last executing test programs: 41.55752237s ago: executing program 4 (id=3804): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='[\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14000084}, 0x4008030) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) poll(0x0, 0x0, 0x101) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 40.99973145s ago: executing program 0 (id=3806): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001740)={{0xffffffffffffffff, 0x0, 0x180c0, 0x0, 0xfffffffe, &(0x7f0000000200), &(0x7f0000000240)=0x6}, 0x2, &(0x7f0000001680)=[{0x3, 0x800, 0x0, &(0x7f0000000380)="a771fc0b12e01e171e5b5a74790e9764faecfa80752ce53a4024567d0e6e8724a1a68622cb2fe3b5a01635a36bc822cf42e4a1a4e67e11641ec0c910c100409524c290035354b55f191834a970cc13679ba8", 0x52, 0x8}, {0x1, 0x6, 0x0, 0x0}]}) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) getpid() (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="24030000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8008000000070000000800000064dd0000080000000700000136022a"], 0x324}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0xc201}) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[], 0xc) (async, rerun: 32) r7 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 40.731258629s ago: executing program 2 (id=3808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706e4ffffff0081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.686417001s ago: executing program 0 (id=3809): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000340)) (async) getsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000340)) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'net_prio'}, {0x2d, 'io'}, {0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2b, 'cpuset'}]}, 0x4d) 40.415611625s ago: executing program 2 (id=3810): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580), 0x0, 0x810) 40.254097421s ago: executing program 0 (id=3811): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x4804) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002400000000014000000050a0300000000000000000002000006140000001100010000000000000000070000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 40.164163081s ago: executing program 2 (id=3812): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x1}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x35, 0xff9, 0x1}, 0x28) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r6], 0x68}}, 0x0) 39.780707292s ago: executing program 0 (id=3813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x40, 0x0, 0x5, 0x7, {{0x40, 0x4, 0x3, 0x3f, 0x100, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x42, 0x2, [{0x0, 0x8, "2e2665de2b91"}, {0x7, 0xa, "db28a489efcf49e0"}, {0x0, 0xa, "446920fd24006d68"}, {0x5, 0xb, "dad3398137941065b2"}, {0x6, 0xf, "68138cb3862dbc1faaff40b239"}, {0x1, 0x6, "b4c4efb9"}]}, @noop, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x3, [0x5]}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x2}, {0x6, 0x8, "b02e54de94de"}, {0x6, 0x6, "8dcfddba"}, {0x6, 0x8, "5cb0945494c4"}]}, @generic={0x44, 0xf, "03a357c12a431ec9169bd525a9"}, @timestamp_addr={0x44, 0x2c, 0xb, 0x1, 0x9, [{@empty, 0x9}, {@broadcast, 0x4}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x1}]}, @timestamp={0x44, 0x24, 0x5d, 0x0, 0xd, [0x4, 0xfbfb, 0x8, 0x5, 0x1, 0xfffffff8, 0x3, 0xf5d9]}, @lsrr={0x83, 0x23, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101, @multicast2, @local, @loopback, @private=0xa010101, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 39.471749444s ago: executing program 4 (id=3814): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x16, 0xa01, 0x0, 0x25dfdbfd, {0xa}, [@typed={0x4}, @generic="f6"]}, 0x1c}}, 0x2000c000) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0)=0xe, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000300)=""/236, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 39.156258824s ago: executing program 4 (id=3816): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r1, &(0x7f0000001a40)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000240)="e837", 0x2}], 0x1}, 0x20000081) listen(r1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket(0x1e, 0x4, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c4599365df9faf40bcf783b391d906197a4396e4073a7d19780e6f85a"], 0x14}}, 0x40088c0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) (async) sendmsg$inet(r1, &(0x7f0000001a40)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000240)="e837", 0x2}], 0x1}, 0x20000081) (async) listen(r1, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe9129"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) socket(0x1e, 0x4, 0x0) (async) socket$inet6(0xa, 0x3, 0x2f) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c4599365df9faf40bcf783b391d906197a4396e4073a7d19780e6f85a"], 0x14}}, 0x40088c0) (async) 38.688612405s ago: executing program 4 (id=3818): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="0011b40b004f00"/21, 0x15) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "b7403d5efd4c9f32390660c18f324e8c"}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x1, "de8a400798f01db4a0b6595c2c21f037"}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 38.674194321s ago: executing program 0 (id=3819): syz_emit_ethernet(0x13e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x5, "6f0305"}]}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) syz_emit_ethernet(0x13e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x5, "6f0305"}]}]}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (async) 38.07791904s ago: executing program 1 (id=3820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706f0ffffff0081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.980271344s ago: executing program 1 (id=3821): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}, 0x1, 0xfffffff5}, 0x0) 37.913726354s ago: executing program 1 (id=3822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x40854}, 0x31) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) 37.541941076s ago: executing program 4 (id=3823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x59bb9bdedd53cec2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x1f, 0x6, 0x200001) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x6) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x4c}}, 0x400c0c1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x26, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 37.526410469s ago: executing program 3 (id=3824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffffff, 0x8ed}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e3a898f9eef6014d4d48a8632e4857b3a56401ec78bd0a02459acc6a11997ec4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "610ae590b3e183dd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="90e81d2d7d44092ca06f6e202555199b"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800dd8d29bd700000000000020000f0ffffff070000000006001500050000000c001680050002"], 0x30}}, 0x0) 37.210299388s ago: executing program 1 (id=3825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000100000009000000300003800800030000000000140002007663616e3000000000000000000000000800010002f0ffff0500040009000000"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 37.057208433s ago: executing program 4 (id=3826): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c9c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x39d4, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x38ac, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "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"}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "9bc527390dd1d322165091a7f7b05486228a6f7c9d8017bfba063ef2e4f6983155aa4b7481c88366b891c7a4aeab49140ed3bce7478cbd6891a5cddb23b0ea8efd44c32ee7e57e504cefd7882f5c7853176f88c3d8ca34c1510f5d8d4c1dac9e999f5d1bc22ce2e12217e291b68fc7f44590f00d89f7ae4a4e25e1aeb4c15bc8f8a53baf6d4c5476a854e33c46b256d5f1636b7b8c9b4552a0727767eec27411c44d"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "9dc1001a75c8b8cf055838f5170ef9968d30d7d2888b424f98f49fab53c9dde6d0cda4c4fae4f82d0253ab280ac01ff4c4729bc5d2ca2c87b542d5681514d5de6867866ff9a08bf3cb3d6b573126fd9c502adc13675c5037a20ce17387a407e4eb53ed3fe88f0410b1291abb201b7f9675ca4b5bbbb880b50459"}, @NFTA_DATA_VALUE={0x1d, 0x1, "b79b1e56f52a5f2d008cfff3d22db01a7bb4146887dd9ca7dc"}]}]}, {0x1768, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "932784e33b76c21ce3be67ba1f7af7ece5088bebdfb6f3"}, @NFTA_SET_ELEM_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "292b0410231480f0551067dc4fd3a536a89508638080cf83dd675855ef323e8f4f9b4521d5c4063be3259ffa93680566b8433ab2b04dc02e9180036cdb27a3451562e83a28479bdae656e9e0ecc8637fb917a0546f08a2020a9e3291904a620e3b7b181945c3675fe5931b50d6b50a3402972f830d5e8795195b10b08cc5fe64dcad2ab557de1edc3fba14f4878d9f50b4c0b3a0eb31911188b16a6ec0a451a67e8ab1090214"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x96}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "62ccadabce9845aa85cb6a5e47ed5060e116ebeddb26dda9f71ac4bc8e7605b26f9f5920a25e2cfab47c36"}]}, @NFTA_SET_ELEM_DATA={0x260, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x81, 0x1, "0fae243478af2c0280242c818b923c2b2e802905285dbe389d8a2273234facedfb42743adef1166b91a4a7e777cb8d22113b1c0dd9934f7bd319909699ccd06e4f354a1341aca1623821d5b0e8f287ec445ac5fb2ac31ed1945da95f05f847d5d6a176618e16ae44a235e5171df804acd1a92fdcf47886259805cd973a"}, @NFTA_DATA_VALUE={0x8a, 0x1, "0797743adcdb7d4761c0362023462ca78923e5a49a5b34827bec3f552c003a1dab08e9fc157c29aced47274168707798195dbb46a0bbfcb1050194a20c0db7dde44fedc7c06d8e5124727ed88ddf0d4b6535d597a641594c2ca1fd0af6126080f3cd22e0aef48f150672c0e3e03d693483a85ecefda1df64a36e2c2107a34c5c984a14abd542"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "98f7252eb847d4b5d5be579ddb2a536a591b537f68b4ce007baeef0a7467ab37d8d0e6cafd7f66dbc5775db234fc1f03947fadb813dcb13f3bfb09a3ed7ca7ea6318aa586d5cfede8e32f9e6f5f9df3e32ca810631103ef60e9a1a2f80440716dcffc3ffab39f7e5af0c01991eac05bb0b8a5a9898ee2c85f7aa4fa77bfc7164624041ce106dec84111a0e8dd05c67661fe64a37e733e76b6a492b8a56af4f"}]}, @NFTA_SET_ELEM_EXPR={0xe0, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0xd4, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_DATA={0xb8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, @NFTA_SET_ELEM_DATA={0x12ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "88679b3d8ee875aed06ae119423be84adfc2d1a83faddc8538834f524528fc02f5178fe8d287daf5a8d57cfa56dddb6f8a00d38f77f72091ad3fa83367a8aca83b2e8225f866e75179f93cf7dfa6072b0ff58d674456ca5acf74c7da01fca7909dcfbb4e4df68a2b224f6056418c15561a28d4ee6359983518e5283a75d88f343f684c717a9a61647de40c4b248e88af2cf4370be912e76d21db7a684cd1d8804312593811f3a06cc4a9136ceaf648e41df22b7f4650499eb330722c3f29e5803cc57094c5c12d6dcd13e23a3b172b5150c5c64de1fa501ce0a90d14828e4b439547a8c9110d7c"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x50, 0x1, "4ab3966515ccc56e99667a17f316ad03fc64238c57bc0b605088ef57b9935e241b0e9d0fd88d1d32486bc3690b14270ee62d93130a50dafe4809aa01a2fbd008f96a8f647a1df168297168a2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x3d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x102, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY_END={0x1e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "84cba22bfe2d5c811f3f88ee47e50c78bc8f557191ff38f69e7a5a71152d9f67687359dc3e9df7eb7f414777e7527f0af63fd937ebf082c00d19cb2f18cdb2594130f3e396cb7205a982c5df184959057b705607c3e7817720bf753812ba274bb4d1bf732b4a3a2da3050f8d789fa0d08be1827a27021e01d2b8f097a37bb64fc6ef3f1664f0c9d78e15bd37f8f9fa48230c87bf04aa413969e5e87b11b69d2c374b13fab42aa16c6052e1115f7f29f7c19793a3a7adebc9890ead6ed17fa09d34375c126aa9ecf06133156183316552ac31808575fc48fa9e6d56b121567c36a0011c2824edcba1bd1dba8f42b40d728677dbd28f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "ac84ead501802f6b71e8f6f6f74512eb82d665edbbc780b4cb9e19833b44583581a34f662eba92f1bea9969116ca138fb4bfbda06abcea86f2a2dec85157529e41f627c291f5e503a7e913d7a3a442b0f6c5801648110503476fc915d037d2d9accbda7b2486017d8baf512c78d26af31c3837edb026bca97731a557a0d7366d9881a923886b53f6c7aadb38a3de50330cea6609bc26fed8ab0899c01addedbffceca4f1195297c8c9841b7bc7f3f0ff178d31a5"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x8, 0x1, "6c4550ac"}]}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_MODULUS={0x8}]}}}]}, {0x18c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x6}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x61}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x15fc, 0xb, 0x0, 0x1, [{0x124, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x118, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x114, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "9c6dee850b7472a9afdf8372ffb7eaffdfdcc0c7b720ec8108641549e74fcb24cea49696e83c3ab8881ec589e5b9a8c3f838678d43c21e640344f7e9967275951314985baaa466e016a3579cbc447cf404dbef4b898ff1af0186417905917e5dcaab9976e49ed5251d659f4ac6b9b9be9e4bdea557bc0f"}]}]}}}, {0x60, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x13a4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x1394, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x1240, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1180, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1174, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_DATA={0x1148, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe3, 0x1, "93108056b4b375d8a720945eb90657e114a178948fe106fe5a2e7ae039964c654ad59eb8a22cabc79ac398eedf70b8bc46a625b20522276f46db5c392dec7ac999d8d7f957a16e8876ec8b6af38129d163fed9a04c1246e78891489b40ca6decf22009c0a78cde5cfaefbce66a708f61fc5f669314c8f4a0adae0f1a30c29e158d49353390ceb2b908d2b48d094e8268c7126f58c88f26c3b379fa33614993bc361ced9040da6576f6d94089ff53fc16123aca396c8dad4ac2b5971c2dcb28467a4ccbe295d7b40912fb3ba4a612b019ce9fed73e3fd5a66f1789ab7e7b8d4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0x11c, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}}}, {0x60, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x62}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x7}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb2}, @NFTA_SOCKET_KEY={0x8}]}}}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "fcc8dd28b3dd4a86c16f613f1c4c0c3270fcd1c299148493d70f37d27ac1b5219739c93246663e84eb092b96df816b6ed9b011157fb60e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "441c765a3415405a1eb99fa1e3113c87b33b43a3ef90ef2a1e7f7a26c2bccc12ae8c10f978abbb1441166432bd4c5a81cd2d7c07419f4fa174c5b850a5d19c7fe902bc442bf451"}, @NFTA_DATA_VALUE={0x7b, 0x1, "caae34b05193f19112697ed6bbc7fda52916da42bf08c7d4912b23d19dafef1452ce937acbe3a462e31b8cab45768831d4be9f335fd8199cc7b9eee8df586d004141d66b36b798db1937686052d9b4b0e2a0ca1138d8fd2d44a96ea6e0b0b86c6a9607a9662d547a4c66c3dd08c470d875d4fb26c0892c"}]}, @NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x100, 0x3, 0x0, 0x1, [{0x4}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "1d7517588bbad91e4884b9283b2346297d8a90f3435c8aa6e8d3b910b159d98634c7732f9b92d5347e191c3beb84afbb901e6356c7017a8d2d220ec9c0ccba0c9b204a28f0119b8e5aa2128e28f875a2cc775841209fde1d3cbd7eae97b6041e456862c3bdea32"}]}]}]}]}], {0x14, 0x10}}, 0x3ab0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r3, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r5, r6+60000000}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r14) 37.040447695s ago: executing program 1 (id=3827): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="180800005800000000000000000000110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYRESDEC=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2, @ANYBLOB='\x00\x00\x00\t'], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000380)=0x4) socket(0x23, 0x800, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x3}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x3, 0x100}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) readv(r6, &(0x7f0000000640)=[{&(0x7f0000000280)}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000600)=""/55, 0x37}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 36.76312796s ago: executing program 3 (id=3828): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x5e}, 0x0, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="1b40679a", 0x4}, {0x0}], 0x2}, 0x20040812) r1 = socket(0x28, 0x1, 0x0) getpeername$packet(r1, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x0, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x20, 0x3ff, 0x2}}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r7, @ANYRES64=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24000044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 36.162664722s ago: executing program 2 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x40, 0x0, 0x5, 0x7, {{0x40, 0x4, 0x3, 0x3f, 0x100, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x42, 0x2, [{0x0, 0x8, "2e2665de2b91"}, {0x7, 0xa, "db28a489efcf49e0"}, {0x0, 0xa, "446920fd24006d68"}, {0x5, 0xb, "dad3398137941065b2"}, {0x6, 0xf, "68138cb3862dbc1faaff40b239"}, {0x1, 0x6, "b4c4efb9"}]}, @noop, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x3, [0x5]}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x2}, {0x6, 0x8, "b02e54de94de"}, {0x6, 0x6, "8dcfddba"}, {0x6, 0x8, "5cb0945494c4"}]}, @generic={0x44, 0xf, "03a357c12a431ec9169bd525a9"}, @timestamp_addr={0x44, 0x2c, 0xb, 0x1, 0x9, [{@empty, 0x9}, {@broadcast, 0x4}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x1}]}, @timestamp={0x44, 0x24, 0x5d, 0x0, 0xd, [0x4, 0xfbfb, 0x8, 0x5, 0x1, 0xfffffff8, 0x3, 0xf5d9]}, @lsrr={0x83, 0x23, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101, @multicast2, @local, @loopback, @private=0xa010101, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 35.805725827s ago: executing program 1 (id=3830): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r2}, &(0x7f0000000140), &(0x7f00000017c0)=r3}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x8, 0x2) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x4008880) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "059f0f9fa4ad2d2e96a7d7df7993924b1a09af1683bea9f4d50bce69fb1d9e9f", "2b34f01ad1327b4771d000", {"fbaeff5fe3daf9d78c5246b4481bdd9f", "2be30b9d1ee8238a941a01d3657e4d00"}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x20) r7 = socket$kcm(0x29, 0x2, 0x0) close(r7) r8 = socket$kcm(0x2b, 0x1, 0x0) close(r8) socket(0xa, 0x3, 0xff) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r9}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.664266932s ago: executing program 3 (id=3831): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000001b0000012cbd7000fddbdf25fc020000000000000000000000000000ffffffff0000000000000000000000004e2300074e20fffd020000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01f0ffffffdc8563ffffff80000000000000000000000000001000ffffffff00000000090000000000000001000000000000000700000000000000caf4efdd4f4feee527e7e55afa60feffffffffffffffdd00000000000000000200000000000003000000000000000100000000d19a0003000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 35.410133982s ago: executing program 3 (id=3832): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}, 0x1, 0x1600000000000000}, 0x0) 35.011432421s ago: executing program 3 (id=3833): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) unshare(0x20000400) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000000, &(0x7f0000007380)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmmsg(r3, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000580)=""/60, 0x3c}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2}, 0x8}], 0x1, 0x10082, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r5, 0x1, 0x0, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r11, r8, 0x25, 0x2, @void}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x28}}, 0x4000) 34.855573896s ago: executing program 2 (id=3834): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000080), 0x0}, 0x20) (async) r5 = socket$kcm(0xa, 0x5, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) 34.386136989s ago: executing program 2 (id=3835): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r2) write(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0xd, 0x41}, 0xfffe, [0xde9a, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 34.050508993s ago: executing program 0 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x6, 0x1, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x0, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x10000, 0x34, {{0x10, 0x4, 0x0, 0x21, 0x40, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0x1f, 0xef, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @remote, @private=0xa010100, @remote, @remote, @rand_addr=0x64010100]}, @cipso={0x86, 0xb, 0x3, [{0x0, 0x5, "f94658"}]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000880)=0x2, 0x4) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000180)={0x1d, r13, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000ac0)={0xe4, r3, 0x100, 0x70bd29, 0x5, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x41}, 0xc080) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000008c0)={0xf, 0x80000000, 0x5ec0c4ea, 0x1, 0x100}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@ipv4_getroute={0x1c, 0x1a, 0x8, 0x70bd29, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x5, 0xfd, 0x2, 0x34, 0x5, 0x1b00}, ["", "", ""]}, 0x1c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4, 0x0, 0x0, 0x10}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 32.154334135s ago: executing program 3 (id=3837): r0 = socket(0x11, 0x80a, 0x0) sendto$x25(r0, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}]}, 0x80}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000300bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000000f03000000000000e5000200000000002604fdffff0200007b010000000000001d140000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 0s ago: executing program 32 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x6, 0x1, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x0, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x10000, 0x34, {{0x10, 0x4, 0x0, 0x21, 0x40, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0x1f, 0xef, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @remote, @private=0xa010100, @remote, @remote, @rand_addr=0x64010100]}, @cipso={0x86, 0xb, 0x3, [{0x0, 0x5, "f94658"}]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000880)=0x2, 0x4) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000180)={0x1d, r13, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000ac0)={0xe4, r3, 0x100, 0x70bd29, 0x5, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x41}, 0xc080) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000008c0)={0xf, 0x80000000, 0x5ec0c4ea, 0x1, 0x100}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@ipv4_getroute={0x1c, 0x1a, 0x8, 0x70bd29, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x5, 0xfd, 0x2, 0x34, 0x5, 0x1b00}, ["", "", ""]}, 0x1c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4, 0x0, 0x0, 0x10}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) kernel console output (not intermixed with test programs): ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.386388][T15613] ? import_iovec+0x73/0xa0 [ 339.386419][T15613] ___sys_sendmsg+0x2a5/0x360 [ 339.386446][T15613] ? __lock_acquire+0x683/0x2cf0 [ 339.386476][T15613] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.386550][T15613] ? __fget_files+0x2a/0x420 [ 339.386573][T15613] ? __fget_files+0x3a2/0x420 [ 339.386609][T15613] __x64_sys_sendmsg+0x1b1/0x290 [ 339.386640][T15613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.386689][T15613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.386710][T15613] do_syscall_64+0x174/0x580 [ 339.386734][T15613] ? trace_irq_disable+0x3b/0x140 [ 339.386758][T15613] ? clear_bhb_loop+0x40/0x90 [ 339.386781][T15613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.386801][T15613] RIP: 0033:0x7f607ff9de59 [ 339.386819][T15613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.386836][T15613] RSP: 002b:00007f6080e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.386857][T15613] RAX: ffffffffffffffda RBX: 00007f6080225fa0 RCX: 00007f607ff9de59 [ 339.386871][T15613] RDX: 00000000200440c4 RSI: 0000200000000040 RDI: 0000000000000004 [ 339.386884][T15613] RBP: 00007f6080e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 339.386896][T15613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.386907][T15613] R13: 00007f6080226038 R14: 00007f6080225fa0 R15: 00007ffed10317c8 [ 339.386942][T15613] [ 339.387080][T15613] debugfs: out of free dentries, can not create file 'netdev@ffff888077cda700' [ 340.036294][T15617] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 340.159118][T15623] __nla_validate_parse: 14 callbacks suppressed [ 340.159137][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'. [ 340.191976][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2741'. [ 340.218233][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 340.515169][T15633] lo speed is unknown, defaulting to 1000 [ 340.553891][T15633] lo speed is unknown, defaulting to 1000 [ 341.190792][T15658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2748'. [ 341.282673][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 341.457648][T15633] xfrm0 speed is unknown, defaulting to 1000 [ 341.524630][T15676] IPVS: length: 134 != 24 [ 341.790332][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 341.858406][T15689] sctp: [Deprecated]: syz.2.2755 (pid 15689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.858406][T15689] Use struct sctp_sack_info instead [ 342.370692][T15709] sctp: [Deprecated]: syz.1.2759 (pid 15709) Use of int in max_burst socket option. [ 342.370692][T15709] Use struct sctp_assoc_value instead [ 342.900229][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 342.937987][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 342.966089][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 342.994606][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 343.250248][T15734] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 343.318535][T15738] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 343.396430][T15744] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20002 [ 343.443228][T15738] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.500658][T15749] bond11: (slave veth0_to_bond): making interface the new active one [ 343.531701][T15749] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 343.576318][T15743] veth9: entered allmulticast mode [ 343.621516][T15743] veth10: entered allmulticast mode [ 343.632682][T15743] bond11: (slave veth10): Enslaving as an active interface with a down link [ 344.070452][T15745] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 344.174282][T15749] syzkaller0: entered promiscuous mode [ 344.216614][T15749] syzkaller0: entered allmulticast mode [ 346.450887][T15807] __nla_validate_parse: 2 callbacks suppressed [ 346.450906][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 346.513509][T15814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2786'. [ 346.514671][T15803] lo speed is unknown, defaulting to 1000 [ 346.534344][T15807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 346.545879][T15814] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 346.607413][T15803] lo speed is unknown, defaulting to 1000 [ 346.814747][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 347.405831][T15855] sctp: [Deprecated]: syz.4.2792 (pid 15855) Use of int in max_burst socket option. [ 347.405831][T15855] Use struct sctp_assoc_value instead [ 347.788331][T15866] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2793'. [ 347.803859][T15803] xfrm0 speed is unknown, defaulting to 1000 [ 347.811888][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'. [ 347.851285][T15870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2796'. [ 347.882838][T15872] netlink: 'syz.2.2797': attribute type 26 has an invalid length. [ 347.925206][T15870] bond15 (unregistering): Released all slaves [ 347.933070][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2796'. [ 348.318907][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2803'. [ 348.415658][T15893] netlink: 'syz.2.2803': attribute type 4 has an invalid length. [ 348.596315][T15899] netlink: 'syz.2.2803': attribute type 10 has an invalid length. [ 348.617019][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2803'. [ 348.706883][T15912] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 348.837985][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2809'. [ 349.305937][T15929] nbd4: detected capacity change from 0 to 63 [ 349.327916][T15931] block nbd4: NBD_DISCONNECT [ 349.344135][T15931] block nbd4: Disconnected due to user request. [ 349.359218][T15931] block nbd4: shutting down sockets [ 349.370992][ C0] blk_print_req_error: 223 callbacks suppressed [ 349.371042][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.386511][ C0] buffer_io_error: 286 callbacks suppressed [ 349.386579][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 349.400272][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.409401][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 349.417195][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.426305][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 349.434041][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.443174][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 349.452101][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.462720][ T1580] Buffer I/O error on dev nbd4, logical block 0, async page read [ 349.471645][ T1580] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.480775][ T1580] Buffer I/O error on dev nbd4, logical block 1, async page read [ 349.488865][ T1580] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.498021][ T1580] Buffer I/O error on dev nbd4, logical block 2, async page read [ 349.506125][ T1580] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.515247][ T1580] Buffer I/O error on dev nbd4, logical block 3, async page read [ 349.524926][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.534140][ T1580] Buffer I/O error on dev nbd4, logical block 0, async page read [ 349.543758][ T1580] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 349.553801][ T1580] Buffer I/O error on dev nbd4, logical block 1, async page read [ 349.566137][ T5618] ldm_validate_partition_table(): Disk read failed. [ 349.575145][ T5618] Dev nbd4: unable to read RDB block 0 [ 349.583186][ T5618] nbd4: unable to read partition table [ 349.596770][ T5618] ldm_validate_partition_table(): Disk read failed. [ 349.605773][ T5618] Dev nbd4: unable to read RDB block 0 [ 349.613739][ T5618] nbd4: unable to read partition table [ 350.081354][T15959] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 350.139822][T15959] bond15: entered promiscuous mode [ 350.145326][T15959] bond15: entered allmulticast mode [ 350.151125][T15959] 8021q: adding VLAN 0 to HW filter on device bond15 [ 350.504644][T15977] nbd3: detected capacity change from 0 to 63 [ 350.519317][T15978] block nbd3: NBD_DISCONNECT [ 350.535458][T15978] block nbd3: Disconnected due to user request. [ 350.565756][T15978] block nbd3: shutting down sockets [ 350.621715][ T5618] ldm_validate_partition_table(): Disk read failed. [ 350.648617][ T5618] Dev nbd3: unable to read RDB block 0 [ 350.668108][ T5618] nbd3: unable to read partition table [ 350.682457][ T5618] ldm_validate_partition_table(): Disk read failed. [ 350.693093][ T5618] Dev nbd3: unable to read RDB block 0 [ 350.703079][ T5618] nbd3: unable to read partition table [ 350.779871][T15989] syzkaller1: entered promiscuous mode [ 350.785558][T15989] syzkaller1: entered allmulticast mode [ 350.792441][T15981] pim6reg1: entered promiscuous mode [ 350.798498][T15981] pim6reg1: entered allmulticast mode [ 350.815158][T15989] bridge0: port 1(batadv2) entered blocking state [ 350.822178][T15989] bridge0: port 1(batadv2) entered disabled state [ 350.830205][T15989] batadv2: entered allmulticast mode [ 350.837988][T15989] batadv2: entered promiscuous mode [ 350.875024][T15981] sctp: [Deprecated]: syz.4.2827 (pid 15981) Use of int in maxseg socket option. [ 350.875024][T15981] Use struct sctp_assoc_value instead [ 351.146874][T16005] erspan0: left promiscuous mode [ 351.192018][T16005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.209248][T16005] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.238531][T16005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.299275][T16005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.314919][T12706] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 351.326068][T12706] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 351.344664][T16005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.372546][T16005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.394843][T16005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.410222][T16005] veth1_vlan: left promiscuous mode [ 351.426685][T16005] veth1_vlan: entered promiscuous mode [ 351.450657][T16005] veth1_macvtap: left promiscuous mode [ 351.463987][T16005] veth0_macvtap: left promiscuous mode [ 351.477862][T16005] veth0_macvtap: entered promiscuous mode [ 351.494076][T16005] veth1_macvtap: entered promiscuous mode [ 351.511164][T16005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.519867][T16005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.529089][T16005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.542994][T16005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.552243][T16005] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 351.586388][ T11] lo speed is unknown, defaulting to 1000 [ 351.592251][T16002] lo speed is unknown, defaulting to 1000 [ 351.613179][ T11] syz2: Port: 1 Link ACTIVE [ 351.699422][T12717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.714492][T12717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.732635][T16002] lo speed is unknown, defaulting to 1000 [ 351.766423][T12717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.797060][T12717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.857451][T16037] __nla_validate_parse: 2 callbacks suppressed [ 351.857468][T16037] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2840'. [ 352.113517][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.125709][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.135107][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.146099][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.155681][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.212875][T16044] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2842'. [ 352.248547][T16044] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 352.427645][T16002] xfrm0 speed is unknown, defaulting to 1000 [ 352.487630][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 352.858331][T12713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.889967][T12713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.943530][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 353.020937][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 353.137332][T12713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.168288][T12713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.214168][T16082] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 353.376828][T12713] team0: Port device netdevsim1 removed [ 353.390869][T12713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.401671][T12713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.423487][T16039] lo speed is unknown, defaulting to 1000 [ 353.520656][T16101] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2856'. [ 353.531376][T16039] lo speed is unknown, defaulting to 1000 [ 353.596399][T12713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.611867][T12713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.874984][T16039] xfrm0 speed is unknown, defaulting to 1000 [ 353.997532][T12713] batadv2: left allmulticast mode [ 354.010802][T12713] batadv2: left promiscuous mode [ 354.023773][T12713] bridge0: port 1(batadv2) entered disabled state [ 354.205048][ T5617] Bluetooth: hci5: command tx timeout [ 354.270989][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 354.709333][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 355.159908][T12713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.172151][T12713] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 