last executing test programs: 2.689091252s ago: executing program 0 (id=7855): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc5}, 0x1c) splice(r0, &(0x7f0000000040)=0x7, r0, &(0x7f0000000080)=0x944b, 0x7, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) sendto$isdn(r1, &(0x7f0000000100)={0x8, 0x95, "95a78d74240270c2a20b2a9aeb8bf5379fc96d23f7c6eadd442e2b279827a32916594cce8b210557be76680dea9141e6e8828d3c67830fa0776c02bf838fb25f15ba39d7aea71ffeec4708d2b6174681ea67244e77cd595f72d482dfac98308dbf3df0bd6a8a5c8d08652767d2af339d19cdaddad9ded2ec470106ebeefd90479235bba33af3fa225f5207735a6a9a6bfd91666b7f72986cc55ec0ff781234df9ca8f505c7a168a28b63d95e516ff157b6781659af0d75f5b09ed6db8e461db9fb587c1e5f86ee0e9fa9d44f2e22b35b36c869e824bcee154b4350dc33fb1bdd01e528f5c81d6e8ff4571ff118a6696e075ff8c03416f037"}, 0x100, 0x24008090, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x80, 0x200, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x40, 0x2ab, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x2f, 0x5, 0xa7, 0x0, 0x44, @mcast2, @mcast1, 0x10, 0x8, 0x3787000, 0x60}}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$xdp(r1, &(0x7f0000001800)={&(0x7f0000000400)={0x2c, 0x1, r3, 0x20}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000440)="74b8671dd9e793f3dcd74b4e395c62a7983149128e89d080e20079e62739d00d1d87f8a1126983a880ec81d5263ba19618a43cdf61a5292f75daa9fc5b4e313284495b1caa6cff43d74810a54b078c9672ad0b8694bd8ea80126681c4598b2f6ab4e1643ef88b414b7f87e975de71ed995737f3f0a1f5cad87f80b72", 0x7c}, {&(0x7f00000004c0)="54cc57f02ede602ece4063ae0b1ea035acbdeafdcee03e28a3d8c1ef5a827052c625551c9eb2529a59c0d205c7e186d4e33d0946ee119155cdedcd53bd49bb88b6c336cd88d7cfeb218b6432a7e233192e6b3b342f0a8423521a", 0x5a}, {&(0x7f0000000540)="8829779f9a502c953c8450d92c047174c329c5495fc50dd660b9970ce5fe37664331c073b790ffb4fcbbe2690363f395221e38d46f6fdbc770e05aed5e774349df9fc8e21a319d0e714f89499316df158e1d3e97ae862a8405ecc8d5187143374e3c9551a48d9aed7d3880b7759393a554d76d91b87358fbc57fbc2e668ba3476eb5efb05360c257cae499c1a31c0369026e8d7a1319dd0a9b0f7accbb206786f756a752f085aaba97b05eaa7316ddca6769cd268ea185305b8e1a69e8ec702e61660e62ad2a5f271ea464b5ea9ce2d32077c0692fc7", 0xd6}, {&(0x7f0000000640)="a6bf57300430b2d34e512bdd8e0d81913d432c354cbc2b4e2232035b0b65fe83bb9921d701db45686aef9369971049bdc2d1f009d5521f065687e2dff3d35308fd1e80b5dd8bac7a1b44c9388f60361e43152378bac565b39271e6a0c8fbcce09ab7953c958beed6a2e2530ab13157180ce3ad8749984872076cbeaf3d99a07f9ee35d2d479c191e6df2a8167c81bcb43f22926f65e7c71de815536411894ee4f83e5264777ff63aee53e14a209132e258729906b1d9dda4d05d88e29c7350e19b657bc21d032ba3d27baa020cbbf0741eb7fab83cf68dc198ecc0f72d640c5fc0dfd4841c123818999b5270e9bd", 0xee}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="1057b8548c39267a47e31c35fb76cc424204", 0x12}], 0x6, 0x0, 0x0, 0x4000080}, 0x810) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001840)={0x0, 0x80000001, 0x20}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x805) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a00)={'dvmrp1\x00', 0x0}) close(r4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x5, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001a80)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x2, 0x4, 0x0, 0xb}], 0x10, 0x7}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c00)={r9, r2, 0x25, 0x17, @void}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000001c40)={"e151783e8413c38af2ba0478ac815b3a", 0x0, 0x0, {0x3424, 0x1}, {0x9, 0x139}, 0xff, [0xe65, 0x6, 0x9, 0x5, 0x0, 0xfffffffffffffffb, 0x5, 0x8, 0x7, 0x5, 0x3, 0x1000, 0x3, 0x28d, 0x8000000000000000, 0x7]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000001dc0)={{r9}, r11, 0x4, @inherit={0x68, &(0x7f0000001d40)={0x1, 0x4, 0xc, 0x9, {0x26, 0xd, 0x5, 0x8001, 0xbfe8}, [0xffffffff, 0x0, 0x0, 0x3]}}, @subvolid=0x2ab}) sendmsg$tipc(r1, &(0x7f0000003f00)={&(0x7f0000002dc0)=@name={0x1e, 0x2, 0x1, {{}, 0x1}}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000002e00)="b252b5f5857c11e5204a9ecc96fd881dbc2e000e515a5b11ec1c40b8d7e38598bd07dc0ddadbd980897185d70fcb17985358f5d1493458a9f3e09e560c67b0cdfcb93f6165dc7afe4ab487e6409016349ca1c0f8e4c4db634ea6f9b92d4c8e92a48dac3fed15fed961df08cfa66d4acd9a3e8c5681f960231e66fa4017ffb62425b13225ec5783007aea05b93fc9eb8879d09c893a88c19393213dbf0d1f1000f469787721e4786ad563f696a236763e910264e66b3840a94b4027111e1bb1424bb710411eda085d6beca1b6a8e585324489f6483eefc7d65d45f418858ad4f578ca360c364f068b7fe92dd91ffd196a1d23365559c09f0aa2609bfa1897b52dcb1f6d67483d2fc7b58afa597e5b10a2a74394a1383b961ba3c6843f327013d0e855a1c6fad0b85b3d32d7144cebc15d30490e936f54f40b17d2d882ed72a5b2720065c8a5baab90b3d4311794907b7357ef7443da125ed53945d16575a8ea52a9e051ed3f754d526ffe92542ea8363a7da67fd94622e7183150d7648b5670c8f078153e4906579bb4a0dd11eb18d5b0e7d875fc5335b2a222f642bdd557f80575f903a1b23cb44c98839daa9149fc9fcc8432e340c0b7eff1ef209db66ee1ba0fc9767b7d10d1aa4aa099b0f59bc0cc6da040a303e48b5ec65c57ae7be2df59835678c4b4a57f736842dc642ab06e436de7c5bbe55cbc05cb3170f933a777d50309d243e2d636d7751865f57c546fa1bc8eaeb840ae97e4cf5315074fa875dd216b8c622450dd893ef0c4c2fa4b57fd84345a16be6836cd8f08707c9d3663132f9620adb9ae519b9adb35ab5ce2338a613909c38b48eddf788cf5b59cbbf42dc50ce5fac0ebf77e20d7126862fec5a780a9efa3479b863a6eafb76a38b441f44159b459b41fa2708ab628e730a2efc320e6495f73a2b04b7b53f6ea799be5d16a2639dbd9cd33fc57a9dc834eeb8c94a736f2e7668da002f2923dcbf620dba02d78c31ff83f9919cff9bec60b013b7cf89b1ff874de33f01145e1b1afabc0e67da0c52cfa86e40649cb169678666a592a20e0b24d76381295a502e9833ab062ade65fe69f5ec69269c1c71330aae609d767f03d7b227f82179c2a83102d96ba58cdcfcd93490b03d1710abeedd5dbba6717b3ca51eb263acf3309494ccf41cfc8ba409165c4f3b5b7bce28f79b7a0803765ec7a6d59b8f4fc36d54d431110ffaacfa05100bb0fa36a72e67411ad5d9b715aad1d3556079b45a41745d875ceaefd226fea73fff6c46d45c40355f911713d50ed23aea92ab94363381559d55561c486aeef191e32631fad6b8a7bf40f3dc0de6a14ed37a36d42280e512b383e3575f823325cb3df0f0185e76c732d5b5846ac520941e057cb6aa75e4a1d7bc92cf40eda69fecb79e891ee57cdc9845ca7bef39d1862ad2807fc8c88ebee706ce0532ec292ef01c2d196334f94327fda7ce6dfc99fa7564db781895e7e811164f5d24ee36e4e4dccca22b14d1f1fd1f9035b9971d2b11fa8d15f281f85a0cc2f5f10e0dc6870d15f8e7dab9733faba13afb78d7525ed22cabfe627b61537f18ca38a09a8ce50a4302e0c612b51a2b3b3cd8d5887e100979fdff6807a351c868b7e07fdbcd26d13df458b096612902f7253e257382e52a9cd85cdddc26239b90d40085dfda7d20045c595780e95f88d60b79bcd49393707feabef156307466f22d54aa6d82affe5b6c34454907150f0dfbede649b6bcde3ed4dbfb8ef1f20b4219cb2fb060629e350e281938e8eed0c3fea123e6d4d0bae16f43c87d9d069af56c6cef8ce77e696aa7fb0d90fd6d77a0413174516281f8f04b464d3fe46b50e1f07f5a9fec2df41701db140506a7fbd8e5d91f246574c813ddd0f0463fccae0b777a420c66c589625f19d75bf97ec0b265a7ff19329dea9e3f4347f941b6daa1dc09516731483b3b43380ae3be6bf1efa640b7a4723f0cf2648cb37e53c7f386e0b9b5d261b2a0b9a7050013e670bf841f396bbc80ebd944eae799453b2e1d1ff3b0d22e89ef2465e8442af6d3b19da3944a6f4d86a008af441fc6ac652a6088c0a863b1f49f547aa681dd68974b5a30a932ff8c30e810680fb675b9a69e61f9fdce04e4e0e6ac3a85b9383bc451932265eeda01fb5b0549d9345baa8e864426e0370c12d876b3e1236a1a71254c578ec17a5380cbcaf8903eca7bf2b3a0f15b0790c3b7772dcff9e063a4b3f7273106766b447b340a2360cdbc40f8a6ee549e9836b6c5b4523c669cecc67d12d812787766a42392819819d227d2661ae0858eb79884283822ba07b7a278414c79b4726039f5eb61b6bd16b35bddf2dbcf82414cdb3eee89571bd9a49fa1856050d793cc9a50c2fd83ad2ddfa997086de343a5752d3732338df1c23cb5a10c84d6df580b6c88348d5c0bd0545acf9c5a42ca67ec44e4ec3280e30b800a327bc680559d519620e1c1fe19427a1e8970ba6fb40221290ecca3121604c0c05ce6d2a9959728134197ca1b83749753855e6f6fe27722ebcea47f1b5f51a320b5350a175c4f90ad0bafa658e69e9024c05af58c3e74d37bd7d630ca1654d474138317b2beed48edea7a64456ca4c5ebf296b602695ad1a61ba4edd24f2188e6e529d777b2433fcc1d9b967f43abba556a6383addd7ee556e39b920bec4004efb8cfc39280c6c03be9e6aa3113055df4d26cac9d6ba4f1cad9e20955ddcee1c760e49ad798781a5bff9463516ae9ba94d5e1521e5c5f0e0ea6b79886e5fc47b70580872ea5a94d743669d02e1c311574bee2c35f78ab616cc3b98cc8975f186f4e7df85c3270b893f9572b3f83579833888643ca0736570768929472a7b0577a226ff169f3c33b9cd58fa87c66f0fc5a158814ffc989480a41cb76fe717bc8c25a590ffd0386b19239455487ba936169dd1a5f6aa01ce8045f003efad38d206d8d67964fcce7a7d2f818be4122161b5a3dba2189acbcbb4dd2cb61108ff25dfe27c6f85924df39abb806ffe31c2865e49173b02bae928a4bdef6025a506715d4d68fafdb3caee938e7bf568aac1b0a80e27c70b4ed985783e361146a2b0378f2b8d983eda3d21036361dfc3cc6ab7b22b007c2ff6630aed111a3f69fc807d68111f8b97486d3c5b23249493090c8141a1d10610cbd5d31d19c6e8c8a25d3d39db5fb6c77d1e8e56748357039df5abaf6622a4d8a9d7f4be78282ae371927e739c8e8d72b6dc3c0b7da661631908759ee828053351f68e072cf191daa4e93b69d669a6ee457d4f5d03ecf2782ded5d6885eb4abda64efdba67e6bd647933aad93e5a39ab507f1b318e620fe484d4d9ba9ee37c75a51ee00b69fab2ad455f2e668311063c720d4cffce5ace6e4952755d35c8726dac057bb085037224f34bf592b199b8b0c6b4f4f95eb754ef8f8e08bd62fcc1bde40101ac10f28796cef709f2e13fa3f3fa22676420e57a6810ef0ef6b996edbfd3875883beb13e04b6e5f82505c978f753295fccc6cb8133a3b726d30e4959696e36c3ab94dc4452570a5b7dce9d0a2f1d37d992bc836af9f9f83c8b5fa6298c82cc3a3cf49518b4df8c1121bdb0cf1e5f2b7db3b8be5d41920c3ccbd1b1b07337a7bd2776f72fd0c2dd83e5f6f09bef8de6ced16dc9f3739eb5408658029f9d79fb931c989bb97ced1f74514f65710de4b2d83c4fda99b599f2b7e262a297da1eb6f092bab8a93a60894b7be19dfa1cb1d8d7ad646482791d5524cfbf056003d5078df11c85cab68505df9a02c5c842a6181e9e44db4bedcd2a629363579062b2953439e961a701276195e094db60bd8b5f7e312d9cd69ab82fadaccd84583dbfc6d74590d6f6836735cff072281c800cc72213042daf6fc73c43423c40cb32e17cce1cbb27f027391514733c08460d335dc951268945ee1408b269a596a95908a2b018c8ceca0ca930886719f7e403c9a3cf9d9dd458e41e973f3d2239dfc5816a188fcef72759c20f744dea5d48f9e07402e04b0a8a39dc441f25b7fd0167c56104e898559296d0dbee1ce60eca1cbc0851089ff09f567198ceda74f43e1ae4d87150647abd0a4818665370f0144db65bc16e391b1bc242d62733a4e7d04c1240df049ff53e266258bffb3965f3a680246490de0ffdf8a3e36d65864d836e91a3d28684013fc5217704a0ee9d03e0e2cec6c39bf8462cd5011c34c4105005db6c6be82be0491cf9e69631bdd4c0ca4a0bc5a5a05f453fd6dc9204b8e496c8858777a7167652a3bbbccef5dcf5f192e7d5752cd40f1780b541d27670fdc62b0f3409da44ad2013e61dfa94a9488aa47c7007d0fd4336dafcb82741fe06b6b88a21278d4fdbd80eca17bc45079a3033efe136df5a502bcb10e8e3839644c6b72fa31f97bd905de24337c2eec2c22d1e9f9ef3c06c034f8b8e0c674ec2109a4ce8f644469db8a57ee383b98b8b43129e46628c2a0fc2bc4f1784e3370521634cf57482386669ebdea0c6bc1e2440d65e32e1124dcd9268dcdca2df17fed8036da11441fd2b978beb171835bdcbf75a67216adf22601eb7d9b7d85a674385782197d361817c4432a7b6217dfdd1bf2d02deb319cf4cad5967711eb655361ed795d1d7fde22b6a15cb44b57795ca80273ce1a425bc82616320ce1e50324d6c57a3271c0e5e8e7c113ee14b226652d0bb518b8e6637761a48d84393c9c8180186496a54b697a7f4c79d0fcba899691a87c280ad352bbbff4b9f4b0d5af985d3cd12afbdfdf2074b7764e1255c208bdd52fa15f9f54621037e71eaf6a168856c1c35c14fb6bc8e3610f9bc16748045a71364f0b894e11af69dc41622c1dbc56b0894085ef15a21371b7e5f8cd1ce954e1a44c0f855ce43f0a2c823c0eb741c25a79cc036caaba35f2838b8cbbfc626c8f4bf75f21ce0edcbeefd83e6f3a9b109123f4092ba449c1d29fff11e2ccb5757d32e7c58429a9c9807757ddd5522e5a20b4042beb7b9c58bd4bbc03019f0bb29c458b93568dbf12963b9aeb21afee24defb9e0b32aaabec2268598d3be3ed0504d3a72eee0aa57d5a8e640fe7fe677a3d697bdf6769117c03641bfd9c4879cd8ccd15530fa56f7ed339d7aa2cf617e00e30c4af8544ba20ea2075c1a0236ee7765b4e725ead2021ecb2da6b49bcc1e5108612f1fd439f34117658ee58a4bb0101098a6c820b4ffc5110cb1e3587287fc609e861746e4bdf30567dbd267c876f69ef8753f3e4bab4c032c67430f68135c064ae7e08f135ea0d3e500e6afae364944463bb3f736aef2ebb745201981d6c114ddb6b939ba999249d1813d727eecc4a758a1cdbcca06586d4084d55532ecbba3c9a3ff90a8038876a83c3afc7962bb013e21550b854b2d67b05e9f4817c8bf97666cfb3294727d147ad1e370e5f53db51023c0d68ac8759bde5df23a02c44871e40dd36f5cef897c5e07bdfc50a5a5a5b44ad7c6c23f7028a85f762ffaa5746d9da9521225c10cb87852f2389ae1a53cc4b070b4d7ac062e7125ac4d4fa3461b8dd0f683784e135dad78c81bed9dd9a393ef95564b543b1a5af958ada24d36597aec5c60c8a8c66320d7597dc18d0ebfe04bbb4301e30993517436cbed9b44084eb67331459722b1e452c3649b4565561c44dd26b116dd12bddba24e341b527e0596f170866dbeeca8ceb9a05f29e92605954b9b53b0365660f4421937e9f558b0b79228de0122d7cdcd56a3eb8106ff64c1f8ced398a6509a6828ae189f0a58c175eb00aee47466207c1d656ee0bd7f0c5888dc1f5f607a9860c58c22ef077df6a2de0473", 0x1000}], 0x1, &(0x7f0000003e40)="fc8abd91599777ee3c4f6e0bf4f6fffa3c5ddfe1f3b0e5e87302918b4e132be8d87967eb246acc27d2112e044f24c6662b6df01be7d15f1d78db1a7299d38bc644e4eb1ea0f0808d7bb1a1da4df7f99dabf7ae93907370618a66266d0c8b7dda34bddf4a7a1907afabe6b357b5dc64dec3a7bafbc1701b09d8a006e50f8610f06b776cba6401f8f073a04533", 0x8c, 0x20000000}, 0x4804) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000003f40)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x7ed}, &(0x7f0000004000)=0x90) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000040c0)={'tunl0\x00', &(0x7f0000004040)={'erspan0\x00', r8, 0x8, 0x20, 0x0, 0xcf40, {{0x12, 0x4, 0x0, 0xb, 0x48, 0x67, 0x0, 0xe9, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp={0x44, 0x20, 0x2b, 0x0, 0xb, [0x10000, 0x6, 0x74000000, 0x0, 0x9, 0x9, 0x8]}, @timestamp_addr={0x44, 0x14, 0x7c, 0x1, 0x9, [{@broadcast, 0x100}, {@local, 0x401}]}]}}}}}) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r12, 0x0, 0x2d, &(0x7f0000004100)={0x5, {{0x2, 0x4e21, @private=0xa010101}}}, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000004380)={&(0x7f00000041c0), 0xc, &(0x7f0000004340)={&(0x7f0000004240)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30d7404f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x738b3e48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5423fe93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd0bb83b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d64}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eb1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe17}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x554a661b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x213948cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x340b51cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe632}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x270b1254}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd43008}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd4d514e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x122f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62210be2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58139b74}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) 2.507659827s ago: executing program 2 (id=7857): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x1}, {0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x50}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c00028004001200060003001800000008000d000d000000050008000000000014000700ff0a0000000000000000000000000001060018000b0000009fcca25b39"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.496953197s ago: executing program 0 (id=7858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001ff"], 0x118}}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000480)={0x1, 0x0, 0x5, 0x0, 0xac}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x48040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500cd180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xfff1, 0x1}, {0x4, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}]}, 0x38}}, 0x40048a4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32], 0x34}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8000, 0x80, 0xff, 0x7, {{0x1a, 0x4, 0x2, 0x3e, 0x68, 0x65, 0x0, 0xc0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x8, "e58ebead92c3"}, @timestamp_prespec={0x44, 0x44, 0x7, 0x3, 0xe, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@empty, 0x3}, {@multicast1, 0x9}, {@broadcast, 0x6}, {@multicast2, 0x10000}, {@local, 0x7f}, {@multicast1, 0x7}]}, @generic={0x89, 0x3, "83"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x100, 0x2, {{0x2a, 0x4, 0x1, 0x5, 0xa8, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x4c, 0x70, 0x3, 0x5, [{@multicast2, 0x3ff}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100, 0x200}, {@broadcast}, {@broadcast, 0x3}, {@private=0xa010100, 0x401}, {@broadcast, 0x9}, {@broadcast, 0x3d}, {@multicast1, 0x5}]}, @generic={0x86, 0x11, "a3de7b2dcc657d4a9a9315fb946670"}, @rr={0x7, 0x17, 0x64, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @loopback, @broadcast]}, @ssrr={0x89, 0x1f, 0x64, [@multicast1, @empty, @loopback, @multicast2, @empty, @multicast2, @multicast1]}]}}}}}) openat$cgroup_ro(r2, &(0x7f00000004c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) getuid() bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r1}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=@expire={0x378, 0x18, 0x100, 0x70bd29, 0x25dfdbfb, {{{@in=@private=0xa010100, @in=@empty, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x3c, r6, 0xffffffffffffffff}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0xff}, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, {0x7, 0x3f32, 0x6, 0x8, 0x6, 0x102, 0x8, 0xb}, {0x1, 0x8, 0x200, 0x2}, {0x7, 0x1ff, 0xae2}, 0x70bd28, 0x3507, 0xa, 0x4, 0x3, 0x5a}, 0xfc}, [@lastused={0xc, 0xf, 0xffffffff}, @algo_aead={0xaf, 0x12, {{'aegis128l-aesni\x00'}, 0x318, 0x100, "7892a724996239c84938f43fe3f9cedd8504f57b0c97a18f81fc746ec104fdc5fb46ddad77be088d4b47a5d0ad970015a10bf93e1922c7a1e68d9012bc602bf5be1c88c6f0e610c3b414cb710f507bd575bf8c85501c49cda34c394ca73c6ac5215681"}}, @sec_ctx={0xe1, 0x8, {0xdd, 0x8, 0x0, 0xff, 0xd5, "3157b7629d7aeb127f52bf4c5ecfc8474aaa03bf07af41d0510caf2fa828d8f1b1492b1e8a2a521ecf0a8074d7912712a4e7e014a5abefc508628d62dcc9859b4eec871500ffb890280c108a6f00b1ef39405847fb64002e029fde673c9252eb210a9378e8fa983758319825d33f16aad4d4489209df63660a6b14a88e35a3c5907fd671444351a756d70eefe52d7869251d26e22f9c01bbb4fde5463cc4a4cb07df131c9f489f59d2fb27bf47779bc9d308c3ef7c8cf840dbf20d0de0c19671634e66ab7d8a23eb1c8caeedabb2a66134df375a3e"}}, @algo_aead={0xe0, 0x12, {{'morus640\x00'}, 0x4a0, 0x80, "ae70ba6d3a8272d51698bc5720c83314593e4ac15593ee38600b25191735142b8810b77ddb044259c8103f3881e74147250ad307e9f6c08901423fc223150855d8b34a73ba159f27fe9f26d6e07968ba3a45604e4678624811570a371af1d9c4f5a9e3d69bbd7cf0dd1bf6ac9f814360607133c014ce5e963a5cb8edd52f63cb332ffe364cb192a8676583500d5b2d89325cd222"}}]}, 0x378}, 0x1, 0x0, 0x0, 0x801}, 0x2000040) 2.404468358s ago: executing program 2 (id=7861): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4008085) (async) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x65}, 0x10}}, 0x0) (async) close(r0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r2, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x429, 0xffff, 0x25dfdbfc}, 0x14}}, 0x66de71f8036879f8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.279907673s ago: executing program 0 (id=7862): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x15, 0x0, 0x46c, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x13, 0x10, 0xffffffffffffffff, @void, @value, @void, @void, r0}, 0x20) 2.18833428s ago: executing program 0 (id=7865): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.967130991s ago: executing program 4 (id=7867): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xc89, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x1c) (fail_nth: 46) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfe", 0x15}], 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) vmsplice(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0xf) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.927833804s ago: executing program 3 (id=7868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630aacff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1.559090422s ago: executing program 3 (id=7870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004002}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltaction={0x74, 0x31, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b4, 0x15, 0xa, 0x201, 0x0, 0x0, {0xee204af22ef550b2, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x4a, 0x8, "308ae8ca8389be136b7dfa77821f96c6b7a37d96046541e2d176a221cd5d02ccbb4ba9f00b38c4adcf0126ce391b60ef389fd11752c27feb6571b0ada6057b705f81901b3270"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x6d, 0x8, "930a137d98954186d69152011a18fd77f2d0564a2925970ed79c208aafd7c424983a70e598ee2ca416c0b1df5efcc0b7fe2219e89cbd5a9fcebac65310ef521a9b3a1b4a14313a6699a0af68e123d0c386d0ad48504da015bcd6f491600286046f8e7a0f77532c1a32"}, @NFTA_OBJ_USERDATA={0xb9, 0x8, "75af9d6f180b8b663a564fb69d951bb74f4b02d3652c40151b5e862be94433ac51dc7205074ceae633b37c1a613079c1bcb4a93140e2bafea21bccaa8e5eb49ecfeaad8682d87477d21c090c958ec94b467755e76c87236e03ce82b7c94208088e3e03a595a883f5c12c086d5b22dfca509ec0f540dc43d5f6d7a57e55757b1802a61d5b47223e4e4f7ed96dfcf38a421f06f3a74edb6fbfe0985864a88ea5ef36e2c8c79d8ab508fed4e3ab426ea3ba207f2d86e6"}, @NFTA_OBJ_TYPE={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$kcm(0x29, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x40000) write(r2, &(0x7f0000000640)="9725718257e3618e4dc2c99b20ac4395baa297b709e8bf9a4dd187e74c05476cc0db03186ee518814ffe7c5b314fb9d86c2c469a99a9245cf0ae1a9c1232721219b7cc631377383747d817b73003c0a33b777f2eaf381827ce281e6696613e2680f07bb8a681f31c56faa61e26a76c79c64bb37848d44e4f0d677fe7eb1e51a4a8a617537a7bbfd70bf9105a5a245248050bae0a154eb872e3f90da3dd3ff869e411ae", 0xa3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000840)={{r1}, 0x1, 0x1, 0x7f}) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000880)) sendmmsg$inet6(r5, &(0x7f0000002100)=[{{&(0x7f00000008c0)={0xa, 0x4e22, 0xfffffff7, @private2, 0xfffffffe}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000900)="9374fc3981d6688228afaed383b35f790c9d74182cd38f89eb8d7fab2c808bab1d2e1b13059a4add5987b1693d755a2b255c39b4a4c14273170824ff52483281d4d1e6dcf7b9", 0x46}, {&(0x7f0000000980)="3a36706399f1d1a644921c7f5e29a609124813b69854525d088b7c03640a4865c506f1798418a53abf9b441394fd4192d319750bfcf3f611d686623e75dc89447f19dfd1e059b9c301bcc254e94896c1f366a41902aa6921b419bf2eb8fc", 0x5e}, {&(0x7f0000000a00)="0c5f096f14f98ea4d459a8c434cab51290e6ce35cb8a7beec89f29fa895d0f3d861c2be62af19366c3749062118044c512bc0ed2b7897390d6d0cd56e243ffff4e816e0cb1647f3c66cf3cc4c6ad1dac2431998ac51c622a87cae5b1e3622bf627d436bc7848bdd34258aad11d0c1a4e21302a6715edc7ce660f39d81724448e2537b5153f25f8efb502600be1b79e358bcad8228ddc7b24d894e6f47b1adf434ebf99fb6c8e7282ec82ee292b1b4016069a84dad129187f5b4a4d831fcce2819276c3efb17b218627f21364a330c85540be97fa7834fc3465b96bba017707dd8692bde04b420479556e4e5cc68132eb97", 0xf1}, {&(0x7f0000000b00)="9f31c4bd12161d793b919ccca171ba68bb1d4c1bc1bc9d6eb0652936a040daeeb493b890e2727e44d8b26eaf058a33a7eb5aee9fdeedfdd9d10b8363cb466ff103ddd3e6fbcd24cebf5b5843", 0x4c}, {&(0x7f0000000b80)="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", 0x1000}], 0x5}}, {{&(0x7f0000001c00)={0xa, 0x4e22, 0xe, @empty, 0xca}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001c40)="b5c4d07f0365eb3d703fe7106daac932feb9343ce454419822606eb5e844c9714a19e832419784f66c930c3f6f9bf890789799e2b5bcaaaaa8", 0x39}], 0x1}}, {{&(0x7f0000001cc0)={0xa, 0x4e24, 0x2, @remote, 0x4}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001d00)="c8af4e1d15b493a18f811c1a7fecc77e24b032dcf8965e8267a71a93ad194e1cddcb7f5e90636e01d89ff1f94a243089345da524f0ca5d3ab89922946566103f7eba51e95fefe0392f7767271bd63c682f33f7de3f25", 0x56}, {&(0x7f0000001d80)="fa645222b001fa3e272f967b2e252447286e64d4cca0569e8341839715ad3aa5680cb280592b29b43c6050b173f45ab8f3c679cc3f58ffd0cc5a6072c2964c737916d8c8ae139b0d36efca0be7247c344158705c589f55bfb19b714a5d9c613be865c1f3f689ab254c95f43aae8496c29ccd7ce6b4d2ccc5261c792aa5be79916a024ec9346a4264e786e70ca4f7be41aa51e903cfd266ecab927dc99578654d628cbca0c14e992ec6f01b40a7949f616bb765cc43b3da5fadcce0d7601655a63af480ff1eca69396b18e76fd5c8295c112160ec5888", 0xd6}, {&(0x7f0000001e80)="1e6c278dce87afc4471a0c8cbd11", 0xe}, {&(0x7f0000001ec0)="390cd926141c67eec550e70d91a19eedcc11bb73ff71a34a76d307780fdc22b044f2f32d920c751465e07335841839cb663473220bd9aa702076e16d5259fc4686ae51ddc206b4", 0x47}, {&(0x7f0000001f40)="5e425404ecc4a55564a1facaacd2d999399599ab694b6d136afe50b64366f93b6ca6dde22f06c107c43267d330a164a2731a08d63f3bf058e0a91f07c7a23de8073c5aa262594094053334df5b9898b7a2ca16", 0x53}, {&(0x7f0000001fc0)="e5cd7d986c2158c6d2e7e7717ac5c50541c5803cc01bab52077bec683996a07135f28e96f4bbd241c5716492ce9d94b22d8b808ea50d0b34ea648678f0beb3ef650337cfcc3eeb0466ca1807fcaad0ef0f5403e10798f70ab1d984f16a322cb8c814eb110cf374e899060ab5c7c99e", 0x6f}], 0x6, &(0x7f00000020c0)}}], 0x3, 