last executing test programs: 4.726231455s ago: executing program 2 (id=1696): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x9, 0xfe, 0x80000000}, {0x6, 0x1, 0xf7}]}) write(r0, &(0x7f0000000600)="90583e5b57fcb6774de4a92605bb3d7ede6b4336729d2b297b305212e02abe6919eacb350c6fdbc59e2c9ed7959f2988e4af8e1825af50449bcbbbc0d431d7732cbdf0b37d3d42bd1bc8a23b8fc912015ac74c4f58320b996b0a7eff19a980fb43fa7ec54d9c72f66770ffdb89d2d61ff2147a8674fcb4e784ed6c14ef96f1e0a8391fae064846f01e7f6ed8db09a138c0d42d3357f9e7a54ac405f184abc182f00a67a649f66b2dee15d48acec295ca603ffa8cf4e8522d4bc2c1466ee489c7614da2ba01a640832004f907dc1a50effab1e9cb4f60bb047c", 0x1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100f7ffffff0000000001000000008000"/26], 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0xffff, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff0800", 0xb2, 0x1, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000000003140100007379fa31000000000800410072786500140033006d6163766c616e3100000000000000000900020873797a3008004100736977001400330076657468305f746f5f7465616d00000000000000d20c83d2b919ea2afa31c2082c9c3528a394864ca749b6ee2b51cb7c6fab2db70b8434a51317ad94a843c968775f7f0a10bd173db040141351f5fdcf0fc38d56c152a806cd395edc4ef12ce51dd0d35c7464d1dccd6d3c649e1787a49cc9a813aa78c894bce225c20762a67581cdc1dbb620cdf96bc10b2824d7709f3f83019eab453ee2b130329a58709c4319f1c5a8"], 0x60}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.066476842s ago: executing program 3 (id=1700): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140a, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24004041) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.920117643s ago: executing program 0 (id=1701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x4, 0x7a, 0x1}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x31, 0x0, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000003c0)='\x002\xb8\xdcc\x83)jTt\xd6P\x00?\xf3\xf1\xf6=\xe4\x11\xaasP\xa8\xbc\x16\x9fQq\vi\x90\xfb\xc9\x1d\xf1kQH-I`1\xea\x99\xe3\x03\xcc\xf8\x1d\x13\x83\xe8\r]\xaa\xfeb\xd1\x94=\xd3:\xac\xf2\xe4\x10\xbbf\x1f\xd0x\x18\xbc\xa3>-^\xd7C\x90\xec\xebf3\x8a\"\x8b\xb7\xbc\xbb\x16\x9a\x8d/\x8at\xa9i\xd6\\+\x97\x1f\xf6\xb2Ua\xeb\xa5:\xd3/\x82\xfdLv\x9f\xb6\xf6>;\xd7\xd9\xb9K\xfe:M_\x98\x17C\xc9S1\xc2\xee\xe0B.