981144][T11416] R13: 00007fc4d8026038 R14: 00007fc4d8025fa0 R15: 00007fff6b693838 [ 236.981177][T11416] [ 237.450575][ T30] audit: type=1804 audit(1790376875.053:7): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1276" name="/newroot/274/memory.events" dev="tmpfs" ino=1430 res=1 errno=0 [ 240.628483][T11455] bridge_slave_0: left allmulticast mode [ 240.628512][T11455] bridge_slave_0: left promiscuous mode [ 240.628782][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.678482][T11469] tipc: Enabling of bearer rejected, failed to enable media [ 240.678720][T11472] netlink: 'syz.0.1287': attribute type 29 has an invalid length. [ 240.678740][T11472] __nla_validate_parse: 2 callbacks suppressed [ 240.678754][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1287'. [ 240.918778][T11493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1293'. [ 240.923505][T11493] netlink: 'syz.4.1293': attribute type 1 has an invalid length. [ 240.959052][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 241.067580][T11493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.136949][T11505] bond3: (slave geneve2): making interface the new active one [ 241.141261][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 241.141436][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 241.174351][T11505] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 241.503729][T11512] wg2 speed is unknown, defaulting to 1000 [ 242.392976][T11609] FAULT_INJECTION: forcing a failure. [ 242.392976][T11609] name failslab, interval 1, probability 0, space 0, times 1 [ 242.393012][T11609] CPU: 1 UID: 0 PID: 11609 Comm: syz.4.1303 Not tainted syzkaller #0 PREEMPT(full) [ 242.393033][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.393044][T11609] Call Trace: [ 242.393052][T11609] [ 242.393061][T11609] dump_stack_lvl+0xe8/0x150 [ 242.393094][T11609] should_fail_ex+0x410/0x560 [ 242.393123][T11609] should_failslab+0xa8/0x100 [ 242.393146][T11609] __kmalloc_cache_noprof+0xa3/0x600 [ 242.393166][T11609] ? rtnl_newlink+0x147/0x1c30 [ 242.393188][T11609] ? rtnl_newlink+0x147/0x1c30 [ 242.393211][T11609] ? stack_trace_save+0xa9/0x100 [ 242.393233][T11609] rtnl_newlink+0x147/0x1c30 [ 242.393254][T11609] ? stack_depot_save_flags+0x33/0x7f0 [ 242.393276][T11609] ? __lock_acquire+0x670/0x2de0 [ 242.393304][T11609] ? kasan_save_track+0x4f/0x80 [ 242.393322][T11609] ? kasan_save_track+0x3e/0x80 [ 242.393340][T11609] ? kasan_save_free_info+0x40/0x50 [ 242.393365][T11609] ? __kasan_slab_free+0x5c/0x80 [ 242.393386][T11609] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.393407][T11609] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 242.393425][T11609] ? netlink_deliver_tap+0x19c/0x1b0 [ 242.393439][T11609] ? netlink_unicast+0x781/0x940 [ 242.393462][T11609] ? netlink_sendmsg+0x813/0xb40 [ 242.393480][T11609] ? sock_sendmsg_nosec+0x13a/0x180 [ 242.393499][T11609] ? ____sys_sendmsg+0x54e/0x850 [ 242.393523][T11609] ? ___sys_sendmsg+0x2a5/0x360 [ 242.393546][T11609] ? __x64_sys_sendmsg+0x1b1/0x290 [ 242.393571][T11609] ? do_syscall_64+0x166/0x520 [ 242.393595][T11609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.393651][T11609] ? kasan_quarantine_put+0xbb/0x1f0 [ 242.393673][T11609] ? lockdep_hardirqs_on+0x7b/0x110 [ 242.393704][T11609] ? nlmon_xmit+0xb0/0x100 [ 242.393724][T11609] ? kmem_cache_free+0x182/0x650 [ 242.393753][T11609] ? __lock_acquire+0x747/0x2de0 [ 242.393781][T11609] ? __dev_queue_xmit+0x29b/0x3820 [ 242.393822][T11609] ? __local_bh_enable_ip+0xd6/0x140 [ 242.393847][T11609] ? lockdep_hardirqs_on+0x7b/0x110 [ 242.393878][T11609] ? lock_acquire+0x115/0x350 [ 242.393898][T11609] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.393935][T11609] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.393957][T11609] rtnetlink_rcv_msg+0x802/0xc00 [ 242.393984][T11609] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 242.394006][T11609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.394033][T11609] ? __copy_skb_header+0xa3/0x4a0 [ 242.394067][T11609] netlink_rcv_skb+0x226/0x4a0 [ 242.394099][T11609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.394124][T11609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.394167][T11609] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.394186][T11609] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.394211][T11609] netlink_unicast+0x7bd/0x940 [ 242.394251][T11609] netlink_sendmsg+0x813/0xb40 [ 242.394281][T11609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.394307][T11609] ? apparmor_socket_sendmsg+0x98/0x360 [ 242.394332][T11609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.394349][T11609] sock_sendmsg_nosec+0x13a/0x180 [ 242.394373][T11609] ____sys_sendmsg+0x54e/0x850 [ 242.394403][T11609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.394438][T11609] ? import_iovec+0x73/0xa0 [ 242.394465][T11609] ___sys_sendmsg+0x2a5/0x360 [ 242.394490][T11609] ? __lock_acquire+0x747/0x2de0 [ 242.394515][T11609] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.394577][T11609] ? __fget_files+0x2a/0x420 [ 242.394603][T11609] ? __fget_files+0x3a2/0x420 [ 242.394640][T11609] __x64_sys_sendmsg+0x1b1/0x290 [ 242.394671][T11609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.394722][T11609] do_syscall_64+0x166/0x520 [ 242.394746][T11609] ? trace_irq_disable+0x3b/0x140 [ 242.394765][T11609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.394784][T11609] ? clear_bhb_loop+0x70/0xc0 [ 242.394816][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.394835][T11609] RIP: 0033:0x7f5198f9e159 [ 242.394855][T11609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.394870][T11609] RSP: 002b:00007f5199dba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.394891][T11609] RAX: ffffffffffffffda RBX: 00007f5199225fa0 RCX: 00007f5198f9e159 [ 242.394905][T11609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.394927][T11609] RBP: 00007f5199dba090 R08: 0000000000000000 R09: 0000000000000000 [ 242.394939][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.394949][T11609] R13: 00007f5199226038 R14: 00007f5199225fa0 R15: 00007ffeff1e61c8 [ 242.394979][T11609] [ 243.109551][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 243.326338][T11650] syzkaller0: left promiscuous mode [ 243.326363][T11650] syzkaller0: left allmulticast mode [ 243.803266][T11697] sctp: [Deprecated]: syz.1.1309 (pid 11697) Use of int in max_burst socket option deprecated. [ 243.803266][T11697] Use struct sctp_assoc_value instead [ 244.114026][T11709] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.177211][ T1165] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 244.234541][T11695] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1311'. [ 244.829870][T11748] FAULT_INJECTION: forcing a failure. [ 244.829870][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 244.829904][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.4.1317 Not tainted syzkaller #0 PREEMPT(full) [ 244.829925][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.829937][T11748] Call Trace: [ 244.829945][T11748] [ 244.829954][T11748] dump_stack_lvl+0xe8/0x150 [ 244.829988][T11748] should_fail_ex+0x410/0x560 [ 244.830018][T11748] should_failslab+0xa8/0x100 [ 244.830044][T11748] __kmalloc_cache_noprof+0xa3/0x600 [ 244.830066][T11748] ? rtnl_newlink+0x147/0x1c30 [ 244.830088][T11748] ? rtnl_newlink+0x147/0x1c30 [ 244.830110][T11748] ? stack_trace_save+0xa9/0x100 [ 244.830132][T11748] rtnl_newlink+0x147/0x1c30 [ 244.830153][T11748] ? stack_depot_save_flags+0x33/0x7f0 [ 244.830175][T11748] ? __lock_acquire+0x670/0x2de0 [ 244.830198][T11748] ? kasan_save_track+0x4f/0x80 [ 244.830217][T11748] ? kasan_save_track+0x3e/0x80 [ 244.830235][T11748] ? kasan_save_free_info+0x40/0x50 [ 244.830260][T11748] ? __kasan_slab_free+0x5c/0x80 [ 244.830279][T11748] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.830297][T11748] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 244.830313][T11748] ? netlink_deliver_tap+0x19c/0x1b0 [ 244.830330][T11748] ? netlink_unicast+0x781/0x940 [ 244.830354][T11748] ? netlink_sendmsg+0x813/0xb40 [ 244.830371][T11748] ? sock_sendmsg_nosec+0x13a/0x180 [ 244.830388][T11748] ? ____sys_sendmsg+0x54e/0x850 [ 244.830411][T11748] ? ___sys_sendmsg+0x2a5/0x360 [ 244.830433][T11748] ? __x64_sys_sendmsg+0x1b1/0x290 [ 244.830455][T11748] ? do_syscall_64+0x166/0x520 [ 244.830479][T11748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.830540][T11748] ? kasan_quarantine_put+0xbb/0x1f0 [ 244.830560][T11748] ? lockdep_hardirqs_on+0x7b/0x110 [ 244.830589][T11748] ? nlmon_xmit+0xb0/0x100 [ 244.830610][T11748] ? kmem_cache_free+0x182/0x650 [ 244.830641][T11748] ? __lock_acquire+0x747/0x2de0 [ 244.830679][T11748] ? __dev_queue_xmit+0x29b/0x3820 [ 244.830712][T11748] ? __local_bh_enable_ip+0xd6/0x140 [ 244.830742][T11748] ? lockdep_hardirqs_on+0x7b/0x110 [ 244.830775][T11748] ? lock_acquire+0x115/0x350 [ 244.830794][T11748] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.830829][T11748] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.830852][T11748] rtnetlink_rcv_msg+0x802/0xc00 [ 244.830880][T11748] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 244.830902][T11748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.830927][T11748] ? __copy_skb_header+0xa3/0x4a0 [ 244.830965][T11748] netlink_rcv_skb+0x226/0x4a0 [ 244.830995][T11748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.831019][T11748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.831062][T11748] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.831081][T11748] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.831107][T11748] netlink_unicast+0x7bd/0x940 [ 244.831146][T11748] netlink_sendmsg+0x813/0xb40 [ 244.831175][T11748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.831206][T11748] ? apparmor_socket_sendmsg+0x98/0x360 [ 244.831232][T11748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.831251][T11748] sock_sendmsg_nosec+0x13a/0x180 [ 244.831273][T11748] ____sys_sendmsg+0x54e/0x850 [ 244.831307][T11748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.831344][T11748] ? import_iovec+0x73/0xa0 [ 244.831375][T11748] ___sys_sendmsg+0x2a5/0x360 [ 244.831400][T11748] ? __lock_acquire+0x747/0x2de0 [ 244.831426][T11748] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.831491][T11748] ? __fget_files+0x2a/0x420 [ 244.831516][T11748] ? __fget_files+0x3a2/0x420 [ 244.831554][T11748] __x64_sys_sendmsg+0x1b1/0x290 [ 244.831585][T11748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.831636][T11748] do_syscall_64+0x166/0x520 [ 244.831670][T11748] ? trace_irq_disable+0x3b/0x140 [ 244.831689][T11748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.831709][T11748] ? clear_bhb_loop+0x70/0xc0 [ 244.831733][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.831752][T11748] RIP: 0033:0x7f5198f9e159 [ 244.831772][T11748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.831788][T11748] RSP: 002b:00007f5199dba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.831810][T11748] RAX: ffffffffffffffda RBX: 00007f5199225fa0 RCX: 00007f5198f9e159 [ 244.831824][T11748] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 244.831837][T11748] RBP: 00007f5199dba090 R08: 0000000000000000 R09: 0000000000000000 [ 244.831849][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.831861][T11748] R13: 00007f5199226038 R14: 00007f5199225fa0 R15: 00007ffeff1e61c8 [ 244.831894][T11748] [ 245.765860][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1322'. [ 245.792692][T11778] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1325'. [ 245.862546][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1325'. [ 245.862577][T11784] netlink: 'syz.1.1325': attribute type 1 has an invalid length. [ 245.963280][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1325'. [ 246.058654][T11792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1327'. [ 246.369754][T11799] smbdirect: ib_dev[syz2] renamed to [s] [ 246.587774][T11805] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1331'. [ 246.587803][T11805] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1331'. [ 246.807237][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 247.089159][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 247.313395][T11828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1336'. [ 247.691910][T11840] veth8: entered allmulticast mode [ 248.178723][T11865] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 249.402199][T11918] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 249.625153][T11924] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 249.625177][T11924] netlink: 'syz.2.1364': attribute type 2 has an invalid length. [ 249.996243][T11935] nbd0: detected capacity change from 0 to 63 [ 250.232953][ T5627] block nbd0: Receive control failed (result -104) [ 250.458188][T11945] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 250.809496][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ff84c00: rx timeout, send abort [ 250.809960][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ff84c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.883742][T11959] FAULT_INJECTION: forcing a failure. [ 250.883742][T11959] name failslab, interval 1, probability 0, space 0, times 0 [ 250.883780][T11959] CPU: 0 UID: 0 PID: 11959 Comm: syz.2.1377 Not tainted syzkaller #0 PREEMPT(full) [ 250.883803][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.883815][T11959] Call Trace: [ 250.883824][T11959] [ 250.883833][T11959] dump_stack_lvl+0xe8/0x150 [ 250.883869][T11959] should_fail_ex+0x410/0x560 [ 250.883898][T11959] ? __alloc_skb+0x1db/0x7a0 [ 250.883922][T11959] should_failslab+0xa8/0x100 [ 250.883949][T11959] ? __alloc_skb+0x1db/0x7a0 [ 250.883972][T11959] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 250.884003][T11959] ? __alloc_skb+0x18d/0x7a0 [ 250.884028][T11959] ? __alloc_skb+0x1db/0x7a0 [ 250.884059][T11959] __alloc_skb+0x1db/0x7a0 [ 250.884094][T11959] netlink_ack+0x136/0xb30 [ 250.884122][T11959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.884160][T11959] ? __copy_skb_header+0xa3/0x4a0 [ 250.884201][T11959] netlink_rcv_skb+0x2a4/0x4a0 [ 250.884233][T11959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.884261][T11959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.884306][T11959] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.884326][T11959] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.884352][T11959] netlink_unicast+0x7bd/0x940 [ 250.884394][T11959] netlink_sendmsg+0x813/0xb40 [ 250.884424][T11959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.884454][T11959] ? apparmor_socket_sendmsg+0x98/0x360 [ 250.884480][T11959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.884500][T11959] sock_sendmsg_nosec+0x13a/0x180 [ 250.884525][T11959] ____sys_sendmsg+0x54e/0x850 [ 250.884560][T11959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.884598][T11959] ? import_iovec+0x73/0xa0 [ 250.884629][T11959] ___sys_sendmsg+0x2a5/0x360 [ 250.884655][T11959] ? __lock_acquire+0x747/0x2de0 [ 250.884680][T11959] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.884712][T11959] ? irqentry_exit+0x218/0x910 [ 250.884737][T11959] ? trace_irq_disable+0x3b/0x140 [ 250.884791][T11959] ? __fget_files+0x2a/0x420 [ 250.884818][T11959] ? __fget_files+0x3a2/0x420 [ 250.884857][T11959] __x64_sys_sendmsg+0x1b1/0x290 [ 250.884889][T11959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.884940][T11959] do_syscall_64+0x166/0x520 [ 250.884965][T11959] ? trace_irq_disable+0x3b/0x140 [ 250.884983][T11959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.885004][T11959] ? clear_bhb_loop+0x70/0xc0 [ 250.885029][T11959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.885049][T11959] RIP: 0033:0x7f57bc39e159 [ 250.885069][T11959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.885087][T11959] RSP: 002b:00007f57bd1de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.885111][T11959] RAX: ffffffffffffffda RBX: 00007f57bc625fa0 RCX: 00007f57bc39e159 [ 250.885126][T11959] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.885139][T11959] RBP: 00007f57bd1de090 R08: 0000000000000000 R09: 0000000000000000 [ 250.885161][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.885173][T11959] R13: 00007f57bc626038 R14: 00007f57bc625fa0 R15: 00007ffeebeb3718 [ 250.885207][T11959] [ 251.007122][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.007253][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.007423][T11955] bridge_slave_0: entered allmulticast mode [ 251.016577][T11955] bridge_slave_0: entered promiscuous mode [ 251.024083][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.024210][T11955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.147481][T11961] bridge_slave_0: left allmulticast mode [ 251.147537][T11961] bridge_slave_0: left promiscuous mode [ 251.147765][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.180027][T11971] __nla_validate_parse: 8 callbacks suppressed [ 251.180049][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 251.291539][T11955] bond1: (slave bridge0): Releasing backup interface [ 251.291573][T11955] bridge0 (unregistering): left promiscuous mode [ 251.291592][T11955] bridge0 (unregistering): left allmulticast mode [ 251.354081][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 252.191590][T11998] netlink: 'syz.4.1384': attribute type 39 has an invalid length. [ 252.495955][T12000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1384'. [ 253.246557][T12003] netlink: 'syz.0.1386': attribute type 2 has an invalid length. [ 253.482408][T12015] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1389'. [ 254.750310][T12057] openvswitch: netlink: IPv4 tunnel dst address is zero [ 254.768708][T12056] netlink: 'syz.1.1401': attribute type 2 has an invalid length. [ 255.019340][T12060] openvswitch: netlink: Duplicate key (type 0). [ 255.039339][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 255.105777][T12062] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 255.105803][T12062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1405'. [ 255.105913][T12062] FAULT_INJECTION: forcing a failure. [ 255.105913][T12062] name failslab, interval 1, probability 0, space 0, times 0 [ 255.105942][T12062] CPU: 0 UID: 0 PID: 12062 Comm: syz.0.1405 Not tainted syzkaller #0 PREEMPT(full) [ 255.105964][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 255.105976][T12062] Call Trace: [ 255.105984][T12062] [ 255.105993][T12062] dump_stack_lvl+0xe8/0x150 [ 255.106029][T12062] should_fail_ex+0x410/0x560 [ 255.106064][T12062] should_failslab+0xa8/0x100 [ 255.106089][T12062] ? skb_clone+0x212/0x3a0 [ 255.106118][T12062] kmem_cache_alloc_noprof+0xa1/0x600 [ 255.106156][T12062] ? lock_acquire+0x115/0x350 [ 255.106179][T12062] ? skb_clone+0x212/0x3a0 [ 255.106215][T12062] skb_clone+0x212/0x3a0 [ 255.106240][T12062] ? dev_queue_xmit_nit+0x25c/0xac0 [ 255.106269][T12062] dev_queue_xmit_nit+0x28d/0xac0 [ 255.106295][T12062] ? dev_queue_xmit_nit+0x2d/0xac0 [ 255.106328][T12062] dev_hard_start_xmit+0x1c1/0x830 [ 255.106378][T12062] __dev_queue_xmit+0x14c0/0x3820 [ 255.106407][T12062] ? ___sys_sendmsg+0x2a5/0x360 [ 255.106432][T12062] ? __x64_sys_sendmsg+0x1b1/0x290 [ 255.106473][T12062] ? __dev_queue_xmit+0x29b/0x3820 [ 255.106514][T12062] ? __pfx___dev_queue_xmit+0x10/0x10 [ 255.106558][T12062] ? __copy_skb_header+0xa3/0x4a0 [ 255.106599][T12062] ? __skb_clone+0x449/0x6c0 [ 255.106632][T12062] ? skb_clone+0x246/0x3a0 [ 255.106665][T12062] __netlink_deliver_tap+0x4f1/0x6e0 [ 255.106695][T12062] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.106718][T12062] netlink_deliver_tap+0x19c/0x1b0 [ 255.106739][T12062] netlink_sendskb+0x68/0x140 [ 255.106769][T12062] netlink_rcv_skb+0x2a4/0x4a0 [ 255.106800][T12062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.106827][T12062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.106872][T12062] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.106892][T12062] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.106918][T12062] netlink_unicast+0x7bd/0x940 [ 255.106958][T12062] netlink_sendmsg+0x813/0xb40 [ 255.106990][T12062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.107021][T12062] ? apparmor_socket_sendmsg+0x98/0x360 [ 255.107047][T12062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.107066][T12062] sock_sendmsg_nosec+0x13a/0x180 [ 255.107091][T12062] ____sys_sendmsg+0x54e/0x850 [ 255.107133][T12062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.107171][T12062] ? import_iovec+0x73/0xa0 [ 255.107201][T12062] ___sys_sendmsg+0x2a5/0x360 [ 255.107227][T12062] ? __lock_acquire+0x747/0x2de0 [ 255.107253][T12062] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.107322][T12062] ? __fget_files+0x2a/0x420 [ 255.107347][T12062] ? __fget_files+0x3a2/0x420 [ 255.107386][T12062] __x64_sys_sendmsg+0x1b1/0x290 [ 255.107415][T12062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.107467][T12062] do_syscall_64+0x166/0x520 [ 255.107493][T12062] ? trace_irq_disable+0x3b/0x140 [ 255.107514][T12062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.107535][T12062] ? clear_bhb_loop+0x70/0xc0 [ 255.107559][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.107579][T12062] RIP: 0033:0x7f95c819e159 [ 255.107599][T12062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.107616][T12062] RSP: 002b:00007f95c9008028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.107638][T12062] RAX: ffffffffffffffda RBX: 00007f95c8425fa0 RCX: 00007f95c819e159 [ 255.107653][T12062] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 255.107665][T12062] RBP: 00007f95c9008090 R08: 0000000000000000 R09: 0000000000000000 [ 255.107678][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.107690][T12062] R13: 00007f95c8426038 R14: 00007f95c8425fa0 R15: 00007fffbbef91c8 [ 255.107724][T12062] [ 255.594815][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1410'. [ 255.691828][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.691855][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.694957][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.694980][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.985208][T12122] veth0: entered promiscuous mode [ 257.065028][T12119] FAULT_INJECTION: forcing a failure. [ 257.065028][T12119] name failslab, interval 1, probability 0, space 0, times 0 [ 257.065067][T12119] CPU: 0 UID: 0 PID: 12119 Comm: syz.2.1420 Not tainted syzkaller #0 PREEMPT(full) [ 257.065090][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.065103][T12119] Call Trace: [ 257.065119][T12119] [ 257.065128][T12119] dump_stack_lvl+0xe8/0x150 [ 257.065163][T12119] should_fail_ex+0x410/0x560 [ 257.065194][T12119] should_failslab+0xa8/0x100 [ 257.065219][T12119] ? skb_clone+0x212/0x3a0 [ 257.065248][T12119] kmem_cache_alloc_noprof+0xa1/0x600 [ 257.065277][T12119] ? lock_acquire+0x115/0x350 [ 257.065300][T12119] ? skb_clone+0x212/0x3a0 [ 257.065335][T12119] skb_clone+0x212/0x3a0 [ 257.065361][T12119] ? dev_queue_xmit_nit+0x25c/0xac0 [ 257.065391][T12119] dev_queue_xmit_nit+0x28d/0xac0 [ 257.065417][T12119] ? dev_queue_xmit_nit+0x2d/0xac0 [ 257.065452][T12119] dev_hard_start_xmit+0x1c1/0x830 [ 257.065501][T12119] __dev_queue_xmit+0x14c0/0x3820 [ 257.065529][T12119] ? ___sys_sendmsg+0x2a5/0x360 [ 257.065554][T12119] ? __x64_sys_sendmsg+0x1b1/0x290 [ 257.065594][T12119] ? __dev_queue_xmit+0x29b/0x3820 [ 257.065634][T12119] ? __pfx___dev_queue_xmit+0x10/0x10 [ 257.065676][T12119] ? __copy_skb_header+0xa3/0x4a0 [ 257.065723][T12119] ? __skb_clone+0x449/0x6c0 [ 257.065758][T12119] ? skb_clone+0x246/0x3a0 [ 257.065790][T12119] __netlink_deliver_tap+0x4f1/0x6e0 [ 257.065823][T12119] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.065846][T12119] netlink_deliver_tap+0x19c/0x1b0 [ 257.065869][T12119] netlink_sendskb+0x68/0x140 [ 257.065901][T12119] netlink_rcv_skb+0x2a4/0x4a0 [ 257.065933][T12119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.065961][T12119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.066007][T12119] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.066027][T12119] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.066053][T12119] netlink_unicast+0x7bd/0x940 [ 257.066093][T12119] netlink_sendmsg+0x813/0xb40 [ 257.066133][T12119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.066163][T12119] ? apparmor_socket_sendmsg+0x98/0x360 [ 257.066189][T12119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.066206][T12119] sock_sendmsg_nosec+0x13a/0x180 [ 257.066230][T12119] ____sys_sendmsg+0x54e/0x850 [ 257.066263][T12119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.066306][T12119] ? import_iovec+0x73/0xa0 [ 257.066336][T12119] ___sys_sendmsg+0x2a5/0x360 [ 257.066362][T12119] ? __lock_acquire+0x747/0x2de0 [ 257.066388][T12119] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.066459][T12119] ? __fget_files+0x2a/0x420 [ 257.066486][T12119] ? __fget_files+0x3a2/0x420 [ 257.066525][T12119] __x64_sys_sendmsg+0x1b1/0x290 [ 257.066556][T12119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.066610][T12119] do_syscall_64+0x166/0x520 [ 257.066634][T12119] ? trace_irq_disable+0x3b/0x140 [ 257.066654][T12119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.066674][T12119] ? clear_bhb_loop+0x70/0xc0 [ 257.066697][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.066716][T12119] RIP: 0033:0x7f57bc39e159 [ 257.066735][T12119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.066752][T12119] RSP: 002b:00007f57bd1de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.066775][T12119] RAX: ffffffffffffffda RBX: 00007f57bc625fa0 RCX: 00007f57bc39e159 [ 257.066790][T12119] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 257.066802][T12119] RBP: 00007f57bd1de090 R08: 0000000000000000 R09: 0000000000000000 [ 257.066814][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.066825][T12119] R13: 00007f57bc626038 R14: 00007f57bc625fa0 R15: 00007ffeebeb3718 [ 257.066860][T12119] [ 257.248131][T12129] xt_hashlimit: invalid rate [ 257.258564][T12129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1421'. [ 257.499680][T12128] syzkaller1: entered promiscuous mode [ 257.499708][T12128] syzkaller1: entered allmulticast mode [ 258.174016][T12135] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 258.195549][T12135] bond3 (unregistering): Released all slaves [ 258.316349][T12127] veth0: left promiscuous mode [ 258.573478][T12138] syzkaller1: entered promiscuous mode [ 258.573504][T12138] syzkaller1: entered allmulticast mode [ 258.758224][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 258.965521][T12145] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 259.011892][T12148] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 259.081795][T12145] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.273991][T12150] bond10: (slave veth7): Enslaving as an active interface with a down link [ 259.286099][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 259.320372][T12145] v: left allmulticast mode [ 259.352135][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 259.538657][T12145] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 259.602708][T12155] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 259.622271][T12155] bond10: (slave batadv2): making interface the new active one [ 259.626593][T12155] batadv2: entered promiscuous mode [ 259.642188][T12155] bond10: (slave batadv2): Enslaving as an active interface with an up link [ 259.865983][ T1237] wg2 speed is unknown, defaulting to 1000 [ 260.005775][T12173] sit0: entered promiscuous mode [ 260.005799][T12173] sit0: entered allmulticast mode [ 260.046164][T12183] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 260.046943][T12181] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 260.144318][T12176] netlink: 'syz.0.1433': attribute type 29 has an invalid length. [ 260.144343][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1433'. [ 