0x863aed1f0e044b73) syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x70, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "60ec27a5d464d810a19ae21eb5e2a764c90ce638308e80fb"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002400), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x58, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) ioctl$XFS_IOC_SET_RESBLKS(r5, 0xc0105872, &(0x7f0000002580)={0x3, 0x200}) r10 = socket$packet(0x11, 0x2, 0x300) write$rfkill(0xffffffffffffffff, &(0x7f00000025c0)={0x9, 0x1, 0x1, 0x1}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000002600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002840)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002880)={0x0, 0x1}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)=@newtclass={0x58, 0x28, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xe, 0xffff}, {0x5, 0xb}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004810}, 0x1b96929c4071ea51) 1.54120137s ago: executing program 0 (id=7871): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000004080)=[{{&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/100, 0x64}], 0x2, &(0x7f0000000180)=""/127, 0x7f}, 0x2}, {{&(0x7f0000000200)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/51, 0x33}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000500)=""/175, 0xaf}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f00000006c0)=""/81, 0x51}], 0x8, &(0x7f00000007c0)=""/172, 0xac}, 0x6}, {{&(0x7f0000000880)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/6, 0x6}, {&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/179, 0xb3}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/32, 0x20}, {&(0x7f0000001cc0)=""/120, 0x78}], 0x9}, 0x8001}, {{&(0x7f0000001e00)=@l2tp, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e80)=""/193, 0xc1}, {&(0x7f0000001f80)=""/233, 0xe9}, {&(0x7f0000002080)=""/49, 0x31}], 0x3, &(0x7f0000002100)=""/242, 0xf2}, 0x7}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002200)=""/43, 0x2b}, {&(0x7f0000002240)=""/191, 0xbf}, {&(0x7f0000002300)=""/11, 0xb}], 0x3, &(0x7f0000002380)=""/28, 0x1c}, 0x2}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000023c0)=""/80, 0x50}, {&(0x7f0000002440)=""/118, 0x76}, {&(0x7f00000024c0)=""/3, 0x3}], 0x3, &(0x7f0000002540)=""/112, 0x70}, 0x2}, {{&(0x7f00000025c0)=@ieee802154, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002640)=""/215, 0xd7}, {&(0x7f0000002740)=""/165, 0xa5}, {&(0x7f0000002800)=""/215, 0xd7}, {&(0x7f0000002900)=""/176, 0xb0}, {&(0x7f00000029c0)=""/34, 0x22}, {&(0x7f0000002a00)=""/193, 0xc1}, {&(0x7f0000002b00)=""/52, 0x34}, {&(0x7f0000002b40)=""/173, 0xad}, {&(0x7f0000002c00)=""/115, 0x73}], 0x9, &(0x7f0000002d40)=""/17, 0x11}, 0x81}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/71, 0x47}, {&(0x7f0000002e00)=""/102, 0x66}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/85, 0x55}, {&(0x7f0000003f00)=""/26, 0x1a}], 0x5, &(0x7f0000003fc0)=""/146, 0x92}, 0x2}], 0x8, 0x10000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000004280)={0x0, 0x7}, &(0x7f00000042c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000004300)={r2, @in={{0x2, 0x4e23, @empty}}, 0x6, 0xf82d, 0x9, 0x5, 0x2, 0x4, 0x9}, 0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000043c0)={'veth1_to_hsr\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004440)={0x2, &(0x7f0000004400)=[{0xfff, 0x7, 0xc, 0x9}, {0xb, 0x2, 0x7, 0x9}]}, 0x10) pipe(&(0x7f0000004480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000044c0)=""/125, &(0x7f0000004540)=0x7d) sendmsg$kcm(r3, &(0x7f0000004800)={&(0x7f0000004580)=@rc={0x1f, @none, 0x27}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004600)="f0563c33d2feef", 0x7}], 0x1, &(0x7f0000004680)=[{0x78, 0x104, 0x2, "645d0db29fbacad50aa51e8e241572cce01bf07e82391e19641c08b1ba63546c954b70042d761ed001b50d262ca4c551f0266989a19b263d7ca24e65c617810e62b2e17d0f580c0f519f258479005366f279105578cfe6b6ae9e6471f5007e3cd236d3fd8b4e23"}, {0x108, 0x116, 0x80, "fdc5a20522bec845aa50a398e6cf7a2c3588ab36aa150a43be736998bf62997e0341159c57abd43f2b552a302c9291ffe6b8e6c2cf1c01f29149ab9902c2eec6f6e8a03f4840ab1c9c8d6d99d4ea312cf170e71fcc6201285154bd222fc20eae7fd5d9b40eb5defabb31f20f7127b3d4e4bfb6e79fb113f3b014c1187f7fe915a55ea548d19be92e5b25b20ce21d6393218e8093fa9c102e576ce3dc1f4d511439b6667a973116a9084e41cfab75492a41a181386fe87492004fbe06a19305506a0de596a11dff37d5cc3a90fa4dc7d25a2e0ecffebd1e522c3ce9dddacfa192153a3b069260c56153bf8bc108f433642e757e"}], 0x180}, 0x40080) r5 = accept$ax25(r3, &(0x7f0000004840)={{0x3, @bcast}, [@default, @null, @netrom, @netrom, @rose, @remote, @netrom, @netrom]}, &(0x7f00000048c0)=0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000004900)={0x8, 'vlan0\x00', {'veth0_to_bond\x00'}, 0x3487}) socket$inet6(0xa, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000004940)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004a00)={r4, 0x58, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000004a40)={r6, 0x1, 0x6, @random="7e58cae284e6"}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000004a80)=0x5, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000004bc0)=0x0) recvfrom(r5, &(0x7f0000004ac0)=""/243, 0xf3, 0x40, &(0x7f0000004c00)=@nfc={0x27, r7, 0x0, 0x7}, 0x80) r8 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000004c80)={r4, r3}) sendmmsg$inet(r0, &(0x7f0000005ec0)=[{{&(0x7f0000004cc0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004d00)="e5b1e667949835e229a7a07f2d15dce13bbcba3d12771261615533893c7370014ee1cd", 0x23}, {&(0x7f0000004d40)="3453b4f2dd961ac84629448e356b0f3f7d7fa222a38db5a7371d91e1f89d97b448f3adb5542680bd9fb38c8a84bec75a35819fef82ed3164486ee1a1c031826741316c0bdb8ff80c0ce9c83155c97a828ef20f3dcc347b4348fbf55871ee2cb35ff584f908ea806fa4b2277d5e5ed9bec3fb032aa7851ff5fb780411f285f1d8636b93cc543dcf", 0x87}, {&(0x7f0000004e00)="ead472bcb3e45491e621db75f2309ec4a3c876c0f2156e699fb9e5c275a9e6c74cae152e08b82a9f37664b9df0c4384d20f62ea9b4a9662dbd362cda39ec8cc68c5da88ff23158a75cf0bae2e0d39e924c1709974b9c4227e187a2c638dccceb4e265368a00481aa", 0x68}, {&(0x7f0000004e80)="5e85cfa8e231a6c99fd3b394129837216e1937c038d4a910db6dae4452a6e12ec673f598e7bb5ac87072a29f42e0f5e12f4fbd9b6a81bf56766e5dd53ed9c88dfc6e1689573f537d2bcf73ae63888366a46d0c49a09ae32a0bea33cdcd48eba5957270701d0edb3485f55afe2c1c9c9e0d791fc3d47bc2096e8881fca353abfb89b8fd2830ab98218cf7ec5fef92e1bda90d84e3a074948e37085bffc4f67f2c7a7a3e7aee3508184a359bb0d3eab0045f5b55a7f4f37c58d274135b3c1c5f0a28d496d17d6dc4c504d502c8c2fd11ed3ed67b02535705a8becc742096f48c6c36e170a96fc761f1c08282ee282d15c1bbbe95c8e833", 0xf6}], 0x4, &(0x7f0000004fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @multicast2}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@rr={0x7, 0xb, 0xec, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xa, [@multicast2, @dev={0xac, 0x14, 0x14, 0x43}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x1a, [@private=0xa010100, @broadcast, @multicast2, @loopback, @empty, @broadcast, @remote]}, @ra={0x94, 0x4}, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x15}}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x5, [{@multicast1, 0xc}, {@rand_addr=0x80e3, 0x7}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffffffff}, {@loopback, 0x1}, {@private=0xa010101, 0x10ab}, {@dev={0xac, 0x14, 0x14, 0x31}}]}, @timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x9}, {@private=0xa010101, 0x8}, {@loopback, 0x2}, {@empty, 0xfff}]}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x4c, 0x3, [{0x5, 0xf, "5afb73fb77efab39ce5a87c4b6"}, {0x1, 0x11, "6ac4abbba6382c96ef54dc2ea76fd0"}, {0x6, 0x3, "da"}, {0x0, 0x2}, {0x1, 0x10, "f5b6f7a0550f74b4b9e765b5b996"}, {0x1, 0x6, "150ceace"}, {0x1, 0xb, "4092d0aff108385b26"}]}, @ra={0x94, 0x4}, @generic={0xdf, 0x11, "cc5e57d3f30682775c8b31ad0288c1"}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb7, 0x0, 0xa, [0x5, 0xc, 0x6]}, @timestamp_prespec={0x44, 0xc, 0xdd, 0x3, 0xf, [{@private=0xa010100, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x21, 0x0, 0x5, [0xffff649b, 0x4221, 0x2, 0x1]}, @lsrr={0x83, 0x23, 0x4e, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @multicast1]}, @timestamp={0x44, 0xc, 0xbb, 0x0, 0x8, [0x8, 0x5]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x230}}, {{&(0x7f0000005200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000005780)=[{&(0x7f0000005240)="c9baa2b68c8a95c4eb99c8fe0831a54ab28fe8d11a09ef78f52a47d2cecbeed7fbd935c63a2eac4f7a6499d639c66b3e6a8603770fdcbc2f40bef7f5c37b2cd0045eadf55b39766424e7063d47f92067a57b995cf985ddb49d610320de8202c3a842b449cba2d0e1996def5016cf14bab66bcd0c8b5b2fa0b2548e013d636130808b9082c2414ee54b88aa1e6251b8bc6d26989e98630a08d98c3235da1b1fc982554e914fe6551c433cf261cc923b61e2da4402a4b4eb4f25a42a7d958b8d0148e2f5951ef6e63174e93f00bebeb5655af31d183fee5fa5c13e44cbd4c0844c55c94a1d6fe4c92f643a4450c99f9f836c5a0c87bc", 0xf5}, {&(0x7f0000005340)="20c8afacfae87d2a834c8b31ca462078a7f904e78ac1f11ed2a2882c71bab401a284fc0b35fe9eee25dcb6c3a932eb300a381ad1a940f852c5e8ceebbdda84bcc42e1e803bef80016e5aff14c72a9cd13b2a8cf5ecd2ca9eb8a99f40c50a2a7f9c800e63d2d8f0a3ac5fb894b3f0138521dd11478cf657593810c44a416fd9ee35ab34dd1b0679706a7ac96c7305288ef785479484b5bfed622e8e18436b35e002a2a23540ebe26666bcca2ab70acca5fb5b2027cccef25359459ac91f11f4f179c78e33b67692c1af4cc14d96f602d459a10d85fe90e7cd06322cede908764d3dcfb292ed8d8745f0c5b98c1be17d603f60ea80363cfb105fd2", 0xfa}, {&(0x7f0000005440)="48ede87b2030c2b7e178ee1382a167065b6e0fdd769efb580070ebbd95fe6e76b663156683abf81e52f0f749eb924091269a137f22887891dc0dcc9b2be358cf7e9bb279e3120d365f51cb9a97ee79cf2ab5c7f605645b42c03ba0f6b0d169069961c40e3324ff33e2c794595a5f2bcb5bce1518657f17947822a2339530d39ea36908b069b0e0127bcd53336dd7fe79eebf5353cf816da48644e4f66df2d8492f34684cee7b0b10b086c34b0f23e951bad05ac809e0e92f615288e20018c4af94bf6907fe7cffa9ce919a960e8f656bf0f38e5f6817a502cb31482c7c58", 0xde}, {&(0x7f0000005540)="96b528e7a34ae960c1675996b5ef2f38edc2d6e8ed15e4a64af46b896451f025ea57ec7296c49b56067d66ae63953d346431246d81fd54f3425bc85785451bf1ab94b308f33387e501b8ceb32a1c645de7d8fea5836ab7d3b74bea6603d12ff0cc5c52c4ed5d3816286395e549533c98ad00ecbd34dcacd5e3bd26a71eaa6c3024d590a6b25f44bfeabfed81e19cb0261109be121baec024019a37e286d1e57f5d719a1570b4153267477fe959da058ad37441ca3a59200bcd933c025894d8fdaa8382714f", 0xc5}, {&(0x7f0000005640)="87b23ff682ba03e5006f93d9e468dedb4f3e6dea50e9f47b3a6cdad66cb2c21f05ffe79a95", 0x25}, {&(0x7f0000005680)="19e147184509f50128caab5a58d0d444df2939934632ab7c3b9bc2f6e8cc52d1538e3a707b2700a94d2396e7aef95a6418f065781e2e00c60cb0b136b31b5bbccbe5b30d9962928daa5fc3007783a73226ddf8b3a03873e6b4f2a78aa51b3c1ec60435c18ef2c46eb307ebfaa11424dbaa25a7b13870f83e19a810a3f31fb3ad510cbc3c45249934278835da3c289b2a8028211d7febbe25c3f640c70e2506db3f024b2ea20a5fb4aaa855ecef5752143c778c690b3a00b01c4a85c92317f88093dd", 0xc2}], 0x6, &(0x7f0000005800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf4d}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "917d98c57e62105f"}]}, @rr={0x7, 0x17, 0xb5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102, @rand_addr=0x64010102, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3b56}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x8, [{@multicast1, 0x25}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x10001}, {@multicast1}, {@loopback, 0x3e}]}, @end, @timestamp_prespec={0x44, 0x24, 0xd7, 0x3, 0xd, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x2}, {@local, 0xffff}, {@remote, 0x2}]}, @rr={0x7, 0x7, 0x6, [@multicast2]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x96, [@rand_addr=0x64010102]}, @rr={0x7, 0x1b, 0x26, [@loopback, @rand_addr=0x64010100, @private=0xa010101, @empty, @local, @loopback]}, @generic={0x89, 0x2}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x8, "58e46355483b"}, {0x0, 0x4, "44ac"}, {0x2, 0x5, "66983c"}, {0x1, 0x4, "9aa2"}, {0x2, 0x7, "922c4122ed"}, {0x1, 0x11, "855119635155925d901731ce6a171a"}, {0x7, 0xc, "a0288b6ed217fdf6cc79"}]}, @lsrr={0x83, 0x1f, 0x54, [@broadcast, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @loopback, @private=0xa010100]}, @end, @timestamp_prespec={0x44, 0xc, 0x98, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x8}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x1e0}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000005a00)="20a1aa6cf44d994434650203", 0xc}], 0x1, &(0x7f0000005a80)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x3f, [@multicast1, @multicast2, @multicast2, @private=0xa010100, @private=0xa010101, @remote]}, @lsrr={0x83, 0xb, 0x99, [@loopback, @multicast1]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x8c, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010102, @multicast1, @multicast1, @private=0xa010100, @remote, @rand_addr=0x64010101, @multicast2]}]}}}], 0x80}}, {{&(0x7f0000005b00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005b40)="485897c570ae37977b2d80c84df5449f2633949fa363164a13f98fea616ef70a8b3ab980bcd9b9d6c0940ba10272daf6f8d5bf06b18814c237c20c9a8451786900d7cf5da7999ee8880d4069f2a46823092fcde64ff67907cdef944864e482bcc49ab52657f4", 0x66}, {&(0x7f0000005bc0)="bf85bcb61b77fcf482714aa6a689c8b159d5ddc4dbf4d9928e3add26c54d4d6ff346fc495c7953193212a4aeb5473f6cc6e467e7585be7b897656cc8f58f8fb16e092464b0dbde33ea746227ee42c31b1ccca37fc01084ae6faf07f95dcde140cee06d29b272970d35ab93809f88eeed05974fec23c821b9acce7854e09f415003e5c566605e56f02b97e137d247858e338cf0efe714360733756c2ca844513a1025f90aa5f0071f445f494f0c013f5d5713224acdbb5d59acc97c5b58e1d650b522997592f43ea6ba37c8c992c112", 0xcf}, {&(0x7f0000005cc0)="53dd49842b5f5088bf4a5e98c326a52b2e5aeaeab4b5407d5a7d4694398abd38a8ac01a79cb63571efd44269374a60fc29ceb6fee50e1a2c12b76f26654de7da2a042f7b873d972399d61579a1c6a7264f3ee2355b015768be61c98bc93b078cfc634180e6e86b6a9bea45646b086933d0911f59a140a76c0132ec30b7e2756923b1a8b4fb1d74dc4bbaf41862f97c2a2b0b80cd312558dca45593a2014742d1da99ec7956bb001a667810f028ff71bde268a2b83746b8215d2570f74cc42e573cfc42ee19eae352aed5191b906345d94189200fadd9718ce96ac1d574b19aa4114f8b71f22f805009ee", 0xea}, {&(0x7f0000005dc0)="992e", 0x2}, {&(0x7f0000005e00)="f0e7b69d9b6839a140", 0x9}], 0x5}}], 0x4, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006000), r4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000060c0)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x40, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x40850) socket(0x5, 0x7, 0x3fc) listen(r3, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000006140), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r10, &(0x7f0000006200)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)={0x1c, r11, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5dc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socket$unix(0x1, 0x5, 0x0) 1.539834152s ago: executing program 3 (id=7872): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "102dab", 0x0, 0x2f, 0x1, @mcast2, @loopback, [], "2498a9ecba66320d"}}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32], 0x34}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe6e, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250, 0x8874}, [@IFLA_BROADCAST={0x0, 0x2, @broadcast}, @IFLA_BROADCAST={0x0, 0x2, @broadcast}, @IFLA_VF_PORTS={0x0, 0x18, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x0, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "765e74fb47514ff26d83a202fd082efc"}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x8}, @IFLA_PORT_VF={0x0, 0x1, 0x8000}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x6c}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x0, 0x1, 0x5}]}, {}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x0, 0x1, 0xb18d}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf251500000008000300", @ANYRES32=r6, @ANYBLOB="74002b800800"], 0x90}, 0x1, 0x0, 0x0, 0x2004c400}, 0x880) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x12c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9a8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x4004440) 1.450740362s ago: executing program 2 (id=7873): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x5, 0x928, 0x80000001, 0x100, 0x4, 0x897, 0x0, 0x7, 0x7, 0x247, 0x6, 0x200800, 0x8001, 0xffffffff, 0x4, 0x100, 0xffff, 0x2, 0x40, 0x5, 0x0, 0x9e}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r11, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xfc29}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r10, 0x0) (rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x10bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0xd}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x4040) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 1.247504277s ago: executing program 4 (id=7875): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (fail_nth: 1) 1.23689347s ago: executing program 3 (id=7876): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000029c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c732160", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25010000001c0007800c00018004000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0002000500000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x40040) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000203010100000000000000000200000208000540000000190900020000000003020000000800054000000002080004400000000608000440000000020800041f000000060800054000000037"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000180)={0x0, 0x7fffffffffffffff, 0x1, [0x2, 0x7, 0x9, 0x9, 0xde], [0x9, 0xb329, 0x1000, 0x7, 0x5, 0xa, 0x4, 0xe970, 0x771, 0x9f, 0xcdc0, 0x9, 0x1, 0x10001, 0xefcf, 0xb13, 0x54, 0x3, 0xffff, 0x7fff, 0x9673, 0x6, 0xffffffffffffa59b, 0x7, 0x3, 0x8, 0x0, 0xd6f9, 0x4, 0x100000000, 0x0, 0x4, 0xbe40, 0x501, 0x7fffffffffffffff, 0x0, 0x5, 0x38, 0xb, 0xfe8, 0x101, 0x0, 0x6, 0xcbad, 0x0, 0x4, 0xe4e0, 0x2, 0x60000000, 0x2, 0x100000000, 0x98a, 0x6, 0x1, 0x7, 0x3, 0x1, 0x8001, 0x200, 0xa71, 0xe, 0x3, 0xfffffffeffffffff, 0xffff, 0x9, 0x5, 0x6, 0x8000, 0x1, 0x0, 0x9, 0x29, 0x4, 0x8000000000000001, 0x84a, 0x80000001, 0x8, 0x200, 0x8, 0x9, 0x4, 0x1ff, 0x9, 0x3, 0x8, 0x8fc0, 0x9, 0xffffffffffffffff, 0x0, 0x7f, 0x8, 0x53, 0x1, 0x8000000000000001, 0xfffffffffffffffc, 0x4, 0xfffffffffffffff9, 0x2, 0x1, 0x5, 0xfffffffffffffffb, 0x2, 0x9, 0x7ff, 0xffffffff, 0x1, 0x8000000000000001, 0xfffffffffffffffd, 0x2, 0x8, 0x1, 0xe, 0x3, 0x5, 0x2, 0x7, 0x5, 0x1, 0x6, 0x28f201bf, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f00000005c0)={r8, "b03e193f3dab751ae8f1cc1420db2291"}) r9 = accept4$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x2, 0x0, @local}, &(0x7f0000001600)=0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001900)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000001680)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@broadcast, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0xff0, 0xa, 0x80, 0x80, 0x11, r10, r11}, {0x8001, 0x962, 0x101, 0x7, 0x9, 0x81, 0x5, 0x7}, {0x1, 0x800, 0xfffffffffffffff8, 0x8}, 0x5, 0x6e6bb4, 0x2, 0x0, 0x3, 0x2}, {{@in=@multicast1, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x3, 0x1, 0x76f, 0x8001}}, 0xe8) r12 = getgid() ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000004f00)={{&(0x7f0000004bc0)=[{0xf, 0xffffffffffff3231, 0x7fffffff, {0x31b, 0x4}, 0xfff, 0x8000000000000001, 0x2}, {0x1, 0x9, 0x9, {0xfffffffffffffff7, 0x5}, 0x80, 0xf, 0x10}, {0x6, 0x6, 0x5, {0x3, 0x5}, 0x1000, 0x8000000000000001, 0x9019}, {0x7, 0x9, 0x1, {0x4, 0x9}, 0x1, 0x6}, {0x1, 0x3, 0x6, {0x9, 0x8}, 0x1ff, 0x8, 0x5}, {0x0, 0xfffffffffffff887, 0x100000000, {0x8, 0xa}, 0xb, 0x8, 0x2}, {0x2, 0x6, 0x8000000000000001, {0x7fff, 0x9}, 0x4, 0x400, 0x7}, {0x7fffffffffffffff, 0x6, 0x7f, {0x6, 0xfffffffffffffff7}, 0x7, 0x5, 0x9}, {0x9, 0x9, 0x4, {0x7, 0xf3}, 0x8, 0xffffffffffffffff, 0x8}, {0x6, 0x100, 0x67, {0x4, 0x8}, 0xf, 0x546f, 0xa}], 0xa, 0x40, 0x5, 0x100000000}, {&(0x7f0000003a40)=[{0x1, 0x7}, {0x5, 0x6}, {0x6, 0x1a8}, {0x0, 0x9}, {0xfffffffffffff801, 0x1ff}, {0xfffffffffffffffb, 0xfffffffffffffffe}, {0x3b92, 0x7}, {0xffffffff80000000, 0x5}], 0x8, 0x10, 0x3, 0xa}, {&(0x7f0000003ac0)=[0x80000001, 0x7, 0x200, 0x8001, 0x4, 0x3, 0x4, 0xf, 0x709ab339], 0x9, 0x8, 0xd8c, 0x7}, {&(0x7f0000004e40)=[{0x7, 0xc, 0x3, 0x1}, {0x3, 0x8, 0x9, 0x4, 0xffffffff}, {0x1ff, 0x7, 0x0, 0x4, 0x6}, {0x2, 0x7, 0x0, 0xc0000000000, 0x4}], 0x4, 0x28, 0x9}, {&(0x7f0000003b40)=[0xe], 0x1, 0x8, 0x4, 0x40}}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000600)="258616a68691b02c81d64255765d13562c8ec328b90b8c092b2ed1bec54308fb1c6d11a5b7ad6d2ba335438c5a4a5eeabcd8cf1e101be9e85d4be12f4600682a6c86b0a4b2240140919719f9d882c520d6373707b8afd63996443249f0249acb31548168b90637b783fb74faf398bbb0efe042b3bd28152f03d923335bfa74e8889ea32009fda1f7cf89a46619c91d0239208fe062cd34c526e3f2f60375cd3b90b4d8d4c37aaf51a9810a68d0f43762b040ebebadc7ef1f2c6a9883021dd8862382a91dae899234490d23f295", 0xcd}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x40, 0x8000}}], 0x1, 0x4000001) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4082, 0xff2}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000000480)=""/169, 0xa9}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40002120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004f80)=ANY=[@ANYRES8=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r13 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000018c0)=@newtaction={0x14, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x4000000) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r14, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_gfeatures}) recvmmsg$unix(r13, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a00)=""/108, 0x6c}, {&(0x7f0000002a80)=""/181, 0xb5}], 0x2}}, {{0x0, 0xffffffffffffff48, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/51, 0x33}], 0x1}}], 0x2, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 962.396609ms ago: executing program 1 (id=7877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x21, 0x3, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x33fe0}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0x23, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x3, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "c7f97b526f6de543", "d8bebefdf552c5eb0166a387894b901e", "ac277bd8", "f7bf23df3e142eed"}, 0x28) 903.816914ms ago: executing program 4 (id=7878): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34}, 0x2f) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x4880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, r1}, 0x14) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) 889.654546ms ago: executing program 1 (id=7879): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010062050000006500002817d5eb33e98f2fd53e3e100002800c"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000af9d00030000000900010073797a3000000000080002400000000228000000200a01040000000000000000030000000900010073797a3000000000080002"], 0x78}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x20004040) socket(0x2b, 0x3, 0xa760) (async) socket(0x2b, 0x3, 0xa760) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r4, 0x713, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1e9a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 868.125933ms ago: executing program 2 (id=7880): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c000004004280141c09d2f6a8c5d2a50a000008000f00", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x4) r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000140)=r3, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'netpci0\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close(r9) socket$inet(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) socket$kcm(0x2, 0xa, 0x2) 743.766023ms ago: executing program 1 (id=7881): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000180)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0}, 0x40) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@alu={0x4, 0x1, 0x7, 0x7, 0x9, 0x2, 0xffffffffffffffff}, @generic={0x70, 0x8, 0x4, 0x7}, @ldst={0x1, 0x3, 0x3, 0x5, 0xb, 0xffffffffffffffd6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0xa459, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)=[{0x1, 0x2, 0x6, 0xc}]}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r2, 0x25, 0x6, @val=@tcx={@void, @value=r4, @void, @void, r3}}, 0x1c) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) close(r8) (async, rerun: 32) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000019000100000000fbff00000080"], 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) 740.868476ms ago: executing