\x1b\xa7\x7fRW\xca\x97\x81a\xaa\x8a\x12\x9c\xcc>\x84\x1e\xb8\x11\x96\xef\x05\xfa\xb9\xd4\x9dw\xd0'], 0x0, 0xfffffffffffffffa}}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 3.914866835s ago: executing program 2 (id=1702): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000100001002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="8121000000000000140003006772653000000000000000000000000014001680100001800c0004"], 0x48}}, 0x0) 3.839271664s ago: executing program 0 (id=1703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) socket(0x2a, 0xa, 0x2) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="81000200e180290108001b"], 0x28}}, 0x800) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) accept4$llc(r1, 0x0, 0x0, 0x0) 3.118391046s ago: executing program 3 (id=1707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001bc0)={{r0, &(0x7f0000000200)='!,^-.*,&\x00', 0x12000, &(0x7f0000000440)={@align=0x8, {0x2, 0x2, 0x4, 0x4}}, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x7}, 0x4, &(0x7f0000001b40)=[{0x1, 0x8000, &(0x7f0000000500)='\x00', &(0x7f00000005c0)="6ecd099db85e255743b175854bd68cf0111b076b75dce0da08046e100cda7ddf16a0e4587c82179c10005e19de4bef8dd209aa1de7c7048bb65ebe27ee7704ffe39ea73dfac757cce09cfe9b3d69f666b98fa7930587178e08573d659e81a05cddb143901e709d5126d6c45e96cc40191b12e3af26caaca1a7220c4b0b3df0c103e3f726fda9f90fdafa06d177d557aa9e277e3db5e7b8d984236465c1d9b9072fb17beea62028882a00736a247e44279b2afe1a1946829fcb3a957c000e9a73a92354f56ccfd6d50fd4438ae3093e6610638af6ebd381225a41cdcb96148c74196d257d6c90d97a8e1f5a89878b", 0xee, 0x2a}, {0x3, 0x6, &(0x7f00000006c0)='tbf\x00', &(0x7f0000000940)="111e051d68e78276839ef5e3584e4e43ab8f12dd2a67da5d792406d083da17a39c201967beadcbeb1034945147fd4557a76293e462d9fea8967ecaf40c6f2aa4b4ace5e127cc99fe0a44833509eaccfc09f86af7d69653bd5295cb36cdd5eb30c7cb52839c30fc696fda6a79249251de1712fb72caaf3c33e44651f2465b7bc4c9158c72dbbfe452bad3eead0ccaef0ad0f572f0fbfdf6963419a3638d9f73f8dcd2e1cd3705b030d80f5b576e55450be55525d9538c612a7d07934503f109bea20c2da29ebda88a81cf4e43368e192e2c330f7065bd36c65de03c72615906376e033ae7256dfa99bff02cfcc305f09967e9d4fd6e8bc45a2491e3a7db7cee8cd28244653ab6a3887c934a3d2c45858fb983466a160e351fe7375a62a9f12f4e1b1b085705dddc1fdcca216a789aee2606b5e1a6f7acdd95dbf9243500ca2100a925f4abacc8284d719c3e2c39e185dc34e29b2efe8e1216ec78118dd3c148f1534ca9e07d226ddfae64b1d2a143b1cc0acfd0c094a80b7949857b4ed1a114697b27135a8ba8fb2cc0b74ffb102e23804f7f744b9ac936e9529d7296eb069146d7b092708c3966edfdeea84af692278a87e42a1f33d587518cb5c09fe78dc6e35d0b2bea37ea58a244991a76f42abcb65f492f39eeaafb984b84b345693338133d062d1641dc928d70fb07baaf1740bf10f3269f4ce746b4a1eea1a7ea6926182292ea4767930a0882bfbbe1c1f5c3702b9dbcdae23ac43dfc25b79e3299145b65c8578af4f9187486f89be55994c4b070755dd5239cf16893f63847e8e42ac7a095d43b307f37ea1081d67bd7e1ae46ef51f578f296e930269a4afbd68c6297fb3aff0415800495b4e15c6adb2205f3816629d3475780e704b53534acb9e64eed24368e6e60941caeded7c24b17f8bccc0f0c7533895191ab8bab5c6a3bd2d82c35609b1834c8412dd5d37b80b8029b3e41a86807dff7b982c