260.144567][T12176] FAULT_INJECTION: forcing a failure. [ 260.144567][T12176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.144596][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.0.1433 Not tainted syzkaller #0 PREEMPT(full) [ 260.144623][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.144635][T12176] Call Trace: [ 260.144643][T12176] [ 260.144652][T12176] dump_stack_lvl+0xe8/0x150 [ 260.144686][T12176] should_fail_ex+0x410/0x560 [ 260.144715][T12176] _copy_to_user+0x31/0xb0 [ 260.144745][T12176] simple_read_from_buffer+0xe1/0x170 [ 260.144778][T12176] proc_fail_nth_read+0x1bb/0x230 [ 260.144796][T12176] ? common_file_perm+0x20e/0x2b0 [ 260.144825][T12176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.144848][T12176] ? rw_verify_area+0x24a/0x4c0 [ 260.144879][T12176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.144898][T12176] vfs_read+0x213/0xa80 [ 260.144935][T12176] ? __pfx___mutex_lock+0x10/0x10 [ 260.144963][T12176] ? __pfx_vfs_read+0x10/0x10 [ 260.145003][T12176] ? __fget_files+0x2a/0x420 [ 260.145035][T12176] ? __fget_files+0x3a2/0x420 [ 260.145059][T12176] ? __fget_files+0x2a/0x420 [ 260.145096][T12176] ksys_read+0x150/0x270 [ 260.145126][T12176] ? __pfx_ksys_read+0x10/0x10 [ 260.145168][T12176] do_syscall_64+0x166/0x520 [ 260.145195][T12176] ? trace_irq_disable+0x3b/0x140 [ 260.145215][T12176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.145234][T12176] ? clear_bhb_loop+0x70/0xc0 [ 260.145259][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.145278][T12176] RIP: 0033:0x7f95c815e98e [ 260.145298][T12176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.145314][T12176] RSP: 002b:00007f95c9007fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.145338][T12176] RAX: ffffffffffffffda RBX: 00007f95c90086c0 RCX: 00007f95c815e98e [ 260.145352][T12176] RDX: 000000000000000f RSI: 00007f95c90080a0 RDI: 0000000000000006 [ 260.145366][T12176] RBP: 00007f95c9008090 R08: 0000000000000000 R09: 0000000000000000 [ 260.145379][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.145416][T12176] R13: 00007f95c8426038 R14: 00007f95c8425fa0 R15: 00007fffbbef91c8 [ 260.145452][T12176] [ 260.848357][T12200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.941008][T12203] tipc: Enabling of bearer rejected, failed to enable media [ 261.027667][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 261.027897][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 261.028098][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 261.028295][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 261.028504][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 263.112321][T12244] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 263.112345][T12244] __nla_validate_parse: 61 callbacks suppressed [ 263.112358][T12244] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1451'. [ 263.112373][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 263.221073][T12246] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1450'. [ 263.221097][T12246] tc_dump_action: action bad kind [ 263.387683][T12264] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.464278][T12269] syzkaller0: entered promiscuous mode [ 263.464303][T12269] syzkaller0: entered allmulticast mode [ 263.483126][T12269] tipc: Enabling of bearer rejected, already enabled [ 263.532670][T12269] tipc: Resetting bearer [ 263.614820][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 263.666185][T12277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1458'. [ 263.725605][T12281] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1458'. [ 263.771639][T12284] bridge0: port 3(ip6gretap0) entered blocking state [ 263.775791][T12284] bridge0: port 3(ip6gretap0) entered disabled state [ 263.775955][T12284] ip6gretap0: entered allmulticast mode [ 263.804870][T12284] ip6gretap0: entered promiscuous mode [ 263.812996][T12284] bridge0: port 3(ip6gretap0) entered blocking state [ 263.813100][T12284] bridge0: port 3(ip6gretap0) entered forwarding state [ 263.879731][T12286] netlink: 'syz.3.1460': attribute type 22 has an invalid length. [ 263.879755][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 263.879996][T12286] netlink: 'syz.3.1460': attribute type 22 has an invalid length. [ 263.880010][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 264.078640][T12295] netlink: 'syz.4.1464': attribute type 30 has an invalid length. [ 264.243829][T12302] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 [ 264.393859][T12301] tipc: Enabling of bearer rejected, already enabled [ 264.402288][T12301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 264.490136][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 264.619930][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 264.677481][T12327] ip6t_srh: unknown srh invflags BA61 [ 264.827230][T12327] syzkaller0: entered promiscuous mode [ 264.827253][T12327] syzkaller0: entered allmulticast mode [ 265.813050][T12366] gre3: entered promiscuous mode [ 265.813075][T12366] gre3: entered allmulticast mode [ 266.452912][T12384] ip_tables: iptables: counters copy to user failed while replacing table [ 267.167182][T12398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.207444][T12399] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.244697][T12369] bridge0: port 3(ip6gretap0) entered disabled state [ 267.252924][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.253665][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.888726][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.911965][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.129569][T12369] __nla_validate_parse: 129 callbacks suppressed [ 268.129595][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.129637][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.171230][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.171286][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.199412][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.199466][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.223965][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.224023][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.224042][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.224057][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1479'. [ 268.362308][T12369] tipc: Resetting bearer [ 268.638664][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.638701][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.638726][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 52517 - 0 [ 268.638750][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 268.638787][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.638811][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.638835][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 52517 - 0 [ 268.638858][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 268.638893][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.638917][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.638939][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 52517 - 0 [ 268.638963][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 268.639005][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.639032][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.639055][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 52517 - 0 [ 268.639078][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 268.646461][T11332] wg2 speed is unknown, defaulting to 1000 [ 268.647457][T11332] s: Port: 1 Link DOWN [ 269.261910][T12428] wg2 speed is unknown, defaulting to 1000 [ 269.427062][T12440] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 271.604121][T12489] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 271.667862][T12493] ip6tnl2: entered allmulticast mode [ 271.677438][ T37] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.677732][ T37] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.699735][T11332] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.735011][T12483] syzkaller0: entered promiscuous mode [ 271.735037][T12483] syzkaller0: entered allmulticast mode [ 271.845115][T12489] bond9: option primary_reselect: invalid value (6) [ 271.871242][T12489] bond9 (unregistering): Released all slaves [ 272.099837][T11332] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 272.187132][T11332] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 272.259039][T12506] wg2 speed is unknown, defaulting to 1000 [ 272.626124][T12514] netlink: 'syz.1.1514': attribute type 29 has an invalid length. [ 273.214346][T12536] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 273.489865][T12541] netlink: 'syz.4.1519': attribute type 20 has an invalid length. [ 273.713348][T12551] __nla_validate_parse: 94 callbacks suppressed [ 273.713371][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 273.802287][T12551] veth8: entered promiscuous mode [ 273.802313][T12551] veth8: entered allmulticast mode [ 273.811198][T12551] bridge5: port 1(veth8) entered blocking state [ 273.811449][T12551] bridge5: port 1(veth8) entered disabled state [ 273.833242][T12551] bridge5: port 1(veth8) entered blocking state [ 273.834784][T12551] bridge5: port 1(veth8) entered forwarding state [ 273.986076][T12561] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1523'. [ 273.988239][T12559] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1523'. [ 274.028596][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 274.034205][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 274.034231][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 274.098526][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 274.123008][T10661] bridge5: port 1(veth8) entered disabled state [ 274.232987][T12565] netlink: 'syz.2.1526': attribute type 30 has an invalid length. [ 274.372919][T12572] tipc: New replicast peer: 127.0.0.1 [ 274.374419][T12572] tipc: Enabled bearer , priority 10 [ 275.160723][T12604] netlink: 'syz.1.1532': attribute type 12 has an invalid length. [ 275.500519][T12606] netlink: 'syz.3.1533': attribute type 1 has an invalid length. [ 275.985213][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.012568][T12626] netlink: 'syz.2.1539': attribute type 2 has an invalid length. [ 276.012833][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1536'. [ 276.093177][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 276.214219][T12626] ´: entered promiscuous mode [ 276.303248][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 276.388537][T12631] xt_TCPMSS: Only works on TCP SYN packets [ 276.558881][T12631] ip6gretap0: left allmulticast mode [ 276.558912][T12631] ip6gretap0: left promiscuous mode [ 276.559170][T12631] bridge0: port 3(ip6gretap0) entered disabled state [ 276.603091][T12631] bridge_slave_1: left promiscuous mode [ 276.603354][T12631] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.638495][T12631] bridge_slave_0: left allmulticast mode [ 276.638524][T12631] bridge_slave_0: left promiscuous mode [ 276.638751][T12631] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.432379][T12653] netlink: zone id is out of range [ 277.432399][T12653] netlink: zone id is out of range [ 277.432406][T12653] netlink: zone id is out of range [ 277.432414][T12653] netlink: zone id is out of range [ 277.432422][T12653] netlink: zone id is out of range [ 277.432429][T12653] netlink: zone id is out of range [ 277.432659][T12653] netlink: zone id is out of range [ 277.432671][T12653] netlink: zone id is out of range [ 277.432680][T12653] netlink: zone id is out of range [ 277.432688][T12653] netlink: zone id is out of range [ 278.138520][T12678] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 278.138546][T12678] syzkaller1: Linktype set failed because interface is up [ 279.163159][T12707] __nla_validate_parse: 10 callbacks suppressed [ 279.163183][T12707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1561'. [ 279.165944][T12707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1561'. [ 280.049753][ T1971] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,1024B). Runtime 30 seconds [ 280.050316][ T1971] block nbd0: Possible stuck request ffff888026bb01c0: control (read@1024,1024B). Runtime 30 seconds [ 280.050350][ T1971] block nbd0: Possible stuck request ffff888026bb0380: control (read@2048,1024B). Runtime 30 seconds [ 280.050374][ T1971] block nbd0: Possible stuck request ffff888026bb0540: control (read@3072,1024B). Runtime 30 seconds [ 280.109177][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'. [ 280.128284][T12729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1568'. [ 281.290057][T12757] syzkaller0: entered promiscuous mode [ 281.290081][T12757] syzkaller0: entered allmulticast mode [ 281.643090][T12788] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 281.741653][T12788] bond6: option mode: invalid value (7) [ 281.763320][T12788] bond6 (unregistering): Released all slaves [ 281.838763][T12798] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 281.838808][T12798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 282.026402][T12806] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1584'. [ 282.070132][T12808] netlink: 'syz.0.1585': attribute type 23 has an invalid length. [ 282.070159][T12808] netlink: 'syz.0.1585': attribute type 11 has an invalid length. [ 282.092648][T12809] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1584'. [ 282.092894][T12811] raw_sendmsg: syz.4.1584 forgot to set AF_INET. Fix it! [ 282.193082][T12798] dummy0: entered promiscuous mode [ 282.425478][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1589'. [ 282.425510][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 282.541466][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 282.551643][T12827] netlink: 'syz.4.1590': attribute type 9 has an invalid length. [ 282.842457][ T5879] udevd[5879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 283.099649][T12851] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 