program 4 (id=7882): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x3, 0x392, [0x200000000080, 0x0, 0x0, 0x2000000002fc, 0x20000000032c], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x41, 0x1a, 'bridge_slave_1\x00', 'macvlan1\x00', 'batadv_slave_0\x00', 'veth1_macvtap\x00', @remote, [0xff, 0x0, 0xff, 0x418b23322c20b2f2, 0x1fe, 0xff], @random="b6cab60a8484", [0x0, 0x7f, 0xff, 0xff, 0xff], 0xbe, 0xf6, 0x12e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0xff, 0xffffffff], 0x4e22, 0x3c, 0x0, 0x4e21, 0x0, 0x20}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}, {0x11, 0x24, 0x1b, 'bridge0\x00', 'veth1_to_bond\x00', 'macvlan0\x00', 'veth0_to_hsr\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0xff], 0xae, 0xe6, 0x11e, [@time={{'time\x00', 0x0, 0x18}, {{0x10001, 0x4, 0x137e3, 0x223a, 0x2, 0x5}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x20, 0x9000, 'syzkaller1\x00', 'tunl0\x00', 'wg0\x00', 'vxcan1\x00', @random="8930f6d1e63e", [0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x7f, {0x1}}}}}]}]}, 0x40a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 656.7834ms ago: executing program 1 (id=7883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000604a3ab2363497a06155de13fcc160766a8aa1a48fe82f0d0c268e45c9ea2ac4aec92ee7a9226db34ec32a13aea00a6de5c57127be75f66a06f05c6fd940cdd5a663b6754c11829d0eeec2f8dcba7c229641b785fb374c5dc79e1d642355df9e6a8961118de2e16d09ceb58929959495b9f7a68233362f8fe6351ff58e0912dbf753e3db12"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300e4ff000000850000001b00001a8e5bb5bb22d7b1fe6eaf5bf140d3c6f6930000ee6b72d88f181910da7e68488700"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x10, &(0x7f0000000c40)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a0002000000080005"], 0x28}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000600)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002bc0)={{{@in6=@private1, @in=@rand_addr=0x64010101, 0x4e23, 0x5, 0x4e23, 0x4, 0x2, 0xa0, 0x80, 0x1d, 0x0, r5}, {0x6, 0x451be561, 0x8, 0x2, 0x2, 0xff, 0xfffffffffffffff7, 0x1}, {0x9, 0xc, 0xfff, 0x8}, 0x6, 0x6e6bba, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@remote, 0x3504, 0x3, 0x2, 0xa6, 0xf, 0x2}}, 0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f0000000a80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000a80), 0x0, 0x49, &(0x7f0000000ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000b00), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3c, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4048004) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x12) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000140)="3b5bf4c9b030db0845243363a103c8cd10cd0a5e6ac1d842047f1b98c3b790a85551e04dab5d488ff55fcbe535a6dc479dfe5031e444a30d3aa8296e60076d98d2e57ad2147c4307415640f5b310e71f8b3d90", 0x53}, {&(0x7f0000000340)="93aaf06069284b487623f54c8526704fc647b96d0a163c99d53d01ad8f1ffd1940e9712ff0061a24e5b89dd70483268a9626abff7a12f5e6fe4c494ab68b8410c5c614d954d162b97832d1a591005ec35f7a53d98cdde953e395a71127862e35830169f1df3583652612c19a1544e4935eb8e3859ad90e43aee06a1684ccb76f073e08cd46dd2f641f5a0f0fcdf297cbce362fbf3ce25a8664734a5abd462e329947c7c6044635d223ee0d0985567bdce931ac045bc90637eb2cad2441c42e6880caff1b9d25cc17b80b", 0xca}, {&(0x7f0000000080)="07909c5910c6c1e9087ba4de12", 0xd}, {&(0x7f0000000680)="417a9d38e69f3c2e84ad567f676f3758c96866690da5c7386e82fd07f15dc66c3a54bab1003a95d6443e2ed2c7e1c76e1fd6dfc5928d8ebf12283bcf2e044fc55b1ab29ae297f45498ee1fb2198d7e9ee584d0682955cd746ff7b5f666f362d221fb85843f8bf6c1bdccb766df596e521ec8a8f3161ae98027707624b11cad31ddc6815a18edcb68a638bdf43050a7e6c59d4b739cd7e04ff16bb2f9a6ea59035d599f8fbea8849f4e1e3baa58e786bad94e2e9a1b0af08686b4f9df97a8959dc62e8f3c7eb831", 0xc7}, {&(0x7f0000000440)="45b378d4be0ba4639a1a6449dd708e17c0242dda138f0965e6524299ea377645b1a4fd05ef6a6effcfcb458b993c4b90f9cc502079da0dc1e1ea509d9c0ec12298b9f83c34b011ceb95b9dde918b4c54bc83fd6e9ab0d420690c", 0x5a}, {&(0x7f00000007c0)="7811b8cf51434c51901c6b2fc2f7246df9784706fce295eb26d8e1ae21ca12a82782c9b9e3247fe59c70b86342904163da8a3eca674f18ddaf832a27dda3d27e3bd576654dc84c6e35e79d3f8cc595cbeb74ceb3d6f11de92078e95c52e3768412cc6fe6991afea2d4a12d8dc81486f7e2", 0x71}, {&(0x7f00000004c0)="fbf5dde0c7e3dfdd34e5cbc7e669", 0xe}], 0x7, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @rand_addr=0x64010102}}}], 0x38}, 0x4040015) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffffff0000858df83cf771b0810100000000008500000041000008b345850000000f0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r8, 0x89e7, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) read$alg(r9, 0x0, 0x0) write$cgroup_devices(r9, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001ec0)={r9, 0x20, &(0x7f0000000c00)={&(0x7f0000000dc0)=""/4096, 0x1000, 0x0, &(0x7f0000001dc0)=""/220, 0xdc}}, 0x10) 645.783271ms ago: executing program 4 (id=7884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 591.737182ms ago: executing program 0 (id=7885): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xc89, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x1c) (fail_nth: 47) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfe", 0x15}], 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) vmsplice(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0xf) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 590.440485ms ago: executing program 2 (id=7886): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8000, 0x40, 0x1, 0x8, {{0x16, 0x4, 0x0, 0x2, 0x58, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @private=0xa010101, {[@timestamp_addr={0x44, 0x44, 0x47, 0x1, 0x6, [{@empty, 0x3}, {@remote, 0x9}, {@empty, 0x2}, {@remote, 0x8000}, {@local, 0x7fffffff}, {@private=0xa010102, 0x400}, {@rand_addr=0x64010102, 0x3ff}, {@broadcast, 0x7}]}]}}}}}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1e, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x1, 0x0, 0x4, 0xa, 0x1, 0xfffffffffffffffe, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xb0}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x97, &(0x7f0000000440)=""/151, 0x40f00, 0xd, '\x00', r0, 0x25, r7, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x7, 0x9, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r8], &(0x7f0000000600)=[{0x2, 0x3, 0x9, 0x1}, {0x4, 0x2, 0x0, 0x4}, {0x2, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x5}], 0x10, 0xffffff01}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r9], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 551.35458ms ago: executing program 1 (id=7887): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)='l', 0x1, 0x4000000, &(0x7f0000000180)={0xa, 0xf7ff, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x1, 0x20}, &(0x7f00000002c0)=0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r7, 0xc7, 0x1}, 0xc) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x7d) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 191.085628ms ago: executing program 4 (id=7888): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0xb, 0x8, 0x8, 0xffffffff, 0x0, 0x81}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='/l\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x8001]}, {0x0, 0x8, 0x2, 0x1}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x10}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0x7, 0x9, 0x0, 0x1, 0x80000001, 0x0, 0x571c, 0x5}, &(0x7f0000000240)={0x5, 0x9, 0x400, 0x8001, 0x1, 0x96a, 0x5, 0xff}, &(0x7f0000000280)={0x8, 0x9, 0x41, 0xfff, 0x1, 0x8, 0xff, 0x4}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000380)={0xa, 0x4e22, 0x80000001, @private1, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1}, 0x80) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) r2 = accept$netrom(r1, &(0x7f00000004c0)={{0x3, @rose}, [@default, @rose, @netrom, @null, @rose, @default, @null]}, &(0x7f0000000540)=0x48) splice(r1, &(0x7f0000000480)=0x2, r2, &(0x7f0000000580)=0x1000, 0x9, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000800)={r1, &(0x7f0000000700)=':\xeb(\'+]*}(&).\x00', 0x800, &(0x7f0000000740)={@align=0xffffffffffffb1cd, {0x4, 0x6, 0x200, 0x8}}, 0x7, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x1ff}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @ldst={0x0, 0x3, 0x0, 0x3, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}]}, &(0x7f0000000640)='GPL\x00', 0x80000001, 0x6c, &(0x7f0000000680)=""/108, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000840)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1, r4, r1, r1, r1, r1, r1], 0x0, 0x10, 0x100}, 0x94) listen(r5, 0x4) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000a00)={'netdevsim0\x00', 0x600}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000a40)) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000a80)=@gcm_128={{0x304}, "a25bc986b63a7cc4", "d27700e0b6c74f44acad229b5684020c", "c3c83501", "4dfd65491b2de9b6"}, 0x28) sendto(r3, &(0x7f0000000ac0)="1c203d04a67bda75bcb6c145420ef0041b0d81c832eb77433358f391378751ea4fef77d970bc9cb67e71631afd4439cfa23416cb3e59766e3e19140a8cf10ec4ab24751c8db3f0a7105c4513943659aaf38112d35e89656d7705007a73e4eefe81d012621588338ebf3536d1a40ee53f47c8c656dad907360af1a31972a48cab6856cea1aa200aadb7a15719352a7d7d8db0b4ad89d8989592fb92503b4b1b364449f9b0e0c9e29f7b31", 0xaa, 0x20008001, &(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0xec, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x3}, 0x80) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$cgroup_ro(r3, &(0x7f0000000c00)='pids.events\x00', 0x0, 0x0) unshare(0xb76201999008c708) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r3) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000001d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000000cc0)={0x107c, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6df}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2580}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x40841}, 0x4000041) sendmsg(r6, &(0x7f0000002280)={&(0x7f0000001dc0)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e40)="bf7e38bcb0e0cba7e0eede126f53a2c74fe94f8f6f6e3de13272e45c6f93ff01f4a5f0bfa03fee55caaa6bab3309ea7168433d712b790bb94996b044416f90b05f79b88f102459f841c1b5394d338dc77f9c0e4713016eb58dce36052c814a6c9abe69e492122ca828ff38aa750dffdb495aa89b811d850228dddcb1114fa08b884fceb0f87c036b2735272d2a484625e9df613a7b8188db009548856be208071dab2d9386ca2fa4eda953d9fdea93727e8c79bd23707c3d1a939af26b056aa7dcd3fec7fb0be536", 0xc8}, {&(0x7f0000001f40)="6c77cfb39f058e0d3f3d672036b3808245901776ba6e3b782780b3346441519476bde3753a91bd96d8b5044e765baa9b6c695844e56094e19a52523cac079ac91393ae07b86ba864f784ee3ddb2d8c3035d9372f51bd159920e29e1173a26a6a150a8d4b526ca1c04ea218c8deb8fb6330e210e7ced25c76df42f25be5f1ed1a84a575004ec52084f50bc9a1e805a6475408ab703979f7c41da9f970c593dd70527dfc859d6939dd44ca753c", 0xac}, {&(0x7f0000002000)="ac9efed3cb9308864fce59bce34ca70c064da1594e330f15424be3e580a56388a328a8c11b82128469d5818c3d49242fd3c22facfb8d68ac5d6689234571a540bcc00c82f71d4ec6fb68bdac875e2f946960fd3a27fb8947aead1ed7821a1bf92630c0e019606812aee2c37264a03a8352e0cc0be26dd43a3172ba9c7ea5465c49ba3972530fcbb5dd500efecb49af047f349ef62769518a9128639747221766eece244c9f462d2ffa6615783e", 0xad}], 0x3, &(0x7f0000002100)=[{0xb8, 0x1, 0x5, "1d5d3f87b7f1dda77b34618bcf11b6d5de647e02e3ab6d6bd88eb61e04bac9bf47527f908c59a7f04e7c3ebfccfedc35d6d67081d7e4b9b7a8ab72c023c886348ce7dba2387739e0e57cfe79425af97e83b8cb07633559dfa8e94433d646f77a4864762ce2575147bd310aaeacc8a452703cdec26618c2f15c35899b1f20cb7cd6f042cb175a3400447919964cd290f079b5cb6e71ddeb31ce0b5e4177f6627c8543afb0"}, {0xb8, 0x104, 0xff, "292243a9504326517906060240ca4d29644b4d64358208bec2d513001902ceb83cea416c4f993546a5cde5d29c457200c08a3be6dc4af6eb39099d033c50518d3349ce0ac4c4d3669dd8eca5d53b6f37cd36aef1391a7b542c933c62d95c84ad5852c181d84b689a8bf16ff34865e96bd92ddbd9ac7f18d6c41d7417b3e6551b1183ff862a566c3a9f5534a96831f5602313b19d0d071a93efd8fc2fd5bce868d29d5a7d0da2"}], 0x170}, 0x24000010) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r9, &(0x7f0000003440)={&(0x7f00000022c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/128, 0x80}, {&(0x7f00000033c0)=""/49, 0x31}], 0x3}, 0x10000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000003580)={r1, &(0x7f0000003480)='\x00', 0x8340, &(0x7f00000034c0)={@_ha_fsid={[0xb, 0xa3d]}, {0x4, 0x5, 0xfffffff7, 0x8000000000000001}}, 0x4, &(0x7f0000003500)={@_ha_fsid}, &(0x7f0000003540)=0x80000001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003640)={0x0}, &(0x7f0000003680)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000036c0)={r1, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)=[0x8, 0x6], 0x0, 0x2, 0x2, 0x0, r10}}, 0x40) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000003700)={0x8, [0x4, 0x650, 0x5, 0x8, 0x8000, 0x8, 0x0, 0x1]}, &(0x7f0000003740)=0x14) 119.812289ms ago: executing program 3 (id=7889): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "dfd7cd00fe6926a6"}, 0x38) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000) (async, rerun: 32) close(r1) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x300, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000040)={0x1, 0x9, 0x100000000, 0xffffffffffffffff, 0x4}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x37}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe0, &(0x7f00000002c0)=""/224, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x3, 0x7, 0x53}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'erspan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r1, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/151, 0x97, 0x0, &(0x7f0000000580)=""/120, 0x78}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r6, r7, 0x25, 0x3, @val=@target_btf_id=r8}, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00002400000000002400120014000100d136696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r4, 0x0, 0x10d00, 0xf) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x3}]}}}]}, 0x3c}}, 0x0) 88.374666ms ago: executing program 3 (id=7890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x18002, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x40000000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0xe01, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000200)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/74, 0x4a, 0x9, 0x4}) 58.779459ms ago: executing program 2 (id=7891): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x401, 0x5f, 0x0, 0x3, 0x5, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x7, 0x2, 0x0, 0x0, 0x2, 0x9, 0x1, 0xfffffffd, 0x1, 0x80000001, 0x7f, 0x0, 0xfffffffc}}) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r2) write(r0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000b, 0x13, 0xffffffffffffffff, 0x44ab5000) mmap(&(0x7f00005bd000/0x2000)=nil, 0x2000, 0x2, 0x50, r3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x15, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x51, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf4, {0x0, 0x0, 0x0, r11, {0xd}, {}, {0x2, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40099}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) 0s ago: executing program 1 (id=7892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="010027bd700003dcdf250100000008000100", @ANYRES32=r2, @ANYBLOB="800002803c000100240001"], 0x9c}, 0x1, 0x400000000000000}, 0x48090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000020601000000000000000500000a0900020073797a320000000011000300686173683a6e65742c6e6574f3000000050005000200000005000400000000001400078008000840000000d805001400720000000500010007000000"], 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x0, 0xd1f}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x20, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0xb, 0xf}}) kernel console output (not intermixed with test programs): s in process `syz.2.6592'. [ 654.950051][T30718] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 655.267007][T30743] syzkaller0: entered promiscuous mode [ 655.276767][T30743] syzkaller0: entered allmulticast mode [ 655.711662][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 655.719716][ C0] lec:lec_tx_timeout: lec0 [ 656.088491][T30793] batadv1: entered promiscuous mode [ 656.094251][T30793] batadv1: entered allmulticast mode [ 656.100851][T30793] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.777818][T30828] lo speed is unknown, defaulting to 1000 [ 656.802442][T30833] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 656.827669][T30828] wlan1 speed is unknown, defaulting to 1000 [ 657.538739][T30871] batadv_slave_0: entered promiscuous mode [ 658.101247][T30897] __nla_validate_parse: 12 callbacks suppressed [ 658.101265][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6632'. [ 658.372704][T30869] batadv_slave_0: left promiscuous mode [ 658.488274][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6635'. [ 658.707319][T30930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6640'. [ 659.145247][T30959] syzkaller1: entered promiscuous mode [ 659.150838][T30959] syzkaller1: entered allmulticast mode [ 659.446462][T30972] lo speed is unknown, defaulting to 1000 [ 659.487867][T30982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6654'. [ 659.497173][T30972] wlan1 speed is unknown, defaulting to 1000 [ 660.012663][T30990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6656'. [ 660.213404][T30999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6658'. [ 660.267081][T30997] netlink: 'syz.2.6660': attribute type 2 has an invalid length. [ 660.432445][T30993] gre0: entered promiscuous mode [ 660.438174][T30993] gre0: entered allmulticast mode [ 660.717616][T31002] lo speed is unknown, defaulting to 1000 [ 660.725463][T31002] wlan1 speed is unknown, defaulting to 1000 [ 660.797640][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6667'. [ 661.018578][T31050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 661.030946][T31050] netlink: 'syz.0.6669': attribute type 15 has an invalid length. [ 661.037635][T31052] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6670'. [ 661.056911][T31050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6669'. [ 661.356488][T31070] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 661.395956][T31071] macsec2: entered allmulticast mode [ 661.406010][T31071] macsec0: entered allmulticast mode [ 661.415716][T31071] macsec0: left allmulticast mode [ 661.449531][T31070] macsec2: entered allmulticast mode [ 661.455151][T31070] macsec0: entered allmulticast mode [ 661.461322][T31070] macsec0: left allmulticast mode [ 661.688258][T31095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.991360][T31109] netlink: 'syz.4.6686': attribute type 1 has an invalid length. [ 662.240813][T31122] tipc: Enabled bearer , priority 0 [ 663.032183][T31166] netlink: 'syz.3.6703': attribute type 13 has an invalid length. [ 663.184320][T31177] tipc: Enabling of bearer rejected, already enabled [ 663.202792][T31177] mac80211_hwsim hwsim76 syzkaller0: entered promiscuous mode [ 663.211331][T31177] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode [ 663.227616][T31177] tipc: Resetting bearer [ 663.246359][T31180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.258037][T31180] netlink: 'syz.1.6708': attribute type 13 has an invalid length. [ 663.355731][ T7786] tipc: Resetting bearer [ 663.362484][T31182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.467617][T31183] tipc: Resetting bearer [ 663.482922][T31190] netlink: 'syz.4.6710': attribute type 4 has an invalid length. [ 663.565308][T31198] __nla_validate_parse: 15 callbacks suppressed [ 663.565328][T31198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6711'. [ 663.576338][T31191] syzkaller1: entered promiscuous mode [ 663.594997][T31191] syzkaller1: entered allmulticast mode [ 663.746310][T31198] netlink: 'syz.1.6711': attribute type 9 has an invalid length. [ 663.755950][T31198] netlink: 'syz.1.6711': attribute type 6 has an invalid length. [ 663.764312][T31198] netlink: 'syz.1.6711': attribute type 7 has an invalid length. [ 663.772620][T31198] netlink: 'syz.1.6711': attribute type 8 has an invalid length. [ 663.946661][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6715'. [ 664.059127][T31210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6714'. [ 664.283038][T31228] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 664.333333][ T5834] block nbd0: Receive control failed (result -32) [ 664.708438][T31253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6729'. [ 664.722098][T31253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6729'. [ 664.892838][T31265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6731'. [ 665.160755][T31279] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6736'. [ 665.176755][T31279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6736'. [ 665.263332][T31288] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6738'. [ 665.352575][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 665.542201][T31299] lo speed is unknown, defaulting to 1000 [ 665.589408][T31299] wlan1 speed is unknown, defaulting to 1000 [ 666.419494][T31336] syzkaller0: entered promiscuous mode [ 666.436047][T31336] syzkaller0: entered allmulticast mode [ 666.481077][T31333] lo speed is unknown, defaulting to 1000 [ 666.568873][T31353] xt_hashlimit: size too large, truncated to 1048576 [ 666.590283][T31353] xt_hashlimit: invalid interval [ 666.622288][T31353] validate_nla: 4 callbacks suppressed [ 666.622305][T31353] netlink: 'syz.1.6757': attribute type 10 has an invalid length. [ 666.872262][T31333] wlan1 speed is unknown, defaulting to 1000 [ 666.878961][T31353] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.886571][T31353] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.029207][T31353] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.036410][T31353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.043924][T31353] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.051071][T31353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.070277][T31353] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 667.085514][T31355] bridge_slave_1: left allmulticast mode [ 667.101455][T31355] bridge_slave_1: left promiscuous mode [ 667.113700][T31355] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.146186][T31355] bridge_slave_0: left allmulticast mode [ 667.169508][T31355] bridge_slave_0: left promiscuous mode [ 667.186514][T31355] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.232547][T31355] bond0: (slave bridge0): Releasing backup interface [ 667.766497][T31391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.786144][T31391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.944320][T31391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.954992][T31391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.078382][T31391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.101649][T31391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.181234][T31391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.195581][T31391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.831882][T31435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.866020][T31435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.199300][T31444] ip6erspan0: entered promiscuous mode [ 669.256503][T31457] syzkaller0: mtu less than device minimum [ 669.291643][ T7790] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.316704][T31465] lo: Caught tx_queue_len zero misconfig [ 669.335506][ T7790] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.350605][T31467] netlink: 'syz.4.6785': attribute type 1 has an invalid length. [ 669.368505][T31467] netlink: 'syz.4.6785': attribute type 1 has an invalid length. [ 669.393271][ T7790] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.396992][T31459] __nla_validate_parse: 7 callbacks suppressed [ 669.397007][T31459] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6783'. [ 669.402106][ T7790] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.411542][T31459] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6783'. [ 669.439894][ T190] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.448928][ T190] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.477173][T31459] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6783'. [ 669.498440][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.512131][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.543980][T31467] lo speed