355.182200][T12713] bond0 (unregistering): Released all slaves [ 355.192484][T12713] bond1 (unregistering): Released all slaves [ 355.207621][T12713] bond2 (unregistering): Released all slaves [ 355.220908][T12713] bond3 (unregistering): Released all slaves [ 355.234327][T12713] bond4 (unregistering): Released all slaves [ 355.248074][T12713] bond5 (unregistering): Released all slaves [ 355.262650][T12713] bond6 (unregistering): Released all slaves [ 355.288952][T12713] bond7 (unregistering): Released all slaves [ 355.302151][T12713] bond8 (unregistering): Released all slaves [ 355.316176][T12713] bond9 (unregistering): (slave bond10): Releasing backup interface [ 355.326427][T12713] bond9 (unregistering): Released all slaves [ 355.340793][T12713] bond10 (unregistering): Released all slaves [ 355.355308][T12713] bond11 (unregistering): Released all slaves [ 355.368444][T12713] bond12 (unregistering): Released all slaves [ 355.382180][T12713] bond13 (unregistering): Released all slaves [ 355.401679][T12713] bond14 (unregistering): Released all slaves [ 355.425382][T12713] bond15 (unregistering): Released all slaves [ 355.442596][T16119] batadv_slave_1: entered promiscuous mode [ 355.451194][T16119] batadv_slave_1: left promiscuous mode [ 355.530350][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 355.758079][T12713] : left promiscuous mode [ 355.774864][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'. [ 355.905432][T12713] tipc: Disabling bearer [ 355.973632][T12713] tipc: Left network mode [ 355.992271][T16162] lo speed is unknown, defaulting to 1000 [ 356.009105][T16162] lo speed is unknown, defaulting to 1000 [ 356.089305][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 356.285362][ T5617] Bluetooth: hci5: command tx timeout [ 356.573732][T16162] xfrm0 speed is unknown, defaulting to 1000 [ 356.873978][T16203] syzkaller1: entered promiscuous mode [ 356.898729][T16203] syzkaller1: entered allmulticast mode [ 356.928540][T16039] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.944762][T16039] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.956717][T16039] bridge_slave_0: entered allmulticast mode [ 356.983824][T16039] bridge_slave_0: entered promiscuous mode [ 357.281698][T16039] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.298763][T16039] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.314654][T16039] bridge_slave_1: entered allmulticast mode [ 357.340955][T16039] bridge_slave_1: entered promiscuous mode [ 357.397566][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 357.652081][T16234] netlink: 'syz.3.2884': attribute type 5 has an invalid length. [ 357.663549][T16236] netlink: 'syz.1.2883': attribute type 21 has an invalid length. [ 357.721843][T16234] netlink: 'syz.3.2884': attribute type 8 has an invalid length. [ 357.751277][T16236] __nla_validate_parse: 3 callbacks suppressed [ 357.751295][T16236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2883'. [ 357.757981][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 357.806280][T16039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.856619][T16039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.871723][T12713] hsr_slave_0: left promiscuous mode [ 357.877874][T12713] hsr_slave_1: left promiscuous mode [ 357.883678][T12713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.902831][T12713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.911580][T12713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.919157][T12713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.950065][T12713] veth1_macvtap: left promiscuous mode [ 357.969977][T12713] veth0_macvtap: left promiscuous mode [ 357.976539][T12713] veth1_vlan: left promiscuous mode [ 357.986591][T12713] veth0_vlan: left promiscuous mode [ 358.181090][T16255] FAULT_INJECTION: forcing a failure. [ 358.181090][T16255] name failslab, interval 1, probability 0, space 0, times 0 [ 358.196466][T16255] CPU: 0 UID: 0 PID: 16255 Comm: syz.0.2888 Not tainted syzkaller #0 PREEMPT(full) [ 358.196492][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.196503][T16255] Call Trace: [ 358.196510][T16255] [ 358.196518][T16255] dump_stack_lvl+0xe8/0x150 [ 358.196552][T16255] should_fail_ex+0x40c/0x560 [ 358.196579][T16255] should_failslab+0xa8/0x100 [ 358.196607][T16255] __kmalloc_noprof+0xfe/0x720 [ 358.196628][T16255] ? __kasan_kmalloc+0x93/0xb0 [ 358.196653][T16255] ? nla_strdup+0x9d/0x140 [ 358.196675][T16255] ? nla_strdup+0x9d/0x140 [ 358.196705][T16255] nla_strdup+0x9d/0x140 [ 358.196730][T16255] nf_tables_newtable+0x49a/0x1950 [ 358.196781][T16255] nfnetlink_rcv+0x1288/0x28c0 [ 358.196843][T16255] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.196917][T16255] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.196956][T16255] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.196983][T16255] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.197015][T16255] netlink_unicast+0x7bb/0x940 [ 358.197052][T16255] netlink_sendmsg+0x813/0xb40 [ 358.197090][T16255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.197123][T16255] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.197148][T16255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.197174][T16255] sock_sendmsg_nosec+0x13a/0x180 [ 358.197199][T16255] ____sys_sendmsg+0x54e/0x850 [ 358.197232][T16255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.197268][T16255] ? import_iovec+0x73/0xa0 [ 358.197298][T16255] ___sys_sendmsg+0x2a5/0x360 [ 358.197323][T16255] ? __lock_acquire+0x683/0x2cf0 [ 358.197353][T16255] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.197418][T16255] ? __fget_files+0x2a/0x420 [ 358.197441][T16255] ? __fget_files+0x3a2/0x420 [ 358.197479][T16255] __x64_sys_sendmsg+0x1b1/0x290 [ 358.197505][T16255] ? sched_clock+0x3f/0x60 [ 358.197529][T16255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.197576][T16255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.197597][T16255] do_syscall_64+0x174/0x580 [ 358.197623][T16255] ? clear_bhb_loop+0x40/0x90 [ 358.197648][T16255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.197666][T16255] RIP: 0033:0x7f2f14d9de59 [ 358.197684][T16255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.197700][T16255] RSP: 002b:00007f2f12ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.197721][T16255] RAX: ffffffffffffffda RBX: 00007f2f15025fa0 RCX: 00007f2f14d9de59 [ 358.197734][T16255] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 358.197746][T16255] RBP: 00007f2f12ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.197758][T16255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.197769][T16255] R13: 00007f2f15026038 R14: 00007f2f15025fa0 R15: 00007fff3ca7b0c8 [ 358.197804][T16255] [ 358.364635][ T5617] Bluetooth: hci5: command tx timeout [ 358.721987][T12713] team0 (unregistering): Port device team_slave_1 removed [ 359.015527][T12706] smbdirect: ib_dev[syz2] removed [ 359.042646][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 359.073346][ T5616] lo speed is unknown, defaulting to 1000 [ 359.092049][ T5616] infiniband syz2: ib_query_port failed (-19) [ 359.200176][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 359.240881][T16039] team0: Port device team_slave_0 added [ 359.271977][T16039] team0: Port device team_slave_1 added [ 359.524347][T16039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.555959][T16039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.599732][T16039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.686648][T16039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.705038][T16039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.743009][T16039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.786001][T16311] FAULT_INJECTION: forcing a failure. [ 359.786001][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 359.828613][T16311] CPU: 0 UID: 0 PID: 16311 Comm: syz.3.2899 Not tainted syzkaller #0 PREEMPT(full) [ 359.828640][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.828657][T16311] Call Trace: [ 359.828665][T16311] [ 359.828673][T16311] dump_stack_lvl+0xe8/0x150 [ 359.828713][T16311] should_fail_ex+0x40c/0x560 [ 359.828740][T16311] should_failslab+0xa8/0x100 [ 359.828769][T16311] __kmalloc_noprof+0xfe/0x720 [ 359.828790][T16311] ? __kasan_kmalloc+0x93/0xb0 [ 359.828815][T16311] ? nla_strdup+0x9d/0x140 [ 359.828837][T16311] ? nla_strdup+0x9d/0x140 [ 359.828867][T16311] nla_strdup+0x9d/0x140 [ 359.828895][T16311] nf_tables_newtable+0x49a/0x1950 [ 359.828939][T16311] nfnetlink_rcv+0x1288/0x28c0 [ 359.828994][T16311] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 359.829034][T16311] ? ref_tracker_free+0x689/0x830 [ 359.829079][T16311] ? skb_clone+0x246/0x3a0 [ 359.829110][T16311] ? __netlink_deliver_tap+0x811/0x860 [ 359.829145][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.829171][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.829201][T16311] netlink_unicast+0x7bb/0x940 [ 359.829236][T16311] netlink_sendmsg+0x813/0xb40 [ 359.829268][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.829300][T16311] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.829325][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.829350][T16311] sock_sendmsg_nosec+0x13a/0x180 [ 359.829374][T16311] ____sys_sendmsg+0x54e/0x850 [ 359.829407][T16311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.829443][T16311] ? import_iovec+0x73/0xa0 [ 359.829473][T16311] ___sys_sendmsg+0x2a5/0x360 [ 359.829498][T16311] ? __lock_acquire+0x683/0x2cf0 [ 359.829526][T16311] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.829586][T16311] ? __fget_files+0x2a/0x420 [ 359.829611][T16311] ? __fget_files+0x3a2/0x420 [ 359.829644][T16311] __x64_sys_sendmsg+0x1b1/0x290 [ 359.829673][T16311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.829726][T16311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.829746][T16311] do_syscall_64+0x174/0x580 [ 359.829769][T16311] ? trace_irq_disable+0x3b/0x140 [ 359.829792][T16311] ? clear_bhb_loop+0x40/0x90 [ 359.829815][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.829834][T16311] RIP: 0033:0x7ff36939de59 [ 359.829853][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.829869][T16311] RSP: 002b:00007ff36a190028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.829889][T16311] RAX: ffffffffffffffda RBX: 00007ff369625fa0 RCX: 00007ff36939de59 [ 359.829902][T16311] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 359.829913][T16311] RBP: 00007ff36a190090 R08: 0000000000000000 R09: 0000000000000000 [ 359.829925][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.829936][T16311] R13: 00007ff369626038 R14: 00007ff369625fa0 R15: 00007fffb5049ef8 [ 359.829967][T16311] [ 360.183913][T16315] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2900'. [ 360.209710][T12713] IPVS: stop unused estimator thread 0... [ 360.253094][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 360.456711][T16039] hsr_slave_0: entered promiscuous mode [ 360.486955][T16039] hsr_slave_1: entered promiscuous mode [ 360.511061][T16039] debugfs: 'hsr0' already exists in 'hsr' [ 360.530647][ T5617] Bluetooth: hci5: command tx timeout [ 360.537537][T16039] Cannot create hsr debugfs directory [ 360.583091][T16328] gretap2: entered allmulticast mode [ 360.674294][T16326] gretap2: entered allmulticast mode [ 360.860697][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 361.176362][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 361.624873][T16371] netlink: 'syz.1.2908': attribute type 2 has an invalid length. [ 361.644210][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 361.698707][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 361.729159][T16370] lo speed is unknown, defaulting to 1000 [ 362.112690][T16384] netlink: 'syz.4.2911': attribute type 51 has an invalid length. [ 362.439306][T16370] xfrm0 speed is unknown, defaulting to 1000 [ 362.640555][T16039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.686365][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.708459][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 362.715289][T16039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.748607][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.768205][T16392] lo speed is unknown, defaulting to 1000 [ 362.814037][T16402] netlink: 'syz.0.2914': attribute type 4 has an invalid length. [ 362.839948][T16039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.879169][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.902216][T16039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.930227][T16406] digital: digital_start_poll: Unknown protocol [ 362.943905][T16039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.535576][T16039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.562791][T16039] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.597229][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.605210][T12713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.648326][T16392] xfrm0 speed is unknown, defaulting to 1000 [ 363.658557][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.665736][T12705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.959853][T16039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.107312][T16039] veth0_vlan: entered promiscuous mode [ 365.143141][T16039] veth1_vlan: entered promiscuous mode [ 365.247154][T16039] veth0_macvtap: entered promiscuous mode [ 365.286958][T16039] veth1_macvtap: entered promiscuous mode [ 365.362008][T16039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.407263][T16039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.481833][T16511] vlan3: entered promiscuous mode [ 365.553355][T12704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.576696][T12704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.606624][T12704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.650509][T12704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.797643][T16518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2931'. [ 366.000735][T12717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.032167][T12717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.172850][T12717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.210323][T12717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.474613][T16548] bond0: (slave bond_slave_1): Releasing backup interface [ 366.725687][T16558] nbd2: detected capacity change from 0 to 63 [ 366.762173][T16561] block nbd2: NBD_DISCONNECT [ 366.783358][T16561] block nbd2: Disconnected due to user request. [ 366.812290][T16561] block nbd2: shutting down sockets [ 366.837902][ C1] blk_print_req_error: 280 callbacks suppressed [ 366.837919][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.853325][ C1] buffer_io_error: 286 callbacks suppressed [ 366.853341][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 366.868025][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.877182][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 366.884945][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.894036][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 366.901821][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.910931][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 366.920988][ T1580] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.934156][ T1580] Buffer I/O error on dev nbd2, logical block 0, async page read [ 366.942199][ T1580] Buffer I/O error on dev nbd2, logical block 1, async page read [ 366.950431][ T1580] Buffer I/O error on dev nbd2, logical block 2, async page read [ 366.958403][ T1580] Buffer I/O error on dev nbd2, logical block 3, async page read [ 366.966968][ T1580] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 366.976551][ T1580] Buffer I/O error on dev nbd2, logical block 0, async page read [ 366.985393][ T1580] Buffer I/O error on dev nbd2, logical block 1, async page read [ 366.993972][ T1580] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 367.005103][ T1580] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 367.015106][ T1580] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 367.025002][ T1580] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 367.034985][T16519] ldm_validate_partition_table(): Disk read failed. [ 367.043908][T16519] Dev nbd2: unable to read RDB block 0 [ 367.052048][T16519] nbd2: unable to read partition table [ 367.073617][T16519] ldm_validate_partition_table(): Disk read failed. [ 367.083772][T16519] Dev nbd2: unable to read RDB block 0 [ 367.098064][T16519] nbd2: unable to read partition table [ 367.348562][T16588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2945'. [ 367.400273][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'. [ 367.468445][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2947'. [ 367.542812][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 368.230889][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 368.494131][T16660] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002 [ 368.858239][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.871517][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.883279][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.893554][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.904887][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.402670][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 370.159572][T16676] lo speed is unknown, defaulting to 1000 [ 370.232686][T16756] FAULT_INJECTION: forcing a failure. [ 370.232686][T16756] name failslab, interval 1, probability 0, space 0, times 0 [ 370.264339][T16756] CPU: 0 UID: 0 PID: 16756 Comm: syz.3.2983 Not tainted syzkaller #0 PREEMPT(full) [ 370.264366][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.264376][T16756] Call Trace: [ 370.264383][T16756] [ 370.264391][T16756] dump_stack_lvl+0xe8/0x150 [ 370.264435][T16756] should_fail_ex+0x40c/0x560 [ 370.264461][T16756] should_failslab+0xa8/0x100 [ 370.264489][T16756] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 370.264517][T16756] ? kasprintf+0xe2/0x140 [ 370.264542][T16756] ? kasprintf+0xe2/0x140 [ 370.264574][T16756] kvasprintf+0xeb/0x1a0 [ 370.264599][T16756] ? sock_sendmsg_nosec+0x13a/0x180 [ 370.264618][T16756] ? ____sys_sendmsg+0x54e/0x850 [ 