283.869956][T12866] netlink: 'syz.3.1596': attribute type 3 has an invalid length. [ 283.899021][T12866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.780641][T12905] IPVS: set_ctl: invalid protocol: 60 172.20.20.30:20000 [ 284.782757][T12905] macvlan1: entered promiscuous mode [ 284.783608][T12905] macvlan1: entered allmulticast mode [ 284.783628][T12905] veth1_vlan: entered allmulticast mode [ 284.817499][T12904] netlink: 'syz.0.1604': attribute type 21 has an invalid length. [ 284.817524][T12904] netlink: 'syz.0.1604': attribute type 22 has an invalid length. [ 284.817538][T12904] netlink: 'syz.0.1604': attribute type 23 has an invalid length. [ 284.817551][T12904] netlink: 'syz.0.1604': attribute type 25 has an invalid length. [ 284.817566][T12904] __nla_validate_parse: 2 callbacks suppressed [ 284.817578][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'. [ 284.984805][T12880] bond11: option arp_all_targets: invalid value (3) [ 285.001206][T12880] bond11 (unregistering): Released all slaves [ 285.184536][T12914] bond6: ARP target 9.0.0.0 is already present [ 285.184568][T12914] bond6: option arp_ip_target: invalid value (9) [ 285.203232][T12914] bond6 (unregistering): Released all slaves [ 285.268515][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 285.556311][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1610'. [ 285.566262][T12927] syzkaller0: entered allmulticast mode [ 285.659028][T12944] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.659139][T12944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.659150][T12944] IPv6: NLM_F_CREATE should be set when creating new route [ 285.659200][T12944] IPv6: NLM_F_CREATE should be set when creating new route [ 285.659228][T12944] IPv6: NLM_F_CREATE should be set when creating new route [ 285.866070][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 285.913480][T12957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 285.930841][T12941] sch_tbf: burst 0 is lower than device veth3 mtu (1514) ! [ 286.169280][T12947] syzkaller0: entered promiscuous mode [ 286.169308][T12947] syzkaller0: entered allmulticast mode [ 286.731617][T12985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1616'. [ 287.130568][T13000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1618'. [ 289.364721][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 289.407435][ T1165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.408933][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.418176][ T1165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.419183][ T1165] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.421171][T13027] netlink: 65544 bytes leftover after parsing attributes in process `syz.1.1625'. [ 289.543952][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'. [ 289.704409][T13048] validate_nla: 2 callbacks suppressed [ 289.704432][T13048] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 289.704465][T13048] net_ratelimit: 496 callbacks suppressed [ 289.704477][T13048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.814601][T13050] netlink: 'syz.1.1628': attribute type 29 has an invalid length. [ 290.234719][T13071] __nla_validate_parse: 1 callbacks suppressed [ 290.234742][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'. [ 290.636546][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1640'. [ 290.713254][T13085] bond6: Unable to set up delay as MII monitoring is disabled [ 290.730623][T13085] bond6 (unregistering): Released all slaves [ 291.157858][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 291.210092][T13104] bridge0: port 3(vlan0) entered blocking state [ 291.211897][T13104] bridge0: port 3(vlan0) entered disabled state [ 291.212071][T13104] vlan0: entered allmulticast mode [ 291.212088][T13104] geneve0: entered allmulticast mode [ 291.246407][T13104] vlan0: entered promiscuous mode [ 291.246431][T13104] geneve0: entered promiscuous mode [ 291.609293][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 291.632483][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 291.646135][T13140] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 291.768281][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 292.230532][T13159] netlink: 'syz.0.1661': attribute type 1 has an invalid length. [ 292.289353][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 292.313548][T13172] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 292.318571][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 292.398168][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 292.398197][T13179] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 292.572024][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 292.634096][T13183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.655862][T13192] netlink: 'syz.3.1667': attribute type 10 has an invalid length. [ 292.678358][T13192] syz_tun: entered promiscuous mode [ 293.282572][T13209] nbd: must specify at least one socket [ 293.383450][T13212] bond11 (unregistering): Released all slaves [ 293.680791][T13227] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 293.791806][T13232] tipc: Enabling of bearer rejected, failed to enable media [ 293.940573][T13239] syzkaller0: entered promiscuous mode [ 293.940599][T13239] syzkaller0: entered allmulticast mode [ 294.636768][T13260] x_tables: duplicate underflow at hook 1 [ 294.706497][T13265] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 294.859049][T13265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.900977][T13267] bond5: (slave geneve3): making interface the new active one [ 294.904036][T13267] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 295.075864][T13277] bond4: option ad_user_port_key: invalid value (65535) [ 295.075884][T13277] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 295.095434][T13277] bond4 (unregistering): Released all slaves [ 295.525848][T13300] __nla_validate_parse: 10 callbacks suppressed [ 295.525870][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1695'. [ 295.606607][T13303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 296.291095][T13321] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 296.294286][T13321] bond9 (unregistering): Released all slaves [ 296.796072][T13346] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 296.796096][T13346] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1708'. [ 297.009689][T13357] tipc: Enabling of bearer rejected, already enabled [ 297.120036][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 297.224694][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 297.244458][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 297.726327][T13390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'. [ 297.736454][T13390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'. [ 297.761425][T13390] netlink: 'syz.0.1717': attribute type 4 has an invalid length. [ 297.761451][T13390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1717'. [ 297.762390][T13391] netlink: 'syz.0.1717': attribute type 4 has an invalid length. [ 297.762409][T13391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1717'. [ 298.295451][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'. [ 298.636144][T13409] pim6reg: entered allmulticast mode [ 298.872706][T13414] tipc: Resetting bearer [ 298.886128][T13414] syzkaller0: left promiscuous mode [ 298.886153][T13414] syzkaller0: left allmulticast mode [ 299.003604][T13420] openvswitch: netlink: Key type 9220 is out of range max 32 [ 299.018742][T13420] openvswitch: netlink: Key type 9220 is out of range max 32 [ 299.351169][T13407] pim6reg: left allmulticast mode [ 299.563720][T13445] vlan5: entered allmulticast mode [ 299.563743][T13445] bridge0: entered allmulticast mode [ 299.564425][T13454] bridge0: port 1(erspan0) entered blocking state [ 299.564634][T13454] bridge0: port 1(erspan0) entered disabled state [ 299.564788][T13454] erspan0: entered allmulticast mode [ 299.621171][T13454] erspan0: entered promiscuous mode [ 300.271260][T13481] xt_connbytes: Forcing CT accounting to be enabled [ 300.271460][T13481] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 300.438290][T13481] bond11: entered promiscuous mode [ 300.438339][T13481] bond11: entered allmulticast mode [ 300.439867][T13481] 8021q: adding VLAN 0 to HW filter on device bond11 [ 300.440715][T13491] bond_slave_0: entered promiscuous mode [ 300.440732][T13491] bond_slave_0: entered allmulticast mode [ 300.456378][T13491] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 300.487144][T13492] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 300.618999][T13494] __nla_validate_parse: 6 callbacks suppressed [ 300.619021][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1744'. [ 300.873761][T13502] netlink: 'syz.1.1745': attribute type 1 has an invalid length. [ 300.927773][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'. [ 300.928784][T13502] 8021q: adding VLAN 0 to HW filter on device bond12 [ 300.936263][T13502] bridge6: entered promiscuous mode [ 300.936279][T13502] bridge6: entered allmulticast mode [ 300.967214][T13502] bond12: (slave bridge6): making interface the new active one [ 300.968076][T13502] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 301.263366][T13510] netlink: 'syz.4.1747': attribute type 4 has an invalid length. [ 301.427347][T13520] IPVS: Error connecting to the multicast addr [ 301.429275][T13520] IPVS: lblc: TCP 127.0.0.1:21 - no destination available [ 301.789324][T13533] C: renamed from veth1_to_team (while UP) [ 301.791920][T13533] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 301.791935][T13533] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1753'. [ 301.794426][T13533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 302.591638][T13565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1760'. [ 302.628216][T10661] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.735697][T13568] block nbd0: reconnected socket [ 302.735720][T13568] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.804184][ T5627] block nbd0: Receive control failed (result -32) [ 302.955265][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 302.955291][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'. [ 302.977002][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 303.003251][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 303.026158][T13570] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 303.038265][T13570] bond6 (unregistering): Released all slaves [ 303.084300][T13581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.114235][T13581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 303.114463][T13581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 303.814029][T13597] wg2 speed is unknown, defaulting to 1000 [ 303.929943][T13612] syzkaller0: entered promiscuous mode [ 303.929969][T13612] syzkaller0: entered allmulticast mode [ 303.930493][T13612] tipc: Resetting bearer [ 304.564657][T13635] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 304.766313][T13637] dvmrp0: entered allmulticast mode [ 304.922664][T13649] netlink: 'syz.2.1782': attribute type 10 has an invalid length. [ 304.943145][T13649] syz_tun: entered promiscuous mode [ 304.979711][T13649] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 305.014463][T13651] gretap1: entered promiscuous mode [ 305.030920][T13656] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 305.050618][T13640] xt_l2tp: v2 doesn't support IP mode [ 305.085017][T13658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.104514][T13658] tipc: New replicast peer: 127.0.0.1 [ 305.104854][T13658] tipc: Enabled bearer , priority 26 [ 305.399406][T13669] netlink: 'syz.0.1789': attribute type 6 has an invalid length. [ 305.447737][T13673] x_tables: unsorted entry at hook 2 [ 305.461927][T13672] veth0: entered promiscuous mode [ 305.482960][T13670] veth0: left promiscuous mode [ 305.568947][T13678] netlink: 'syz.1.1792': attribute type 10 has an invalid length. [ 305.586071][T13678] team0: Port device dummy0 added [ 305.591171][T13678] netlink: 'syz.1.1792': attribute type 10 has an invalid length. [ 305.612731][T13678] team0: Port device dummy0 removed [ 305.863241][T13691] __nla_validate_parse: 6 callbacks suppressed [ 305.863261][T13691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1795'. [ 305.865691][T13688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1796'. [ 305.922149][T13696] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1795'. [ 306.225829][T13708] ip_tables: iptables: counters copy to user failed while replacing table [ 306.256490][T13711] ip_tables: iptables: counters copy to user failed while replacing table [ 306.383397][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 306.397151][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 306.710531][T13753] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1807'. [ 306.756257][T13753] veth0: entered promiscuous mode [ 307.073997][T13750] veth0: left promiscuous mode [ 307.389374][T13771] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1812'. [ 307.389638][T13771] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1812'. [ 307.389874][T13771] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1812'. [ 307.390150][T13771] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1812'. [ 307.489144][T13781] wg2 speed is unknown, defaulting to 1000 [ 308.702781][T13812] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 308.786058][T13812] bond4: entered promiscuous mode [ 308.802355][T13812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.426097][T13829] vti0: entered promiscuous mode [ 309.936053][T13852] ip_tables: iptables: counters copy to user failed while replacing table [ 310.130312][ T1971] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,1024B). Runtime 60 seconds [ 310.131368][ T1971] block nbd0: Possible stuck request ffff888026bb01c0: control (read@1024,1024B). Runtime 60 seconds [ 310.131431][ T1971] block nbd0: Possible stuck request ffff888026bb0380: control (read@2048,1024B). Runtime 60 seconds [ 310.131481][ T1971] block nbd0: Possible stuck request ffff888026bb0540: control (read@3072,1024B). Runtime 60 seconds [ 310.133456][ T1971] block nbd0: Dead connection, failed to find a fallback [ 310.133474][ T1971] block nbd0: shutting down sockets [ 310.134304][ T1971] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.135328][ T1971] Buffer I/O error on dev nbd0, logical block 3, async page read [ 310.135400][ T1971] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.135425][ T1971] Buffer I/O error on dev nbd0, logical block 2, async page read [ 310.135447][ T1971] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.135470][ T1971] Buffer I/O error on dev nbd0, logical block 1, async page read [ 310.135491][ T1971] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.135524][ T1971] Buffer I/O error on dev nbd0, logical block 0, async page read [ 310.138455][ T1971] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 310.138481][ T1971] Buffer I/O error on dev nbd0, logical block 0, async page read [ 310.138505][ T1971] Buffer I/O error on dev nbd0, logical block 1, async page read [ 310.138529][ T1971] Buffer I/O error on dev nbd0, logical block 2, async page read [ 310.138543][ T1971] Buffer I/O error on dev nbd0, logical block 3, async page read [ 310.140650][ T1971] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 310.140676][ T1971] Buffer I/O error on dev nbd0, logical block 0, async page read [ 310.140691][ T1971] Buffer I/O error on dev nbd0, logical block 1, async page read [ 310.140881][ T1971] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.140990][ T1971] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.141094][ T1971] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.141199][ T1971] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 310.145717][ T6885] ldm_validate_partition_table(): Disk read failed. [ 310.148911][ T6885] Dev nbd0: unable to read RDB block 0 [ 310.154125][ T6885] nbd0: unable to read partition table [ 310.194001][ T6885] ldm_validate_partition_table(): Disk read failed. [ 310.200933][ T6885] Dev nbd0: unable to read RDB block 0 [ 310.204775][ T6885] nbd0: unable to read partition table [ 311.054441][T13888] netlink: 'syz.2.1839': attribute type 2 has an invalid length. [ 311.081611][T13886] __nla_validate_parse: 68 callbacks suppressed [ 311.081643][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 311.081664][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 311.277306][T13886] ip6gre2: entered promiscuous mode [ 311.277330][T13886] ip6gre2: entered allmulticast mode [ 311.322054][T13890] bond9 (unregistering): Released all slaves [ 311.414891][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 311.415544][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 311.441693][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 311.475119][ T1165] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.475453][ T1165] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.496988][ T44] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.661718][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 311.962337][T13923] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1849'. [ 311.980428][T13923] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1849'. [ 312.335820][T13934] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1852'. [ 312.367010][ T44] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.367195][ T44] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.409629][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 312.466615][T13945] ip6t_rt: too many addresses specified [ 312.507776][T13942] erspan0: left allmulticast mode [ 312.507805][T13942] erspan0: left promiscuous mode [ 312.508085][T13942] bridge2: port 1(erspan0) entered disabled state [ 312.540429][T13942] bridge4: port 1(erspan0) entered blocking state [ 312.540590][T13942] bridge4: port 1(erspan0) entered disabled state [ 312.540753][T13942] erspan0: entered allmulticast mode [ 312.544529][T13942] erspan0: entered promiscuous mode [ 312.548906][T13942] bridge4: port 1(erspan0) entered blocking state [ 312.549021][T13942] bridge4: port 1(erspan0) entered forwarding state [ 312.565444][T13950] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 312.571429][T13950] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 312.580574][T13950] IPVS: Unknown mcast interface: macsec0 [ 312.908644][T13960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.911545][T13960] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 313.128927][T13968] netlink: 'syz.1.1863': attribute type 1 has an invalid length. [ 313.174163][T13968] bond14: entered promiscuous mode [ 313.174797][T13968] 8021q: adding VLAN 0 to HW filter on device bond14 [ 313.881417][T13999] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 314.010036][T13999] 8021q: adding VLAN 0 to HW filter on device bond15 [ 314.014854][T14007] netlink: 'syz.0.1867': attribute type 5 has an invalid length. [ 314.102028][T14009] bond15: (slave geneve0): making interface the new active one [ 314.104466][T14009] bond15: (slave geneve0): Enslaving as an active interface with an up link [ 314.167006][T10663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.167265][T10663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.167417][T10663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.167452][T10663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.344857][T14048] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 315.345122][T14049] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 315.646890][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.828850][T14071] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 316.312132][T14093] __nla_validate_parse: 11 callbacks suppressed [ 316.312157][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 316.772848][T14112] tipc: Enabling of bearer rejected, already enabled [ 316.900763][T14120] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1902'. [ 316.902561][T14119] syzkaller1: entered promiscuous mode [ 316.902580][T14119] syzkaller1: entered allmulticast mode [ 317.009015][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 317.011876][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 317.079117][T14131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1900'. [ 317.079857][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 317.425491][T14139] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 317.550986][T14139] team0 (unregistering): Port device bridge7 removed [ 317.745333][T14149] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1910'. [ 317.936108][T14148] smbdirect: ib_dev[s] removed [ 317.986231][T14155] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 318.110410][T14158] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1913'. [ 318.193745][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 318.223630][T14158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.425814][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 318.606036][T14173] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 318.631717][T14173] bond5 (unregistering): Released all slaves [ 318.912118][T14173] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 318.942631][T14173] bond5 (unregistering): Released all slaves [ 319.113616][T14208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.293169][T14173] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 319.303091][T14173] bond5 (unregistering): Released all slaves [ 319.797783][T14248] netlink: 'syz.4.1935': attribute type 9 has an invalid length. [ 319.925382][T14252] xt_l2tp: unknown flags: e7 [ 320.074503][T14262] bond_slave_0: entered allmulticast mode [ 320.260855][T14266] xt_hashlimit: size too large, truncated to 1048576 [ 320.759453][T14284] netlink: 'syz.3.1947': attribute type 15 has an invalid length. [ 320.841326][T14284] netlink: 'syz.3.1947': attribute type 15 has an invalid length. [ 320.907643][ T13] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 320.907682][ T13] netdevsim netdevsim3 netdevsim0: set [0, 2] type 1 family 0 port 60387 - 0 [ 320.907786][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 320.907811][ T13] netdevsim netdevsim3 netdevsim3: set [0, 2] type 1 family 0 port 60387 - 0 [ 320.907844][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 320.907867][ T13] netdevsim netdevsim3 netdevsim2: set [0, 2] type 1 family 0 port 60387 - 0 [ 320.907900][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 320.907924][ T13] netdevsim netdevsim3 netdevsim1: set [0, 2] type 1 family 0 port 60387 - 0 [ 321.345268][T14313] __nla_validate_parse: 10 callbacks suppressed [ 321.345292][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 321.369904][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 321.369930][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 321.369956][T14315] netlink: 'syz.3.1952': attribute type 15 has an invalid length. [ 321.372816][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 321.372837][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 321.372860][T14315] netlink: 'syz.3.1952': attribute type 15 has an invalid length. [ 321.569165][T14313] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.1954'. [ 321.721956][T14325] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1956'. [ 321.735167][T14325] smc: net device vlan1 applied user defined pnetid SYZ2 [ 321.875674][T14331] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 321.970937][T14331] bond7: entered promiscuous mode [ 321.971235][T14331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.983756][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'. [ 322.072772][T14331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.090013][T14331] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 322.090040][T14331] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 322.170633][T14331] bond7: (slave wireguard0): making interface the new active one [ 322.170661][T14331] wireguard0: entered promiscuous mode [ 322.196605][T14331] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 323.118973][T14370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1964'. [ 323.330376][T14372] tc_dump_action: action bad kind [ 323.330842][T14372] netlink: 'syz.2.1965': attribute type 2 has an invalid length. [ 323.654359][T14382] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1968'. [ 324.134534][T14401] netlink: 'syz.2.1973': attribute type 21 has an invalid length. [ 324.206938][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 324.381803][T14409] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 324.468521][T14412] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 325.012663][T14439] tipc: Enabled bearer , priority 0 [ 325.207789][T14452] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.207906][T14452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.207916][T14452] IPv6: NLM_F_CREATE should be set when creating new route [ 325.207962][T14452] IPv6: NLM_F_CREATE should be set when creating new route [ 325.207989][T14452] IPv6: NLM_F_CREATE should be set when creating new route [ 325.286566][T14437] tipc: Disabling bearer [ 325.780570][T14478] vlan0: entered allmulticast mode [ 325.780593][T14478] bond0: entered allmulticast mode [ 328.660869][T14490] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 328.674812][T14497] syzkaller1: entered promiscuous mode [ 328.674839][T14497] syzkaller1: entered allmulticast mode [ 329.094961][T14520] ip_tables: iptables: counters copy to user failed while replacing table [ 329.844180][T14541] __nla_validate_parse: 10 callbacks suppressed [ 329.844204][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 330.590381][T14561] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2014'. [ 330.736088][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2015'. [ 333.085728][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 333.218657][T14592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 333.398516][T14600] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2025'. [ 333.753026][T14611] FAULT_INJECTION: forcing a failure. [ 333.753026][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.753071][T14611] CPU: 1 UID: 0 PID: 14611 Comm: syz.2.2029 Not tainted syzkaller #0 PREEMPT(full) [ 333.753095][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.753107][T14611] Call Trace: [ 333.753115][T14611] [ 333.753125][T14611] dump_stack_lvl+0xe8/0x150 [ 333.753159][T14611] should_fail_ex+0x410/0x560 [ 333.753189][T14611] _copy_to_user+0x31/0xb0 [ 333.753218][T14611] simple_read_from_buffer+0xe1/0x170 [ 333.753251][T14611] proc_fail_nth_read+0x1bb/0x230 [ 333.753269][T14611] ? common_file_perm+0x20e/0x2b0 [ 333.753298][T14611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.753322][T14611] ? rw_verify_area+0x24a/0x4c0 [ 333.753353][T14611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.753373][T14611] vfs_read+0x213/0xa80 [ 333.753414][T14611] ? __pfx___mutex_lock+0x10/0x10 [ 333.753447][T14611] ? __pfx_vfs_read+0x10/0x10 [ 333.753475][T14611] ? __fget_files+0x2a/0x420 [ 333.753506][T14611] ? __fget_files+0x3a2/0x420 [ 333.753530][T14611] ? __fget_files+0x2a/0x420 [ 333.753565][T14611] ksys_read+0x150/0x270 [ 333.753597][T14611] ? __pfx_ksys_read+0x10/0x10 [ 333.753639][T14611] do_syscall_64+0x166/0x520 [ 333.753664][T14611] ? trace_irq_disable+0x3b/0x140 [ 333.753684][T14611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.753704][T14611] ? clear_bhb_loop+0x70/0xc0 [ 333.753730][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.753750][T14611] RIP: 0033:0x7f57bc35e98e [ 333.753770][T14611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.753787][T14611] RSP: 002b:00007f57bd1ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.753809][T14611] RAX: ffffffffffffffda RBX: 00007f57bd1de6c0 RCX: 00007f57bc35e98e [ 333.753824][T14611] RDX: 000000000000000f RSI: 00007f57bd1de0a0 RDI: 000000000000000b [ 333.753837][T14611] RBP: 00007f57bd1de090 R08: 0000000000000000 R09: 0000000000000000 [ 333.753849][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.753861][T14611] R13: 00007f57bc626038 R14: 00007f57bc625fa0 R15: 00007ffeebeb3718 [ 333.753896][T14611] [ 334.186201][T14629] netlink: 'syz.3.2034': attribute type 3 has an invalid length. [ 334.439653][T14638] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2036'. [ 334.608286][T14640] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2037'. [ 335.033034][T14649] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 335.051980][T14649] bond5 (unregistering): Released all slaves [ 335.239819][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 335.239848][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 335.704937][T14689] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2048'. [ 336.027517][T14708] netlink: 'syz.4.2053': attribute type 2 has an invalid length. [ 336.099199][T14708] : entered promiscuous mode [ 336.137638][T14711] ip_tables: iptables: counters copy to user failed while replacing table [ 336.141784][T14714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2054'. [ 336.369565][T14728] netlink: 'syz.0.2059': attribute type 34 has an invalid length. [ 336.369591][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 336.373977][T14731] netlink: 'syz.0.2059': attribute type 34 has an invalid length. [ 336.373996][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 336.698990][T14741] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2062'. [ 336.761256][T14732] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.427967][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 337.739919][T14759] netlink: 'syz.3.2068': attribute type 4 has an invalid length. [ 337.739944][T14759] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2068'. [ 338.441741][T14801] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2073'. [ 338.734565][T14811] netlink: 'syz.2.2077': attribute type 1 has an invalid length. [ 338.784524][T14811] bond5: entered promiscuous mode [ 338.785103][T14811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.959308][T14814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.964540][T14814] bond5: (slave gre3): The slave device specified does not support setting the MAC address [ 338.964566][T14814] bond5: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 338.986426][T14814] bond5: (slave gre3): making interface the new active one [ 338.986451][T14814] gre3: entered promiscuous mode [ 338.998616][T14814] bond5: (slave gre3): Enslaving as an active interface with an up link [ 339.286586][T14811] bond5 (unregistering): (slave gre3): Releasing backup interface [ 339.286616][T14811] gre3: left promiscuous mode [ 339.325005][T14811] bond5 (unregistering): Released all slaves [ 339.646215][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.906537][T14843] team_slave_0: entered allmulticast mode [ 340.017768][T14844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.028659][T14844] tipc: Started in network mode [ 340.028689][T14844] tipc: Node identity 12f8e9f7ded3, cluster identity 4711 [ 340.028863][T14844] tipc: Enabled bearer , priority 0 [ 340.146561][T14844] syzkaller0: entered promiscuous mode [ 340.146589][T14844] syzkaller0: entered allmulticast mode [ 340.158909][T14844] tipc: Resetting bearer [ 340.206897][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 340.380569][T14859] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 340.385444][T14850] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.386539][T14858] ip6_vti0: entered promiscuous mode [ 340.467603][T14858] __nla_validate_parse: 6 callbacks suppressed [ 340.467629][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 340.500553][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2090'. [ 340.500600][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2090'. [ 340.500618][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2090'. [ 340.501300][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'. [ 340.555070][T14852] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 340.689910][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 340.689947][T14868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2091'. [ 340.789251][T14868] vlan1: entered allmulticast mode [ 340.789279][T14868] bond0: entered allmulticast mode [ 340.789292][T14868] syz_tun: entered allmulticast mode [ 340.830043][T14842] tipc: Resetting bearer [ 341.188731][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'. [ 341.365535][T14900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2097'. [ 342.259906][T14905] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2098'. [ 342.475128][T14911] block nbd3: NBD_DISCONNECT [ 342.949913][T14934] nbd: must specify at least one socket [ 342.954687][T14922] nbd: must specify at least one socket [ 343.790860][T14842] tipc: Disabling bearer [ 343.808039][T11333] tipc: Node number set to 3425430007 [ 343.808524][T14893] vxcan1: entered allmulticast mode [ 343.900920][T14934] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 343.915680][T14936] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 344.200020][T14951] syz_tun: entered promiscuous mode [ 344.412025][T14950] syz_tun: left promiscuous mode [ 344.968712][T14989] macsec0: entered promiscuous mode [ 344.985775][T14990] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 345.104587][T14999] sit0: mtu less than device minimum [ 345.104690][T14999] sit0: mtu less than device minimum [ 345.104783][T14999] sit0: mtu less than device minimum [ 345.104883][T14999] sit0: mtu less than device minimum [ 345.104967][T14999] sit0: mtu less than device minimum [ 345.105052][T14999] sit0: mtu less than device minimum [ 345.105137][T14999] sit0: mtu less than device minimum [ 345.113652][T14999] sit0: mtu less than device minimum [ 345.113744][T14999] sit0: mtu less than device minimum [ 345.113835][T14999] sit0: mtu less than device minimum [ 345.291084][T15005] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 345.314425][T15002] netlink: 'syz.2.2123': attribute type 2 has an invalid length. [ 345.314451][T15002] netlink: 'syz.2.2123': attribute type 2 has an invalid length. [ 345.406355][T15015] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 345.420411][T15005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.443733][T15011] bond8: (slave veth5): Enslaving as an active interface with a down link [ 345.555979][T15015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 345.609139][T15016] sit0: left promiscuous mode [ 345.609165][T15016] sit0: left allmulticast mode [ 345.612112][T15016] syz_tun: left promiscuous mode [ 345.635942][T15016] dummy0: left promiscuous mode [ 345.659414][T15016] bond_slave_0: left promiscuous mode [ 345.659438][T15016] bond_slave_0: left allmulticast mode [ 345.661750][T15016] team_slave_0: left allmulticast mode [ 345.707294][T15016] __nla_validate_parse: 4 callbacks suppressed [ 345.707318][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2125'. [ 345.745985][T15005] bond9 (unregistering): Released all slaves [ 345.772433][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 345.851952][T15035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2128'. [ 345.902111][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'. [ 345.902139][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2128'. [ 345.902154][T15029] netlink: 'syz.0.2128': attribute type 4 has an invalid length. [ 346.328141][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2134'. [ 346.328178][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 346.347328][T15049] batman_adv: batadv0: Adding interface: gretap2 [ 346.347346][T15049] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.347373][T15049] batman_adv: batadv0: Interface activated: gretap2 [ 346.455088][T15055] team0 (unregistering): Port device team_slave_0 removed [ 346.509572][T15055] team0 (unregistering): Port device team_slave_1 removed [ 346.719585][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 346.854061][T15069] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 346.854086][T15069] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2138'. [ 346.963435][T15067] bond11: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 346.986497][T15067] bond11: (slave ip6tnl1): Error -95 calling set_mac_address [ 347.003758][ T30] audit: type=1804 audit(1790376984.603:8): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2140" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2302 res=1 errno=0 [ 347.004018][ T30] audit: type=1800 audit(1790376984.603:9): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2140" name="cgroup.controllers" dev="tmpfs" ino=2302 res=0 errno=0 [ 347.115175][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.115210][T15079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.125802][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.125823][T15079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.141133][T15079] batman_adv: batadv0: Interface deactivated: gretap1 [ 347.141154][T15079] batman_adv: batadv0: Removing interface: gretap1 [ 347.149727][T15079] batman_adv: batadv0: Interface deactivated: gretap2 [ 347.149747][T15079] batman_adv: batadv0: Removing interface: gretap2 [ 347.404999][ T1165] tipc: Subscription rejected, illegal request [ 347.585833][T15092] tipc: New replicast peer: 255.255.255.255 [ 347.594538][T15092] tipc: Enabled bearer , priority 26 [ 347.600374][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'. [ 347.602685][T15092] netlink: 'syz.2.2145': attribute type 1 has an invalid length. [ 347.669486][T15092] bond5: entered promiscuous mode [ 347.669928][T15092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.713383][T15092] bond5: entered allmulticast mode [ 347.811560][T15092] bond5: (slave bridge10): making interface the new active one [ 347.811586][T15092] bridge10: entered promiscuous mode [ 347.811744][T15092] bridge10: entered allmulticast mode [ 347.814493][T15092] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 347.943889][T15106] syzkaller0: entered promiscuous mode [ 347.943916][T15106] syzkaller0: entered allmulticast mode [ 349.098476][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.098638][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.098817][T15117] bridge_slave_0: entered allmulticast mode [ 349.102619][T15117] bridge_slave_0: entered promiscuous mode [ 349.103685][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.103809][T15117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.124164][T15120] bridge_slave_0: left allmulticast mode [ 349.124191][T15120] bridge_slave_0: left promiscuous mode [ 349.124392][T15120] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.003362][ T5617] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 350.003404][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 350.003431][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 350.003444][ T5617] Call Trace: [ 350.003452][ T5617] [ 350.003462][ T5617] dump_stack_lvl+0xe8/0x150 [ 350.003497][ T5617] dump_header+0xd3/0x4b0 [ 350.003528][ T5617] oom_kill_process+0x3ab/0x9e0 [ 350.003560][ T5617] out_of_memory+0x1064/0x1480 [ 350.003584][ T5617] ? try_charge_memcg+0xc32/0x15e0 [ 350.003625][ T5617] ? __pfx_out_of_memory+0x10/0x10 [ 350.003648][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 350.003689][ T5617] try_charge_memcg+0xcdf/0x15e0 [ 350.003737][ T5617] ? __pfx_try_charge_memcg+0x10/0x10 [ 350.003786][ T5617] ? charge_memcg+0x47/0x310 [ 350.003815][ T5617] charge_memcg+0x1dd/0x310 [ 350.003841][ T5617] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 350.003866][ T5617] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 350.003895][ T5617] swap_cache_alloc_folio+0x4de/0x990 [ 350.003942][ T5617] swap_cache_read_folio+0x44/0x120 [ 350.003977][ T5617] swap_cluster_readahead+0x392/0x630 [ 350.004016][ T5617] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 350.004076][ T5617] swapin_readahead+0x1a3/0xc50 [ 350.004121][ T5617] ? __pfx_swapin_readahead+0x10/0x10 [ 350.004157][ T5617] ? swap_table_get+0x1e/0x260 [ 350.004185][ T5617] ? swap_table_get+0x1e/0x260 [ 350.004209][ T5617] ? swap_table_get+0x1e/0x260 [ 350.004238][ T5617] ? swap_table_get+0x216/0x260 [ 350.004268][ T5617] ? swap_cache_get_folio+0x2e7/0x2f0 [ 350.004312][ T5617] do_swap_page+0x3fb/0x4c10 [ 350.004362][ T5617] ? __lock_acquire+0x747/0x2de0 [ 350.004382][ T5617] ? do_swap_page+0x126/0x4c10 [ 350.004410][ T5617] ? __pfx_do_swap_page+0x10/0x10 [ 350.004434][ T5617] ? __pte_offset_map+0x1ae/0x240 [ 350.004467][ T5617] ? pte_offset_map_rw_nolock+0xea/0x160 [ 350.004499][ T5617] handle_mm_fault+0x1398/0x3750 [ 350.004540][ T5617] ? handle_mm_fault+0xf1/0x3750 [ 350.004581][ T5617] ? __pfx_handle_mm_fault+0x10/0x10 [ 350.004606][ T5617] ? lock_vma_under_rcu+0x45a/0x500 [ 350.004669][ T5617] do_user_addr_fault+0xa4f/0x1340 [ 350.004704][ T5617] ? trace_page_fault_user+0x84/0x1e0 [ 350.004728][ T5617] exc_page_fault+0x6a/0xc0 [ 350.004757][ T5617] asm_exc_page_fault+0x26/0x30 [ 350.004777][ T5617] RIP: 0033:0x7f95c815e98e [ 350.004797][ T5617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.004814][ T5617] RSP: 002b:00007fffbbef94a8 EFLAGS: 00010246 [ 350.004834][ T5617] RAX: 0000000000000000 RBX: 0000555569f68500 RCX: 00007f95c815e98e [ 350.004849][ T5617] RDX: 00007fffbbef9500 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.004861][ T5617] RBP: 00007fffbbef956c R08: 0000000000000000 R09: 0000000000000000 [ 350.004874][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 350.004887][ T5617] R13: 00000000000927c0 R14: 0000000000054f59 R15: 00007fffbbef95c0 [ 350.004924][ T5617] [ 350.031256][ T5617] memory: usage 307200kB, limit 307200kB, failcnt 596 [ 350.031277][ T5617] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 350.031299][ T5617] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 350.031310][ T5617] Memory cgroup stats for /syz0: [ 350.031500][ T5617] cache 0 [ 350.031509][ T5617] rss 0 [ 350.031516][ T5617] rss_huge 0 [ 350.031522][ T5617] shmem 0 [ 350.031529][ T5617] mapped_file 0 [ 350.031535][ T5617] dirty 0 [ 350.031558][ T5617] writeback 0 [ 350.031564][ T5617] workingset_refault_anon 0 [ 350.031571][ T5617] workingset_refault_file 0 [ 350.031578][ T5617] swap 249856 [ 350.031585][ T5617] swapcached 249856 [ 350.031592][ T5617] pgpgin 69217 [ 350.031598][ T5617] pgpgout 69217 [ 350.031604][ T5617] pgfault 116207 [ 350.031611][ T5617] pgmajfault 5 [ 350.031617][ T5617] inactive_anon 0 [ 350.031624][ T5617] active_anon 0 [ 350.031630][ T5617] inactive_file 0 [ 350.031637][ T5617] active_file 0 [ 350.031643][ T5617] unevictable 0 [ 350.031650][ T5617] hierarchical_memory_limit 314572800 [ 350.031657][ T5617] hierarchical_memsw_limit 9223372036854771712 [ 350.031665][ T5617] total_cache 0 [ 350.031672][ T5617] total_rss 0 [ 350.031678][ T5617] total_rss_huge 0 [ 350.031685][ T5617] total_shmem 0 [ 350.031691][ T5617] total_mapped_file 0 [ 350.031697][ T5617] total_dirty 0 [ 350.031704][ T5617] total_writeback 0 [ 350.031711][ T5617] total_workingset_refault_anon 0 [ 350.031718][ T5617] total_workingset_refault_file 0 [ 350.031725][ T5617] total_swap 249856 [ 350.031732][ T5617] total_swapcached 249856 [ 350.031739][ T5617] total_pgpgin 69217 [ 350.031746][ T5617] total_pgpgout 69217 [ 350.031752][ T5617] total_pgfault 116209 [ 350.031759][ T5617] total_pgmajfault 5 [ 350.031766][ T5617] total_inactive_anon 0 [ 350.031772][ T5617] total_active_anon 0 [ 350.031779][ T5617] total_inactive_file 0 [ 350.031786][ T5617] total_active_file 0 [ 350.031793][ T5617] total_unevictable 0 [ 350.031799][ T5617] anon_cost 0 [ 350.031805][ T5617] file_cost 0 [ 350.031812][ T5617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2143,pid=15085,uid=0 [ 350.034103][ T5617] Memory cgroup out of memory: Killed process 15085 (syz.0.2143) total-vm:167920kB, anon-rss:1244kB, file-rss:23420kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 351.737719][T15168] __nla_validate_parse: 1 callbacks suppressed [ 351.737742][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 351.771674][T15168] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 352.179357][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 352.535481][T15188] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 352.535507][T15188] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2167'. [ 352.640220][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2167'. [ 352.745185][T15193] tipc: Resetting bearer [ 352.906505][T15158] xt_IDLETIMER: timeout value is zero [ 352.920356][T15191] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 353.392569][T15203] IPVS: Scheduler module ip_vs_sip not found [ 353.541115][T15216] net_ratelimit: 25 callbacks suppressed [ 353.541139][T15216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.541313][T15216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.780077][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2176'. [ 353.810900][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 354.245594][T15234] openvswitch: netlink: Message has 8 unknown bytes. [ 354.245634][T15234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.306939][T15238] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 354.766413][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 354.805946][T15241] bond9: (slave veth7): Enslaving as an active interface with a down link [ 354.824846][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2182'. [ 354.942429][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2180'. [ 355.272033][T15238] bond9: (slave veth9): Enslaving as an active interface with a down link [ 355.335199][T15241] v: renamed from veth0_vlan (while UP) [ 355.371046][T15243] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.388984][T15265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'. [ 355.389055][T15265] tipc: Invalid UDP bearer configuration [ 355.389101][T15265] tipc: Enabling of bearer rejected, failed to enable media [ 355.389899][T15264] tipc: Invalid UDP bearer configuration [ 355.389944][T15264] tipc: Enabling of bearer rejected, failed to enable media [ 355.758487][T15282] batadv_slave_1: entered promiscuous mode [ 355.792644][T15281] batadv_slave_1: left promiscuous mode [ 357.375081][T15351] __nla_validate_parse: 6 callbacks suppressed [ 357.375103][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'. [ 357.418755][T15375] netlink: 'syz.3.2205': attribute type 2 has an invalid length. [ 357.937197][T15417] nbd2: detected capacity change from 0 to 63 [ 357.942158][T15417] block nbd0: NBD_DISCONNECT [ 357.942187][T15417] block nbd0: Send disconnect failed -32 [ 358.002979][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 358.003016][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 358.058856][T15334] workqueue: Failed to create a rescuer kthread for wq "nfc24_nci_rx_wq": -EINTR [ 358.120503][ T5627] block nbd2: Receive control failed (result -104) [ 358.239896][T15432] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2211'. [ 358.276534][T15430] netlink: 'syz.3.2210': attribute type 4 has an invalid length. [ 358.320191][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 358.489734][T15441] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2213'. [ 358.655623][T15445] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2214'. [ 358.794219][T15445] syzkaller1: entered promiscuous mode [ 358.794246][T15445] syzkaller1: entered allmulticast mode [ 358.927784][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.928240][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.928641][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.929163][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.929596][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.930113][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.930597][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.930996][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.931386][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.931788][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.639270][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'. [ 359.698523][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 359.944739][T15483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2225'. [ 360.042629][T15493] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 360.691951][T15521] tipc: Enabling of bearer rejected, failed to enable media [ 361.377498][T15542] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 361.378125][T15542] team0: Device ipvlan4 is already an upper device of the team interface [ 361.674154][T15558] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 361.802644][T15568] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.813514][T15562] veth9: entered allmulticast mode [ 361.944815][T15571] netlink: 'syz.2.2246': attribute type 34 has an invalid length. [ 362.034680][T15571] bond6: option lacp_strict: invalid value (68) [ 362.052993][T15571] bond6 (unregistering): Released all slaves [ 362.149775][T15571] netlink: 'syz.2.2246': attribute type 34 has an invalid length. [ 362.232890][T15571] bond6: option lacp_strict: invalid value (68) [ 362.235685][T15571] bond6 (unregistering): Released all slaves [ 362.282274][T15582] ip6_vti0: left promiscuous mode [ 362.317220][T15571] netlink: 'syz.2.2246': attribute type 34 has an invalid length. [ 362.329155][T15584] IPv6: sit2: Disabled Multicast RS [ 362.447318][T15571] bond6: option lacp_strict: invalid value (68) [ 362.449423][T15571] bond6 (unregistering): Released all slaves [ 362.671973][T15596] __nla_validate_parse: 10 callbacks suppressed [ 362.671994][T15596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2253'. [ 362.710071][T15571] netlink: 'syz.2.2246': attribute type 34 has an invalid length. [ 362.710095][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 362.874111][T15571] bond6: option lacp_strict: invalid value (68) [ 362.889253][T15571] bond6 (unregistering): Released all slaves [ 363.603058][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2267'. [ 363.633450][ T30] audit: type=1804 audit(1790377001.233:10): pid=15657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2269" name="/newroot/473/cgroup.controllers" dev="tmpfs" ino=2452 res=1 errno=0 [ 363.633717][ T30] audit: type=1800 audit(1790377001.233:11): pid=15657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2269" name="cgroup.controllers" dev="tmpfs" ino=2452 res=0 errno=0 [ 363.897911][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 364.163084][T15680] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2276'. [ 364.756392][T15699] net_ratelimit: 60 callbacks suppressed [ 364.756415][T15699] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 364.922273][T15697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 365.422011][T15734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2287'. [ 365.578942][T15745] netlink: 'syz.2.2291': attribute type 8 has an invalid length. [ 365.578967][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 365.579013][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 366.209997][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 366.244247][T15756] xt_policy: output policy not valid in PREROUTING and INPUT [ 367.095874][T15798] tun0: tun_chr_ioctl cmd 1074025675 [ 367.095899][T15798] tun0: persist enabled [ 367.107904][T15798] tun0: tun_chr_ioctl cmd 1074025675 [ 367.107927][T15798] tun0: persist enabled [ 367.114649][T15798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2306'. [ 367.414693][T15816] netlink: 'syz.0.2312': attribute type 10 has an invalid length. [ 367.436544][T15820] netlink: 'syz.0.2312': attribute type 10 has an invalid length. [ 367.551150][T15816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.598432][T15816] team0: Port device netdevsim1 added [ 367.689609][T15820] team0: Port device netdevsim1 removed [ 367.742666][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.810542][T15820] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 367.911552][T15835] netlink: 'syz.3.2313': attribute type 7 has an invalid length. [ 367.911578][T15835] __nla_validate_parse: 2 callbacks suppressed [ 367.911591][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 367.911623][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'. [ 368.511798][T15851] nbd: must specify at least one socket [ 368.532512][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2319'. [ 368.731391][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.732120][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.965733][T15825] vxcan1: left allmulticast mode [ 369.124354][T15825] bond_slave_0: left allmulticast mode [ 369.423194][T15825] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 369.455093][T15825] veth3: left allmulticast mode [ 369.466423][T15825] bond3: left promiscuous mode [ 369.466442][T15825] gre1: left promiscuous mode [ 369.523142][T15825] macvlan3: left promiscuous mode [ 369.523169][T15825] macvlan3: left allmulticast mode [ 369.571348][T15825] gre3: left promiscuous mode [ 369.571375][T15825] gre3: left allmulticast mode [ 369.605900][T15825] veth9: left allmulticast mode [ 369.608092][ T86] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.724839][T15860] netpci0: tun_chr_ioctl cmd 1074025678 [ 369.724866][T15860] netpci0: group set to 0 [ 369.753916][T15880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2323'. [ 369.780587][T15867] syzkaller1: entered promiscuous mode [ 369.780614][T15867] syzkaller1: entered allmulticast mode [ 369.911884][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2322'. [ 369.913104][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2322'. [ 370.058864][ T159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.459102][T15898] sctp: [Deprecated]: syz.4.2327 (pid 15898) Use of int in max_burst socket option deprecated. [ 370.459102][T15898] Use struct sctp_assoc_value instead [ 370.461082][T15902] openvswitch: netlink: Key type 9220 is out of range max 32 [ 370.584988][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 370.585027][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 370.928391][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 371.142072][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 371.142104][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 371.368881][T15923] ip_tables: iptables: counters copy to user failed while replacing table [ 371.951773][T15941] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 371.965116][T15942] xt_l2tp: invalid flags combination: 8 [ 372.300407][T15949] openvswitch: netlink: Message has 4 unknown bytes. [ 373.027425][T15970] geneve0: entered promiscuous mode [ 373.035884][T15970] batman_adv: batadv0: Adding interface: macvlan2 [ 373.035903][T15970] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.036488][T15970] batman_adv: batadv0: Interface activated: macvlan2 [ 373.268298][T15981] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 373.538619][T15989] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 373.581135][T15981] __nla_validate_parse: 3 callbacks suppressed [ 373.581158][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 373.634220][T15978] bond11: option arp_validate: invalid value (1048579) [ 373.646450][T15978] bond11 (unregistering): Released all slaves [ 373.678852][T15999] netlink: 'syz.0.2353': attribute type 1 has an invalid length. [ 373.781613][T15975] bond11: option arp_validate: invalid value (1048579) [ 373.803864][T15975] bond11 (unregistering): Released all slaves [ 