824761fe2c3ef56d968c650303ff62cf72fe431386cddf5587df69a741d3de8958c61d26fee86cbecbc0af9d2fcb56c3a32bf10593e0809b0f729133873c7a6145f955a230f1d91f2c05ea4fd171fc3fd4510fd30750b6d486b3ed4c9be88101504bfd3cbb3657c59405b978ac5450d4a69ed2d4cc8418e7539bd482bbf7554c36afc3e5fcc33b3ab5c83431d35b159c0f2fb4cd97e92b1749243c7f4d95c7cf328b2f8c66e80c834b6302e951f65c370d777405b1c1c1a41a515124ba0eccd0f44065b0a70200f89bd2eb124775cb1261fadce9bdfec03ceca2e3b4bf66f16d313d78d6d17a2e2c0bbb83e5cd7c22eeab7e53df01807bac7635f292a4ab5b93f62a63dc9aa55e7e721258b75bfa61d349bc6b9d1afcebe279afd6f5caa887ba845008646a1e80408b2099f95a0def538909d8ff5ef3e063f3856d42fbb4e53ded01ec5a29f15b99b2083627a2670b54f5e552881ae9602bb11f4332b4ea4d5849c2d9dc313d3169932a3282d6b02222b8bf9ea908113afab932e05932310cac090d321655f0648bc8b7b99dab830715c7d1a137f1edc26da4aa96a8ad2d79ffa68dd6573f1a1259cbcf9d6d2fd5b1b38d4eaa7bc36991e840e996bf3d31b8b7b0e0a1155b782e572cc990e2ac027e468f49e9b20bbe1966c5fe1cba28c0b53ea6d0892f9637f82d80afbae723506f0ec4febb93cb307f3d739ad4f278cfd5c79e58d72a0871342b9cc79df2ebfff9716a93ec842bc2bbc10bb697d0b5cc45b5268487fa01f9cf2f5b6085e03785966536b91187e026ef7117de693f0264b69a094fbd962cd1c7367db508a9c70e924265a51d6c73ddd57610328635a34a939d9c57e37eb70046f6b82622473217a9b0568cd650aa0082c948fcc17466a5397ae8c5d69d8164d006bb68c010248904afc7fa02c5f6d68b63fe59fb40ca15f44d0f2d73d229cb0cfe738eea682a995d4e50b650ddb7e5fe991da90c2955a0e7020f7a8b55a22b3f35fdfa6233039e065f4683c56da9746f71f2f14c5cea014ea4f6432fd67546f8cf2efa2fe0154e6cb46e5bae2108b15f3141cd1f087ceb1fa199e48b128bd7b3baa0868426e8c506e33f126e98ebca155e7cfdec5801a8c0edb1c05493963ccb57a3f6c8df4680eea7b0037e45e8d236abd24f15354738e2d7a2bf8ff2f20e42eb2cabb426bb255362086d1ebf16a87e3d6c6047ad4512a2887cc971a811d24c579868f9d220051ddd49f7f4fe6b92f2c0a68f1becffb9d22e105ef1407f2a511df9d2f62b8245f8b284b1c5358161c8c38c18abcbc519b6e1b1a4442cb752703d7c3481ada7d57afa3251a59ebb99e6ce1db6c1af4267f197012a92821af94f91c3403bd2d977c39fc1ae238376ed15f868de539474003a1f5c88aa1b5e0df02839ac9ef7efe1171686a78b11c447a4ad69c5a2cd0d8f3e133244b2dd3b1b1b1af0df2a3ede3eaeace044504e7c2db004a43735b158917cb7c3e037ca011a2132281dd0985a8fff5027ab726041af938145b0b0f1a00bbf85883923047dd0ffc74b8d263885a637b7c65e435b33713bc675f19e3cf690ece1baef8727305ac41af50a6323ad3e841d2c595dad6add93581e3049afae65ba4461c1e1f6f83ab24e212c6f5372862f08d731e6d1675e9b68fc5311f88048e002023247e21748a8368884c272da675c1c96cf10c80a9cc8807ff27a24e83b63075215d06caf0280aee4300df3b6fc284823e78b3c829db2989e94c4928812f2bc65a83ba4f846e3c16128ee781d78b002196f4e90f1d961fe7224fd590dd43e16340a79a4ecc136183c542dcd666acd8ec983227ab339b428b40d087fefc540be277baa0269bb53bdff167a395f6ef0c34b994dd13e708