370.264643][T16756] ? ___sys_sendmsg+0x2a5/0x360 [ 370.264669][T16756] ? __pfx_kvasprintf+0x10/0x10 [ 370.264709][T16756] kasprintf+0xe2/0x140 [ 370.264742][T16756] ? __pfx_kasprintf+0x10/0x10 [ 370.264781][T16756] nf_tables_set_alloc_name+0x10e/0x710 [ 370.264805][T16756] ? __kmalloc_noprof+0x396/0x720 [ 370.264827][T16756] ? __kmalloc_noprof+0x1ad/0x720 [ 370.264850][T16756] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 370.264877][T16756] ? nla_strdup+0xb8/0x140 [ 370.264909][T16756] nf_tables_newset+0x13aa/0x2570 [ 370.264939][T16756] ? __pfx_nf_tables_newset+0x10/0x10 [ 370.264977][T16756] ? __nla_parse+0x40/0x60 [ 370.265004][T16756] nfnetlink_rcv+0x1288/0x28c0 [ 370.265064][T16756] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 370.265106][T16756] ? ref_tracker_free+0x689/0x830 [ 370.265152][T16756] ? skb_clone+0x246/0x3a0 [ 370.265184][T16756] ? __netlink_deliver_tap+0x811/0x860 [ 370.265220][T16756] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.265247][T16756] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.265279][T16756] netlink_unicast+0x7bb/0x940 [ 370.265316][T16756] netlink_sendmsg+0x813/0xb40 [ 370.265353][T16756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.265383][T16756] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.265414][T16756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.265441][T16756] sock_sendmsg_nosec+0x13a/0x180 [ 370.265465][T16756] ____sys_sendmsg+0x54e/0x850 [ 370.265497][T16756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.265534][T16756] ? import_iovec+0x73/0xa0 [ 370.265563][T16756] ___sys_sendmsg+0x2a5/0x360 [ 370.265589][T16756] ? __lock_acquire+0x683/0x2cf0 [ 370.265617][T16756] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.265681][T16756] ? __fget_files+0x2a/0x420 [ 370.265704][T16756] ? __fget_files+0x3a2/0x420 [ 370.265738][T16756] __x64_sys_sendmsg+0x1b1/0x290 [ 370.265768][T16756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.265814][T16756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.265835][T16756] do_syscall_64+0x174/0x580 [ 370.265861][T16756] ? clear_bhb_loop+0x40/0x90 [ 370.265884][T16756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.265903][T16756] RIP: 0033:0x7ff36939de59 [ 370.265921][T16756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.265936][T16756] RSP: 002b:00007ff36a190028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.265956][T16756] RAX: ffffffffffffffda RBX: 00007ff369625fa0 RCX: 00007ff36939de59 [ 370.265970][T16756] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 370.265982][T16756] RBP: 00007ff36a190090 R08: 0000000000000000 R09: 0000000000000000 [ 370.265994][T16756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.266005][T16756] R13: 00007ff369626038 R14: 00007ff369625fa0 R15: 00007fffb5049ef8 [ 370.266036][T16756] [ 371.004669][ T5626] Bluetooth: hci3: command tx timeout [ 371.068663][T16676] xfrm0 speed is unknown, defaulting to 1000 [ 371.077929][T16782] syzkaller0: entered promiscuous mode [ 371.104548][T16782] syzkaller0: entered allmulticast mode [ 371.662308][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 371.693546][T16809] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2996'. [ 371.778518][T16814] openvswitch: netlink: Flow key attr not present in new flow. [ 372.204330][T16835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 372.672525][T16864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3005'. [ 372.728336][T16676] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.766432][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.788659][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3007'. [ 372.796423][T16676] bridge_slave_0: entered allmulticast mode [ 372.820753][T16676] bridge_slave_0: entered promiscuous mode [ 372.873166][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3007'. [ 372.905397][T16676] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.919435][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.937754][T16676] bridge_slave_1: entered allmulticast mode [ 372.956157][T16676] bridge_slave_1: entered promiscuous mode [ 372.964793][T16871] 8021q: adding VLAN 0 to HW filter on device bond14 [ 373.085688][T16676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.086430][ T5626] Bluetooth: hci3: command tx timeout [ 373.098082][T16676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.189311][T16676] team0: Port device team_slave_0 added [ 373.245388][T16676] team0: Port device team_slave_1 added [ 373.397143][T16676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.432907][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.523609][T16676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.584107][T16874] lo speed is unknown, defaulting to 1000 [ 373.588161][T16894] xt_hashlimit: max too large, truncated to 1048576 [ 373.601291][T16676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.628384][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.713415][T16676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.854338][T16910] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3016'. [ 373.901776][T16676] hsr_slave_0: entered promiscuous mode [ 373.914256][T16676] hsr_slave_1: entered promiscuous mode [ 373.923974][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3016'. [ 373.937529][T16676] debugfs: 'hsr0' already exists in 'hsr' [ 373.950528][T16676] Cannot create hsr debugfs directory [ 373.958421][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'. [ 373.974707][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 373.986482][T16910] netlink: 'syz.1.3016': attribute type 1 has an invalid length. [ 374.021049][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'. [ 374.044942][T12717] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.060103][T12717] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.187536][T12717] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.214706][T12717] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.660970][T16874] xfrm0 speed is unknown, defaulting to 1000 [ 374.844056][T16933] netlink: 'syz.1.3024': attribute type 4 has an invalid length. [ 374.870043][T16928] bond1 (unregistering): Released all slaves [ 375.033235][T16935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.049898][T16935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.068221][T16935] erspan0: entered promiscuous mode [ 375.083800][T16935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.129383][T16935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.142387][T16935] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.151813][T16935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.165512][T16935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.165876][ T5626] Bluetooth: hci3: command tx timeout [ 375.174130][T16935] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.186907][T16935] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.209797][T16935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.225240][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 375.248187][T16935] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 375.382630][ T42] xfrm0 speed is unknown, defaulting to 1000 [ 375.382652][T12713] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.418969][T12713] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 375.462863][T16951] sch_tbf: burst 240 is lower than device lo mtu (5390) ! [ 375.492706][ T5773] bond11: (slave veth10): link status definitely up, 10000 Mbps full duplex [ 375.516661][T12704] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.526798][T12704] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.542697][T12713] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.555895][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.564283][T12713] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 375.624866][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.651482][T12713] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.664067][T12713] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 375.679170][T12713] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.688462][T12713] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 376.046729][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 376.077551][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 376.120948][T16975] netlink: 'syz.2.3034': attribute type 4 has an invalid length. [ 376.488360][T16977] geneve0: entered promiscuous mode [ 376.509542][T16977] macvlan5: entered promiscuous mode [ 377.090326][T16676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.123933][T17007] __nla_validate_parse: 5 callbacks suppressed [ 377.123950][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3043'. [ 377.212712][T16524] udevd[16524]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 377.226010][T16676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.242030][T16676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.257745][ T5626] Bluetooth: hci3: command tx timeout [ 377.274738][T16524] udevd[16524]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 377.297363][T16676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.337633][T16676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.365871][T16676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.417581][T16676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.432078][T16676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.451860][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 377.731735][T16676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.776857][T16676] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.816061][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.823249][T12708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.865105][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.872285][T12717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.233459][T17051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3051'. [ 378.290634][T17055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3051'. [ 378.323738][T17052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.341338][T17053] veth1_to_bond: entered promiscuous mode [ 378.377701][T17059] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 378.388312][T17053] veth1_to_bond: left promiscuous mode [ 378.451280][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.485296][T17059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3052'. [ 378.494856][T17063] xt_hashlimit: size too large, truncated to 1048576 [ 378.512907][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 378.582019][T17070] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3053'. [ 378.633250][T17073] netlink: 'syz.1.3053': attribute type 11 has an invalid length. [ 378.680692][T17073] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3053'. [ 379.024090][T17075] lo speed is unknown, defaulting to 1000 [ 379.037342][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.260505][T17104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.324890][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.968542][T16676] veth0_vlan: entered promiscuous mode [ 380.011408][T16676] veth1_vlan: entered promiscuous mode [ 380.087346][T17081] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3055'. [ 380.136817][T16676] veth0_macvtap: entered promiscuous mode [ 380.139165][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3055'. [ 380.168759][T16676] veth1_macvtap: entered promiscuous mode [ 380.240377][T17075] xfrm0 speed is unknown, defaulting to 1000 [ 380.241963][T16676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.294202][T16676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.332464][T12702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.361300][T12702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.392182][T12702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.411753][T12702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.892297][T12699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.912190][T12699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.969812][T17166] veth3: entered allmulticast mode [ 381.107452][T12713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.119790][T12713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.913558][T17204] lo speed is unknown, defaulting to 1000 [ 382.408182][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.422249][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.431111][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.440941][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.451033][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.620702][T17227] FAULT_INJECTION: forcing a failure. [ 382.620702][T17227] name failslab, interval 1, probability 0, space 0, times 0 [ 382.648204][T17227] CPU: 1 UID: 0 PID: 17227 Comm: syz.3.3088 Not tainted syzkaller #0 PREEMPT(full) [ 382.648232][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.648243][T17227] Call Trace: [ 382.648251][T17227] [ 382.648259][T17227] dump_stack_lvl+0xe8/0x150 [ 382.648291][T17227] should_fail_ex+0x40c/0x560 [ 382.648318][T17227] should_failslab+0xa8/0x100 [ 382.648347][T17227] __kmalloc_cache_noprof+0xa8/0x660 [ 382.648372][T17227] ? nfnetlink_rcv+0x1021/0x28c0 [ 382.648397][T17227] ? nfnetlink_rcv+0x1021/0x28c0 [ 382.648429][T17227] nfnetlink_rcv+0x1021/0x28c0 [ 382.648490][T17227] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 382.648533][T17227] ? ref_tracker_free+0x689/0x830 [ 382.648579][T17227] ? skb_clone+0x246/0x3a0 [ 382.648610][T17227] ? __netlink_deliver_tap+0x811/0x860 [ 382.648647][T17227] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.648681][T17227] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.648715][T17227] netlink_unicast+0x7bb/0x940 [ 382.648752][T17227] netlink_sendmsg+0x813/0xb40 [ 382.648790][T17227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.648822][T17227] ? aa_sock_msg_perm+0xf1/0x1b0 [ 382.648847][T17227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.648874][T17227] sock_sendmsg_nosec+0x13a/0x180 [ 382.648898][T17227] ____sys_sendmsg+0x54e/0x850 [ 382.648932][T17227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.648969][T17227] ? import_iovec+0x73/0xa0 [ 382.648999][T17227] ___sys_sendmsg+0x2a5/0x360 [ 382.649024][T17227] ? __lock_acquire+0x683/0x2cf0 [ 382.649054][T17227] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.649117][T17227] ? __fget_files+0x2a/0x420 [ 382.649141][T17227] ? __fget_files+0x3a2/0x420 [ 382.649174][T17227] __x64_sys_sendmsg+0x1b1/0x290 [ 382.649205][T17227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.649250][T17227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.649271][T17227] do_syscall_64+0x174/0x580 [ 382.649295][T17227] ? trace_irq_disable+0x3b/0x140 [ 382.649318][T17227] ? clear_bhb_loop+0x40/0x90 [ 382.649342][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.649361][T17227] RIP: 0033:0x7ff36939de59 [ 382.649378][T17227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.649395][T17227] RSP: 002b:00007ff36a190028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.649415][T17227] RAX: ffffffffffffffda RBX: 00007ff369625fa0 RCX: 00007ff36939de59 [ 382.649428][T17227] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 382.649440][T17227] RBP: 00007ff36a190090 R08: 0000000000000000 R09: 0000000000000000 [ 382.649452][T17227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.649463][T17227] R13: 00007ff369626038 R14: 00007ff369625fa0 R15: 00007fffb5049ef8 [ 382.649494][T17227] [ 382.931390][T17235] __nla_validate_parse: 4 callbacks suppressed [ 382.931407][T17235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3090'. [ 382.974133][T17237] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3090'. [ 383.282172][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 383.309220][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 383.321986][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3092'. [ 383.450129][T17255] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3095'. [ 383.461128][T17255] netlink: 'syz.3.3095': attribute type 2 has an invalid length. [ 383.469760][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 383.479066][T17255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3095'. [ 383.485095][T17204] xfrm0 speed is unknown, defaulting to 1000 [ 383.493199][T17218] lo speed is unknown, defaulting to 1000 [ 383.509388][T17257] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3096'. [ 383.741039][T17262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3098'. [ 384.044027][T17218] xfrm0 speed is unknown, defaulting to 1000 [ 384.322404][T17275] FAULT_INJECTION: forcing a failure. [ 384.322404][T17275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.347961][T17275] CPU: 1 UID: 0 PID: 17275 Comm: syz.3.3102 Not tainted syzkaller #0 PREEMPT(full) [ 384.347987][T17275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.347998][T17275] Call Trace: [ 384.348005][T17275] [ 384.348012][T17275] dump_stack_lvl+0xe8/0x150 [ 384.348045][T17275] should_fail_ex+0x40c/0x560 [ 384.348074][T17275] _copy_to_user+0x31/0xb0 [ 384.348102][T17275] simple_read_from_buffer+0xe1/0x170 [ 384.348131][T17275] proc_fail_nth_read+0x1bb/0x230 [ 384.348158][T17275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.348186][T17275] ? rw_verify_area+0x24a/0x4c0 [ 384.348214][T17275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.348236][T17275] vfs_read+0x213/0xa80 [ 384.348267][T17275] ? __pfx___mutex_lock+0x10/0x10 [ 384.348293][T17275] ? __pfx_vfs_read+0x10/0x10 [ 384.348321][T17275] ? __fget_files+0x2a/0x420 [ 384.348348][T17275] ? __fget_files+0x3a2/0x420 [ 384.348369][T17275] ? __fget_files+0x2a/0x420 [ 384.348403][T17275] ksys_read+0x150/0x270 [ 384.348432][T17275] ? __pfx_ksys_read+0x10/0x10 [ 384.348466][T17275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.348488][T17275] do_syscall_64+0x174/0x580 [ 384.348511][T17275] ? trace_irq_disable+0x3b/0x140 [ 384.348535][T17275] ? clear_bhb_loop+0x40/0x90 [ 384.348558][T17275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.348577][T17275] RIP: 0033:0x7ff36935e68e [ 384.348602][T17275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.348618][T17275] RSP: 