is unknown, defaulting to 1000 [ 669.555507][T31467] wlan1 speed is unknown, defaulting to 1000 [ 669.562253][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.577709][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.628814][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.661676][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.924992][T31497] bridge0: port 3(syz_tun) entered blocking state [ 669.931907][T31497] bridge0: port 3(syz_tun) entered disabled state [ 669.939140][T31497] syz_tun: entered allmulticast mode [ 669.947306][T31497] syz_tun: entered promiscuous mode [ 669.963952][T31497] bridge0: port 3(syz_tun) entered blocking state [ 669.971243][T31497] bridge0: port 3(syz_tun) entered forwarding state [ 670.099431][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6795'. [ 670.106867][T31505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6794'. [ 670.243803][T31511] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6798'. [ 670.276216][T31511] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6798'. [ 670.344288][T31511] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6798'. [ 670.385399][T31518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6800'. [ 670.402958][T31518] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6800'. [ 670.485664][T31528] 8021q: VLANs not supported on vxcan1 [ 670.677514][T31540] netlink: 'syz.3.6806': attribute type 1 has an invalid length. [ 670.685662][T31540] netlink: 'syz.3.6806': attribute type 1 has an invalid length. [ 670.839972][T31516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.894448][T31516] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.956237][T31516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.986692][ T795] lo speed is unknown, defaulting to 1000 [ 670.997471][ T795] syz0: Port: 1 Link ACTIVE [ 671.097759][T31540] lo speed is unknown, defaulting to 1000 [ 671.115757][T31540] wlan1 speed is unknown, defaulting to 1000 [ 671.423041][T31584] bond0: (slave dummy0): Releasing backup interface [ 671.430922][T31584] dummy0 (unregistering): left promiscuous mode [ 671.444778][T31586] xt_hashlimit: size too large, truncated to 1048576 [ 671.467100][T31586] xt_hashlimit: invalid interval [ 671.538158][T31586] netlink: 'syz.2.6813': attribute type 10 has an invalid length. [ 671.645312][T31586] bridge0: port 3(syz_tun) entered disabled state [ 671.651980][T31586] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.659726][T31586] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.695495][T31586] bridge0: port 3(syz_tun) entered blocking state [ 671.702113][T31586] bridge0: port 3(syz_tun) entered forwarding state [ 671.708922][T31586] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.716085][T31586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.720906][T31597] netlink: 'syz.3.6814': attribute type 4 has an invalid length. [ 671.723566][T31586] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.723690][T31586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.768029][T31586] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 671.784923][T31591] syz_tun: left allmulticast mode [ 671.844570][T31591] syz_tun: left promiscuous mode [ 671.849818][T31591] bridge0: port 3(syz_tun) entered disabled state [ 671.864456][T31591] bridge_slave_1: left allmulticast mode [ 671.881698][T31591] bridge_slave_1: left promiscuous mode [ 671.900696][T31591] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.911062][T31591] bridge_slave_0: left allmulticast mode [ 671.916827][T31591] bridge_slave_0: left promiscuous mode [ 671.923085][T31591] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.956555][T31591] bond0: (slave bridge0): Releasing backup interface [ 672.027190][T31593] lo: entered allmulticast mode [ 672.033816][T31593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.280687][T31607] sctp: [Deprecated]: syz.4.6820 (pid 31607) Use of int in max_burst socket option. [ 672.280687][T31607] Use struct sctp_assoc_value instead [ 672.347276][T31602] IPv6: addrconf: prefix option has invalid lifetime [ 672.543658][T31627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.253954][T31649] lo speed is unknown, defaulting to 1000 [ 673.263513][T31649] wlan1 speed is unknown, defaulting to 1000 [ 673.544764][T31673] vlan2: entered allmulticast mode [ 673.560363][T31673] bridge_slave_0: entered allmulticast mode [ 674.090287][T31684] netlink: 'syz.4.6836': attribute type 83 has an invalid length. [ 674.176019][T31688] sctp: [Deprecated]: syz.4.6838 (pid 31688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.176019][T31688] Use struct sctp_sack_info instead [ 674.520545][T31701] __nla_validate_parse: 5 callbacks suppressed [ 674.520563][T31701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 674.815203][T31710] netlink: 'syz.4.6846': attribute type 29 has an invalid length. [ 674.838419][T31710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6846'. [ 674.856961][T31710] netlink: 'syz.4.6846': attribute type 29 has an invalid length. [ 674.871282][T31710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6846'. [ 674.883944][T31710] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 674.927863][T31710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 674.997167][T31714] bond4: (slave gretap0): making interface the new active one [ 675.026811][T31714] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 675.830680][T31762] netlink: 'syz.0.6860': attribute type 13 has an invalid length. [ 675.849562][T31762] netlink: 'syz.0.6860': attribute type 17 has an invalid length. [ 675.869532][T31762] lo: left allmulticast mode [ 675.894732][T31764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6860'. [ 675.956121][T31764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6860'. [ 676.013493][T31762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.229942][T31615] Set syz1 is full, maxelem 65536 reached [ 676.255197][T31779] netlink: 'syz.2.6866': attribute type 1 has an invalid length. [ 676.264197][T31779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6866'. [ 676.297803][T31779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6866'. [ 676.309256][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6865'. [ 676.444247][T31788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6867'. [ 676.504945][T31796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6870'. [ 676.715436][T31810] FAULT_INJECTION: forcing a failure. [ 676.715436][T31810] name failslab, interval 1, probability 0, space 0, times 0 [ 676.756064][T31810] CPU: 0 UID: 0 PID: 31810 Comm: syz.1.6875 Not tainted syzkaller #0 PREEMPT(full) [ 676.756089][T31810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.756102][T31810] Call Trace: [ 676.756110][T31810] [ 676.756119][T31810] dump_stack_lvl+0xe8/0x150 [ 676.756161][T31810] should_fail_ex+0x412/0x560 [ 676.756189][T31810] should_failslab+0xa8/0x100 [ 676.756212][T31810] __kmalloc_cache_noprof+0x88/0x660 [ 676.756232][T31810] ? sctp_add_bind_addr+0x8c/0x370 [ 676.756259][T31810] sctp_add_bind_addr+0x8c/0x370 [ 676.756282][T31810] sctp_copy_local_addr_list+0x314/0x4f0 [ 676.756304][T31810] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 676.756325][T31810] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 676.756348][T31810] ? sctp_v6_is_any+0x64/0x80 [ 676.756369][T31810] ? sctp_copy_one_addr+0x93/0x360 [ 676.756392][T31810] sctp_bind_addr_copy+0xb3/0x3c0 [ 676.756412][T31810] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 676.756443][T31810] sctp_connect_new_asoc+0x2ff/0x6b0 [ 676.756468][T31810] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 676.756496][T31810] ? sctp_get_af_specific+0x29/0x80 [ 676.756514][T31810] ? sctp_inet6_send_verify+0x80/0x300 [ 676.756531][T31810] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 676.756556][T31810] __sctp_connect+0x5cb/0xdc0 [ 676.756588][T31810] ? __pfx___sctp_connect+0x10/0x10 [ 676.756609][T31810] ? sctp_setsockopt+0x21c/0x12c0 [ 676.756629][T31810] ? security_sctp_bind_connect+0x7e/0x2c0 [ 676.756651][T31810] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 676.756673][T31810] sctp_setsockopt+0x708/0x12c0 [ 676.756693][T31810] ? sock_common_setsockopt+0x36/0xc0 [ 676.756715][T31810] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 676.756738][T31810] do_sock_setsockopt+0x17c/0x1b0 [ 676.756767][T31810] __x64_sys_setsockopt+0x13d/0x1b0 [ 676.756797][T31810] do_syscall_64+0x14d/0xf80 [ 676.756820][T31810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.756839][T31810] ? clear_bhb_loop+0x40/0x90 [ 676.756863][T31810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.756883][T31810] RIP: 0033:0x7fd4bfb9c799 [ 676.756901][T31810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.756917][T31810] RSP: 002b:00007fd4c0a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.756942][T31810] RAX: ffffffffffffffda RBX: 00007fd4bfe15fa0 RCX: 00007fd4bfb9c799 [ 676.756957][T31810] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 676.756970][T31810] RBP: 00007fd4c0a08090 R08: 000000000000001c R09: 0000000000000000 [ 676.756983][T31810] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 676.756996][T31810] R13: 00007fd4bfe16038 R14: 00007fd4bfe15fa0 R15: 00007ffeb0e7b188 [ 676.757026][T31810] [ 677.059758][T31824] team0: Port device team_slave_0 removed [ 677.143133][T31810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.219229][T31816] lo speed is unknown, defaulting to 1000 [ 677.235911][T31816] wlan1 speed is unknown, defaulting to 1000 [ 677.388002][T31834] netlink: 'syz.2.6881': attribute type 1 has an invalid length. [ 677.437441][T31834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.546317][T31834] vlan2: entered promiscuous mode [ 677.617733][T31834] bond1: entered promiscuous mode [ 677.643792][T31834] vlan2: entered allmulticast mode [ 677.648973][T31834] bond1: entered allmulticast mode [ 677.829828][T31864] netlink: 'syz.3.6891': attribute type 1 has an invalid length. [ 677.889241][T31866] netlink: 'syz.0.6892': attribute type 10 has an invalid length. [ 677.977373][T31866] veth0_vlan: left promiscuous mode [ 677.995441][T31866] veth0_vlan: entered promiscuous mode [ 678.026822][T31866] team0: Device veth0_vlan failed to register rx_handler [ 678.591766][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 678.850873][T31905] syzkaller0: entered promiscuous mode [ 678.870167][T31905] syzkaller0: entered allmulticast mode [ 679.262548][T31938] m1Ie5èÿá: entered promiscuous mode [ 679.264306][T31936] netlink: 'syz.3.6908': attribute type 1 has an invalid length. [ 679.354845][T31946] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 679.366705][T31946] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 679.522973][T31963] netlink: 'syz.2.6915': attribute type 5 has an invalid length. [ 679.542143][T31936] bond2: (slave gretap1): making interface the new active one [ 679.551498][T31936] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 679.600615][T31956] macvlan0: entered promiscuous mode [ 679.621923][T31956] macvlan0: entered allmulticast mode [ 679.637121][T31956] bond2: entered promiscuous mode [ 679.651564][T31956] gretap1: entered promiscuous mode [ 679.657342][T31956] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 679.675103][T31956] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 679.687332][T31956] bond2: left promiscuous mode [ 679.692916][T31956] gretap1: left promiscuous mode [ 679.704114][T31969] __nla_validate_parse: 11 callbacks suppressed [ 679.704129][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6916'. [ 679.724476][T31955] tipc: Enabled bearer , priority 0 [ 679.729470][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6916'. [ 679.741314][T31960] syzkaller0: entered promiscuous mode [ 679.752479][T31960] syzkaller0: entered allmulticast mode [ 679.774744][T31950] tipc: Resetting bearer [ 679.791244][T31948] tipc: Resetting bearer [ 679.823880][T31948] tipc: Disabling bearer [ 679.875308][T31939] delete_channel: no stack [ 679.879928][T31939] delete_channel: no stack [ 679.995964][T31982] tipc: Enabled bearer , priority 0 [ 680.010207][T31982] syzkaller0: entered promiscuous mode [ 680.019801][T31982] syzkaller0: entered allmulticast mode [ 680.073527][T31989] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.085709][T31989] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.146197][T31983] tipc: Resetting bearer [ 680.171184][T31981] tipc: Resetting bearer [ 680.177289][T32000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6925'. [ 680.258509][T31981] tipc: Disabling bearer [ 680.269995][T32006] netlink: 'syz.1.6927': attribute type 1 has an invalid length. [ 680.297671][T31989] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.298509][T32006] netlink: 'syz.1.6927': attribute type 1 has an invalid length. [ 680.314753][T31989] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.405308][T32006] lo speed is unknown, defaulting to 1000 [ 680.413818][T31989] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.428048][T31989] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.462971][T32006] wlan1 speed is unknown, defaulting to 1000 [ 680.576159][T32031] IPVS: length: 55 != 8 [ 680.609089][T31989] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.631830][T31989] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.006768][T32050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6933'. [ 681.056803][T32050] netlink: 'syz.4.6933': attribute type 4 has an invalid length. [ 681.327847][ T7793] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.351990][ T7793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.362582][ T7793] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.370971][ T7793] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.447336][ T7793] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.456172][ T7793] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.556189][ T6926] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.591605][ T6926] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.659614][T32072] rdma_op ffff88807ffd01f0 conn xmit_rdma 0000000000000000 [ 681.705607][T32076] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6939'. [ 681.968423][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 682.062804][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 682.091194][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 682.120307][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 682.173886][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 682.223633][T32120] ip6tnl0: Caught tx_queue_len zero misconfig [ 682.452431][T32131] netlink: 'syz.4.6957': attribute type 9 has an invalid length. [ 682.613779][T32143] netlink: 'syz.4.6959': attribute type 4 has an invalid length. [ 682.765627][T32146] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 682.787027][T32146] bond2 (unregistering): Released all slaves [ 683.295796][T32189] netlink: 'syz.3.6971': attribute type 1 has an invalid length. [ 683.324459][T32187] bond2: entered promiscuous mode [ 683.334727][T32187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.370245][T32189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.500322][T32189] bond3: (slave veth3): Enslaving as an active interface with a down link [ 683.561223][T32217] netlink: 'syz.1.6977': attribute type 11 has an invalid length. [ 683.587805][T32189] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 683.602175][T32189] bond3: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 683.642946][T32208] netlink: 'syz.3.6971': attribute type 6 has an invalid length. [ 683.748199][T32225] GUP no longer grows the stack in syz.2.6979 (32225): 200000003000-20000000a000 (200000001000) [ 683.759619][T32225] CPU: 1 UID: 0 PID: 32225 Comm: syz.2.6979 Not tainted syzkaller #0 PREEMPT(full) [ 683.759647][T32225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.759661][T32225] Call Trace: [ 683.759671][T32225] [ 683.759680][T32225] dump_stack_lvl+0xe8/0x150 [ 683.759716][T32225] __get_user_pages+0x2453/0x29d0 [ 683.759750][T32225] ? __lock_acquire+0x6b5/0x2cf0 [ 683.759797][T32225] ? __gup_longterm_locked+0xc4e/0x1630 [ 683.759828][T32225] ? down_read_killable+0x1bb/0x340 [ 683.759858][T32225] __gup_longterm_locked+0xdcf/0x1630 [ 683.759915][T32225] gup_fast_fallback+0x1d82/0x22e0 [ 683.759987][T32225] ? __pfx_gup_fast_fallback+0x10/0x10 [ 683.760022][T32225] ? is_valid_gup_args+0x11f/0x200 [ 683.760056][T32225] ? get_user_pages_fast+0x4d/0xb0 [ 683.760090][T32225] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 683.760129][T32225] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 683.760156][T32225] iov_iter_get_pages2+0x5e/0xa0 [ 683.760190][T32225] __se_sys_vmsplice+0x7b3/0x1490 [ 683.760243][T32225] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 683.760279][T32225] ? __pfx_futex_wake+0x10/0x10 [ 683.760374][T32225] do_syscall_64+0x14d/0xf80 [ 683.760404][T32225] ? trace_irq_disable+0x3b/0x150 [ 683.760432][T32225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.760454][T32225] ? clear_bhb_loop+0x40/0x90 [ 683.760481][T32225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.760502][T32225] RIP: 0033:0x7f8d48d9c799 [ 683.760522][T32225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.760541][T32225] RSP: 002b:00007f8d49bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 683.760564][T32225] RAX: ffffffffffffffda RBX: 00007f8d49015fa0 RCX: 00007f8d48d9c799 [ 683.760580][T32225] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 683.760594][T32225] RBP: 00007f8d48e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 683.760608][T32225] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 683.760621][T32225] R13: 00007f8d49016038 R14: 00007f8d49015fa0 R15: 00007ffcd38512a8 [ 683.760657][T32225] [ 684.073696][ T35] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.091219][ T35] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.113030][ T35] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.151184][ T35] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.178295][T32237] netlink: 'syz.1.6978': attribute type 10 has an invalid length. [ 684.215834][T32237] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.233951][T32237] bond0: (slave team0): Enslaving as an active interface with an up link [ 684.604463][T32271] netlink: 'syz.0.6991': attribute type 1 has an invalid length. [ 685.384558][T32307] __nla_validate_parse: 49 callbacks suppressed [ 685.384577][T32307] netlink: 64126 bytes leftover after parsing attributes in process `syz.2.7004'. [ 685.644072][T32321] netlink: 'syz.3.7010': attribute type 9 has an invalid length. [ 685.644726][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 685.652129][T32321] netlink: 'syz.3.7010': attribute type 11 has an invalid length. [ 685.690668][T32321] netlink: 'syz.3.7010': attribute type 12 has an invalid length. [ 685.711926][T32321] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7010'. [ 685.722171][T32321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7010'. [ 685.933518][T32332] lo speed is unknown, defaulting to 1000 [ 685.940920][T32332] wlan1 speed is unknown, defaulting to 1000 [ 686.984311][T32384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7026'. [ 687.975151][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7038'. [ 688.015725][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7038'. [ 688.038180][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7038'. [ 688.068299][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7038'. [ 688.076883][T32444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7042'. [ 688.087222][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7038'. [ 688.159338][T32450] netlink: 'syz.2.7041': attribute type 61 has an invalid length. [ 688.326226][T32453] lo speed is unknown, defaulting to 1000 [ 688.339057][T32453] wlan1 speed is unknown, defaulting to 1000 [ 688.483102][T32458] lo speed is unknown, defaulting to 1000 [ 688.522407][T32458] wlan1 speed is unknown, defaulting to 1000 [ 688.559229][T32466] netlink: 'syz.3.7044': attribute type 1 has an invalid length. [ 689.134743][T32495] netlink: 'syz.3.7051': attribute type 1 has an invalid length. [ 689.144921][T32495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.272388][T32507] tipc: Enabled bearer , priority 0 [ 689.388503][T32502] syzkaller0: entered promiscuous mode [ 689.399162][T32502] syzkaller0: entered allmulticast mode [ 689.423914][T32515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 689.446426][T32500] syzkaller0: entered promiscuous mode [ 689.452527][T32500] syzkaller0: entered allmulticast mode [ 689.636719][T32507] tipc: Resetting bearer [ 689.650353][T32501] tipc: Resetting bearer [ 689.742174][T32501] tipc: Disabling bearer [ 690.076843][T32549] netlink: 'syz.1.7061': attribute type 3 has an invalid length. [ 690.333317][T32564] lo speed is unknown, defaulting to 1000 [ 690.347680][T32564] wlan1 speed is unknown, defaulting to 1000 [ 690.434222][T32571] __nla_validate_parse: 15 callbacks suppressed [ 690.434242][T32571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7068'. [ 690.470163][T32574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7069'. [ 690.491497][T32577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7070'. [ 690.504123][T32580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7069'. [ 690.552845][T32577] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7070'. [ 690.607962][T32577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7070'. [ 690.624867][T32577] : entered promiscuous mode [ 690.751966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 690.760026][ C0] lec:lec_tx_timeout: lec0 [ 691.284529][T32615] syzkaller0: entered promiscuous mode [ 691.290634][T32615] syzkaller0: entered allmulticast mode [ 691.354536][T32620] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7080'. [ 691.588740][T32629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7082'. [ 692.155988][T32668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'. [ 692.194821][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 692.257890][T32681] FAULT_INJECTION: forcing a failure. [ 692.257890][T32681] name failslab, interval 1, probability 0, space 0, times 0 [ 692.281052][T32681] CPU: 0 UID: 0 PID: 32681 Comm: syz.2.7093 Not tainted syzkaller #0 PREEMPT(full) [ 692.281076][T32681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.281087][T32681] Call Trace: [ 692.281095][T32681] [ 692.281103][T32681] dump_stack_lvl+0xe8/0x150 [ 692.281142][T32681] should_fail_ex+0x412/0x560 [ 692.281170][T32681] should_failslab+0xa8/0x100 [ 692.281195][T32681] __kmalloc_cache_noprof+0x88/0x660 [ 692.281217][T32681] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 692.281238][T32681] ? sctp_add_bind_addr+0x8c/0x370 [ 692.281262][T32681] sctp_add_bind_addr+0x8c/0x370 [ 692.281286][T32681] sctp_copy_local_addr_list+0x314/0x4f0 [ 692.281311][T32681] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 692.281330][T32681] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 692.281353][T32681] ? sctp_v6_is_any+0x64/0x80 [ 692.281375][T32681] ? sctp_copy_one_addr+0x93/0x360 [ 692.281397][T32681] sctp_bind_addr_copy+0xb3/0x3c0 [ 692.281418][T32681] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 692.281449][T32681] sctp_connect_new_asoc+0x2ff/0x6b0 [ 692.281476][T32681] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 692.281504][T32681] ? sctp_get_af_specific+0x29/0x80 [ 692.281521][T32681] ? sctp_inet6_send_verify+0x80/0x300 [ 692.281539][T32681] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 692.281565][T32681] __sctp_connect+0x5cb/0xdc0 [ 692.281602][T32681] ? __pfx___sctp_connect+0x10/0x10 [ 692.281623][T32681] ? sctp_setsockopt+0x21c/0x12c0 [ 692.281645][T32681] ? security_sctp_bind_connect+0x7e/0x2c0 [ 692.281668][T32681] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 692.281691][T32681] sctp_setsockopt+0x708/0x12c0 [ 692.281712][T32681] ? sock_common_setsockopt+0x36/0xc0 [ 692.281737][T32681] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 692.281763][T32681] do_sock_setsockopt+0x17c/0x1b0 [ 692.281795][T32681] __x64_sys_setsockopt+0x13d/0x1b0 [ 692.281828][T32681] do_syscall_64+0x14d/0xf80 [ 692.281852][T32681] ? trace_irq_disable+0x3b/0x150 [ 692.281875][T32681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.281894][T32681] ? clear_bhb_loop+0x40/0x90 [ 692.281916][T32681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.281934][T32681] RIP: 0033:0x7f8d48d9c799 [ 692.281951][T32681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.281966][T32681] RSP: 002b:00007f8d49bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 692.281984][T32681] RAX: ffffffffffffffda RBX: 00007f8d49015fa0 RCX: 00007f8d48d9c799 [ 692.281997][T32681] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 692.282008][T32681] RBP: 00007f8d49bda090 R08: 000000000000001c R09: 0000000000000000 [ 692.282019][T32681] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 692.282031][T32681] R13: 00007f8d49016038 R14: 00007f8d49015fa0 R15: 00007ffcd38512a8 [ 692.282062][T32681] [ 692.331454][T32684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7094'. [ 692.507116][T32683] netlink: 'syz.3.7095': attribute type 9 has an invalid length. [ 692.564288][T32684] syzkaller0: entered promiscuous mode [ 692.596556][T32684] syzkaller0: entered allmulticast mode [ 692.607056][T32681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.669268][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.676848][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.683685][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.690451][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.697268][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.704072][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.710838][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.717651][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.724456][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.731222][T32684] tc action pedit offset must be on 32 bit boundaries [ 692.738063][T32684] 0: reclassify loop, rule prio 0, protocol 800 [ 692.872927][T32710] netlink: 'syz.2.7099': attribute type 7 has an invalid length. [ 692.895506][ T190] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.895648][T32710] netlink: 'syz.2.7099': attribute type 7 has an invalid length. [ 692.921058][ T190] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.969105][ T190] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.012024][ T190] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.390691][T32735] lo speed is unknown, defaulting to 1000 [ 693.418521][T32735] wlan1 speed is unknown, defaulting to 1000 [ 693.719547][T32759] FAULT_INJECTION: forcing a failure. [ 693.719547][T32759] name failslab, interval 1, probability 0, space 0, times 0 [ 693.771971][T32759] CPU: 0 UID: 0 PID: 32759 Comm: syz.1.7110 Not tainted syzkaller #0 PREEMPT(full) [ 693.771996][T32759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.772008][T32759] Call Trace: [ 693.772015][T32759] [ 693.772023][T32759] dump_stack_lvl+0xe8/0x150 [ 693.772052][T32759] should_fail_ex+0x412/0x560 [ 693.772080][T32759] should_failslab+0xa8/0x100 [ 693.772108][T32759] __kmalloc_cache_noprof+0x88/0x660 [ 693.772129][T32759] ? sctp_add_bind_addr+0x8c/0x370 [ 693.772154][T32759] sctp_add_bind_addr+0x8c/0x370 [ 693.772177][T32759] sctp_copy_local_addr_list+0x314/0x4f0 [ 693.772201][T32759] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 693.772220][T32759] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 693.772243][T32759] ? sctp_v6_is_any+0x64/0x80 [ 693.772265][T32759] ? sctp_copy_one_addr+0x93/0x360 [ 693.772287][T32759] sctp_bind_addr_copy+0xb3/0x3c0 [ 693.772309][T32759] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 693.772339][T32759] sctp_connect_new_asoc+0x2ff/0x6b0 [ 693.772365][T32759] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 693.772393][T32759] ? sctp_get_af_specific+0x29/0x80 [ 693.772420][T32759] ? sctp_inet6_send_verify+0x80/0x300 [ 693.772436][T32759] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 693.772463][T32759] __sctp_connect+0x5cb/0xdc0 [ 693.772497][T32759] ? __pfx___sctp_connect+0x10/0x10 [ 693.772518][T32759] ? sctp_setsockopt+0x21c/0x12c0 [ 693.772538][T32759] ? security_sctp_bind_connect+0x7e/0x2c0 [ 693.772561][T32759] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 693.772583][T32759] sctp_setsockopt+0x708/0x12c0 [ 693.772604][T32759] ? sock_common_setsockopt+0x36/0xc0 [ 693.772628][T32759] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 693.772651][T32759] do_sock_setsockopt+0x17c/0x1b0 [ 693.772681][T32759] __x64_sys_setsockopt+0x13d/0x1b0 [ 693.772713][T32759] do_syscall_64+0x14d/0xf80 [ 693.772738][T32759] ? trace_irq_disable+0x3b/0x150 [ 693.772762][T32759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.772781][T32759] ? clear_bhb_loop+0x40/0x90 [ 693.772803][T32759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.772821][T32759] RIP: 0033:0x7fd4bfb9c799 [ 693.772838][T32759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.772854][T32759] RSP: 002b:00007fd4c0a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 693.772874][T32759] RAX: ffffffffffffffda RBX: 00007fd4bfe15fa0 RCX: 00007fd4bfb9c799 [ 693.772887][T32759] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 693.772898][T32759] RBP: 00007fd4c0a08090 R08: 000000000000001c R09: 0000000000000000 [ 693.772909][T32759] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 693.772919][T32759] R13: 00007fd4bfe16038 R14: 00007fd4bfe15fa0 R15: 00007ffeb0e7b188 [ 693.772951][T32759] [ 694.170095][T32759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.252445][ T304] netlink: 'syz.0.7112': attribute type 142 has an invalid length. [ 694.299205][ T307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.749543][ T337] openvswitch: netlink: Duplicate or invalid key (type 0). [ 694.779060][ T337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.026429][ T341] lo speed is unknown, defaulting to 1000 [ 695.044625][ T341] wlan1 speed is unknown, defaulting to 1000 [ 697.008105][T16881] lec:lec_start_xmit: lec0:No lecd attached [ 698.016573][ T359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.145126][ T359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.175054][ T388] __nla_validate_parse: 10 callbacks suppressed [ 698.175070][ T388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7133'. [ 698.220692][ T386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7132'. [ 698.260019][ T359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.320301][ T398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7136'. [ 698.423787][ T404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7139'. [ 698.435742][ T359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.730574][ T6926] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.788706][ T6926] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.838734][ T6926] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.923493][ T423] lo speed is unknown, defaulting to 1000 [ 698.923854][ T190] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.938942][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7146'. [ 698.975087][ T423] wlan1 speed is unknown, defaulting to 1000 [ 699.428900][ T441] netlink: 'syz.0.7150': attribute type 13 has an invalid length. [ 699.643479][ T452] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 699.744947][ T430] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 700.272407][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7162'. [ 700.407753][ T494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7164'. [ 700.409663][ T495] syzkaller0: entered promiscuous mode [ 700.424173][ T495] syzkaller0: entered allmulticast mode [ 700.565863][ T502] sctp: [Deprecated]: syz.1.7166 (pid 502) Use of int in max_burst socket option deprecated. [ 700.565863][ T502] Use struct sctp_assoc_value instead [ 700.686278][ T505] ip6tnl3: entered allmulticast mode [ 700.825887][ T518] syzkaller1: entered promiscuous mode [ 700.832375][ T518] syzkaller1: entered allmulticast mode [ 701.112563][ T540] Unsupported ieee802154 address type: 0 [ 701.137269][ T526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7172'. [ 701.434655][ T563] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7180'. [ 701.968020][ T599] ipvlan2: entered promiscuous mode [ 701.974551][ T599] ipvlan2: entered allmulticast mode [ 701.979913][ T599] ..0ªî{X¹¦: entered allmulticast mode [ 701.987835][ T599] team0: Device ipvlan2 failed to register rx_handler [ 702.683662][ T647] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7198'. [ 702.761592][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 702.769645][ C0] lec:lec_tx_timeout: lec0 [ 703.112887][ T661] xt_bpf: check failed: parse error [ 703.173017][ T665] netlink: 'syz.4.7206': attribute type 11 has an invalid length. [ 703.323332][ T673] ip6tnl4: entered promiscuous mode [ 703.328834][ T673] ip6tnl4: entered allmulticast mode [ 703.343685][ T670] lo speed is unknown, defaulting to 1000 [ 703.352361][ T670] wlan1 speed is unknown, defaulting to 1000 [ 703.696039][ T684] netlink: 'syz.1.7214': attribute type 4 has an invalid length. [ 703.771617][ T684] __nla_validate_parse: 1 callbacks suppressed [ 703.771635][ T684] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7214'. [ 703.959104][ T697] ipvlan2: entered promiscuous mode [ 703.965242][ T697] ipvlan2: entered allmulticast mode [ 703.990634][ T697] team0: Device ipvlan2 failed to register rx_handler [ 704.062550][ T695] lo speed is unknown, defaulting to 1000 [ 704.122809][ T695] wlan1 speed is unknown, defaulting to 1000 [ 704.249888][ T698] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7217'. [ 704.294333][ T713] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 704.750196][ T744] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 704.768803][ T750] FAULT_INJECTION: forcing a failure. [ 704.768803][ T750] name failslab, interval 1, probability 0, space 0, times 0 [ 704.809172][ T750] CPU: 1 UID: 0 PID: 750 Comm: syz.0.7228 Not tainted syzkaller #0 PREEMPT(full) [ 704.809197][ T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.809209][ T750] Call Trace: [ 704.809217][ T750] [ 704.809225][ T750] dump_stack_lvl+0xe8/0x150 [ 704.809256][ T750] should_fail_ex+0x412/0x560 [ 704.809291][ T750] should_failslab+0xa8/0x100 [ 704.809316][ T750] __kmalloc_cache_noprof+0x88/0x660 [ 704.809339][ T750] ? sctp_add_bind_addr+0x8c/0x370 [ 704.809365][ T750] sctp_add_bind_addr+0x8c/0x370 [ 704.809390][ T750] sctp_copy_local_addr_list+0x314/0x4f0 [ 704.809415][ T750] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 704.809436][ T750] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 704.809459][ T750] ? sctp_v6_is_any+0x64/0x80 [ 704.809482][ T750] ? sctp_copy_one_addr+0x93/0x360 [ 704.809506][ T750] sctp_bind_addr_copy+0xb3/0x3c0 [ 704.809527][ T750] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 704.809558][ T750] sctp_connect_new_asoc+0x2ff/0x6b0 [ 704.809585][ T750] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 704.809616][ T750] ? sctp_get_af_specific+0x29/0x80 [ 704.809634][ T750] ? sctp_inet6_send_verify+0x80/0x300 [ 704.809653][ T750] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 704.809681][ T750] __sctp_connect+0x5cb/0xdc0 [ 704.809718][ T750] ? __pfx___sctp_connect+0x10/0x10 [ 704.809740][ T750] ? sctp_setsockopt+0x21c/0x12c0 [ 704.809761][ T750] ? security_sctp_bind_connect+0x7e/0x2c0 [ 704.809785][ T750] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 704.809808][ T750] sctp_setsockopt+0x708/0x12c0 [ 704.809831][ T750] ? sock_common_setsockopt+0x36/0xc0 [ 704.809855][ T750] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 704.809880][ T750] do_sock_setsockopt+0x17c/0x1b0 [ 704.809912][ T750] __x64_sys_setsockopt+0x13d/0x1b0 [ 704.809944][ T750] do_syscall_64+0x14d/0xf80 [ 704.809969][ T750] ? trace_irq_disable+0x3b/0x150 [ 704.809994][ T750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.810012][ T750] ? clear_bhb_loop+0x40/0x90 [ 704.810035][ T750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.810053][ T750] RIP: 0033:0x7f6a7bf9c799 [ 704.810072][ T750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.810088][ T750] RSP: 002b:00007f6a7ceb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.810107][ T750] RAX: ffffffffffffffda RBX: 00007f6a7c215fa0 RCX: 00007f6a7bf9c799 [ 704.810121][ T750] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 704.810132][ T750] RBP: 00007f6a7ceb2090 R08: 000000000000001c R09: 0000000000000000 [ 704.810143][ T750] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 704.810158][ T750] R13: 00007f6a7c216038 R14: 00007f6a7c215fa0 R15: 00007ffe3a3eb508 [ 704.810190][ T750] [ 704.812117][ T744] bond4 (unregistering): Released all slaves [ 705.022011][ T759] nbd: socks must be embedded in a SOCK_ITEM attr [ 705.126106][ T748] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7229'. [ 705.194608][ T760] bond1: option lacp_active: invalid value (8) [ 705.223664][ T760] bond1 (unregistering): Released all slaves [ 705.464799][ T776] rdma_rxe: rxe_newlink: failed to add lo [ 705.585491][ T784] IPVS: stopping backup sync thread 29297 ... [ 705.932708][ T811] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.7242'. [ 705.932910][ T815] sctp: [Deprecated]: syz.1.7241 (pid 815) Use of int in maxseg socket option. [ 705.932910][ T815] Use struct sctp_assoc_value instead [ 706.025483][ T819] bond0: entered promiscuous mode [ 706.052621][ T819] bond_slave_0: entered promiscuous mode [ 706.058498][ T819] bond_slave_1: entered promiscuous mode [ 706.095353][ T822] FAULT_INJECTION: forcing a failure. [ 706.095353][ T822] name failslab, interval 1, probability 0, space 0, times 0 [ 706.102752][ T819] syz_tun: entered promiscuous mode [ 706.114883][ T822] CPU: 0 UID: 0 PID: 822 Comm: syz.4.7244 Not tainted syzkaller #0 PREEMPT(full) [ 706.114907][ T822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.114919][ T822] Call Trace: [ 706.114927][ T822] [ 706.114936][ T822] dump_stack_lvl+0xe8/0x150 [ 706.114967][ T822] should_fail_ex+0x412/0x560 [ 706.114996][ T822] should_failslab+0xa8/0x100 [ 706.115021][ T822] __kmalloc_cache_noprof+0x88/0x660 [ 706.115043][ T822] ? sctp_add_bind_addr+0x8c/0x370 [ 706.115070][ T822] sctp_add_bind_addr+0x8c/0x370 [ 706.115095][ T822] sctp_copy_local_addr_list+0x314/0x4f0 [ 706.115120][ T822] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 706.115142][ T822] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 706.115165][ T822] ? sctp_v6_is_any+0x64/0x80 [ 706.115188][ T822] ? sctp_copy_one_addr+0x93/0x360 [ 706.115219][ T822] sctp_bind_addr_copy+0xb3/0x3c0 [ 706.115241][ T822] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 706.115272][ T822] sctp_connect_new_asoc+0x2ff/0x6b0 [ 706.115300][ T822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 706.115331][ T822] ? sctp_get_af_specific+0x29/0x80 [ 706.115351][ T822] ? sctp_inet6_send_verify+0x80/0x300 [ 706.115370][ T822] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 706.115398][ T822] __sctp_connect+0x5cb/0xdc0 [ 706.115434][ T822] ? __pfx___sctp_connect+0x10/0x10 [ 706.115455][ T822] ? sctp_setsockopt+0x21c/0x12c0 [ 706.115477][ T822] ? security_sctp_bind_connect+0x7e/0x2c0 [ 706.115501][ T822] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 706.115524][ T822] sctp_setsockopt+0x708/0x12c0 [ 706.115546][ T822] ? sock_common_setsockopt+0x36/0xc0 [ 706.115570][ T822] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 706.115596][ T822] do_sock_setsockopt+0x17c/0x1b0 [ 706.115629][ T822] __x64_sys_setsockopt+0x13d/0x1b0 [ 706.115661][ T822] do_syscall_64+0x14d/0xf80 [ 706.115686][ T822] ? trace_irq_disable+0x3b/0x150 [ 706.115710][ T822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.115728][ T822] ? clear_bhb_loop+0x40/0x90 [ 706.115750][ T822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.115768][ T822] RIP: 0033:0x7f570659c799 [ 706.115785][ T822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.115801][ T822] RSP: 002b:00007f5707456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 706.115820][ T822] RAX: ffffffffffffffda RBX: 00007f5706815fa0 RCX: 00007f570659c799 [ 706.115833][ T822] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 706.115845][ T822] RBP: 00007f5707456090 R08: 000000000000001c R09: 0000000000000000 [ 706.115857][ T822] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 706.115868][ T822] R13: 00007f5706816038 R14: 00007f5706815fa0 R15: 00007ffd62a72d98 [ 706.115902][ T822] [ 706.562719][ T822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.641337][T24836] lo speed is unknown, defaulting to 1000 [ 706.654084][T24836] syz0: Port: 1 Link DOWN [ 706.686105][ T839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7248'. [ 706.693499][ T834] syzkaller0: entered promiscuous mode [ 706.697659][ T839] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7248'. [ 706.721634][ T834] syzkaller0: entered allmulticast mode [ 707.083768][ T856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7253'. [ 707.423429][ T881] FAULT_INJECTION: forcing a failure. [ 707.423429][ T881] name failslab, interval 1, probability 0, space 0, times 0 [ 707.436292][ T881] CPU: 0 UID: 0 PID: 881 Comm: syz.2.7261 Not tainted syzkaller #0 PREEMPT(full) [ 707.436311][ T881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 707.436318][ T881] Call Trace: [ 707.436323][ T881] [ 707.436329][ T881] dump_stack_lvl+0xe8/0x150 [ 707.436349][ T881] should_fail_ex+0x412/0x560 [ 707.436366][ T881] should_failslab+0xa8/0x100 [ 707.436381][ T881] __kmalloc_cache_noprof+0x88/0x660 [ 707.436393][ T881] ? sctp_add_bind_addr+0x8c/0x370 [ 707.436409][ T881] sctp_add_bind_addr+0x8c/0x370 [ 707.436422][ T881] sctp_copy_local_addr_list+0x314/0x4f0 [ 707.436436][ T881] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 707.436447][ T881] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 707.436460][ T881] ? sctp_v6_is_any+0x64/0x80 [ 707.436472][ T881] ? sctp_copy_one_addr+0x93/0x360 [ 707.436485][ T881] sctp_bind_addr_copy+0xb3/0x3c0 [ 707.436497][ T881] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 707.436521][ T881] sctp_connect_new_asoc+0x2ff/0x6b0 [ 707.436536][ T881] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 707.436553][ T881] ? sctp_get_af_specific+0x29/0x80 [ 707.436563][ T881] ? sctp_inet6_send_verify+0x80/0x300 [ 707.436573][ T881] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 707.436588][ T881] __sctp_connect+0x5cb/0xdc0 [ 707.436608][ T881] ? __pfx___sctp_connect+0x10/0x10 [ 707.436619][ T881] ? sctp_setsockopt+0x21c/0x12c0 [ 707.436631][ T881] ? security_sctp_bind_connect+0x7e/0x2c0 [ 707.436645][ T881] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 707.436657][ T881] sctp_setsockopt+0x708/0x12c0 [ 707.436669][ T881] ? sock_common_setsockopt+0x36/0xc0 [ 707.436683][ T881] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 707.436701][ T881] do_sock_setsockopt+0x17c/0x1b0 [ 707.436732][ T881] __x64_sys_setsockopt+0x13d/0x1b0 [ 707.436763][ T881] do_syscall_64+0x14d/0xf80 [ 707.436789][ T881] ? trace_irq_disable+0x3b/0x150 [ 707.436806][ T881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.436817][ T881] ? clear_bhb_loop+0x40/0x90 [ 707.436829][ T881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.436839][ T881] RIP: 0033:0x7f8d48d9c799 [ 707.436849][ T881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.436858][ T881] RSP: 002b:00007f8d49bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 707.436870][ T881] RAX: ffffffffffffffda RBX: 00007f8d49015fa0 RCX: 00007f8d48d9c799 [ 707.436877][ T881] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 707.436884][ T881] RBP: 00007f8d49bda090 R08: 000000000000001c R09: 0000000000000000 [ 707.436890][ T881] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 707.436897][ T881] R13: 00007f8d49016038 R14: 00007f8d49015fa0 R15: 00007ffcd38512a8 [ 707.436914][ T881] [ 707.977282][ T881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.994151][ T887] tipc: Enabled bearer , priority 14 [ 708.157817][ T896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7265'. [ 708.907209][ T934] bond1 (unregistering): Released all slaves [ 708.925116][ T944] netlink: 'syz.3.7275': attribute type 1 has an invalid length. [ 708.927711][ T946] FAULT_INJECTION: forcing a failure. [ 708.927711][ T946] name failslab, interval 1, probability 0, space 0, times 0 [ 708.946169][ T946] CPU: 1 UID: 0 PID: 946 Comm: syz.4.7276 Not tainted syzkaller #0 PREEMPT(full) [ 708.946192][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.946203][ T946] Call Trace: [ 708.946211][ T946] [ 708.946219][ T946] dump_stack_lvl+0xe8/0x150 [ 708.946250][ T946] should_fail_ex+0x412/0x560 [ 708.946279][ T946] should_failslab+0xa8/0x100 [ 708.946305][ T946] __kmalloc_cache_noprof+0x88/0x660 [ 708.946326][ T946] ? sctp_add_bind_addr+0x8c/0x370 [ 708.946353][ T946] sctp_add_bind_addr+0x8c/0x370 [ 708.946377][ T946] sctp_copy_local_addr_list+0x314/0x4f0 [ 708.946408][ T946] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 708.946429][ T946] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 708.946452][ T946] ? sctp_v6_is_any+0x64/0x80 [ 708.946474][ T946] ? sctp_copy_one_addr+0x93/0x360 [ 708.946498][ T946] sctp_bind_addr_copy+0xb3/0x3c0 [ 708.946519][ T946] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 708.946550][ T946] sctp_connect_new_asoc+0x2ff/0x6b0 [ 708.946578][ T946] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 708.946608][ T946] ? sctp_get_af_specific+0x29/0x80 [ 708.946627][ T946] ? sctp_inet6_send_verify+0x80/0x300 [ 708.946646][ T946] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 708.946673][ T946] __sctp_connect+0x5cb/0xdc0 [ 708.946708][ T946] ? __pfx___sctp_connect+0x10/0x10 [ 708.946729][ T946] ? sctp_setsockopt+0x21c/0x12c0 [ 708.946751][ T946] ? security_sctp_bind_connect+0x7e/0x2c0 [ 708.946774][ T946] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 708.946797][ T946] sctp_setsockopt+0x708/0x12c0 [ 708.946819][ T946] ? sock_common_setsockopt+0x36/0xc0 [ 708.946842][ T946] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 708.946867][ T946] do_sock_setsockopt+0x17c/0x1b0 [ 708.946899][ T946] __x64_sys_setsockopt+0x13d/0x1b0 [ 708.946931][ T946] do_syscall_64+0x14d/0xf80 [ 708.946956][ T946] ? trace_irq_disable+0x3b/0x150 [ 708.946981][ T946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.946999][ T946] ? clear_bhb_loop+0x40/0x90 [ 708.947022][ T946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.947040][ T946] RIP: 0033:0x7f570659c799 [ 708.947057][ T946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.947073][ T946] RSP: 002b:00007f5707456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 708.947092][ T946] RAX: ffffffffffffffda RBX: 00007f5706815fa0 RCX: 00007f570659c799 [ 708.947106][ T946] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 708.947117][ T946] RBP: 00007f5707456090 R08: 000000000000001c R09: 0000000000000000 [ 708.947129][ T946] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 708.947140][ T946] R13: 00007f5706816038 R14: 00007f5706815fa0 R15: 00007ffd62a72d98 [ 708.947171][ T946] [ 709.273569][ T949] xt_addrtype: ipv6 does not support BROADCAST matching [ 709.322121][ T951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7275'. [ 709.401441][ T946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.824926][ T970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7281'. [ 709.852111][ T965] xt_CT: No such helper "netbios-ns" [ 709.975454][ T981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 710.311494][ T7529] IPVS: starting estimator thread 0... [ 710.411663][ T992] IPVS: using max 26 ests per chain, 62400 per kthread [ 710.728246][ T1001] syzkaller0: entered promiscuous mode [ 710.735329][ T1001] syzkaller0: entered allmulticast mode [ 710.953237][ T1015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7294'. [ 710.978323][ T1015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7294'. [ 711.002211][ T1024] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7297'. [ 711.021844][ T1015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7294'. [ 711.042359][ T1015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7294'. [ 711.266354][ T1042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7299'. [ 711.298533][ T1046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7300'. [ 711.498426][ T1058] lo speed is unknown, defaulting to 1000 [ 711.514602][ T1058] wlan1 speed is unknown, defaulting to 1000 [ 711.551065][ T1065] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 711.631109][ T882] Set syz1 is full, maxelem 65536 