c1433646aca99a934f5a35771f7a74a7ec28b75a0c6300cb01de1265a3bc5cd1231846a85a323a547d19c5160cf22f73bdc4cfa2876f1fd742bf4297872f145a94108e15264dc7e2c45dd80ece3da2625475ed70f80309d1d6a47d007dad92ed6949d3651b68c655dd1b86724e8efba49c804a089cd2dd3aae87f20e16e9a85860496c02217957cffd8e60867229a56e460f969d49a2a0608ad0f57144c0f91c3373e001d0dbd892a48a715280a56d3abac6b84b056e880d5777e2aedcd16b11a6fea1ce4b391d46a61b65d9c05e36216ee32f3d2953e88de7077e9a9354ed39f43df0df370355801deb95c153d6402cb7778efdfd1f7b355025c4b0f10ef8fb3bc8c42aaee49998e4d4be5a49bdf2e98c5c0c25c4abba0bfbb9d2e79463f5be7d8882e32be557e1ff262a4039556e0d80310bea963d1c2423815fc9fecece2fbe01372bb81187eb5481c2be3898d1287c16ee979acf4cbce53e15ff13e937db77af80fd8bf9be02295a37ae485abc8f62211c36ee76cc41d24200bb2685a1b70bfc992dd806e1ac565c7f64811b96ea08b0f09f3df56199a2c2233a5d2003dbef2913319830fd44a6a7ef14e0c76c1efe453ad538f83ec91f17a8df69f68f24c980f8d7d409fc882d7a9b60cf505bef792e4bc8fbf2afde0f120d72596a2bbf286e0ad18bac09180309658564837cf727383ed01ba6c5da025b6349897cb169b5a0c4d8267f4ea6fbaba87eff757c35114e57acac866f9ab97ac9a86a675412d1afabe2b6a2ee9c6f3c616d366076574143cb5fba919130ce985851ec6df0b099c10193e9929228079b3bfff09984090eaf68dbc0af00931f0d15a0d120a1926bb35d9a4134629b161bb6347a879023042e098d618cc5c0e03cc0db6ba42cdfa7a9c9766929cb495b97580cae55f95f7bdb9e219df7dd246c98f4069396752afa97c616ed04d726f77ad1f27800825750dd9a0c34a101d3e924a86cc173b5d567d1ab553dfe4e1be4a68af66d649a2ba4148995a9b244ab0f1f89b14978a9bc39e6316c4153c1ac6c6f99809bfed871cfbf0b53742c0d94e9f87aaa455da0b06a07390eabf3386a6474ade3eef7b76c306debc947ae8ca61ddd5984506b862333b21ca2e5cacc15b51f538a07a088c2f501ecd4359e30d6a4eed6f4c1239a6b94312202620f11af1b6459ab272c9aa82827beffb264c7e24dcb4b2c0ee994bfd1d3da17bf5a47e568de675f5dc4092dee77d92145fc3f5d55e9024a986f450dac86113472b86ec4e60a7cfa30d9b2ac10b29360b4864defcbba6157db7c84b760b307573224e331a52f562d9f64bff240e92f60e539c1bc650c79e4dbafdbf907d1db2605f3a32a2e21d2f1c77e0318f6840899cb0940215ee462b07c0f1ba6273d42619b8a5e9a088f840bcde062b26d29856f61a3ec636e90aaf6a09fd9c89be2f0a4847171b43cd80c5b71b17c9ff5a5dd7207eabc58820d5417da7e1b81ed2845bfd34437b920b93e28d5ab5b00527e7a189494a8db28c391adf43260b03000d378813eb733df0a733a783e1bc1a3d3013da928ea140a7fade328d9965048ec00e57e010bc38ef64a4ba28b1ea60d297f879d2ef4005f3186d1c6b2d6dbdc9a5990c43498af99b65638ab0ec6875177e6cbc604e93d5d3e5b6867218a4b6e12457df246ae558a06ba52f160869367c98ec70633b7033ebacf284d40f72aa69d83709448d5d8d71b41f46c6bd3df28105e3cb2cab48466eefc3d96f35eaac1c0fa71c296539bb8b6f11005766e9782c65fe05978aeca32fd9617a2420a5d493340727439cae4de408223f623f62aa535ef254585455ad8e544cecf2786e471a0fa1a715606a1ff0c04c17b74a9c09676beef7117