002b:00007ff36a18ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.348638][T17275] RAX: ffffffffffffffda RBX: 00007ff36a1906c0 RCX: 00007ff36935e68e [ 384.348652][T17275] RDX: 000000000000000f RSI: 00007ff36a1900a0 RDI: 0000000000000004 [ 384.348664][T17275] RBP: 00007ff36a190090 R08: 0000000000000000 R09: 0000000000000000 [ 384.348676][T17275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.348687][T17275] R13: 00007ff369626038 R14: 00007ff369625fa0 R15: 00007fffb5049ef8 [ 384.348719][T17275] [ 384.590675][ T5617] Bluetooth: hci4: command tx timeout [ 384.602193][T17284] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.609375][T17285] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.937089][T17295] ip6tnl3: entered promiscuous mode [ 385.054719][T17297] netlink: 'syz.1.3109': attribute type 2 has an invalid length. [ 386.571905][T17346] netlink: 'syz.4.3119': attribute type 2 has an invalid length. [ 386.584906][T17218] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.603280][T17218] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.605561][ T5617] Bluetooth: hci4: command tx timeout [ 386.611454][T17218] bridge_slave_0: entered allmulticast mode [ 386.623917][T17218] bridge_slave_0: entered promiscuous mode [ 386.632804][T17218] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.640175][T17218] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.665602][T17218] bridge_slave_1: entered allmulticast mode [ 386.686820][T17218] bridge_slave_1: entered promiscuous mode [ 386.764670][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 386.828917][T17337] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.885960][T17218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.922503][T17218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.045362][T17218] team0: Port device team_slave_0 added [ 387.064293][T17218] team0: Port device team_slave_1 added [ 387.240355][T17218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.267134][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.360963][T17218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.478230][T17218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.489400][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.517541][T17218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.583002][T17357] 8021q: adding VLAN 0 to HW filter on device bond16 [ 387.638840][T17374] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 387.700368][T17218] hsr_slave_0: entered promiscuous mode [ 387.707136][T17218] hsr_slave_1: entered promiscuous mode [ 387.713435][T17218] debugfs: 'hsr0' already exists in 'hsr' [ 387.722375][T17218] Cannot create hsr debugfs directory [ 387.773835][T17359] lo speed is unknown, defaulting to 1000 [ 388.247890][T17409] __nla_validate_parse: 8 callbacks suppressed [ 388.247908][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 388.255148][T17406] netlink: 4256 bytes leftover after parsing attributes in process `syz.3.3136'. [ 388.277881][T17406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'. [ 388.287572][T17406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'. [ 388.389574][T17409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3137'. [ 388.424047][T17359] xfrm0 speed is unknown, defaulting to 1000 [ 388.429821][T17409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.613182][T17424] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3141'. [ 388.685940][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 388.689871][ T5617] Bluetooth: hci4: command tx timeout [ 389.190755][T17444] syzkaller0: entered promiscuous mode [ 389.203063][T17444] syzkaller0: entered allmulticast mode [ 389.227662][T12713] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.237089][T12713] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.473004][T12713] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.490312][T12713] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.596266][T17457] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 389.615668][T17457] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3150'. [ 389.801179][T17466] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3153'. [ 390.018619][T17218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 390.027730][T17218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.059116][T17218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 390.070523][T17218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.080313][T17218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 390.092089][T17218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.111553][T17218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 390.123793][T17218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.219733][T17474] lo speed is unknown, defaulting to 1000 [ 390.253388][T17488] syzkaller0: entered promiscuous mode [ 390.263607][T17488] syzkaller0: entered allmulticast mode [ 390.303315][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 390.352804][T17218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.390517][T17218] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.420887][T12710] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.428079][T12710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.469741][T12710] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.476960][T12710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.543992][T17496] veth0_to_team: mtu less than device minimum [ 390.765264][ T5617] Bluetooth: hci4: command tx timeout [ 391.014897][T17522] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3168'. [ 391.091150][T17511] lo speed is unknown, defaulting to 1000 [ 391.092598][T17474] xfrm0 speed is unknown, defaulting to 1000 [ 391.249966][T17529] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 391.315444][T17528] syzkaller0: entered promiscuous mode [ 391.323806][T17528] syzkaller0: entered allmulticast mode [ 391.482586][T17218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.655055][T17218] veth0_vlan: entered promiscuous mode [ 391.680272][T17540] ipvlan1: entered promiscuous mode [ 391.702009][T17540] ipvlan1: left promiscuous mode [ 391.780168][T17218] veth1_vlan: entered promiscuous mode [ 391.814876][T17546] netlink: 'syz.2.3174': attribute type 5 has an invalid length. [ 391.844539][T17546] netlink: 'syz.2.3174': attribute type 6 has an invalid length. [ 391.890360][T17548] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 391.914759][T17511] xfrm0 speed is unknown, defaulting to 1000 [ 392.041400][T17218] veth0_macvtap: entered promiscuous mode [ 392.064420][T17218] veth1_macvtap: entered promiscuous mode [ 392.106771][T17218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.124083][T17218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.143820][T12710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.166868][T12710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.188594][T12710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.205560][T12710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.500325][ T5773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.509757][ T5773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.682489][ T5773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.703103][ T5773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.057672][ T809] IPVS: starting estimator thread 0... [ 393.182612][T17570] IPVS: using max 31 ests per chain, 74400 per kthread [ 393.444028][T17576] __nla_validate_parse: 9 callbacks suppressed [ 393.444046][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3184'. [ 393.496228][T17576] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3184'. [ 393.522412][T17576] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3184'. [ 393.543781][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.562108][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.577210][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.586852][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.589648][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3184'. [ 393.611478][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.166162][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 394.279723][T17596] 8021q: adding VLAN 0 to HW filter on device bond18 [ 394.296902][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3188'. [ 394.375818][T17599] 8021q: adding VLAN 0 to HW filter on device bond19 [ 394.388110][T17599] bond18: (slave bond19): Enslaving as an active interface with an up link [ 394.471690][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 394.500412][T17600] bond18 (unregistering): (slave bond19): Releasing backup interface [ 394.543406][T17600] bond18 (unregistering): Released all slaves [ 394.658349][T17578] lo speed is unknown, defaulting to 1000 [ 394.961790][T17623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3195'. [ 395.091266][T17578] xfrm0 speed is unknown, defaulting to 1000 [ 395.179699][T17619] lo speed is unknown, defaulting to 1000 [ 395.273910][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 395.300422][T17633] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 395.327096][ T7069] IPVS: starting estimator thread 0... [ 395.425387][T17635] IPVS: using max 30 ests per chain, 72000 per kthread [ 395.459257][T17639] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3198'. [ 395.506111][T17639] gretap0: entered promiscuous mode [ 395.559542][T17643] syzkaller0: entered promiscuous mode [ 395.572883][T17643] syzkaller0: entered allmulticast mode [ 395.645349][ T5617] Bluetooth: hci0: command tx timeout [ 395.760763][T17648] bridge1: entered promiscuous mode [ 395.767910][T17648] bridge1: entered allmulticast mode [ 395.777309][T17648] team0: Port device bridge1 added [ 395.790973][T17648] bridge0: port 3(team0) entered blocking state [ 395.803096][T17648] bridge0: port 3(team0) entered disabled state [ 395.828091][T17648] team0: entered allmulticast mode [ 395.833295][T17648] team_slave_0: entered allmulticast mode [ 395.839825][T17648] team_slave_1: entered allmulticast mode [ 395.850039][T17648] team0: entered promiscuous mode [ 395.855285][T17648] team_slave_0: entered promiscuous mode [ 395.861046][T17648] team_slave_1: entered promiscuous mode [ 395.868657][T17648] bridge0: port 3(team0) entered blocking state [ 395.875066][T17648] bridge0: port 3(team0) entered forwarding state [ 395.888966][T17619] xfrm0 speed is unknown, defaulting to 1000 [ 396.108096][T17659] : renamed from bond0 (while UP) [ 396.399363][T17664] lo speed is unknown, defaulting to 1000 [ 396.542285][T17578] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.573260][T17578] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.609600][T17578] bridge_slave_0: entered allmulticast mode [ 396.642201][T17578] bridge_slave_0: entered promiscuous mode [ 396.733380][T17578] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.740774][T17578] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.749057][T17578] bridge_slave_1: entered allmulticast mode [ 396.767341][T17578] bridge_slave_1: entered promiscuous mode [ 396.829019][T17664] xfrm0 speed is unknown, defaulting to 1000 [ 396.832428][T17578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.857326][T17578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.968415][T17578] team0: Port device team_slave_0 added [ 396.987368][T17578] team0: Port device team_slave_1 added [ 397.058663][T17578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.074552][T17578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.134464][T17578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.158643][T17578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.174454][T17578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.225967][T17578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.342120][T17578] hsr_slave_0: entered promiscuous mode [ 397.356806][T17578] hsr_slave_1: entered promiscuous mode [ 397.362886][T17578] debugfs: 'hsr0' already exists in 'hsr' [ 397.368868][T17578] Cannot create hsr debugfs directory [ 397.727872][ T5617] Bluetooth: hci0: command tx timeout [ 398.402146][T17578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.422613][T17578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.433376][T17578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.444119][T17578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 398.536419][T17578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.549528][T17578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.559929][T17578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.572246][T17578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 398.662043][T17578] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 398.681737][T17578] team0: Port device netdevsim1 removed [ 398.689237][T17578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.705040][T17578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.715723][T17578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.726620][T17578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 398.838400][T17578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.867320][T17578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.891960][T17578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.904765][T17578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 398.947683][T17727] __nla_validate_parse: 4 callbacks suppressed [ 398.947702][T17727] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3228'. [ 398.963859][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 399.008520][T17731] vxcan1: entered promiscuous mode [ 399.020912][T17731] vxcan1: entered allmulticast mode [ 399.026285][T17731] team0: Device vxcan1 is of different type [ 399.237833][T17736] team0: left allmulticast mode [ 399.263097][T17736] team_slave_0: left allmulticast mode [ 399.281772][T17736] team_slave_1: left allmulticast mode [ 399.296222][T17736] team0: left promiscuous mode [ 399.302337][T17736] team_slave_0: left promiscuous mode [ 399.314869][T17736] team_slave_1: left promiscuous mode [ 399.322186][T17736] bridge0: port 3(team0) entered disabled state [ 399.337613][T17736] bridge_slave_0: left allmulticast mode [ 399.343507][T17736] bridge_slave_0: left promiscuous mode [ 399.349802][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.361715][T17736] bridge_slave_1: left allmulticast mode [ 399.369443][T17736] bridge_slave_1: left promiscuous mode [ 399.375570][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.395829][T17736] : (slave bond_slave_0): Releasing backup interface [ 399.418357][T17736] : (slave bond_slave_1): Releasing backup interface [ 399.438691][T17736] team0: Port device team_slave_0 removed [ 399.457539][T17736] team0: Port device team_slave_1 removed [ 399.463771][T17736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.475305][T17736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.483452][T17736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.491519][T17736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.501655][T17736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.608722][T17742] xt_hashlimit: size too large, truncated to 1048576 [ 399.671012][ T29] audit: type=1804 audit(1783406380.697:23): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3233" name="/newroot/17/memory.events" dev="tmpfs" ino=104 res=1 errno=0 [ 399.693462][T17578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 399.713754][ T29] audit: type=1800 audit(1783406380.697:24): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3233" name="memory.events" dev="tmpfs" ino=104 res=0 errno=0 [ 399.720451][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.737536][ T29] audit: type=1804 audit(1783406380.737:25): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3233" name="/newroot/17/memory.events" dev="tmpfs" ino=104 res=1 errno=0 [ 399.771156][T17578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 399.803593][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.810807][ T5617] Bluetooth: hci0: command tx timeout [ 399.835873][T17578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 399.857852][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.878181][T17578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 399.913560][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.990231][T17747] lo speed is unknown, defaulting to 1000 [ 400.087369][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 400.198611][T17578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.211727][T17763] Bluetooth: MGMT ver 1.23 [ 400.264152][T17578] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.310482][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.317709][T12713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.379247][T17767] team0: Device vxcan1 is of different type [ 400.416213][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.423403][T12713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.476657][T17771] netlink: 'syz.0.3242': attribute type 49 has an invalid length. [ 400.683646][T17783] syzkaller0: entered promiscuous mode [ 400.689517][T17783] syzkaller0: entered allmulticast mode [ 400.786807][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 400.849905][T17747] xfrm0 speed is unknown, defaulting to 1000 [ 401.077964][T17803] team0: Device vxcan1 is of different type [ 401.223459][T17811] FAULT_INJECTION: forcing a failure. [ 401.223459][T17811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.253440][T17811] CPU: 1 UID: 0 PID: 17811 Comm: syz.0.3255 Not tainted syzkaller #0 PREEMPT(full) [ 401.253466][T17811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.253476][T17811] Call Trace: [ 401.253484][T17811] [ 401.253491][T17811] dump_stack_lvl+0xe8/0x150 [ 401.253524][T17811] should_fail_ex+0x40c/0x560 [ 401.253551][T17811] _copy_to_user+0x31/0xb0 [ 401.253581][T17811] simple_read_from_buffer+0xe1/0x170 [ 401.253610][T17811] proc_fail_nth_read+0x1bb/0x230 [ 401.253638][T17811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.253666][T17811] ? rw_verify_area+0x24a/0x4c0 [ 401.253690][T17811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.253712][T17811] vfs_read+0x213/0xa80 [ 401.253745][T17811] ? __pfx___mutex_lock+0x10/0x10 [ 401.253770][T17811] ? __pfx_vfs_read+0x10/0x10 [ 401.253805][T17811] ? __fget_files+0x2a/0x420 [ 401.253834][T17811] ? __fget_files+0x3a2/0x420 [ 401.253856][T17811] ? __fget_files+0x2a/0x420 [ 401.253889][T17811] ksys_read+0x150/0x270 [ 401.253919][T17811] ? __pfx_ksys_read+0x10/0x10 [ 401.253955][T17811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.253976][T17811] do_syscall_64+0x174/0x580 [ 401.253999][T17811] ? trace_irq_disable+0x3b/0x140 [ 401.254023][T17811] ? clear_bhb_loop+0x40/0x90 [ 401.254047][T17811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.254066][T17811] RIP: 0033:0x7f499c95e68e [ 401.254083][T17811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.254099][T17811] RSP: 002b:00007f499d937fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 401.254119][T17811] RAX: ffffffffffffffda RBX: 00007f499d9386c0 RCX: 00007f499c95e68e [ 401.254133][T17811] RDX: 000000000000000f RSI: 00007f499d9380a0 RDI: 0000000000000004 [ 401.254145][T17811] RBP: 00007f499d938090 R08: 0000000000000000 R09: 0000000000000000 [ 401.254156][T17811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.254168][T17811] R13: 00007f499cc26038 R14: 00007f499cc25fa0 R15: 00007fff09658938 [ 401.254200][T17811] [ 401.699867][T17823] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3258'. [ 401.708585][T17578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.728731][T17823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3258'. [ 401.887247][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 401.889366][ T5617] Bluetooth: hci0: command tx timeout [ 401.940267][T17578] veth0_vlan: entered promiscuous mode [ 401.956990][T17578] veth1_vlan: entered promiscuous mode [ 402.003915][T17578] veth0_macvtap: entered promiscuous mode [ 402.018913][T17578] veth1_macvtap: entered promiscuous mode [ 402.042657][T17578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.072290][T17578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.108369][T12706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.124698][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 402.146096][T12710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.158804][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3262'. [ 402.160011][T17836] netlink: 'syz.0.3263': attribute type 3 has an invalid length. [ 402.169230][T12710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.205971][T17836] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3263'. [ 402.279222][T17834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.302936][T12710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.345391][T17839] syzkaller1: entered promiscuous mode [ 402.362382][T17839] syzkaller1: entered allmulticast mode [ 402.549311][T12710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.580096][T12710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.672097][T12710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.696193][T17849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3267'. [ 402.696404][T12710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.067622][T17858] lo speed is unknown, defaulting to 1000 [ 403.198431][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.219592][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.227656][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.238466][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.250379][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.355620][T17884] x_tables: duplicate underflow at hook 1 [ 403.878859][ T5623] syz_tun (unregistering): left allmulticast mode [ 403.895567][ T5623] bond1: (slave syz_tun): Releasing backup interface [ 404.134698][T17901] __nla_validate_parse: 4 callbacks suppressed [ 404.134717][T17901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3279'. [ 404.186727][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 404.337726][T17871] lo speed is unknown, defaulting to 1000 [ 404.338616][T17858] xfrm0 speed is unknown, defaulting to 1000 [ 404.375480][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 404.561764][T17919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3285'. [ 404.729899][T17925] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3287'. [ 404.761532][T17925] netlink: 'syz.2.3287': attribute type 2 has an invalid length. [ 404.798361][T17925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3287'. [ 405.049514][T17871] xfrm0 speed is unknown, defaulting to 1000 [ 405.103813][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 405.232901][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 405.326616][ T5626] Bluetooth: hci1: command tx timeout [ 405.483352][T17952] tc_dump_action: action bad kind [ 405.501387][T17952] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3296'. [ 406.031568][T17969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.161062][T17970] vlan3: entered allmulticast mode [ 406.178738][T17970] bridge0: entered allmulticast mode [ 406.569016][T17980] lo speed is unknown, defaulting to 1000 [ 406.784692][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 406.840471][T17990] netlink: 'syz.1.3307': attribute type 2 has an invalid length. [ 406.877243][T17991] netlink: 'syz.2.3306': attribute type 10 has an invalid length. [ 407.414554][ T5626] Bluetooth: hci1: command tx timeout [ 407.461682][T17991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.471329][T17991] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 407.490378][T17980] xfrm0 speed is unknown, defaulting to 1000 [ 407.660968][T17871] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.678433][T17871] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.704648][T17871] bridge_slave_0: entered allmulticast mode [ 407.718870][T17871] bridge_slave_0: entered promiscuous mode [ 407.740183][T17871] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.755513][T17871] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.774202][T17871] bridge_slave_1: entered allmulticast mode [ 407.788184][T17871] bridge_slave_1: entered promiscuous mode [ 407.876460][T17871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.921526][T17871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.013799][T17871] team0: Port device team_slave_0 added [ 408.029246][T17871] team0: Port device team_slave_1 added [ 408.227044][T17871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.249940][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.336962][T17871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.392897][T17871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.412612][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.500197][T17871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.572302][T18033] xt_NFQUEUE: number of total queues is 0 [ 408.691203][T18033] bond1: option arp_all_targets: invalid value (3) [ 408.721689][T18033] bond1 (unregistering): Released all slaves [ 408.985917][T17871] hsr_slave_0: entered promiscuous mode [ 409.001032][T17871] hsr_slave_1: entered promiscuous mode [ 409.033132][T17871] debugfs: 'hsr0' already exists in 'hsr' [ 409.048039][T17871] Cannot create hsr debugfs directory [ 409.487295][ T5626] Bluetooth: hci1: command tx timeout [ 409.494101][T18044] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 409.543182][T18044] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 409.992514][T18067] xt_TCPMSS: Only works on TCP SYN packets [ 410.008730][T18067] netlink: 'syz.2.3329': attribute type 10 has an invalid length. [ 410.079747][T18067] bond0: (slave netdevsim1): Releasing backup interface [ 410.106877][T18067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.126449][T18067] team0: Port device netdevsim1 added [ 410.140099][T18072] batman_adv: batadv0: Adding interface: vlan2 [ 410.148962][T18072] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.213180][T18072] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 410.532119][T18078] netlink: 'syz.2.3333': attribute type 1 has an invalid length. [ 410.653086][T18081] __nla_validate_parse: 5 callbacks suppressed [ 410.653104][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'. [ 410.679843][T18083] gretap1: entered allmulticast mode [ 410.704380][T18083] bond4: (slave gretap1): making interface the new active one [ 410.734715][T18083] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 410.890598][T17871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.907084][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 410.942955][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.955956][T17871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.976309][T18089] IPVS: set_ctl: invalid protocol: 95 10.1.1.1:20003 [ 410.989882][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.009328][T17871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.035554][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.057366][T17871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.089654][T17871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.279795][T18112] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3341'. [ 411.288661][T18115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3342'. [ 411.372403][T17871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.426593][T17871] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.467058][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.474267][ T5773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.495058][T18121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 411.512405][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.519613][ T5773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.550630][T18129] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 411.550716][T18121] Cannot find del_set index 1 as target [ 411.568706][ T5626] Bluetooth: hci1: command tx timeout [ 411.677178][T18121] netlink: 'syz.4.3343': attribute type 13 has an invalid length. [ 412.042308][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3347'. [ 412.095690][T18140] netlink: 'syz.2.3347': attribute type 1 has an invalid length. [ 412.096686][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'. [ 412.115463][T18144] netlink: 'syz.2.3347': attribute type 1 has an invalid length. [ 412.333320][T18154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3352'. [ 412.470450][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'. [ 412.490157][T18157] syzkaller1: entered promiscuous mode [ 412.497965][T18162] netlink: 'syz.0.3355': attribute type 10 has an invalid length. [ 412.512160][T18157] syzkaller1: entered allmulticast mode [ 412.516516][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 412.552233][T18162] geneve2: entered promiscuous mode [ 412.560341][T18162] geneve2: entered allmulticast mode [ 412.569188][T18164] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3356'. [ 412.611977][T17871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.804960][T18162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.017041][T18162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.155709][T18162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.188022][T17871] veth0_vlan: entered promiscuous mode [ 413.203114][T17871] veth1_vlan: entered promiscuous mode [ 413.315874][T18162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.407900][T17871] veth0_macvtap: entered promiscuous mode [ 413.450665][T17871] veth1_macvtap: entered promiscuous mode [ 413.548271][T17871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.557358][T12699] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.597502][T17871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.655654][ T5773] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.698775][T18204] bond0: (slave bond_slave_1): Releasing backup interface [ 413.726851][T12713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.742047][T12713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.797361][T12713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.814595][T12713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.847361][T12713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.021323][T12708] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.042083][T18207] nbd4: detected capacity change from 0 to 63 [ 414.096111][T18209] block nbd4: NBD_DISCONNECT [ 414.114273][T18209] block nbd4: Disconnected due to user request. [ 414.121827][T18209] block nbd4: shutting down sockets [ 414.134688][ C0] blk_print_req_error: 114 callbacks suppressed [ 414.134704][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.150138][ C0] buffer_io_error: 138 callbacks suppressed [ 414.150155][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 414.171177][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.179564][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.180376][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 414.194606][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.203752][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 414.206493][T18211] bond0: option mode: unable to set because the bond device is up [ 414.211512][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.228463][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 414.229580][T18211] netlink: 'syz.0.3369': attribute type 10 has an invalid length. [ 414.255059][ T1696] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 414.265978][ T1696] Buffer I/O error on dev nbd4, logical block 0, async page read [ 414.274116][ T1696] Buffer I/O error on dev nbd4, logical block 1, async page read [ 414.282549][ T1696] Buffer I/O error on dev nbd4, logical block 2, async page read [ 414.294298][ T1696] Buffer I/O error on dev nbd4, logical block 3, async page read [ 414.302711][ T1696] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 414.311988][ T1696] Buffer I/O error on dev nbd4, logical block 0, async page read [ 414.321166][ T1696] Buffer I/O error on dev nbd4, logical block 1, async page read [ 414.330207][ T1696] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 414.340482][ T1696] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 414.350907][ T1696] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 414.360793][ T1696] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 414.371384][T16519] ldm_validate_partition_table(): Disk read failed. [ 414.380510][T16519] Dev nbd4: unable to read RDB block 0 [ 414.389192][T16519] nbd4: unable to read partition table [ 414.391442][T12713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.412867][T16519] ldm_validate_partition_table(): Disk read failed. [ 414.423782][T16519] Dev nbd4: unable to read RDB block 0 [ 414.431911][T16519] nbd4: unable to read partition table [ 414.478427][T12713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.564284][T12713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.593907][T12713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.114600][T18258] lo speed is unknown, defaulting to 1000 [ 415.294360][T18267] netlink: 'syz.1.3382': attribute type 3 has an invalid length. [ 415.346586][T18267] netlink: 'syz.1.3382': attribute type 3 has an invalid length. [ 415.367449][T18269] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 415.424089][T18269] team0: Port device dummy0 added [ 415.495399][T18258] xfrm0 speed is unknown, defaulting to 1000 [ 415.831518][T18277] __nla_validate_parse: 15 callbacks suppressed [ 415.831535][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 415.992002][T18286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3387'. [ 416.110462][T18293] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 416.124127][T18296] netlink: 'syz.1.3390': attribute type 102 has an invalid length. [ 416.207001][T18299] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 416.303086][T18301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3392'. [ 416.330012][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3392'. [ 416.356456][T18301] netlink: 'syz.0.3392': attribute type 2 has an invalid length. [ 416.383274][T18301] netlink: 'syz.0.3392': attribute type 8 has an invalid length. [ 416.409310][T18301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3392'. [ 416.446077][T18308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3392'. [ 416.483783][T18308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3392'. [ 416.509240][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'. [ 416.669107][T18315] macsec1: entered promiscuous mode [ 416.841636][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 417.286848][T18325] nbd4: detected capacity change from 0 to 63 [ 417.319635][T18335] block nbd4: NBD_DISCONNECT [ 417.353123][T18335] block nbd4: Disconnected due to user request. [ 417.365778][T18335] block nbd4: shutting down sockets [ 417.428265][T16519] ldm_validate_partition_table(): Disk read failed. [ 417.448045][T16519] Dev nbd4: unable to read RDB block 0 [ 417.465612][T16519] nbd4: unable to read partition table [ 417.496600][T16519] ldm_validate_partition_table(): Disk read failed. [ 417.526144][T16519] Dev nbd4: unable to read RDB block 0 [ 417.569100][T16519] nbd4: unable to read partition table [ 417.659514][T18341] validate_nla: 2 callbacks suppressed [ 417.659531][T18341] netlink: 'syz.4.3404': attribute type 4 has an invalid length. [ 417.892510][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 418.478455][T18387] team0: Port device dummy0 removed [ 418.526268][T18387] bridge_slave_0: left allmulticast mode [ 418.532053][T18387] bridge_slave_0: left promiscuous mode [ 418.538628][T18387] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.561425][T18387] bridge_slave_1: left allmulticast mode [ 418.572633][T18387] bridge_slave_1: left promiscuous mode [ 418.582018][T18387] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.611971][T18387] bond0: (slave bond_slave_0): Releasing backup interface [ 418.647991][T18387] bond0: (slave bond_slave_1): Releasing backup interface [ 418.716891][T18387] team0: Port device team_slave_0 removed [ 418.779513][T18387] team0: Port device team_slave_1 removed [ 