reached [ 711.688797][ T1068] xt_limit: Overflow, try lower: 324382443/0 [ 711.854290][ T1082] syz.2.7308 (1082) used obsolete PPPIOCDETACH ioctl [ 712.286058][ T1111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7317'. [ 712.627406][ T1127] netlink: 'syz.3.7322': attribute type 1 has an invalid length. [ 712.683338][ T1134] mac80211_hwsim hwsim78 ªªªªª{: renamed from wlan0 [ 712.737972][ T1139] netlink: 'syz.3.7325': attribute type 4 has an invalid length. [ 712.754165][ T1139] netlink: 'syz.3.7325': attribute type 4 has an invalid length. [ 712.777628][ T1141] netlink: 'syz.2.7326': attribute type 1 has an invalid length. [ 712.887093][ T1149] batadv1: entered promiscuous mode [ 712.892388][ T1149] batadv1: entered allmulticast mode [ 713.311802][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 713.349083][ T1167] lo speed is unknown, defaulting to 1000 [ 713.410206][ T1167] wlan1 speed is unknown, defaulting to 1000 [ 715.492762][ T1227] tunl0: Caught tx_queue_len zero misconfig [ 715.635531][ T1247] netlink: 'syz.1.7347': attribute type 4 has an invalid length. [ 715.675448][ T1247] netlink: 'syz.1.7347': attribute type 4 has an invalid length. [ 715.802279][ T1256] __nla_validate_parse: 8 callbacks suppressed [ 715.802300][ T1256] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7350'. [ 715.917268][ T1264] sctp: [Deprecated]: syz.3.7352 (pid 1264) Use of int in maxseg socket option. [ 715.917268][ T1264] Use struct sctp_assoc_value instead [ 715.971827][ T1267] netlink: 'syz.3.7352': attribute type 10 has an invalid length. [ 716.004217][ T1267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.035524][ T1267] batadv0: entered promiscuous mode [ 716.041932][ T1267] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 716.194609][ T1289] tipc: Enabled bearer , priority 10 [ 716.214524][ T1295] sctp: [Deprecated]: syz.4.7357 (pid 1295) Use of int in max_burst socket option. [ 716.214524][ T1295] Use struct sctp_assoc_value instead [ 716.244557][ T1294] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 716.392765][ T1310] netlink: 'syz.3.7364': attribute type 21 has an invalid length. [ 716.411162][ T1310] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7364'. [ 716.427907][ T1312] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7363'. [ 716.431670][ T1310] netlink: 'syz.3.7364': attribute type 5 has an invalid length. [ 716.452288][ T1310] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7364'. [ 716.486505][ T1312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7363'. [ 716.750994][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7369'. [ 716.866925][ T1348] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 717.017691][ T1356] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 717.200336][ T1367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7379'. [ 717.301463][ T1372] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 717.323365][ T1372] bond4 (unregistering): Released all slaves [ 717.351128][ T1376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7382'. [ 717.367861][ T5878] tipc: Node number set to 4227858433 [ 717.374908][ T1367] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7379'. [ 717.533769][ T1384] pim6reg1: entered promiscuous mode [ 717.539308][ T1384] pim6reg1: entered allmulticast mode [ 717.650338][ T1391] syz_tun: entered promiscuous mode [ 717.660747][ T1391] syz_tun: entered allmulticast mode [ 717.799364][ T1397] bond5: option xmit_hash_policy: invalid value (10) [ 717.807631][ T1397] bond5 (unregistering): Released all slaves [ 717.870672][ T1392] syzkaller0: entered promiscuous mode [ 717.891676][ T1392] syzkaller0: entered allmulticast mode [ 718.158503][ T1415] netlink: 'syz.3.7393': attribute type 1 has an invalid length. [ 718.337015][ T1419] netlink: 'syz.3.7394': attribute type 1 has an invalid length. [ 718.344909][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7394'. [ 719.390953][ T1392] macsec1: entered promiscuous mode [ 719.497980][ T1417] lo speed is unknown, defaulting to 1000 [ 719.516084][ T1417] wlan1 speed is unknown, defaulting to 1000 [ 719.836716][ T1440] C: renamed from team_slave_0 [ 719.859137][ T1440] netlink: 'syz.1.7404': attribute type 4 has an invalid length. [ 719.872462][ T1440] netlink: 'syz.1.7404': attribute type 1 has an invalid length. [ 719.880216][ T1440] netlink: 'syz.1.7404': attribute type 2 has an invalid length. [ 719.897096][ T1440] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 720.214654][ T1452] IPVS: Scheduler module ip_vs_sip not found [ 720.325328][ T1464] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 720.465932][ T1466] tipc: Enabling of bearer rejected, already enabled [ 720.601028][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.623061][ T1475] bridge_slave_1: left allmulticast mode [ 720.628735][ T1475] bridge_slave_1: left promiscuous mode [ 720.635494][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.648871][ T1475] bridge_slave_1: entered promiscuous mode [ 720.682395][ T1475] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 720.787162][ T1484] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 720.918546][ T1501] syzkaller1: entered promiscuous mode [ 720.929645][ T1501] syzkaller1: entered allmulticast mode [ 721.022912][ T1509] __nla_validate_parse: 6 callbacks suppressed [ 721.022930][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7422'. [ 721.081946][ T1509] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 721.438937][ T1534] lo speed is unknown, defaulting to 1000 [ 721.463914][ T1534] wlan1 speed is unknown, defaulting to 1000 [ 721.575418][ T1548] team_slave_1: Caught tx_queue_len zero misconfig [ 721.598826][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7432'. [ 721.636002][ T1558] validate_nla: 1 callbacks suppressed [ 721.636021][ T1558] netlink: 'syz.4.7435': attribute type 1 has an invalid length. [ 721.647110][ T1551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7434'. [ 721.746226][ T1561] bond5: (slave bridge8): making interface the new active one [ 721.755354][ T1561] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 721.865533][ T1568] FAULT_INJECTION: forcing a failure. [ 721.865533][ T1568] name failslab, interval 1, probability 0, space 0, times 0 [ 721.921958][ T1568] CPU: 1 UID: 0 PID: 1568 Comm: syz.0.7437 Not tainted syzkaller #0 PREEMPT(full) [ 721.921984][ T1568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.921995][ T1568] Call Trace: [ 721.922002][ T1568] [ 721.922011][ T1568] dump_stack_lvl+0xe8/0x150 [ 721.922044][ T1568] should_fail_ex+0x412/0x560 [ 721.922083][ T1568] should_failslab+0xa8/0x100 [ 721.922108][ T1568] __kmalloc_cache_noprof+0x88/0x660 [ 721.922130][ T1568] ? sctp_add_bind_addr+0x8c/0x370 [ 721.922155][ T1568] sctp_add_bind_addr+0x8c/0x370 [ 721.922179][ T1568] sctp_copy_local_addr_list+0x314/0x4f0 [ 721.922202][ T1568] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 721.922224][ T1568] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 721.922244][ T1568] ? sctp_v6_is_any+0x64/0x80 [ 721.922266][ T1568] ? sctp_copy_one_addr+0x93/0x360 [ 721.922289][ T1568] sctp_bind_addr_copy+0xb3/0x3c0 [ 721.922310][ T1568] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 721.922339][ T1568] sctp_connect_new_asoc+0x2ff/0x6b0 [ 721.922365][ T1568] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 721.922395][ T1568] ? sctp_get_af_specific+0x29/0x80 [ 721.922413][ T1568] ? sctp_inet6_send_verify+0x80/0x300 [ 721.922431][ T1568] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 721.922459][ T1568] __sctp_connect+0x5cb/0xdc0 [ 721.922494][ T1568] ? __pfx___sctp_connect+0x10/0x10 [ 721.922515][ T1568] ? sctp_setsockopt+0x21c/0x12c0 [ 721.922537][ T1568] ? security_sctp_bind_connect+0x7e/0x2c0 [ 721.922560][ T1568] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 721.922581][ T1568] sctp_setsockopt+0x708/0x12c0 [ 721.922602][ T1568] ? sock_common_setsockopt+0x36/0xc0 [ 721.922627][ T1568] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 721.922651][ T1568] do_sock_setsockopt+0x17c/0x1b0 [ 721.922684][ T1568] __x64_sys_setsockopt+0x13d/0x1b0 [ 721.922715][ T1568] do_syscall_64+0x14d/0xf80 [ 721.922738][ T1568] ? trace_irq_disable+0x3b/0x150 [ 721.922761][ T1568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.922780][ T1568] ? clear_bhb_loop+0x40/0x90 [ 721.922804][ T1568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.922822][ T1568] RIP: 0033:0x7f6a7bf9c799 [ 721.922840][ T1568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.922856][ T1568] RSP: 002b:00007f6a7ceb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.922877][ T1568] RAX: ffffffffffffffda RBX: 00007f6a7c215fa0 RCX: 00007f6a7bf9c799 [ 721.922890][ T1568] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 721.922902][ T1568] RBP: 00007f6a7ceb2090 R08: 000000000000001c R09: 0000000000000000 [ 721.922914][ T1568] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 721.922925][ T1568] R13: 00007f6a7c216038 R14: 00007f6a7c215fa0 R15: 00007ffe3a3eb508 [ 721.922954][ T1568] [ 721.933459][ T1572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7438'. [ 722.097750][ T1534] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 722.249729][ T1568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.303606][ T1579] netlink: 'syz.2.7440': attribute type 2 has an invalid length. [ 722.340315][ T1579] hmac(sha224): entered promiscuous mode [ 722.475566][ T1588] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7443'. [ 722.483901][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7442'. [ 722.577437][ T1588] ip6_vti0: Caught tx_queue_len zero misconfig [ 722.695458][ T1599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7447'. [ 722.716072][ T1599] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 722.732475][ T1599] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 722.802688][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7449'. [ 722.918649][ T1620] FAULT_INJECTION: forcing a failure. [ 722.918649][ T1620] name failslab, interval 1, probability 0, space 0, times 0 [ 722.993331][ T1620] CPU: 1 UID: 0 PID: 1620 Comm: syz.3.7452 Not tainted syzkaller #0 PREEMPT(full) [ 722.993356][ T1620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.993368][ T1620] Call Trace: [ 722.993376][ T1620] [ 722.993385][ T1620] dump_stack_lvl+0xe8/0x150 [ 722.993416][ T1620] should_fail_ex+0x412/0x560 [ 722.993445][ T1620] should_failslab+0xa8/0x100 [ 722.993469][ T1620] __kmalloc_cache_noprof+0x88/0x660 [ 722.993491][ T1620] ? sctp_add_bind_addr+0x8c/0x370 [ 722.993517][ T1620] sctp_add_bind_addr+0x8c/0x370 [ 722.993543][ T1620] sctp_copy_local_addr_list+0x314/0x4f0 [ 722.993567][ T1620] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 722.993588][ T1620] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 722.993611][ T1620] ? sctp_v6_is_any+0x64/0x80 [ 722.993634][ T1620] ? sctp_copy_one_addr+0x93/0x360 [ 722.993658][ T1620] sctp_bind_addr_copy+0xb3/0x3c0 [ 722.993680][ T1620] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 722.993712][ T1620] sctp_connect_new_asoc+0x2ff/0x6b0 [ 722.993740][ T1620] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 722.993770][ T1620] ? sctp_get_af_specific+0x29/0x80 [ 722.993790][ T1620] ? sctp_inet6_send_verify+0x80/0x300 [ 722.993809][ T1620] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 722.993836][ T1620] __sctp_connect+0x5cb/0xdc0 [ 722.993872][ T1620] ? __pfx___sctp_connect+0x10/0x10 [ 722.993894][ T1620] ? sctp_setsockopt+0x21c/0x12c0 [ 722.993916][ T1620] ? security_sctp_bind_connect+0x7e/0x2c0 [ 722.993940][ T1620] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 722.993968][ T1620] sctp_setsockopt+0x708/0x12c0 [ 722.993991][ T1620] ? sock_common_setsockopt+0x36/0xc0 [ 722.994016][ T1620] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 722.994042][ T1620] do_sock_setsockopt+0x17c/0x1b0 [ 722.994075][ T1620] __x64_sys_setsockopt+0x13d/0x1b0 [ 722.994107][ T1620] do_syscall_64+0x14d/0xf80 [ 722.994132][ T1620] ? trace_irq_disable+0x3b/0x150 [ 722.994156][ T1620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.994176][ T1620] ? clear_bhb_loop+0x40/0x90 [ 722.994199][ T1620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.994217][ T1620] RIP: 0033:0x7f000ab9c799 [ 722.994236][ T1620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.994252][ T1620] RSP: 002b:00007f000bb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 722.994272][ T1620] RAX: ffffffffffffffda RBX: 00007f000ae15fa0 RCX: 00007f000ab9c799 [ 722.994286][ T1620] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 722.994298][ T1620] RBP: 00007f000bb1f090 R08: 000000000000001c R09: 0000000000000000 [ 722.994310][ T1620] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 722.994322][ T1620] R13: 00007f000ae16038 R14: 00007f000ae15fa0 R15: 00007ffdc5f09b58 [ 722.994355][ T1620] [ 723.003032][ T1631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7455'. [ 723.225766][ T1636] netlink: zone id is out of range [ 723.267740][ T1620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.312820][ T1636] netlink: zone id is out of range [ 723.348625][ T1637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7457'. [ 723.360878][ T1636] netlink: zone id is out of range [ 723.367952][ T1636] netlink: zone id is out of range [ 723.373476][ T1636] netlink: zone id is out of range [ 723.498984][ T1650] lo: entered allmulticast mode [ 723.648975][ T1659] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 723.684567][ T1662] netlink: 'syz.2.7465': attribute type 2 has an invalid length. [ 723.728664][ T1663] netlink: 'syz.1.7464': attribute type 1 has an invalid length. [ 724.196499][ T1688] xt_NFQUEUE: number of total queues is 0 [ 724.947433][ T1741] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 725.526599][ T1771] netlink: 'syz.3.7495': attribute type 21 has an invalid length. [ 725.778112][ T1790] xt_hashlimit: size too large, truncated to 1048576 [ 726.098903][ T1801] __nla_validate_parse: 8 callbacks suppressed [ 726.098922][ T1801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7503'. [ 726.238888][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7505'. [ 726.560383][ T1818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7510'. [ 726.817258][ T1838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7517'. [ 726.855796][ T1837] tipc: Started in network mode [ 726.860708][ T1837] tipc: Node identity 5e958eda9203, cluster identity 4711 [ 726.868735][ T1837] tipc: Enabled bearer , priority 0 [ 726.876732][ T1837] syzkaller0: entered promiscuous mode [ 726.882665][ T1837] syzkaller0: entered allmulticast mode [ 726.927800][ T1837] tipc: Resetting bearer [ 726.950518][ T1836] tipc: Resetting bearer [ 726.977877][ T1836] tipc: Disabling bearer [ 727.014205][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7519'. [ 727.776559][ T1921] netlink: 'syz.0.7535': attribute type 4 has an invalid length. [ 727.784601][ T1921] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7535'. [ 727.790980][ T1923] syzkaller1: left promiscuous mode [ 727.799818][ T1923] syzkaller1: left allmulticast mode [ 727.821313][ T1921] bridge1: entered promiscuous mode [ 727.826651][ T1921] bridge1: entered allmulticast mode [ 728.159995][ T1942] syzkaller0: entered promiscuous mode [ 728.165677][ T1942] syzkaller0: entered allmulticast mode [ 728.191170][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7543'. [ 728.200165][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7543'. [ 728.321927][ T1935] nbd3: detected capacity change from 0 to 63 [ 728.330989][ T5834] block nbd3: Receive control failed (result -104) [ 728.331932][ T5826] block nbd3: Receive control failed (result -32) [ 728.339054][ T5838] block nbd3: Receive control failed (result -32) [ 728.348625][ T1944] block nbd3: Receive control failed (result -32) [ 728.362878][T30191] block nbd3: Send control failed (result -32) [ 728.369064][T30191] block nbd3: Request send failed, requeueing [ 728.375861][ T2643] block nbd3: Dead connection, failed to find a fallback [ 728.382974][ T2643] block nbd3: shutting down sockets [ 728.388179][ T2643] blk_print_req_error: 138 callbacks suppressed [ 728.388194][ T2643] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 728.406316][ T2643] buffer_io_error: 138 callbacks suppressed [ 728.406467][ T2643] Buffer I/O error on dev nbd3, logical block 2, async page read [ 728.421072][T30191] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 728.430603][T30191] Buffer I/O error on dev nbd3, logical block 3, async page read [ 728.483763][ T1947] gretap1: entered promiscuous mode [ 728.613265][ T1958] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7548'. [ 728.622649][ T1958] tc_dump_action: action bad kind [ 728.628250][ T1960] sit0: entered allmulticast mode [ 728.635381][ T1960] sit0: left allmulticast mode [ 728.807495][ T1980] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7553'. [ 728.823121][ T1980] netlink: 'syz.1.7553': attribute type 2 has an invalid length. [ 728.866230][T26042] IPVS: starting estimator thread 0... [ 728.966737][ T1987] IPVS: using max 32 ests per chain, 76800 per kthread [ 729.228255][ T2015] netlink: 'syz.3.7563': attribute type 1 has an invalid length. [ 729.280727][ T2015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.289305][ T2008] netlink: 'syz.4.7559': attribute type 1 has an invalid length. [ 729.298450][ T2014] bond5: entered allmulticast mode [ 729.653735][ T2041] netlink: 'syz.4.7570': attribute type 1 has an invalid length. [ 729.815867][ T2049] netlink: 'syz.3.7572': attribute type 15 has an invalid length. [ 730.141278][ T2064] net_ratelimit: 51 callbacks suppressed [ 730.141299][ T2064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.234187][ T2071] netlink: 'syz.3.7578': attribute type 1 has an invalid length. [ 730.362702][ T2077] veth5: entered promiscuous mode [ 730.723094][ T2093] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 730.860325][ T2101] FAULT_INJECTION: forcing a failure. [ 730.860325][ T2101] name failslab, interval 1, probability 0, space 0, times 0 [ 730.874509][ T2101] CPU: 0 UID: 0 PID: 2101 Comm: syz.1.7587 Not tainted syzkaller #0 PREEMPT(full) [ 730.874533][ T2101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.874545][ T2101] Call Trace: [ 730.874552][ T2101] [ 730.874562][ T2101] dump_stack_lvl+0xe8/0x150 [ 730.874594][ T2101] should_fail_ex+0x412/0x560 [ 730.874624][ T2101] should_failslab+0xa8/0x100 [ 730.874650][ T2101] __kmalloc_cache_noprof+0x88/0x660 [ 730.874673][ T2101] ? sctp_add_bind_addr+0x8c/0x370 [ 730.874702][ T2101] sctp_add_bind_addr+0x8c/0x370 [ 730.874726][ T2101] sctp_copy_local_addr_list+0x314/0x4f0 [ 730.874751][ T2101] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 730.874772][ T2101] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 730.874796][ T2101] ? sctp_v6_is_any+0x64/0x80 [ 730.874819][ T2101] ? sctp_copy_one_addr+0x93/0x360 [ 730.874844][ T2101] sctp_bind_addr_copy+0xb3/0x3c0 [ 730.874866][ T2101] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 730.874898][ T2101] sctp_connect_new_asoc+0x2ff/0x6b0 [ 730.874927][ T2101] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 730.874957][ T2101] ? sctp_get_af_specific+0x29/0x80 [ 730.874978][ T2101] ? sctp_inet6_send_verify+0x80/0x300 [ 730.874996][ T2101] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 730.875021][ T2101] __sctp_connect+0x5cb/0xdc0 [ 730.875057][ T2101] ? __pfx___sctp_connect+0x10/0x10 [ 730.875079][ T2101] ? sctp_setsockopt+0x21c/0x12c0 [ 730.875101][ T2101] ? security_sctp_bind_connect+0x7e/0x2c0 [ 730.875125][ T2101] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 730.875148][ T2101] sctp_setsockopt+0x708/0x12c0 [ 730.875179][ T2101] ? sock_common_setsockopt+0x36/0xc0 [ 730.875201][ T2101] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 730.875227][ T2101] do_sock_setsockopt+0x17c/0x1b0 [ 730.875257][ T2101] __x64_sys_setsockopt+0x13d/0x1b0 [ 730.875290][ T2101] do_syscall_64+0x14d/0xf80 [ 730.875314][ T2101] ? trace_irq_disable+0x3b/0x150 [ 730.875338][ T2101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.875357][ T2101] ? clear_bhb_loop+0x40/0x90 [ 730.875381][ T2101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.875399][ T2101] RIP: 0033:0x7fd4bfb9c799 [ 730.875416][ T2101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.875432][ T2101] RSP: 002b:00007fd4c0a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.875454][ T2101] RAX: ffffffffffffffda RBX: 00007fd4bfe15fa0 RCX: 00007fd4bfb9c799 [ 730.875468][ T2101] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 730.875479][ T2101] RBP: 00007fd4c0a08090 R08: 000000000000001c R09: 0000000000000000 [ 730.875492][ T2101] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 730.875504][ T2101] R13: 00007fd4bfe16038 R14: 00007fd4bfe15fa0 R15: 00007ffeb0e7b188 [ 730.875534][ T2101] [ 731.244600][ T2106] lo: left allmulticast mode [ 731.249384][ T2106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.307606][ T2109] __nla_validate_parse: 10 callbacks suppressed [ 731.307623][ T2109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7590'. [ 731.692120][ T2141] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7599'. [ 731.701100][ T2141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7599'. [ 731.752119][ T2141] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 731.824581][ T2151] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 731.864343][ T2151] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 731.887517][ T2155] FAULT_INJECTION: forcing a failure. [ 731.887517][ T2155] name failslab, interval 1, probability 0, space 0, times 0 [ 731.901624][ T2155] CPU: 0 UID: 0 PID: 2155 Comm: syz.4.7605 Not tainted syzkaller #0 PREEMPT(full) [ 731.901648][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.901660][ T2155] Call Trace: [ 731.901667][ T2155] [ 731.901675][ T2155] dump_stack_lvl+0xe8/0x150 [ 731.901702][ T2155] should_fail_ex+0x412/0x560 [ 731.901729][ T2155] should_failslab+0xa8/0x100 [ 731.901752][ T2155] __kmalloc_cache_noprof+0x88/0x660 [ 731.901773][ T2155] ? sctp_add_bind_addr+0x8c/0x370 [ 731.901795][ T2155] sctp_add_bind_addr+0x8c/0x370 [ 731.901819][ T2155] sctp_copy_local_addr_list+0x314/0x4f0 [ 731.901841][ T2155] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 731.901861][ T2155] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 731.901883][ T2155] ? sctp_v6_is_any+0x64/0x80 [ 731.901904][ T2155] ? sctp_copy_one_addr+0x93/0x360 [ 731.901927][ T2155] sctp_bind_addr_copy+0xb3/0x3c0 [ 731.901947][ T2155] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 731.901975][ T2155] sctp_connect_new_asoc+0x2ff/0x6b0 [ 731.902001][ T2155] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 731.902028][ T2155] ? sctp_get_af_specific+0x29/0x80 [ 731.902043][ T2155] ? sctp_inet6_send_verify+0x80/0x300 [ 731.902056][ T2155] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 731.902077][ T2155] __sctp_connect+0x5cb/0xdc0 [ 731.902105][ T2155] ? __pfx___sctp_connect+0x10/0x10 [ 731.902121][ T2155] ? sctp_setsockopt+0x21c/0x12c0 [ 731.902138][ T2155] ? security_sctp_bind_connect+0x7e/0x2c0 [ 731.902157][ T2155] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 731.902175][ T2155] sctp_setsockopt+0x708/0x12c0 [ 731.902192][ T2155] ? sock_common_setsockopt+0x36/0xc0 [ 731.902210][ T2155] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 731.902230][ T2155] do_sock_setsockopt+0x17c/0x1b0 [ 731.902256][ T2155] __x64_sys_setsockopt+0x13d/0x1b0 [ 731.902281][ T2155] do_syscall_64+0x14d/0xf80 [ 731.902303][ T2155] ? trace_irq_disable+0x3b/0x150 [ 731.902324][ T2155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.902339][ T2155] ? clear_bhb_loop+0x40/0x90 [ 731.902355][ T2155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.902368][ T2155] RIP: 0033:0x7f570659c799 [ 731.902383][ T2155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.902397][ T2155] RSP: 002b:00007f5707456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.902416][ T2155] RAX: ffffffffffffffda RBX: 00007f5706815fa0 RCX: 00007f570659c799 [ 731.902429][ T2155] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 731.902440][ T2155] RBP: 00007f5707456090 R08: 000000000000001c R09: 0000000000000000 [ 731.902450][ T2155] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 731.902461][ T2155] R13: 00007f5706816038 