373.875734][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2353'. [ 373.900311][T15981] bridge3: entered promiscuous mode [ 374.097258][T16008] bridge8: entered promiscuous mode [ 374.130248][T16008] bond16: (slave bridge8): making interface the new active one [ 374.135637][T16008] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 374.189232][T16009] bond12: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 374.248804][T16012] bridge9: entered promiscuous mode [ 374.263178][T16012] bond16: (slave bridge9): Enslaving as a backup interface with an up link [ 374.345862][T16013] veth12: entered promiscuous mode [ 374.386954][T16013] bond12: (slave veth12): Enslaving as a backup interface with a down link [ 374.391436][ T86] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 374.394323][T16015] 8021q: adding VLAN 0 to HW filter on device bond12 [ 374.444311][T16035] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 374.461458][T16019] gre1: entered promiscuous mode [ 374.525818][ T37] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 374.730352][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 374.749266][T16035] bond18: entered promiscuous mode ** replaying previous printk message ** [ 374.749266][T16035] bond18: entered promiscuous mode [ 374.749679][T16035] 8021q: adding VLAN 0 to HW filter on device bond18 [ 374.764432][T16043] [ 374.782143][T16043] ====================================================== [ 374.789231][T16043] WARNING: possible circular locking dependency detected [ 374.796284][T16043] syzkaller #0 Not tainted [ 374.800709][T16043] ------------------------------------------------------ [ 374.807745][T16043] syz.0.2357/16043 is trying to acquire lock: [ 374.813824][T16043] ffff88802663d958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 374.823254][T16043] [ 374.823254][T16043] but task is already holding lock: [ 374.830629][T16043] ffff88802663d430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 374.840820][T16043] [ 374.840820][T16043] which lock already depends on the new lock. [ 374.840820][T16043] [ 374.851222][T16043] [ 374.851222][T16043] the existing dependency chain (in reverse order) is: [ 374.860250][T16043] [ 374.860250][T16043] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 374.868886][T16043] blk_alloc_queue+0x544/0x690 [ 374.874182][T16043] __blk_mq_alloc_disk+0x194/0x390 [ 374.879844][T16043] nbd_dev_add+0x494/0xb60 [ 374.884797][T16043] nbd_init+0x168/0x1f0 [ 374.889493][T16043] do_one_initcall+0x250/0x870 [ 374.894778][T16043] do_initcall_level+0x10a/0x1a0 [ 374.900250][T16043] do_initcalls+0x59/0xa0 [ 374.905182][T16043] kernel_init_freeable+0x29d/0x3e0 [ 374.910898][T16043] kernel_init+0x22/0x1d0 [ 374.915743][T16043] ret_from_fork+0x514/0xb70 [ 374.920847][T16043] ret_from_fork_asm+0x1a/0x30 [ 374.926140][T16043] [ 374.926140][T16043] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 374.933353][T16043] fs_reclaim_acquire+0x71/0x100 [ 374.938816][T16043] __kmalloc_cache_node_noprof+0x66/0x620 [ 374.945066][T16043] create_worker+0x112/0x7c0 [ 374.950200][T16043] workqueue_prepare_cpu+0xe4/0x170 [ 374.955915][T16043] cpuhp_invoke_callback+0x434/0x810 [ 374.961738][T16043] _cpu_up+0x2ce/0x5b0 [ 374.966357][T16043] cpu_up+0x1d2/0x220 [ 374.970860][T16043] cpuhp_bringup_mask+0xb2/0x1a0 [ 374.976340][T16043] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 374.982662][T16043] bringup_nonboot_cpus+0x17/0x30 [ 374.988209][T16043] smp_init+0x32/0x110 [ 374.992816][T16043] kernel_init_freeable+0x27f/0x3e0 [ 374.998585][T16043] kernel_init+0x22/0x1d0 [ 375.003444][T16043] ret_from_fork+0x514/0xb70 [ 375.008561][T16043] ret_from_fork_asm+0x1a/0x30 [ 375.013850][T16043] [ 375.013850][T16043] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 375.021583][T16043] cpus_read_lock+0x42/0x160 [ 375.026706][T16043] static_key_slow_inc+0x12/0x30 [ 375.032200][T16043] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 375.038439][T16043] nbd_genl_foreach_sock+0x265/0x450 [ 375.044246][T16043] nbd_genl_reconfigure+0xbbb/0x1040 [ 375.050078][T16043] genl_family_rcv_msg_doit+0x233/0x340 [ 375.056168][T16043] genl_rcv_msg+0x614/0x7a0 [ 375.061211][T16043] netlink_rcv_skb+0x226/0x4a0 [ 375.066512][T16043] genl_rcv+0x28/0x40 [ 375.071037][T16043] netlink_unicast+0x7bd/0x940 [ 375.076323][T16043] netlink_sendmsg+0x813/0xb40 [ 375.081634][T16043] sock_sendmsg_nosec+0x13a/0x180 [ 375.087182][T16043] ____sys_sendmsg+0x54e/0x850 [ 375.092486][T16043] ___sys_sendmsg+0x2a5/0x360 [ 375.097696][T16043] __x64_sys_sendmsg+0x1b1/0x290 [ 375.103169][T16043] do_syscall_64+0x166/0x520 [ 375.108304][T16043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.114719][T16043] [ 375.114719][T16043] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 375.122361][T16043] __mutex_lock+0x19d/0x1550 [ 375.127503][T16043] nbd_queue_rq+0x373/0xff0 [ 375.132538][T16043] blk_mq_dispatch_rq_list+0x499/0x1990 [ 375.138624][T16043] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 375.145487][T16043] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 375.152002][T16043] blk_mq_run_work_fn+0x16c/0x300 [ 375.157559][T16043] process_scheduled_works+0xc3d/0x1630 [ 375.163640][T16043] worker_thread+0xa47/0xfb0 [ 375.168773][T16043] kthread+0x38b/0x480 [ 375.173374][T16043] ret_from_fork+0x514/0xb70 [ 375.178479][T16043] ret_from_fork_asm+0x1a/0x30 [ 375.183786][T16043] [ 375.183786][T16043] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 375.191000][T16043] __mutex_lock+0x19d/0x1550 [ 375.196126][T16043] nbd_queue_rq+0xc1/0xff0 [ 375.201085][T16043] blk_mq_dispatch_rq_list+0x499/0x1990 [ 375.207158][T16043] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 375.214015][T16043] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 375.220543][T16043] blk_mq_run_work_fn+0x16c/0x300 [ 375.226114][T16043] process_scheduled_works+0xc3d/0x1630 [ 375.232193][T16043] worker_thread+0xa47/0xfb0 [ 375.237325][T16043] kthread+0x38b/0x480 [ 375.241923][T16043] ret_from_fork+0x514/0xb70 [ 375.247040][T16043] ret_from_fork_asm+0x1a/0x30 [ 375.252335][T16043] [ 375.252335][T16043] -> #1 (set->srcu){.+.+}-{0:0}: [ 375.259467][T16043] __synchronize_srcu+0xc9/0x2f0 [ 375.264932][T16043] elevator_switch+0x1e8/0x7b0 [ 375.270240][T16043] elevator_change+0x2fa/0x480 [ 375.275555][T16043] elevator_set_default+0x375/0x440 [ 375.281319][T16043] blk_register_queue+0x3f3/0x4e0 [ 375.286908][T16043] __add_disk+0x6b8/0xdb0 [ 375.291788][T16043] add_disk_fwnode+0x100/0x3a0 [ 375.297107][T16043] nbd_dev_add+0x733/0xb60 [ 375.302086][T16043] nbd_init+0x168/0x1f0 [ 375.306798][T16043] do_one_initcall+0x250/0x870 [ 375.312119][T16043] do_initcall_level+0x10a/0x1a0 [ 375.317613][T16043] do_initcalls+0x59/0xa0 [ 375.322475][T16043] kernel_init_freeable+0x29d/0x3e0 [ 375.328217][T16043] kernel_init+0x22/0x1d0 [ 375.333075][T16043] ret_from_fork+0x514/0xb70 [ 375.338204][T16043] ret_from_fork_asm+0x1a/0x30 [ 375.343494][T16043] [ 375.343494][T16043] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 375.351404][T16043] __lock_acquire+0x164c/0x2de0 [ 375.356781][T16043] lock_acquire+0x115/0x350 [ 375.361834][T16043] __mutex_lock+0x19d/0x1550 [ 375.366974][T16043] elevator_change+0x1af/0x480 [ 375.372256][T16043] elevator_set_none+0xb5/0x140 [ 375.377623][T16043] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 375.383959][T16043] nbd_start_device+0x189/0xb30 [ 375.389339][T16043] nbd_genl_connect+0x167d/0x1cd0 [ 375.394913][T16043] genl_family_rcv_msg_doit+0x233/0x340 [ 375.401015][T16043] genl_rcv_msg+0x614/0x7a0 [ 375.406057][T16043] netlink_rcv_skb+0x226/0x4a0 [ 375.411367][T16043] genl_rcv+0x28/0x40 [ 375.415881][T16043] netlink_unicast+0x7bd/0x940 [ 375.421179][T16043] netlink_sendmsg+0x813/0xb40 [ 375.426470][T16043] sock_sendmsg_nosec+0x13a/0x180 [ 375.432029][T16043] ____sys_sendmsg+0x54e/0x850 [ 375.437331][T16043] ___sys_sendmsg+0x2a5/0x360 [ 375.442558][T16043] __x64_sys_sendmsg+0x1b1/0x290 [ 375.448018][T16043] do_syscall_64+0x166/0x520 [ 375.453139][T16043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.459588][T16043] [ 375.459588][T16043] other info that might help us debug this: [ 375.459588][T16043] [ 375.469815][T16043] Chain exists of: [ 375.469815][T16043] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 375.469815][T16043] [ 375.483563][T16043] Possible unsafe locking scenario: [ 375.483563][T16043] [ 375.491072][T16043] CPU0 CPU1 [ 375.496436][T16043] ---- ---- [ 375.502198][T16043] lock(&q->q_usage_counter(io)#49); [ 375.507601][T16043] lock(fs_reclaim); [ 375.514134][T16043] lock(&q->q_usage_counter(io)#49); [ 375.522061][T16043] lock(&q->elevator_lock); [ 375.526665][T16043] [ 375.526665][T16043] *** DEADLOCK *** [ 375.526665][T16043] [ 375.534835][T16043] locks held by syz.0.2357/16043: 6, last CPU#0: [ 375.541158][T16043] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 375.549340][T16043] #1: ffffffff902c5fc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 375.558333][T16043] #2: ffff888026a9a9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 375.569747][T16043] #3: ffff888026a9a8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 375.580715][T16043] #4: ffff88802663d430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 375.591349][T16043] #5: ffff88802663d468 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 375.602238][T16043] [ 375.602238][T16043] stack backtrace: [ 375.608126][T16043] CPU: 0 UID: 0 PID: 16043 Comm: syz.0.2357 Not tainted syzkaller #0 PREEMPT(full) [ 375.617490][T16043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.627548][T16043] Call Trace: [ 375.630866][T16043] [ 375.633827][T16043] dump_stack_lvl+0xe8/0x150 [ 375.638422][T16043] print_circular_bug+0x2e2/0x300 [ 375.643449][T16043] check_noncircular+0x12f/0x150 [ 375.648386][T16043] __lock_acquire+0x164c/0x2de0 [ 375.653257][T16043] lock_acquire+0x115/0x350 [ 375.657760][T16043] ? elevator_change+0x1af/0x480 [ 375.662697][T16043] __mutex_lock+0x19d/0x1550 [ 375.667295][T16043] ? elevator_change+0x1af/0x480 [ 375.672243][T16043] ? rcu_is_watching+0x16/0xb0 [ 375.677023][T16043] ? elevator_change+0x1af/0x480 [ 375.681960][T16043] ? __pfx___mutex_lock+0x10/0x10 [ 375.687000][T16043] ? enable_work+0x17f/0x230 [ 375.691600][T16043] ? lockdep_hardirqs_on+0x7b/0x110 [ 375.696796][T16043] ? __cancel_work_sync+0xf8/0x110 [ 375.701928][T16043] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 375.707385][T16043] elevator_change+0x1af/0x480 [ 375.712149][T16043] elevator_set_none+0xb5/0x140 [ 375.717005][T16043] ? __pfx_elevator_set_none+0x10/0x10 [ 375.722482][T16043] ? xa_load+0x1db/0x210 [ 375.726757][T16043] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 375.732591][T16043] ? kernfs_add_one+0xfc/0x6f0 [ 375.737374][T16043] ? nbd_start_device+0x17d/0xb30 [ 375.742514][T16043] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 375.748782][T16043] ? sysfs_add_file_mode_ns+0x258/0x300 [ 375.754339][T16043] nbd_start_device+0x189/0xb30 [ 375.759206][T16043] ? device_create_file+0xf4/0x1b0 [ 375.764336][T16043] nbd_genl_connect+0x167d/0x1cd0 [ 375.769372][T16043] ? __pfx_nbd_genl_connect+0x10/0x10 [ 375.774765][T16043] ? rcu_is_watching+0x16/0xb0 [ 375.779538][T16043] ? __nla_parse+0x40/0x60 [ 375.783959][T16043] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 375.790309][T16043] genl_family_rcv_msg_doit+0x233/0x340 [ 375.795866][T16043] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.801962][T16043] ? __lock_acquire+0x747/0x2de0 [ 375.806909][T16043] genl_rcv_msg+0x614/0x7a0 [ 375.811440][T16043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.816488][T16043] ? __pfx_nbd_genl_connect+0x10/0x10 [ 375.821906][T16043] netlink_rcv_skb+0x226/0x4a0 [ 375.826692][T16043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.831737][T16043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.837080][T16043] ? down_read+0x2be/0x330 [ 375.841621][T16043] genl_rcv+0x28/0x40 [ 375.845607][T16043] netlink_unicast+0x7bd/0x940 [ 375.850379][T16043] netlink_sendmsg+0x813/0xb40 [ 375.855160][T16043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.860458][T16043] ? apparmor_socket_sendmsg+0x98/0x360 [ 375.866018][T16043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.871314][T16043] sock_sendmsg_nosec+0x13a/0x180 [ 375.876337][T16043] ____sys_sendmsg+0x54e/0x850 [ 375.881101][T16043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.886386][T16043] ? import_iovec+0x73/0xa0 [ 375.890892][T16043] ___sys_sendmsg+0x2a5/0x360 [ 375.895576][T16043] ? __lock_acquire+0x747/0x2de0 [ 375.900514][T16043] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.905726][T16043] ? futex_wait+0x2a2/0x390 [ 375.910257][T16043] ? __fget_files+0x2a/0x420 [ 375.914852][T16043] ? __fget_files+0x3a2/0x420 [ 375.919539][T16043] __x64_sys_sendmsg+0x1b1/0x290 [ 375.924498][T16043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.929981][T16043] do_syscall_64+0x166/0x520 [ 375.934575][T16043] ? trace_irq_disable+0x3b/0x140 [ 375.939593][T16043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.945750][T16043] ? clear_bhb_loop+0x70/0xc0 [ 375.950449][T16043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.956357][T16043] RIP: 0033:0x7f95c819e159 [ 375.960783][T16043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.980500][T16043] RSP: 002b:00007f95c9008028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.988914][T16043] RAX: ffffffffffffffda RBX: 00007f95c8425fa0 RCX: 00007f95c819e159 [ 375.996899][T16043] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000008 [ 376.004872][T16043] RBP: 00007f95c823506b R08: 0000000000000000 R09: 0000000000000000 [ 376.012838][T16043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.020820][T16043] R13: 00007f95c8426038 R14: 00007f95c8425fa0 R15: 00007fffbbef91c8 [ 376.028795][T16043] [ 376.094168][ T5627] block nbd0: Receive control failed (result -32) [ 376.094190][ T4934] block nbd0: Receive control failed (result -32)