418.792710][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.802065][T18387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.817126][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.832070][T18387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.845963][T18387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.991740][T18401] sctp: [Deprecated]: syz.0.3425 (pid 18401) Use of int in max_burst socket option deprecated. [ 418.991740][T18401] Use struct sctp_assoc_value instead [ 419.156717][T18413] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 419.257988][T18413] bond1: entered promiscuous mode [ 419.274035][T18413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.400993][T18418] bond1: (slave bridge1): making interface the new active one [ 419.427668][T18418] bridge1: entered promiscuous mode [ 419.441194][T18418] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 419.764733][T18447] sctp: [Deprecated]: syz.1.3440 (pid 18447) Use of int in max_burst socket option deprecated. [ 419.764733][T18447] Use struct sctp_assoc_value instead [ 421.056243][T18527] team0: Device vxcan1 is of different type [ 421.209084][T18532] __nla_validate_parse: 11 callbacks suppressed [ 421.209103][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'. [ 421.770089][T18553] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 421.852012][T18553] bond5: (slave gretap2): making interface the new active one [ 421.862071][T18553] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 422.723744][T18574] sctp: [Deprecated]: syz.4.3478 (pid 18574) Use of int in max_burst socket option deprecated. [ 422.723744][T18574] Use struct sctp_assoc_value instead [ 422.855772][T18581] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3482'. [ 422.867990][T18581] netlink: 'syz.1.3482': attribute type 2 has an invalid length. [ 422.876202][T18581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3482'. [ 422.886098][T18582] tun0: tun_chr_ioctl cmd 1074025680 [ 422.963183][T18582] tun0: tun_chr_ioctl cmd 2150657669 [ 422.996149][T18587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'. [ 423.026144][T18592] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3485'. [ 423.052723][T18590] lo speed is unknown, defaulting to 1000 [ 423.188079][T18598] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3487'. [ 423.203083][T18596] syz_tun: entered allmulticast mode [ 423.212438][T18598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'. [ 423.227231][T18596] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 423.291047][T18596] syz_tun: left allmulticast mode [ 423.618144][T18608] sctp: [Deprecated]: syz.4.3491 (pid 18608) Use of int in max_burst socket option deprecated. [ 423.618144][T18608] Use struct sctp_assoc_value instead [ 423.870732][T18610] batman_adv: batadv0: Adding interface: gretap1 [ 423.906810][T18610] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 424.030867][T18610] batman_adv: batadv0: Interface activated: gretap1 [ 424.237787][T18590] xfrm0 speed is unknown, defaulting to 1000 [ 424.247017][T18598] lo speed is unknown, defaulting to 1000 [ 424.662340][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3495'. [ 425.063971][T18598] xfrm0 speed is unknown, defaulting to 1000 [ 425.181933][T18641] syzkaller1: entered promiscuous mode [ 425.191721][T18641] syzkaller1: entered allmulticast mode [ 425.397014][T18645] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3499'. [ 425.440439][T18645] netlink: 'syz.3.3499': attribute type 2 has an invalid length. [ 425.466377][T18645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3499'. [ 426.401996][T18648] gretap0: left promiscuous mode [ 426.502080][T18648] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.509777][T18648] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.652205][T18648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.672834][T18659] sctp: [Deprecated]: syz.1.3502 (pid 18659) Use of int in max_burst socket option deprecated. [ 426.672834][T18659] Use struct sctp_assoc_value instead [ 426.675544][T18648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.850341][T18648] vlan3: left allmulticast mode [ 426.864958][T18648] bridge0: left allmulticast mode [ 426.900173][T12713] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.068634][T12713] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.094262][T12713] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.149969][T12713] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.181947][T18673] syzkaller0: entered promiscuous mode [ 427.196350][T18673] syzkaller0: entered allmulticast mode [ 427.436463][T18691] bond2: entered promiscuous mode [ 427.671365][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 427.866553][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'. [ 427.999259][T18714] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20065 [ 428.036881][T18714] netlink: 'syz.2.3512': attribute type 83 has an invalid length. [ 428.049840][T18716] netlink: 'syz.1.3513': attribute type 33 has an invalid length. [ 428.062427][T18714] IPVS: sh: FWM 3 0x00000003 - no destination available [ 428.230174][T18725] syzkaller0: entered promiscuous mode [ 428.252106][T18725] syzkaller0: entered allmulticast mode [ 428.357234][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3519'. [ 428.538706][T18742] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3518'. [ 429.619578][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 429.641780][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3528'. [ 429.721143][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 430.364246][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 430.513719][T18818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3545'. [ 430.539337][T18818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3545'. [ 430.617025][T18818] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 430.656424][T18818] lo speed is unknown, defaulting to 1000 [ 430.924619][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 431.158348][T18845] x_tables: duplicate underflow at hook 2 [ 431.227716][T18818] xfrm0 speed is unknown, defaulting to 1000 [ 431.308343][T18848] bond3: entered promiscuous mode [ 431.313598][T18848] bond3: entered allmulticast mode [ 431.319637][T18848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.402254][T18848] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.411538][ T809] IPVS: starting estimator thread 0... [ 431.528603][T18852] IPVS: using max 34 ests per chain, 81600 per kthread [ 431.758946][T18863] tap0: tun_chr_ioctl cmd 2148553947 [ 432.869148][T18901] batman_adv: batadv0: Interface activated: vlan2 [ 432.887104][T18901] bond1: left promiscuous mode [ 432.892143][T18901] bridge1: left promiscuous mode [ 432.900259][T18901] bond2: left promiscuous mode [ 432.906621][T18901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.920781][T18901] bond3: left promiscuous mode [ 432.979050][T18907] team0: Device vxcan1 is of different type [ 433.028044][T18909] team0: Device vxcan1 is of different type [ 433.065011][ T809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.148107][ T809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.387406][T12710] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.500885][T18931] xt_TCPMSS: Only works on TCP SYN packets [ 433.518311][T18931] syzkaller1: entered promiscuous mode [ 433.535653][T18931] syzkaller1: entered allmulticast mode [ 433.557616][T18931] xt_TCPMSS: Only works on TCP SYN packets [ 433.594181][T18943] tipc: Started in network mode [ 433.603082][T18943] tipc: Node identity 7f000001, cluster identity 4711 [ 433.611287][T18943] tipc: Enabling of bearer rejected, failed to enable media [ 433.622141][T18942] xt_l2tp: missing protocol rule (udp|l2tpip) [ 433.822177][T18954] netlink: 'syz.2.3590': attribute type 354 has an invalid length. [ 433.831264][T18954] __nla_validate_parse: 4 callbacks suppressed [ 433.831279][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'. [ 433.846883][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 434.290026][T18978] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 434.355790][T18978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.424881][T18988] tipc: Invalid UDP bearer configuration [ 434.424935][T18988] tipc: Enabling of bearer rejected, failed to enable media [ 434.444120][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3602'. [ 434.505116][T18978] bond2: option updelay: invalid value (18446744073709518847) [ 434.512933][T18978] bond2: option updelay: allowed values 0 - 2147483647 [ 434.524725][T18978] bond2 (unregistering): Released all slaves [ 434.562903][T12710] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 434.578640][T12710] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.167307][T19032] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3610'. [ 435.325489][ T7063] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.687559][T19058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3618'. [ 436.113213][T19074] lo speed is unknown, defaulting to 1000 [ 436.470407][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a503800: rx timeout, send abort [ 436.598471][ T809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.715949][ T809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.893444][T19110] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3632'. [ 436.906009][T19110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3632'. [ 436.970531][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806894a400: rx timeout, send abort [ 436.979507][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a503800: abort rx timeout. Force session deactivation [ 436.980206][T19074] xfrm0 speed is unknown, defaulting to 1000 [ 437.162914][T19122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3636'. [ 437.181238][T19122] syz_tun: entered allmulticast mode [ 437.297520][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 437.469882][T19135] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3642'. [ 437.479450][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806894a400: abort rx timeout. Force session deactivation [ 438.139752][T19173] IPVS: set_ctl: invalid protocol: 46 10.1.1.0:20004 [ 438.578885][T19185] lo speed is unknown, defaulting to 1000 [ 438.764660][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 439.182206][T19216] netlink: 'syz.4.3665': attribute type 3 has an invalid length. [ 439.238661][T19216] __nla_validate_parse: 5 callbacks suppressed [ 439.238681][T19216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3665'. [ 439.386335][T19185] xfrm0 speed is unknown, defaulting to 1000 [ 439.389070][T19226] netlink: 'syz.2.3668': attribute type 1 has an invalid length. [ 439.498440][T19226] bond6: entered promiscuous mode [ 439.509453][T19226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 439.525170][T19224] lo speed is unknown, defaulting to 1000 [ 439.541628][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3668'. [ 439.581677][T19233] bond6 (unregistering): Released all slaves [ 439.892538][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.901828][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.917233][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'. [ 439.988607][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3671'. [ 440.059510][T19224] xfrm0 speed is unknown, defaulting to 1000 [ 440.312687][T19258] netlink: 632 bytes leftover after parsing attributes in process `syz.3.3678'. [ 440.424726][T19254] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 440.449213][T19254] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 440.468449][T19254] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 440.727145][T19271] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 441.007041][T19268] lo speed is unknown, defaulting to 1000 [ 441.624578][T19268] xfrm0 speed is unknown, defaulting to 1000 [ 441.866025][T19299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3690'. [ 441.882407][T19299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3690'. [ 441.895582][T19299] netlink: 'syz.2.3690': attribute type 2 has an invalid length. [ 441.903492][T19299] netlink: 'syz.2.3690': attribute type 8 has an invalid length. [ 441.911779][T19299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3690'. [ 441.954993][T19299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3690'. [ 441.982822][T19299] netlink: 'syz.2.3690': attribute type 2 has an invalid length. [ 442.003553][T19299] netlink: 'syz.2.3690': attribute type 8 has an invalid length. [ 442.023109][T19299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3690'. [ 442.189887][T19303] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 442.235395][T19303] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 442.265084][T19303] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 442.293785][T19303] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 442.898606][T19318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.129948][T19322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.289186][T19330] netlink: 'syz.4.3701': attribute type 2 has an invalid length. [ 443.317575][T19330] netlink: 'syz.4.3701': attribute type 8 has an invalid length. [ 443.352988][T19330] netlink: 'syz.4.3701': attribute type 2 has an invalid length. [ 443.371158][T19330] netlink: 'syz.4.3701': attribute type 8 has an invalid length. [ 443.918472][T19347] IPVS: Unknown mcast interface: vcan0 [ 443.947019][T19347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.288277][T19366] Bluetooth: MGMT ver 1.23 [ 444.796407][T19387] lo speed is unknown, defaulting to 1000 [ 445.065995][T19399] __nla_validate_parse: 9 callbacks suppressed [ 445.066025][T19399] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3726'. [ 445.098575][T19399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3726'. [ 445.957913][T19387] xfrm0 speed is unknown, defaulting to 1000 [ 446.058498][T19433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3736'. [ 446.389297][T19442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.445212][T19447] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3741'. [ 446.485448][T19447] netlink: 'syz.3.3741': attribute type 2 has an invalid length. [ 446.513528][T19447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3741'. [ 446.728500][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 446.737770][T19457] netlink: 'syz.2.3744': attribute type 1 has an invalid length. [ 446.746005][T19457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3744'. [ 446.924610][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 447.588531][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 448.412220][T19493] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3756'. [ 448.427573][T19492] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3755'. [ 448.486513][T19493] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 448.522439][T19493] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 448.658492][T19503] netlink: 'syz.2.3759': attribute type 2 has an invalid length. [ 449.309280][T19504] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.316974][T19504] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.607601][T19504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.623301][T19504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.831299][T12706] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.864835][T12706] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.064292][T12706] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.091039][T12706] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.188535][T19550] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 450.518244][T19571] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 450.654283][T19576] __nla_validate_parse: 4 callbacks suppressed [ 450.654301][T19576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3776'. [ 450.853497][T19588] ÿ: renamed from bond_slave_0 (while UP) [ 450.977232][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 450.986861][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 451.449976][T19629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3792'. [ 451.471466][T19629] netlink: 'syz.4.3792': attribute type 2 has an invalid length. [ 451.490457][T19629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3792'. [ 451.842274][T19638] netlink: 'syz.1.3794': attribute type 2 has an invalid length. [ 451.868564][T19638] þ: entered promiscuous mode [ 451.909565][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 452.018411][T19647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3797'. [ 452.064584][T19647] ipvlan1: entered promiscuous mode [ 452.087559][T19647] ipvlan1: left promiscuous mode [ 452.131571][T19649] veth0_macvtap: Caught tx_queue_len zero misconfig [ 452.301577][T19657] netlink: 'syz.0.3800': attribute type 3 has an invalid length. [ 452.344597][T19657] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3800'. [ 452.474772][T19670] netlink: 'syz.2.3803': attribute type 1 has an invalid length. [ 452.530674][ T5626] Bluetooth: hci0: command tx timeout [ 453.233438][T19680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3805'. [ 453.620027][T19689] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3807'. [ 453.739302][T19689] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 453.810541][T19689] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 454.469663][T19705] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 454.539594][T19705] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 455.436451][T19720] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 455.477677][T19727] netlink: 'syz.3.3817': attribute type 13 has an invalid length. [ 455.566176][T19727] netlink: 'syz.3.3817': attribute type 17 has an invalid length. [ 455.832781][T19727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.873049][T19727] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.935101][T19727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.150147][T19727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.197498][T19727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.252568][T19727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.278986][T19727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.318205][T19743] __nla_validate_parse: 