R14: 00007f5706815fa0 R15: 00007ffd62a72d98 [ 731.902496][ T2155] [ 732.213573][ T2161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.240605][ T2153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7603'. [ 732.286252][ T2164] netlink: 'syz.0.7607': attribute type 1 has an invalid length. [ 732.383949][ T2164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.396285][ T2162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7603'. [ 732.422164][ T2170] bond3: (slave geneve2): making interface the new active one [ 732.431910][ T2170] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 732.715882][ T2194] netlink: 'syz.4.7613': attribute type 1 has an invalid length. [ 732.724095][ T2194] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7613'. [ 733.180865][ T2230] FAULT_INJECTION: forcing a failure. [ 733.180865][ T2230] name failslab, interval 1, probability 0, space 0, times 0 [ 733.221633][ T2230] CPU: 0 UID: 0 PID: 2230 Comm: syz.3.7620 Not tainted syzkaller #0 PREEMPT(full) [ 733.221661][ T2230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.221673][ T2230] Call Trace: [ 733.221681][ T2230] [ 733.221689][ T2230] dump_stack_lvl+0xe8/0x150 [ 733.221722][ T2230] should_fail_ex+0x412/0x560 [ 733.221751][ T2230] should_failslab+0xa8/0x100 [ 733.221778][ T2230] __kmalloc_cache_noprof+0x88/0x660 [ 733.221800][ T2230] ? sctp_add_bind_addr+0x8c/0x370 [ 733.221827][ T2230] sctp_add_bind_addr+0x8c/0x370 [ 733.221852][ T2230] sctp_copy_local_addr_list+0x314/0x4f0 [ 733.221877][ T2230] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 733.221898][ T2230] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 733.221928][ T2230] ? sctp_v6_is_any+0x64/0x80 [ 733.221952][ T2230] ? sctp_copy_one_addr+0x93/0x360 [ 733.221975][ T2230] sctp_bind_addr_copy+0xb3/0x3c0 [ 733.221996][ T2230] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 733.222026][ T2230] sctp_connect_new_asoc+0x2ff/0x6b0 [ 733.222053][ T2230] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 733.222081][ T2230] ? sctp_get_af_specific+0x29/0x80 [ 733.222100][ T2230] ? sctp_inet6_send_verify+0x80/0x300 [ 733.222118][ T2230] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 733.222145][ T2230] __sctp_connect+0x5cb/0xdc0 [ 733.222181][ T2230] ? __pfx___sctp_connect+0x10/0x10 [ 733.222203][ T2230] ? sctp_setsockopt+0x21c/0x12c0 [ 733.222224][ T2230] ? security_sctp_bind_connect+0x7e/0x2c0 [ 733.222247][ T2230] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 733.222269][ T2230] sctp_setsockopt+0x708/0x12c0 [ 733.222290][ T2230] ? sock_common_setsockopt+0x36/0xc0 [ 733.222314][ T2230] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 733.222342][ T2230] do_sock_setsockopt+0x17c/0x1b0 [ 733.222374][ T2230] __x64_sys_setsockopt+0x13d/0x1b0 [ 733.222405][ T2230] do_syscall_64+0x14d/0xf80 [ 733.222429][ T2230] ? trace_irq_disable+0x3b/0x150 [ 733.222452][ T2230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.222471][ T2230] ? clear_bhb_loop+0x40/0x90 [ 733.222493][ T2230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.222511][ T2230] RIP: 0033:0x7f000ab9c799 [ 733.222529][ T2230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.222545][ T2230] RSP: 002b:00007f000bb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 733.222564][ T2230] RAX: ffffffffffffffda RBX: 00007f000ae15fa0 RCX: 00007f000ab9c799 [ 733.222577][ T2230] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 733.222588][ T2230] RBP: 00007f000bb1f090 R08: 000000000000001c R09: 0000000000000000 [ 733.222598][ T2230] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 733.222608][ T2230] R13: 00007f000ae16038 R14: 00007f000ae15fa0 R15: 00007ffdc5f09b58 [ 733.222638][ T2230] [ 733.276735][ T2237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.554985][ T2240] lo: Caught tx_queue_len zero misconfig [ 733.786977][ T2257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7629'. [ 733.824800][ T2260] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7631'. [ 733.933260][ T2264] ipvlan3: entered promiscuous mode [ 734.043828][ T2266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7633'. [ 734.082797][ T2266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7633'. [ 734.092344][ T2266] tipc: MTU too low for tipc bearer [ 734.229560][ T2279] netlink: 'syz.1.7638': attribute type 12 has an invalid length. [ 734.516978][ T2303] openvswitch: netlink: Message has 592 unknown bytes. [ 734.547915][ T2303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.407641][ T2367] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.438900][ T2364] syzkaller0: entered promiscuous mode [ 735.452701][ T2364] syzkaller0: entered allmulticast mode [ 735.528813][ T2376] netlink: 'syz.3.7670': attribute type 20 has an invalid length. [ 735.674589][ T2383] mac80211_hwsim hwsim76 syzkaller0: Caught tx_queue_len zero misconfig [ 735.716749][ T2383] netlink: 'syz.3.7673': attribute type 1 has an invalid length. [ 735.801020][ T2388] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 736.224472][ T2418] netlink: 'syz.3.7682': attribute type 61 has an invalid length. [ 736.233159][ T2419] netlink: 'syz.3.7682': attribute type 61 has an invalid length. [ 736.236008][ T2415] lo speed is unknown, defaulting to 1000 [ 736.540571][ T2437] __nla_validate_parse: 10 callbacks suppressed [ 736.540591][ T2437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7685'. [ 736.593107][ T2437] team0: Port device team_slave_0 removed [ 736.607294][ T2440] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 736.709939][ T2448] netlink: 'syz.0.7688': attribute type 40 has an invalid length. [ 736.831765][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.986377][ T2469] bridge3: entered allmulticast mode [ 737.076091][ T2473] netlink: 'syz.1.7695': attribute type 1 has an invalid length. [ 737.123853][ T2473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 737.158337][ T2481] veth3: entered promiscuous mode [ 737.226268][ T2481] bond2: (slave veth3): Enslaving as an active interface with an up link [ 737.503444][ T2509] netlink: 'syz.1.7706': attribute type 1 has an invalid length. [ 737.522305][ T2509] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7706'. [ 737.558466][ T2513] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7704'. [ 737.583012][ T2514] "syz.1.7706" (2514) uses obsolete ecb(arc4) skcipher [ 737.643939][ T2526] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7707'. [ 737.738529][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7710'. [ 737.747631][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7710'. [ 737.787783][ T2532] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7711'. [ 737.882707][ T2542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7712'. [ 737.920116][ T2542] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode [ 738.002158][ T2542] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 738.010026][ T2542] tipc: Resetting bearer [ 738.047239][ T2546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7713'. [ 738.705083][ T2575] tipc: Failed to remove unknown binding: 66,0,0/3021432126:806519460/806519462 [ 738.724766][ T2575] tipc: Failed to remove unknown binding: 66,0,0/3021432126:806519460/806519462 [ 738.798219][ T2582] tipc: Started in network mode [ 738.803803][ T2582] tipc: Node identity 080211, cluster identity 4711 [ 738.810752][ T2582] tipc: Enabled bearer , priority 0 [ 738.932444][ T2582] tipc: Resetting bearer [ 738.991242][ T2593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7723'. [ 738.994156][ T2596] veth1: entered promiscuous mode [ 739.018545][ T2596] veth1: entered allmulticast mode [ 739.268051][ T2631] netlink: 'syz.1.7733': attribute type 1 has an invalid length. [ 739.380571][ T2638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.447847][ T2631] bond3: (slave veth5): Enslaving as an active interface with a down link [ 739.513123][ T2633] bond3: (slave veth7): Enslaving as an active interface with a down link [ 739.541865][ T2647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 739.736473][ T2680] netlink: 'syz.0.7745': attribute type 21 has an invalid length. [ 739.745621][ T2680] netlink: 'syz.0.7745': attribute type 6 has an invalid length. [ 739.787647][ T2687] netlink: 'syz.4.7747': attribute type 5 has an invalid length. [ 739.844275][ T2690] tipc: Enabling of bearer rejected, failed to enable media [ 739.911671][T26042] tipc: Node number set to 134353152 [ 739.968148][ T2704] ipvlan2: entered promiscuous mode [ 739.973914][ T2704] ipvlan2: entered allmulticast mode [ 739.979363][ T2704] gretap0: entered allmulticast mode [ 739.987829][ T2704] team0: Device ipvlan2 failed to register rx_handler [ 740.470041][ T2745] syzkaller0: entered promiscuous mode [ 740.476263][ T2745] syzkaller0: entered allmulticast mode [ 741.229165][ T2792] xt_policy: neither incoming nor outgoing policy selected [ 741.302523][ T2795] netlink: 'syz.0.7774': attribute type 1 has an invalid length. [ 741.413810][ T2796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.425763][ T2796] bond4: (slave bond5): making interface the new active one [ 741.433860][ T2796] bond4: (slave bond5): Enslaving as an active interface with an up link [ 741.484892][ T2795] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 741.506135][ T2809] delete_channel: no stack [ 741.925444][ T2854] __nla_validate_parse: 4 callbacks suppressed [ 741.925461][ T2854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7785'. [ 741.982155][ T2854] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 742.365821][ T2884] lo speed is unknown, defaulting to 1000 [ 742.426710][ T2892] netlink: 'syz.2.7792': attribute type 10 has an invalid length. [ 742.529377][ T2895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7794'. [ 742.543506][ T2895] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 742.799194][ T2917] IPVS: Unknown mcast interface: dvmrp1 [ 742.854146][ T2919] FAULT_INJECTION: forcing a failure. [ 742.854146][ T2919] name failslab, interval 1, probability 0, space 0, times 0 [ 742.887224][ T2919] CPU: 1 UID: 0 PID: 2919 Comm: syz.3.7799 Not tainted syzkaller #0 PREEMPT(full) [ 742.887248][ T2919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.887259][ T2919] Call Trace: [ 742.887267][ T2919] [ 742.887275][ T2919] dump_stack_lvl+0xe8/0x150 [ 742.887304][ T2919] should_fail_ex+0x412/0x560 [ 742.887332][ T2919] should_failslab+0xa8/0x100 [ 742.887356][ T2919] __kmalloc_cache_noprof+0x88/0x660 [ 742.887378][ T2919] ? sctp_add_bind_addr+0x8c/0x370 [ 742.887402][ T2919] sctp_add_bind_addr+0x8c/0x370 [ 742.887424][ T2919] sctp_copy_local_addr_list+0x314/0x4f0 [ 742.887447][ T2919] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 742.887469][ T2919] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 742.887490][ T2919] ? sctp_v6_is_any+0x64/0x80 [ 742.887512][ T2919] ? sctp_copy_one_addr+0x93/0x360 [ 742.887533][ T2919] sctp_bind_addr_copy+0xb3/0x3c0 [ 742.887557][ T2919] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 742.887587][ T2919] sctp_connect_new_asoc+0x2ff/0x6b0 [ 742.887613][ T2919] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 742.887642][ T2919] ? sctp_get_af_specific+0x29/0x80 [ 742.887661][ T2919] ? sctp_inet6_send_verify+0x80/0x300 [ 742.887679][ T2919] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 742.887705][ T2919] __sctp_connect+0x5cb/0xdc0 [ 742.887741][ T2919] ? __pfx___sctp_connect+0x10/0x10 [ 742.887762][ T2919] ? sctp_setsockopt+0x21c/0x12c0 [ 742.887784][ T2919] ? security_sctp_bind_connect+0x7e/0x2c0 [ 742.887808][ T2919] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 742.887832][ T2919] sctp_setsockopt+0x708/0x12c0 [ 742.887854][ T2919] ? sock_common_setsockopt+0x36/0xc0 [ 742.887878][ T2919] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 742.887902][ T2919] do_sock_setsockopt+0x17c/0x1b0 [ 742.887933][ T2919] __x64_sys_setsockopt+0x13d/0x1b0 [ 742.887966][ T2919] do_syscall_64+0x14d/0xf80 [ 742.887990][ T2919] ? trace_irq_disable+0x3b/0x150 [ 742.888014][ T2919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.888041][ T2919] ? clear_bhb_loop+0x40/0x90 [ 742.888062][ T2919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.888080][ T2919] RIP: 0033:0x7f000ab9c799 [ 742.888098][ T2919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.888114][ T2919] RSP: 002b:00007f000bb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 742.888132][ T2919] RAX: ffffffffffffffda RBX: 00007f000ae15fa0 RCX: 00007f000ab9c799 [ 742.888146][ T2919] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 742.888157][ T2919] RBP: 00007f000bb1f090 R08: 000000000000001c R09: 0000000000000000 [ 742.888169][ T2919] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 742.888181][ T2919] R13: 00007f000ae16038 R14: 00007f000ae15fa0 R15: 00007ffdc5f09b58 [ 742.888211][ T2919] [ 742.940503][ T2889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7790'. [ 743.465165][ T2935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7803'. [ 743.589070][ T2941] lo speed is unknown, defaulting to 1000 [ 743.677972][ T2947] tipc: Enabling of bearer rejected, already enabled [ 743.778580][ T2954] netlink: 'syz.3.7805': attribute type 10 has an invalid length. [ 743.796112][ T2954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7805'. [ 744.035493][ T1944] Bluetooth: hci4: command 0x0405 tx timeout [ 744.129347][ T2971] FAULT_INJECTION: forcing a failure. [ 744.129347][ T2971] name failslab, interval 1, probability 0, space 0, times 0 [ 744.171408][ T2977] bond0: Caught tx_queue_len zero misconfig [ 744.185395][ T2971] CPU: 0 UID: 0 PID: 2971 Comm: syz.2.7814 Not tainted syzkaller #0 PREEMPT(full) [ 744.185419][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.185432][ T2971] Call Trace: [ 744.185440][ T2971] [ 744.185448][ T2971] dump_stack_lvl+0xe8/0x150 [ 744.185478][ T2971] should_fail_ex+0x412/0x560 [ 744.185507][ T2971] should_failslab+0xa8/0x100 [ 744.185532][ T2971] __kmalloc_cache_noprof+0x88/0x660 [ 744.185555][ T2971] ? sctp_add_bind_addr+0x8c/0x370 [ 744.185581][ T2971] sctp_add_bind_addr+0x8c/0x370 [ 744.185607][ T2971] sctp_copy_local_addr_list+0x314/0x4f0 [ 744.185632][ T2971] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 744.185653][ T2971] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 744.185676][ T2971] ? sctp_v6_is_any+0x64/0x80 [ 744.185699][ T2971] ? sctp_copy_one_addr+0x93/0x360 [ 744.185723][ T2971] sctp_bind_addr_copy+0xb3/0x3c0 [ 744.185745][ T2971] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 744.185777][ T2971] sctp_connect_new_asoc+0x2ff/0x6b0 [ 744.185804][ T2971] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 744.185834][ T2971] ? sctp_get_af_specific+0x29/0x80 [ 744.185853][ T2971] ? sctp_inet6_send_verify+0x80/0x300 [ 744.185872][ T2971] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 744.185899][ T2971] __sctp_connect+0x5cb/0xdc0 [ 744.185934][ T2971] ? __pfx___sctp_connect+0x10/0x10 [ 744.185955][ T2971] ? sctp_setsockopt+0x21c/0x12c0 [ 744.185976][ T2971] ? security_sctp_bind_connect+0x7e/0x2c0 [ 744.185999][ T2971] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 744.186021][ T2971] sctp_setsockopt+0x708/0x12c0 [ 744.186043][ T2971] ? sock_common_setsockopt+0x36/0xc0 [ 744.186066][ T2971] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 744.186093][ T2971] do_sock_setsockopt+0x17c/0x1b0 [ 744.186124][ T2971] __x64_sys_setsockopt+0x13d/0x1b0 [ 744.186158][ T2971] do_syscall_64+0x14d/0xf80 [ 744.186183][ T2971] ? trace_irq_disable+0x3b/0x150 [ 744.186208][ T2971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.186227][ T2971] ? clear_bhb_loop+0x40/0x90 [ 744.186250][ T2971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.186268][ T2971] RIP: 0033:0x7f8d48d9c799 [ 744.186285][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.186301][ T2971] RSP: 002b:00007f8d49bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 744.186327][ T2971] RAX: ffffffffffffffda RBX: 00007f8d49015fa0 RCX: 00007f8d48d9c799 [ 744.186341][ T2971] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 744.186352][ T2971] RBP: 00007f8d49bda090 R08: 000000000000001c R09: 0000000000000000 [ 744.186364][ T2971] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 744.186376][ T2971] R13: 00007f8d49016038 R14: 00007f8d49015fa0 R15: 00007ffcd38512a8 [ 744.186408][ T2971] [ 744.357838][ T2980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.794886][ T3004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 744.818437][ T3010] block nbd0: reconnected socket [ 744.831429][ T5834] block nbd0: Receive control failed (result -32) [ 744.863897][ T3012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7823'. [ 744.881826][ T3012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7823'. [ 744.893015][ T3012] syzkaller0: entered promiscuous mode [ 744.898541][ T3012] syzkaller0: entered allmulticast mode [ 744.907001][ T3012] 0: reclassify loop, rule prio 0, protocol 800 [ 745.116335][ T3037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7831'. [ 745.232177][ T3051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7833'. [ 745.278630][ T3054] FAULT_INJECTION: forcing a failure. [ 745.278630][ T3054] name failslab, interval 1, probability 0, space 0, times 0 [ 745.341896][ T3054] CPU: 0 UID: 0 PID: 3054 Comm: syz.0.7832 Not tainted syzkaller #0 PREEMPT(full) [ 745.341919][ T3054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.341930][ T3054] Call Trace: [ 745.341937][ T3054] [ 745.341945][ T3054] dump_stack_lvl+0xe8/0x150 [ 745.341973][ T3054] should_fail_ex+0x412/0x560 [ 745.342001][ T3054] should_failslab+0xa8/0x100 [ 745.342025][ T3054] __kmalloc_cache_noprof+0x88/0x660 [ 745.342047][ T3054] ? sctp_add_bind_addr+0x8c/0x370 [ 745.342072][ T3054] sctp_add_bind_addr+0x8c/0x370 [ 745.342096][ T3054] sctp_copy_local_addr_list+0x314/0x4f0 [ 745.342122][ T3054] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 745.342142][ T3054] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 745.342165][ T3054] ? sctp_v6_is_any+0x64/0x80 [ 745.342187][ T3054] ? sctp_copy_one_addr+0x93/0x360 [ 745.342210][ T3054] sctp_bind_addr_copy+0xb3/0x3c0 [ 745.342231][ T3054] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 745.342262][ T3054] sctp_connect_new_asoc+0x2ff/0x6b0 [ 745.342288][ T3054] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 745.342319][ T3054] ? sctp_get_af_specific+0x29/0x80 [ 745.342338][ T3054] ? sctp_inet6_send_verify+0x80/0x300 [ 745.342356][ T3054] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 745.342382][ T3054] __sctp_connect+0x5cb/0xdc0 [ 745.342417][ T3054] ? __pfx___sctp_connect+0x10/0x10 [ 745.342438][ T3054] ? sctp_setsockopt+0x21c/0x12c0 [ 745.342459][ T3054] ? security_sctp_bind_connect+0x7e/0x2c0 [ 745.342483][ T3054] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 745.342506][ T3054] sctp_setsockopt+0x708/0x12c0 [ 745.342529][ T3054] ? sock_common_setsockopt+0x36/0xc0 [ 745.342552][ T3054] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 745.342577][ T3054] do_sock_setsockopt+0x17c/0x1b0 [ 745.342609][ T3054] __x64_sys_setsockopt+0x13d/0x1b0 [ 745.342642][ T3054] do_syscall_64+0x14d/0xf80 [ 745.342668][ T3054] ? trace_irq_disable+0x3b/0x150 [ 745.342692][ T3054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.342710][ T3054] ? clear_bhb_loop+0x40/0x90 [ 745.342731][ T3054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.342749][ T3054] RIP: 0033:0x7f6a7bf9c799 [ 745.342773][ T3054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.342788][ T3054] RSP: 002b:00007f6a7ceb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 745.342806][ T3054] RAX: ffffffffffffffda RBX: 00007f6a7c215fa0 RCX: 00007f6a7bf9c799 [ 745.342820][ T3054] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 745.342831][ T3054] RBP: 00007f6a7ceb2090 R08: 000000000000001c R09: 0000000000000000 [ 745.342842][ T3054] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 745.342853][ T3054] R13: 00007f6a7c216038 R14: 00007f6a7c215fa0 R15: 00007ffe3a3eb508 [ 745.342883][ T3054] [ 745.691629][ T3068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.837263][ T3071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7836'. [ 745.976986][ T3077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.997614][ T3077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.300871][ T3096] netlink: 'syz.0.7843': attribute type 10 has an invalid length. [ 746.320157][ T3096] dummy0: entered promiscuous mode [ 746.338573][ T3096] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 746.560905][ T3113] FAULT_INJECTION: forcing a failure. [ 746.560905][ T3113] name failslab, interval 1, probability 0, space 0, times 0 [ 746.579323][ T3113] CPU: 0 UID: 0 PID: 3113 Comm: syz.2.7849 Not tainted syzkaller #0 PREEMPT(full) [ 746.579347][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.579358][ T3113] Call Trace: [ 746.579366][ T3113] [ 746.579374][ T3113] dump_stack_lvl+0xe8/0x150 [ 746.579403][ T3113] should_fail_ex+0x412/0x560 [ 746.579432][ T3113] should_failslab+0xa8/0x100 [ 746.579457][ T3113] __kmalloc_cache_noprof+0x88/0x660 [ 746.579479][ T3113] ? sctp_add_bind_addr+0x8c/0x370 [ 746.579505][ T3113] sctp_add_bind_addr+0x8c/0x370 [ 746.579530][ T3113] sctp_copy_local_addr_list+0x314/0x4f0 [ 746.579554][ T3113] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 746.579573][ T3113] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 746.579606][ T3113] ? sctp_v6_is_any+0x64/0x80 [ 746.579628][ T3113] ? sctp_copy_one_addr+0x93/0x360 [ 746.579652][ T3113] sctp_bind_addr_copy+0xb3/0x3c0 [ 746.579672][ T3113] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 746.579702][ T3113] sctp_connect_new_asoc+0x2ff/0x6b0 [ 746.579730][ T3113] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 746.579759][ T3113] ? sctp_get_af_specific+0x29/0x80 [ 746.579779][ T3113] ? sctp_inet6_send_verify+0x80/0x300 [ 746.579797][ T3113] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 746.579824][ T3113] __sctp_connect+0x5cb/0xdc0 [ 746.579859][ T3113] ? __pfx___sctp_connect+0x10/0x10 [ 746.579880][ T3113] ? sctp_setsockopt+0x21c/0x12c0 [ 746.579901][ T3113] ? security_sctp_bind_connect+0x7e/0x2c0 [ 746.579924][ T3113] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 746.579946][ T3113] sctp_setsockopt+0x708/0x12c0 [ 746.579969][ T3113] ? sock_common_setsockopt+0x36/0xc0 [ 746.579992][ T3113] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 746.580018][ T3113] do_sock_setsockopt+0x17c/0x1b0 [ 746.580050][ T3113] __x64_sys_setsockopt+0x13d/0x1b0 [ 746.580083][ T3113] do_syscall_64+0x14d/0xf80 [ 746.580107][ T3113] ? trace_irq_disable+0x3b/0x150 [ 746.580132][ T3113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.580151][ T3113] ? clear_bhb_loop+0x40/0x90 [ 746.580173][ T3113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.580192][ T3113] RIP: 0033:0x7f8d48d9c799 [ 746.580209][ T3113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.580224][ T3113] RSP: 002b:00007f8d49bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 746.580244][ T3113] RAX: ffffffffffffffda RBX: 00007f8d49015fa0 RCX: 00007f8d48d9c799 [ 746.580258][ T3113] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 746.580269][ T3113] RBP: 00007f8d49bda090 R08: 000000000000001c R09: 0000000000000000 [ 746.580281][ T3113] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 746.580293][ T3113] R13: 00007f8d49016038 R14: 00007f8d49015fa0 R15: 00007ffcd38512a8 [ 746.580325][ T3113] [ 746.860565][ T3119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.896432][ T3114] tipc: Enabled bearer , priority 0 [ 746.906955][ T3114] syzkaller0: entered promiscuous mode [ 746.913025][ T3114] syzkaller0: entered allmulticast mode [ 746.940008][ T3128] __nla_validate_parse: 6 callbacks suppressed [ 746.940023][ T3128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7854'. [ 746.977681][ T3114] tipc: Resetting bearer [ 747.001719][ T3112] tipc: Resetting bearer [ 747.060660][ T3138] xt_ecn: cannot match TCP bits for non-tcp packets [ 747.067980][ T3112] tipc: Disabling bearer [ 747.084276][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 747.216575][ T3146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7858'. [ 747.225890][ T3146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7858'. [ 747.264744][ T3146] netlink: 'syz.0.7858': attribute type 2 has an invalid length. [ 747.306415][ T3146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7858'. [ 747.473892][ T3162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7863'. [ 747.738552][ T3178] FAULT_INJECTION: forcing a failure. [ 747.738552][ T3178] name failslab, interval 1, probability 0, space 0, times 0 [ 747.755076][ T3178] CPU: 1 UID: 0 PID: 3178 Comm: syz.4.7867 Not tainted syzkaller #0 PREEMPT(full) [ 747.755100][ T3178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.755111][ T3178] Call Trace: [ 747.755119][ T3178] [ 747.755127][ T3178] dump_stack_lvl+0xe8/0x150 [ 747.755157][ T3178] should_fail_ex+0x412/0x560 [ 747.755185][ T3178] should_failslab+0xa8/0x100 [ 747.755211][ T3178] __kmalloc_cache_noprof+0x88/0x660 [ 747.755232][ T3178] ? sctp_add_bind_addr+0x8c/0x370 [ 747.755257][ T3178] sctp_add_bind_addr+0x8c/0x370 [ 747.755282][ T3178] sctp_copy_local_addr_list+0x314/0x4f0 [ 747.755306][ T3178] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 747.755326][ T3178] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 747.755349][ T3178] ? sctp_v6_is_any+0x64/0x80 [ 747.755371][ T3178] ? sctp_copy_one_addr+0x93/0x360 [ 747.755394][ T3178] sctp_bind_addr_copy+0xb3/0x3c0 [ 747.755414][ T3178] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 747.755443][ T3178] sctp_connect_new_asoc+0x2ff/0x6b0 [ 747.755477][ T3178] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 747.755506][ T3178] ? sctp_get_af_specific+0x29/0x80 [ 747.755524][ T3178] ? sctp_inet6_send_verify+0x80/0x300 [ 747.755543][ T3178] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 747.755569][ T3178] __sctp_connect+0x5cb/0xdc0 [ 747.755603][ T3178] ? __pfx___sctp_connect+0x10/0x10 [ 747.755625][ T3178] ? sctp_setsockopt+0x21c/0x12c0 [ 747.755647][ T3178] ? security_sctp_bind_connect+0x7e/0x2c0 [ 747.755668][ T3178] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 747.755690][ T3178] sctp_setsockopt+0x708/0x12c0 [ 747.755711][ T3178] ? sock_common_setsockopt+0x36/0xc0 [ 747.755734][ T3178] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 747.755759][ T3178] do_sock_setsockopt+0x17c/0x1b0 [ 747.755791][ T3178] __x64_sys_setsockopt+0x13d/0x1b0 [ 747.755823][ T3178] do_syscall_64+0x14d/0xf80 [ 747.755848][ T3178] ? trace_irq_disable+0x3b/0x150 [ 747.755872][ T3178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.755891][ T3178] ? clear_bhb_loop+0x40/0x90 [ 747.755913][ T3178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.755930][ T3178] RIP: 0033:0x7f570659c799 [ 747.755947][ T3178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.755962][ T3178] RSP: 002b:00007f5707456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 747.755980][ T3178] RAX: ffffffffffffffda RBX: 00007f5706815fa0 RCX: 00007f570659c799 [ 747.755994][ T3178] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 747.756005][ T3178] RBP: 00007f5707456090 R08: 000000000000001c R09: 0000000000000000 [ 747.756017][ T3178] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 747.756028][ T3178] R13: 00007f5706816038 R14: 00007f5706815fa0 R15: 00007ffd62a72d98 [ 747.756060][ T3178] [ 748.153695][ T3178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.320636][ T3190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7872'. [ 748.350301][ T3192] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7872'. [ 748.406224][ T3208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'. [ 748.515108][ T3198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'. [ 748.524594][ T3216] FAULT_INJECTION: forcing a failure. [ 748.524594][ T3216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.550625][ T3216] CPU: 1 UID: 0 PID: 3216 Comm: syz.4.7875 Not tainted syzkaller #0 PREEMPT(full) [ 748.550649][ T3216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.550661][ T3216] Call Trace: [ 748.550669][ T3216] [ 748.550677][ T3216] dump_stack_lvl+0xe8/0x150 [ 748.550707][ T3216] should_fail_ex+0x412/0x560 [ 748.550735][ T3216] _copy_from_user+0x2d/0xb0 [ 748.550762][ T3216] __sys_bind+0x1c6/0x410 [ 748.550790][ T3216] ? __pfx___sys_bind+0x10/0x10 [ 748.550825][ T3216] ? __pfx_ksys_write+0x10/0x10 [ 748.550853][ T3216] __x64_sys_bind+0x7a/0x90 [ 748.550878][ T3216] do_syscall_64+0x14d/0xf80 [ 748.550903][ T3216] ? trace_irq_disable+0x3b/0x150 [ 748.550928][ T3216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.550947][ T3216] ? clear_bhb_loop+0x40/0x90 [ 748.550970][ T3216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.550988][ T3216] RIP: 0033:0x7f570659c799 [ 748.551005][ T3216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.551021][ T3216] RSP: 002b:00007f5707435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 748.551041][ T3216] RAX: ffffffffffffffda RBX: 00007f5706816090 RCX: 00007f570659c799 [ 748.551055][ T3216] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 748.551067][ T3216] RBP: 00007f5707435090 R08: 0000000000000000 R09: 0000000000000000 [ 748.551079][ T3216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.551090][ T3216] R13: 00007f5706816128 R14: 00007f5706816090 R15: 00007ffd62a72d98 [ 748.551120][ T3216] [ 748.749415][ T3220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7877'. [ 748.856570][ T3228] openvswitch: netlink: Flow key attr not present in new flow. [ 748.882972][ T3228] syzkaller0: entered promiscuous mode [ 748.888486][ T3228] syzkaller0: entered allmulticast mode [ 749.118936][ T3242] FAULT_INJECTION: forcing a failure. [ 749.118936][ T3242] name failslab, interval 1, probability 0, space 0, times 0 [ 749.142050][ T3242] CPU: 1 UID: 0 PID: 3242 Comm: syz.0.7885 Not tainted syzkaller #0 PREEMPT(full) [ 749.142075][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.142086][ T3242] Call Trace: [ 749.142094][ T3242] [ 749.142102][ T3242] dump_stack_lvl+0xe8/0x150 [ 749.142131][ T3242] should_fail_ex+0x412/0x560 [ 749.142159][ T3242] should_failslab+0xa8/0x100 [ 749.142186][ T3242] __kmalloc_cache_noprof+0x88/0x660 [ 749.142208][ T3242] ? sctp_add_bind_addr+0x8c/0x370 [ 749.142234][ T3242] sctp_add_bind_addr+0x8c/0x370 [ 749.142258][ T3242] sctp_copy_local_addr_list+0x314/0x4f0 [ 749.142282][ T3242] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 749.142303][ T3242] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 749.142324][ T3242] ? sctp_v6_is_any+0x64/0x80 [ 749.142346][ T3242] ? sctp_copy_one_addr+0x93/0x360 [ 749.142373][ T3242] sctp_bind_addr_copy+0xb3/0x3c0 [ 749.142395][ T3242] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 749.142426][ T3242] sctp_connect_new_asoc+0x2ff/0x6b0 [ 749.142454][ T3242] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 749.142485][ T3242] ? sctp_get_af_specific+0x29/0x80 [ 749.142503][ T3242] ? sctp_inet6_send_verify+0x80/0x300 [ 749.142522][ T3242] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 749.142550][ T3242] __sctp_connect+0x5cb/0xdc0 [ 749.142584][ T3242] ? __pfx___sctp_connect+0x10/0x10 [ 749.142605][ T3242] ? sctp_setsockopt+0x21c/0x12c0 [ 749.142627][ T3242] ? security_sctp_bind_connect+0x7e/0x2c0 [ 749.142651][ T3242] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 749.142673][ T3242] sctp_setsockopt+0x708/0x12c0 [ 749.142695][ T3242] ? sock_common_setsockopt+0x36/0xc0 [ 749.142718][ T3242] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 749.142744][ T3242] do_sock_setsockopt+0x17c/0x1b0 [ 749.142777][ T3242] __x64_sys_setsockopt+0x13d/0x1b0 [ 749.142815][ T3242] do_syscall_64+0x14d/0xf80 [ 749.142840][ T3242] ? trace_irq_disable+0x3b/0x150 [ 749.142865][ T3242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.142884][ T3242] ? clear_bhb_loop+0x40/0x90 [ 749.142906][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.142924][ T3242] RIP: 0033:0x7f6a7bf9c799 [ 749.142942][ T3242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.142958][ T3242] RSP: 002b:00007f6a7ceb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.142979][ T3242] RAX: ffffffffffffffda RBX: 00007f6a7c215fa0 RCX: 00007f6a7bf9c799 [ 749.142993][ T3242] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 749.143004][ T3242] RBP: 00007f6a7ceb2090 R08: 000000000000001c R09: 0000000000000000 [ 749.143016][ T3242] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000002 [ 749.143028][ T3242] R13: 00007f6a7c216038 R14: 00007f6a7c215fa0 R15: 00007ffe3a3eb508 [ 749.143059][ T3242] [ 749.437293][ T3242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.555031][ T1944] Bluetooth: hci3: command 0x0406 tx timeout [ 749.679624][ T5834] [ 749.681994][ T5834] ====================================================== [ 749.689010][ T5834] WARNING: possible circular locking dependency detected [ 749.696051][ T5834] syzkaller #0 Not tainted [ 749.700466][ T5834] ------------------------------------------------------ [ 749.707466][ T5834] kworker/u9:5/5834 is trying to acquire lock: [ 749.713609][ T5834] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 749.724162][ T5834] [ 749.724162][ T5834] but task is already holding lock: [ 749.731508][ T5834] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 749.741794][ T5834] [ 749.741794][ T5834] which lock already depends on the new lock. [ 749.741794][ T5834] [ 749.752177][ T5834] [ 749.752177][ T5834] the existing dependency chain (in reverse order) is: [ 749.761171][ T5834] [ 749.761171][ T5834] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 749.769146][ T5834] down_write+0x96/0x200 [ 749.773901][ T5834] kernfs_add_one+0x41/0x5c0 [ 749.779011][ T5834] kernfs_create_dir_ns+0xde/0x130 [ 749.784625][ T5834] internal_create_group+0x425/0x1180 [ 749.790506][ T5834] cpuhp_invoke_callback+0x445/0x860 [ 749.796302][ T5834] cpuhp_issue_call+0x430/0x7a0 [ 749.801671][ T5834] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 749.808275][ T5834] __cpuhp_setup_state+0x3f/0x60 [ 749.813748][ T5834] do_one_initcall+0x250/0x8d0 [ 749.819025][ T5834] do_initcall_level+0x104/0x190 [ 749.824474][ T5834] do_initcalls+0x59/0xa0 [ 749.829306][ T5834] kernel_init_freeable+0x2a6/0x3e0 [ 749.835021][ T5834] kernel_init+0x1d/0x1d0 [ 749.839890][ T5834] ret_from_fork+0x51e/0xb90 [ 749.845030][ T5834] ret_from_fork_asm+0x1a/0x30 [ 749.850318][ T5834] [ 749.850318][ T5834] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 749.858120][ T5834] [ 749.858120][ T5834] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 749.865836][ T5834] cpus_read_lock+0x42/0x160 [ 749.870937][ T5834] static_key_slow_inc+0x12/0x30 [ 749.876394][ T5834] nbd_genl_reconfigure+0x132f/0x1ea0 [ 749.882282][ T5834] genl_family_rcv_msg_doit+0x22a/0x330 [ 749.888343][ T5834] genl_rcv_msg+0x61c/0x7a0 [ 749.893380][ T5834] netlink_rcv_skb+0x232/0x4b0 [ 749.898663][ T5834] genl_rcv+0x28/0x40 [ 749.903178][ T5834] netlink_unicast+0x80f/0x9b0 [ 749.908448][ T5834] netlink_sendmsg+0x813/0xb40 [ 749.913731][ T5834] ____sys_sendmsg+0x972/0x9f0 [ 749.918996][ T5834] ___sys_sendmsg+0x2a5/0x360 [ 749.924176][ T5834] __x64_sys_sendmsg+0x1bd/0x2a0 [ 749.929628][ T5834] do_syscall_64+0x14d/0xf80 [ 749.934734][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.941165][ T5834] [ 749.941165][ T5834] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 749.948792][ T5834] __mutex_lock+0x19f/0x1300 [ 749.953902][ T5834] nbd_queue_rq+0x37b/0x1100 [ 749.959003][ T5834] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 749.965061][ T5834] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 749.971912][ T5834] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 749.978411][ T5834] blk_mq_run_hw_queue+0x348/0x4f0 [ 749.984041][ T5834] blk_mq_dispatch_list+0xd16/0xe10 [ 749.989749][ T5834] blk_mq_flush_plug_list+0x48d/0x570 [ 749.995642][ T5834] __blk_flush_plug+0x3ed/0x4d0 [ 750.001011][ T5834] __submit_bio+0x28d/0x580 [ 750.006024][ T5834] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 750.012162][ T5834] block_read_full_folio+0x599/0x830 [ 750.017954][ T5834] filemap_read_folio+0x137/0x3b0 [ 750.023484][ T5834] do_read_cache_folio+0x358/0x590 [ 750.029105][ T5834] read_part_sector+0xb6/0x2b0 [ 750.034374][ T5834] adfspart_check_ICS+0xa5/0xa40 [ 750.039813][ T5834] bdev_disk_changed+0x7ba/0x1550 [ 750.045338][ T5834] blkdev_get_whole+0x380/0x510 [ 750.050711][ T5834] bdev_open+0x31e/0xd30 [ 750.055455][ T5834] blkdev_open+0x470/0x610 [ 750.060376][ T5834] do_dentry_open+0x785/0x14e0 [ 750.065649][ T5834] vfs_open+0x3b/0x340 [ 750.070252][ T5834] path_openat+0x2e08/0x3860 [ 750.075355][ T5834] do_file_open+0x23e/0x4a0 [ 750.080362][ T5834] do_sys_openat2+0x113/0x200 [ 750.085563][ T5834] __x64_sys_openat+0x138/0x170 [ 750.090928][ T5834] do_syscall_64+0x14d/0xf80 [ 750.096042][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.102439][ T5834] [ 750.102439][ T5834] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 750.109636][ T5834] __mutex_lock+0x19f/0x1300 [ 750.114752][ T5834] nbd_queue_rq+0xc6/0x1100 [ 750.119789][ T5834] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 750.125839][ T5834] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 750.132672][ T5834] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 750.139160][ T5834] blk_mq_run_hw_queue+0x348/0x4f0 [ 750.144783][ T5834] blk_mq_dispatch_list+0xd16/0xe10 [ 750.150508][ T5834] blk_mq_flush_plug_list+0x48d/0x570 [ 750.156380][ T5834] __blk_flush_plug+0x3ed/0x4d0 [ 750.161735][ T5834] __submit_bio+0x28d/0x580 [ 750.166746][ T5834] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 750.172885][ T5834] block_read_full_folio+0x599/0x830 [ 750.178675][ T5834] filemap_read_folio+0x137/0x3b0 [ 750.184206][ T5834] do_read_cache_folio+0x358/0x590 [ 750.189823][ T5834] read_part_sector+0xb6/0x2b0 [ 750.195090][ T5834] adfspart_check_ICS+0xa5/0xa40 [ 750.200554][ T5834] bdev_disk_changed+0x7ba/0x1550 [ 750.206081][ T5834] blkdev_get_whole+0x380/0x510 [ 750.211445][ T5834] bdev_open+0x31e/0xd30 [ 750.216191][ T5834] blkdev_open+0x470/0x610 [ 750.221111][ T5834] do_dentry_open+0x785/0x14e0 [ 750.226384][ T5834] vfs_open+0x3b/0x340 [ 750.230958][ T5834] path_openat+0x2e08/0x3860 [ 750.236060][ T5834] do_file_open+0x23e/0x4a0 [ 750.241067][ T5834] do_sys_openat2+0x113/0x200 [ 750.246252][ T5834] __x64_sys_openat+0x138/0x170 [ 750.251613][ T5834] do_syscall_64+0x14d/0xf80 [ 750.256713][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.263109][ T5834] [ 750.263109][ T5834] -> #4 (set->srcu){.+.+}-{0:0}: [ 750.270225][ T5834] __synchronize_srcu+0xca/0x3e0 [ 750.275673][ T5834] elevator_switch+0x1e8/0x7a0 [ 750.280940][ T5834] elevator_change+0x2cc/0x450 [ 750.286205][ T5834] elevator_set_default+0x36c/0x430 [ 750.291915][ T5834] blk_register_queue+0x366/0x430 [ 750.297454][ T5834] __add_disk+0x677/0xd50 [ 750.302285][ T5834] add_disk_fwnode+0xfb/0x480 [ 750.307467][ T5834] nbd_dev_add+0x72c/0xb50 [ 750.312392][ T5834] nbd_init+0x168/0x1f0 [ 750.317051][ T5834] do_one_initcall+0x250/0x8d0 [ 750.322339][ T5834] do_initcall_level+0x104/0x190 [ 750.327777][ T5834] do_initcalls+0x59/0xa0 [ 750.332623][ T5834] kernel_init_freeable+0x2a6/0x3e0 [ 750.338322][ T5834] kernel_init+0x1d/0x1d0 [ 750.343167][ T5834] ret_from_fork+0x51e/0xb90 [ 750.348273][ T5834] ret_from_fork_asm+0x1a/0x30 [ 750.353544][ T5834] [ 750.353544][ T5834] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 750.361347][ T5834] __mutex_lock+0x19f/0x1300 [ 750.366448][ T5834] elevator_change+0x1b3/0x450 [ 750.371716][ T5834] elevator_set_none+0xb5/0x140 [ 750.377073][ T5834] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 750.383385][ T5834] nbd_start_device+0x17f/0xb10 [ 750.388750][ T5834] nbd_genl_connect+0x165b/0x1cf0 [ 750.394315][ T5834] genl_family_rcv_msg_doit+0x22a/0x330 [ 750.400366][ T5834] genl_rcv_msg+0x61c/0x7a0 [ 750.405372][ T5834] netlink_rcv_skb+0x232/0x4b0 [ 750.410641][ T5834] genl_rcv+0x28/0x40 [ 750.415122][ T5834] netlink_unicast+0x80f/0x9b0 [ 750.420404][ T5834] netlink_sendmsg+0x813/0xb40 [ 750.425674][ T5834] ____sys_sendmsg+0x972/0x9f0 [ 750.430968][ T5834] ___sys_sendmsg+0x2a5/0x360 [ 750.436165][ T5834] __x64_sys_sendmsg+0x1bd/0x2a0 [ 750.441606][ T5834] do_syscall_64+0x14d/0xf80 [ 750.446713][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.453153][ T5834] [ 750.453153][ T5834] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 750.461746][ T5834] blk_alloc_queue+0x546/0x680 [ 750.467045][ T5834] __blk_mq_alloc_disk+0x197/0x390 [ 750.472664][ T5834] nbd_dev_add+0x499/0xb50 [ 750.477617][ T5834] nbd_init+0x168/0x1f0 [ 750.482279][ T5834] do_one_initcall+0x250/0x8d0 [ 750.487555][ T5834] do_initcall_level+0x104/0x190 [ 750.492994][ T5834] do_initcalls+0x59/0xa0 [ 750.497826][ T5834] kernel_init_freeable+0x2a6/0x3e0 [ 750.503523][ T5834] kernel_init+0x1d/0x1d0 [ 750.508360][ T5834] ret_from_fork+0x51e/0xb90 [ 750.513459][ T5834] ret_from_fork_asm+0x1a/0x30 [ 750.518740][ T5834] [ 750.518740][ T5834] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 750.525959][ T5834] fs_reclaim_acquire+0x71/0x100 [ 750.531434][ T5834] kmem_cache_alloc_noprof+0x40/0x650 [ 750.537312][ T5834] __kernfs_iattrs+0xdf/0x340 [ 750.542519][ T5834] kernfs_iop_setattr+0xea/0x3f0 [ 750.548008][ T5834] notify_change+0xc1a/0xf40 [ 750.553106][ T5834] do_truncate+0x1c2/0x250 [ 750.558036][ T5834] path_openat+0x2f89/0x3860 [ 750.563130][ T5834] do_file_open+0x23e/0x4a0 [ 750.568139][ T5834] do_sys_openat2+0x113/0x200 [ 750.573322][ T5834] __x64_sys_openat+0x138/0x170 [ 750.578688][ T5834] do_syscall_64+0x14d/0xf80 [ 750.583803][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.590232][ T5834] [ 750.590232][ T5834] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 750.598733][ T5834] __lock_acquire+0x15a5/0x2cf0 [ 750.604102][ T5834] lock_acquire+0xf0/0x2e0 [ 750.609032][ T5834] down_write+0x96/0x200 [ 750.613783][ T5834] kernfs_unlink_sibling+0x71/0x180 [ 750.619521][ T5834] __kernfs_remove+0x3e7/0x660 [ 750.624803][ T5834] kernfs_remove_by_name_ns+0xaf/0x130 [ 750.630767][ T5834] sysfs_unmerge_group+0xd4/0x140 [ 750.636308][ T5834] dpm_sysfs_remove+0x76/0xd0 [ 750.641491][ T5834] device_del+0x250/0x8f0 [ 750.646329][ T5834] device_unregister+0x21/0xf0 [ 750.651607][ T5834] hci_conn_del+0xc36/0x1230 [ 750.656722][ T5834] hci_abort_conn_sync+0xdd0/0x1190 [ 750.662427][ T5834] hci_cmd_sync_work+0x213/0x400 [ 750.667879][ T5834] process_scheduled_works+0xb02/0x1830 [ 750.673949][ T5834] worker_thread+0xa50/0xfc0 [ 750.679089][ T5834] kthread+0x388/0x470 [ 750.683677][ T5834] ret_from_fork+0x51e/0xb90 [ 750.688779][ T5834] ret_from_fork_asm+0x1a/0x30 [ 750.694057][ T5834] [ 750.694057][ T5834] other info that might help us debug this: [ 750.694057][ T5834] [ 750.704268][ T5834] Chain exists of: [ 750.704268][ T5834] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 750.704268][ T5834] [ 750.718687][ T5834] Possible unsafe locking scenario: [ 750.718687][ T5834] [ 750.726129][ T5834] CPU0 CPU1 [ 750.731479][ T5834] ---- ---- [ 750.736859][ T5834] lock(&root->kernfs_rwsem); [ 750.741622][ T5834] lock(cpuhp_state_mutex); [ 750.748726][ T5834] lock(&root->kernfs_rwsem); [ 750.756001][ T5834] lock(&root->kernfs_iattr_rwsem); [ 750.761296][ T5834] [ 750.761296][ T5834] *** DEADLOCK *** [ 750.761296][ T5834] [ 750.769419][ T5834] 5 locks held by kworker/u9:5/5834: [ 750.774693][ T5834] #0: ffff888035452948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 750.785473][ T5834] #1: ffffc90004737c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 750.797983][ T5834] #2: ffff888072648ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 750.807802][ T5834] #3: ffff8880726480c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 750.817538][ T5834] #4: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 750.828221][ T5834] [ 750.828221][ T5834] stack backtrace: [ 750.834096][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 750.834114][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.834126][ T5834] Workqueue: hci3 hci_cmd_sync_work [ 750.834152][ T5834] Call Trace: [ 750.834158][ T5834] [ 750.834165][ T5834] dump_stack_lvl+0xe8/0x150 [ 750.834185][ T5834] print_circular_bug+0x2e1/0x300 [ 750.834208][ T5834] check_noncircular+0x12e/0x150 [ 750.834230][ T5834] __lock_acquire+0x15a5/0x2cf0 [ 750.834250][ T5834] ? __lock_acquire+0x6b5/0x2cf0 [ 750.834271][ T5834] lock_acquire+0xf0/0x2e0 [ 750.834287][ T5834] ? kernfs_unlink_sibling+0x71/0x180 [ 750.834305][ T5834] down_write+0x96/0x200 [ 750.834319][ T5834] ? kernfs_unlink_sibling+0x71/0x180 [ 750.834332][ T5834] ? __pfx_down_write+0x10/0x10 [ 750.834345][ T5834] ? kernfs_root+0x1c/0x230 [ 750.834364][ T5834] ? kernfs_root+0x1c/0x230 [ 750.834381][ T5834] ? kernfs_root+0x1c/0x230 [ 750.834399][ T5834] ? kernfs_root+0x1ea/0x230 [ 750.834418][ T5834] kernfs_unlink_sibling+0x71/0x180 [ 750.834433][ T5834] __kernfs_remove+0x3e7/0x660 [ 750.834448][ T5834] kernfs_remove_by_name_ns+0xaf/0x130 [ 750.834463][ T5834] sysfs_unmerge_group+0xd4/0x140 [ 750.834483][ T5834] dpm_sysfs_remove+0x76/0xd0 [ 750.834501][ T5834] device_del+0x250/0x8f0 [ 750.834515][ T5834] ? klist_iter_exit+0xc1/0x100 [ 750.834537][ T5834] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 750.834555][ T5834] ? __pfx_device_del+0x10/0x10 [ 750.834573][ T5834] device_unregister+0x21/0xf0 [ 750.834587][ T5834] hci_conn_del+0xc36/0x1230 [ 750.834604][ T5834] ? hci_abort_conn_sync+0xa7b/0x1190 [ 750.834619][ T5834] hci_abort_conn_sync+0xdd0/0x1190 [ 750.834636][ T5834] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 750.834653][ T5834] ? abort_conn_sync+0x26/0x210 [ 750.834670][ T5834] ? abort_conn_sync+0x26/0x210 [ 750.834686][ T5834] ? abort_conn_sync+0x19c/0x210 [ 750.834702][ T5834] ? __pfx_abort_conn_sync+0x10/0x10 [ 750.834719][ T5834] hci_cmd_sync_work+0x213/0x400 [ 750.834738][ T5834] ? process_scheduled_works+0xa25/0x1830 [ 750.834757][ T5834] process_scheduled_works+0xb02/0x1830 [ 750.834783][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.834802][ T5834] ? assign_work+0x3d5/0x5e0 [ 750.834820][ T5834] worker_thread+0xa50/0xfc0 [ 750.834847][ T5834] kthread+0x388/0x470 [ 750.834860][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 750.834877][ T5834] ? __pfx_kthread+0x10/0x10 [ 750.834889][ T5834] ret_from_fork+0x51e/0xb90 [ 750.834909][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 750.834925][ T5834] ? __switch_to+0xc7d/0x1450 [ 750.834941][ T5834] ? __pfx_kthread+0x10/0x10 [ 750.834954][ T5834] ret_from_fork_asm+0x1a/0x30 [ 750.834979][ T5834] [ 752.751896][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.759898][ C0] lec:lec_tx_timeout: lec0 [ 758.602576][ T2643] block nbd3: Connection timed out, retrying (0/4 alive) [ 758.609691][ T2643] block nbd3: Connection timed out, retrying (0/4 alive) [ 758.616871][ T2643] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.626481][ T2643] Buffer I/O error on dev nbd3, logical block 1, async page read [ 758.634491][ T2643] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.644149][ T2643] Buffer I/O error on dev nbd3, logical block 0, async page read [ 758.652141][T30191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.662013][T30191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 758.669888][T30191] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.679362][T30191] Buffer I/O error on dev nbd3, logical block 1, async page read [ 758.687151][T30191] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.696817][T30191] Buffer I/O error on dev nbd3, logical block 2, async page read [ 758.704615][T30191] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.714133][T30191] Buffer I/O error on dev nbd3, logical block 3, async page read [ 758.722257][T30191] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.731736][T30191] Buffer I/O error on dev nbd3, logical block 0, async page read [ 758.739475][T30191] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.749011][T30191] Buffer I/O error on dev nbd3, logical block 1, async page read [ 758.757225][T30191] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.766749][T30191] Buffer I/O error on dev nbd3, logical block 2, async page read [ 758.774646][T30191] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.784365][T30191] Buffer I/O error on dev nbd3, logical block 3, async page read [ 758.792638][T30191] ldm_validate_partition_table(): Disk read failed. [ 758.799576][T30191] Dev nbd3: unable to read RDB block 0 [ 758.805505][T30191] nbd3: unable to read partition table [ 758.813396][T30191] ldm_validate_partition_table(): Disk read failed. [ 758.820302][T30191] Dev nbd3: unable to read RDB block 0 [ 758.826354][T30191] nbd3: unable to read partition table