5 callbacks suppressed [ 456.318223][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 456.376026][T19727] veth1_vlan: left promiscuous mode [ 456.392125][T19727] veth0_vlan: left promiscuous mode [ 456.404931][T19727] veth0_vlan: entered promiscuous mode [ 456.428673][T19727] veth1_vlan: entered promiscuous mode [ 456.441016][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 456.479435][T19727] veth1_macvtap: left promiscuous mode [ 456.489339][T19727] veth0_macvtap: left promiscuous mode [ 456.497800][T19727] veth0_macvtap: entered promiscuous mode [ 456.520365][T19727] veth1_macvtap: entered promiscuous mode [ 456.544670][T19727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.561131][T19727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.575011][T19727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.589455][T19727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.677906][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.685130][T12713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.773031][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.780468][T12713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.958080][T12699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.983999][T12699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.175365][T19757] netlink: 'syz.1.3825': attribute type 4 has an invalid length. [ 457.275606][T19753] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 457.300919][T19753] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 457.329956][T19753] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 457.393128][T12699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.431252][T12699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.594949][T19762] smc: removing ib device syz1 [ 457.742444][T19762] smbdirect: ib_dev[syz1] removed [ 457.959789][T19765] nbd4: detected capacity change from 0 to 63 [ 457.995666][T19769] block nbd4: NBD_DISCONNECT [ 458.009791][T19769] block nbd4: Disconnected due to user request. [ 458.052290][T19769] block nbd4: shutting down sockets [ 458.146294][ C1] blk_print_req_error: 235 callbacks suppressed [ 458.146313][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.161819][ C1] buffer_io_error: 286 callbacks suppressed [ 458.161834][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 458.175511][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.184636][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 458.192373][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.201495][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 458.209277][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.218452][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 458.236854][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 458.246406][ T1580] Buffer I/O error on dev nbd4, logical block 0, async page read [ 458.254687][ T1580] Buffer I/O error on dev nbd4, logical block 1, async page read [ 458.263066][ T1580] Buffer I/O error on dev nbd4, logical block 2, async page read [ 458.271505][ T1580] Buffer I/O error on dev nbd4, logical block 3, async page read [ 458.294167][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 458.303466][ T1580] Buffer I/O error on dev nbd4, logical block 0, async page read [ 458.311384][ T1580] Buffer I/O error on dev nbd4, logical block 1, async page read [ 458.319657][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 458.332727][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 458.344161][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 458.353840][ T1580] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 458.367284][T19771] ldm_validate_partition_table(): Disk read failed. [ 458.433658][T19771] Dev nbd4: unable to read RDB block 0 [ 458.478407][T19771] nbd4: unable to read partition table [ 459.058519][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 459.083882][T19771] ldm_validate_partition_table(): Disk read failed. [ 459.147641][T19771] Dev nbd4: unable to read RDB block 0 [ 459.203725][T19771] nbd4: unable to read partition table [ 461.391252][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3836'. [ 462.222292][ C0] sched: DL replenish lagged too much [ 462.935681][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 485.973464][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.305698][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 494.930961][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 501.850193][T10184] Bluetooth: hci3: command 0x0406 tx timeout [ 502.184387][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 502.415099][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.968502][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 526.934710][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 528.069594][ T42] page_pool_release_retry() stalled pool shutdown: id 154, 51 inflight 68 sec [ 528.168848][T10267] Bluetooth: hci0: command 0x0406 tx timeout [ 557.658441][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 565.590751][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 566.033602][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.394347][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 566.401320][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19809/1:b..l [ 566.409822][ C1] rcu: (detected by 1, t=10503 jiffies, g=100785, q=785642 ncpus=2) [ 566.417901][ C1] task:syz.0.3836 state:R running task stack:26624 pid:19809 tgid:19807 ppid:17218 task_flags:0x400040 flags:0x00080002 [ 566.432442][ C1] Call Trace: [ 566.435732][ C1] [ 566.438674][ C1] __schedule+0x17d9/0x56c0 [ 566.443205][ C1] ? __lock_acquire+0x683/0x2cf0 [ 566.448170][ C1] ? __pfx___schedule+0x10/0x10 [ 566.453043][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 566.458426][ C1] preempt_schedule_common+0x82/0xd0 [ 566.463719][ C1] ? cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 566.470056][ C1] preempt_schedule_thunk+0x16/0x40 [ 566.475270][ C1] __local_bh_enable_ip+0xe1/0x130 [ 566.480393][ C1] cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 566.486561][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 566.491869][ C1] nl80211_netlink_notify+0x356/0x840 [ 566.497248][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 566.502721][ C1] notifier_call_chain+0x1a5/0x3d0 [ 566.507855][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 566.513599][ C1] netlink_release+0x11f8/0x1a80 [ 566.518559][ C1] ? netlink_release+0x106/0x1a80 [ 566.523604][ C1] ? __pfx_netlink_release+0x10/0x10 [ 566.528903][ C1] ? down_write+0x16d/0x200 [ 566.533419][ C1] ? __pfx_down_write+0x10/0x10 [ 566.538293][ C1] sock_close+0xad/0x220 [ 566.542545][ C1] ? __pfx_sock_close+0x10/0x10 [ 566.547405][ C1] __fput+0x418/0xa50 [ 566.551407][ C1] fput_close_sync+0x11f/0x240 [ 566.556186][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 566.561488][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.567567][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.573644][ C1] __x64_sys_close+0x7e/0x110 [ 566.578321][ C1] do_syscall_64+0x174/0x580 [ 566.582919][ C1] ? trace_irq_disable+0x3b/0x140 [ 566.587950][ C1] ? clear_bhb_loop+0x40/0x90 [ 566.592631][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.598518][ C1] RIP: 0033:0x7f499c95e68e [ 566.602939][ C1] RSP: 002b:00007f499d915f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 566.611353][ C1] RAX: ffffffffffffffda RBX: 00007f499d9176c0 RCX: 00007f499c95e68e [ 566.619322][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 566.627294][ C1] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 566.635270][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.643243][ C1] R13: 00007f499cc26128 R14: 00007f499cc26090 R15: 00007fff09658938 [ 566.651231][ C1] [ 566.654240][ C1] rcu: rcu_preempt kthread starved for 397 jiffies! g100785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 566.665333][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 566.675303][ C1] rcu: RCU grace-period kthread stack dump: [ 566.681184][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 566.694681][ C1] Call Trace: [ 566.697964][ C1] [ 566.700900][ C1] __schedule+0x17d9/0x56c0 [ 566.705414][ C1] ? __lock_acquire+0x683/0x2cf0 [ 566.710375][ C1] ? __pfx___schedule+0x10/0x10 [ 566.715233][ C1] ? schedule+0x90/0x2b0 [ 566.719487][ C1] schedule+0x164/0x2b0 [ 566.723651][ C1] schedule_timeout+0x152/0x2c0 [ 566.728510][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 566.733894][ C1] ? __pfx_process_timeout+0x10/0x10 [ 566.739184][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 566.744995][ C1] ? prepare_to_swait_event+0x322/0x350 [ 566.750547][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 566.755407][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 566.760614][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 566.766433][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 566.772594][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 566.777876][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 566.783088][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 566.788906][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 566.793516][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 566.798727][ C1] ? __kthread_parkme+0x71/0x1f0 [ 566.803683][ C1] ? __kthread_parkme+0x196/0x1f0 [ 566.808722][ C1] kthread+0x388/0x470 [ 566.812805][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 566.818004][ C1] ? __pfx_kthread+0x10/0x10 [ 566.822618][ C1] ret_from_fork+0x514/0xb70 [ 566.827227][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 566.832352][ C1] ? __switch_to+0xc89/0x1420 [ 566.837035][ C1] ? __pfx_kthread+0x10/0x10 [ 566.841638][ C1] ret_from_fork_asm+0x1a/0x30 [ 566.846423][ C1] [ 566.849438][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 566.855767][ C1] Sending NMI from CPU 1 to CPUs 0: [ 566.860990][ C0] NMI backtrace for cpu 0 [ 566.861007][ C0] CPU: 0 UID: 0 PID: 12707 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 566.861036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.861048][ C0] Workqueue: events_unbound toggle_allocation_gate [ 566.861076][ C0] RIP: 0010:stack_trace_consume_entry+0x10f/0x280 [ 566.861100][ C0] Code: 8d 3c cb 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 1a 4c 89 ff 48 89 f3 49 89 d4 4c 89 c5 e8 0a 8d 82 00 49 89 e8 4c 89 e2 48 89 de <49> 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 41 3b [ 566.861115][ C0] RSP: 0018:ffffc900000069f8 EFLAGS: 00000246 [ 566.861128][ C0] RAX: 1ffff92000000d76 RBX: ffffc90000006b90 RCX: 0000000000000100 [ 566.861141][ C0] RDX: dffffc0000000000 RSI: ffffffff8a3089dc RDI: ffffc90000006b00 [ 566.861153][ C0] RBP: 1ffff92000000d62 R08: ffffc90000006b10 R09: 0000000000000004 [ 566.861165][ C0] R10: ffffc90000006a98 R11: ffffffff81b16930 R12: 0000000000000000 [ 566.861177][ C0] R13: 1ffff92000000d61 R14: ffffc90000006b08 R15: ffffc90000006bb0 [ 566.861190][ C0] FS: 0000000000000000(0000) GS:ffff888124f60000(0000) knlGS:0000000000000000 [ 566.861204][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.861215][ C0] CR2: 0000001b30c16ff8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 566.861230][ C0] Call Trace: [ 566.861236][ C0] [ 566.861242][ C0] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 566.861269][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.861290][ C0] arch_stack_walk+0x10f/0x150 [ 566.861309][ C0] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 566.861334][ C0] stack_trace_save+0xa9/0x100 [ 566.861353][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 566.861372][ C0] ? __lock_acquire+0x683/0x2cf0 [ 566.861401][ C0] kasan_save_track+0x3e/0x80 [ 566.861420][ C0] ? kasan_save_track+0x3e/0x80 [ 566.861439][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 566.861460][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 566.861478][ C0] ? dst_alloc+0x105/0x170 [ 566.861521][ C0] __kasan_slab_alloc+0x6c/0x80 [ 566.861550][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 566.861569][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 566.861586][ C0] ? dst_alloc+0x105/0x170 [ 566.861600][ C0] ? dst_alloc+0x105/0x170 [ 566.861620][ C0] dst_alloc+0x105/0x170 [ 566.861638][ C0] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 566.861665][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 566.861687][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 566.861710][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 566.861734][ C0] ? lock_acquire+0x106/0x350 [ 566.861761][ C0] ip_route_output_flow+0x2a/0x150 [ 566.861779][ C0] ? ip_route_me_harder+0x74b/0xfe0 [ 566.861801][ C0] ip_route_me_harder+0x762/0xfe0 [ 566.861826][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 566.861849][ C0] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 566.861879][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 566.861904][ C0] ? local_lock_release+0x9c/0x160 [ 566.861929][ C0] synproxy_send_tcp+0x347/0x670 [ 566.861951][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 566.861977][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 566.861995][ C0] ? nft_xfrm_get_dump+0x178/0x2a0 [ 566.862015][ C0] ? synproxy_pernet+0x45/0x270 [ 566.862038][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 566.862061][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 566.862083][ C0] ? nf_ip_checksum+0x13c/0x510 [ 566.862106][ C0] nft_synproxy_do_eval+0x335/0x550 [ 566.862128][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 566.862148][ C0] ? __lock_acquire+0x683/0x2cf0 [ 566.862177][ C0] nft_do_chain+0x48d/0x1b10 [ 566.862202][ C0] ? __lock_acquire+0x683/0x2cf0 [ 566.862225][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 566.862250][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 566.862288][ C0] nft_do_chain_inet+0x360/0x4b0 [ 566.862310][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 566.862330][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 566.862357][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 566.862385][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 566.862406][ C0] nf_hook_slow+0xc5/0x220 [ 566.862426][ C0] NF_HOOK+0x21f/0x3c0 [ 566.862442][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 566.862459][ C0] ? NF_HOOK+0x9e/0x3c0 [ 566.862474][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 566.862490][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 566.862511][ C0] ? ip_local_deliver+0x113/0x190 [ 566.862533][ C0] NF_HOOK+0x336/0x3c0 [ 566.862550][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 566.862565][ C0] ? NF_HOOK+0x9e/0x3c0 [ 566.862580][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 566.862597][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 566.862612][ C0] ? ip_rcv_core+0x88d/0xd50 [ 566.862630][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 566.862645][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 566.862660][ C0] process_backlog+0xa34/0x1860 [ 566.862683][ C0] ? process_backlog+0x3c3/0x1860 [ 566.862711][ C0] __napi_poll+0xaa/0x330 [ 566.862731][ C0] net_rx_action+0x61d/0xf50 [ 566.862757][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 566.862798][ C0] handle_softirqs+0x225/0x840 [ 566.862818][ C0] ? __irq_exit_rcu+0xca/0x220 [ 566.862841][ C0] __irq_exit_rcu+0xca/0x220 [ 566.862859][ C0] irq_exit_rcu+0x9/0x30 [ 566.862876][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 566.862902][ C0] [ 566.862908][ C0] [ 566.862914][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.862933][ C0] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 566.862956][ C0] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1a 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1a 0c [ 566.862971][ C0] RSP: 0018:ffffc90004007720 EFLAGS: 00000293 [ 566.862984][ C0] RAX: ffffffff81ba5757 RBX: dffffc0000000000 RCX: ffff888027899f00 [ 566.862997][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 566.863007][ C0] RBP: ffffc90004007860 R08: ffffffff905767f7 R09: 1ffffffff20aecfe [ 566.863020][ C0] R10: dffffc0000000000 R11: fffffbfff20aecff R12: 1ffff110170e81d1 [ 566.863032][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 566.863048][ C0] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 566.863077][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 566.863100][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 566.863122][ C0] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 566.863145][ C0] ? __pfx___text_poke+0x10/0x10 [ 566.863164][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 566.863182][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 566.863205][ C0] smp_text_poke_batch_finish+0x5fd/0x1110 [ 566.863225][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 566.863250][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 566.863272][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 566.863295][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 566.863319][ C0] ? __jump_label_update+0x347/0x370 [ 566.863346][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 566.863367][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 566.863391][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 566.863409][ C0] static_key_enable+0x1a/0x20 [ 566.863430][ C0] toggle_allocation_gate+0xab/0x290 [ 566.863452][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 566.863474][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 566.863497][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 566.863516][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 566.863538][ C0] process_scheduled_works+0xa8e/0x14e0 [ 566.863571][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.863593][ C0] ? assign_work+0x3cf/0x5d0 [ 566.863612][ C0] worker_thread+0xa47/0xfb0 [ 566.863646][ C0] kthread+0x388/0x470 [ 566.863668][ C0] ? __pfx_worker_thread+0x10/0x10 [ 566.863685][ C0] ? __pfx_kthread+0x10/0x10 [ 566.863708][ C0] ret_from_fork+0x514/0xb70 [ 566.863733][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 566.863755][ C0] ? __switch_to+0xc89/0x1420 [ 566.863775][ C0] ? __pfx_kthread+0x10/0x10 [ 566.863799][ C0] ret_from_fork_asm+0x1a/0x30 [ 566.863823][ C0]