ef47d9aa6b88a07f6894e684ebbc6b5640154bc1432dabcda42f6f3c5447a48ed3a02b5ab4b99819ee86c9dde2ad31e2924f89b8639cdbdf46c6be34b548930aa729a1e77a9ab629ae52582acc64516a44aa20b3bc8d724f74ccdcc86e8f2ff50a3d9e70aa175c457a5bb9747a48dbd8b305a1b6ea839502c9b2732d11f8e1ba29fb20d633c83b851f586641e04d224d1820e1a6192cec576ee6a27fbfc96cd4a52ac1da66d963b1797f663a45d1f5218f9b8ee3e82d1748a06f5d5520aff810851e561a0ecd8d8a2dcf4b891d91043caa53fa892a357c61354b46799326ac36f52ff058245dd3d21dfdfb815bf519e9af747caad60c4dd2407d68793ac524b177648561bc81d0971bd1fed9d8597ad0b1f8d65db538680231d6be6cf34c6058b9afa6f6b8e4cc85953f1260e0d8b915420f7938b5266b14b8e32ba64fea97ee3b145cddcf3d1af66133ef03f4888ccac3c7e3e0105046112901d0d34261f9fa456d6db161b1c0d300a5ccb040f0cee728ea4712aa235677071d2fbab22371c6ecbe844e9a125d2c52129e74128ff9ed7db7f16a21d6535a2b2d81e5c97e7c164e78526878e0dfc2324a80fc1084fd05833fe1181312e82a39caf74d050bd5de5eecdaea4c504ea1940e81a3d212f5a6651025106dff2d131d9498d95123c5bc3fe90ec9b27876748cdbe9c9e9286e820ecd4b324c90c8a7b2450e5abd0ec0cd6d166278e86c00ab7c013d63ebfc5c784d301b7772c2f73f2f9d975db931d2289be4f56c75577b73607b09ffdf67852a3c98ef281aae07c3af3b740285265dff701bf5be07844df1f9298425c1c0409d8f3a21619e4ab2c3b7f8a9aef3669f7c119d724f69b0cfaea61085bb8faeb73910912eb1de0c7e640270e220f7e57ea1875444fccb433c44fed0fa1168e30504157676e7ea75f1a3f3104753bca599a0171f9f6c05d7ff02ac84584d4a1ae8c0c16e2b0ef6ea30548e0f13ef8b3f79084322af8b306f576285f23e7195e1e489e3ffa3c46ee252185408", 0x1000, 0xa}, {0x2, 0x75, &(0x7f0000001940)='cmp\x00', &(0x7f0000001980)="e45a2e5ba89356fc14add0a8b10caf424127197f542cb22f5069fcfa4ba500b5a01ada575e12e30de296a34b2944ff4c250e7a26b4efbe6e7c7c956e20a2f1b9b0bea6f59d268c9e7b592df01386ed8024c0abbcd0f79e0f0c73ecc6cbca54578d6f61a3beebe672b802159bdee26fe2cd94b5d181076d375174e8fa2887d2b30185657d7808f00671e8b688e795aa9214a415d0c2f8b1fbc1b1018cfa223658f42829774afb00d2411972534625046c53d6e2143cdc49705d68fa00afbc4be929037c579aae43142e2e2e208dbfb6", 0xcf, 0x32}, {0x2, 0x0, &(0x7f0000001a80)='syz0\x00', &(0x7f0000001ac0)="2194a24ad693f0072f2d03b17aec699ff7a38abf552f8a0709d561022fdb2b6b2d905b80538ee9bbc3f5da7b0c1e66856002918e3c43e7469bf4a24aaf9b7d2970088a72f2bcb3b82871126ab9", 0x4d, 0x20}]}) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001c40)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9f"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24008000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x844}, 0x8040) 2.977652003s ago: executing program 2 (id=1709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@mcast2, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, r6}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff72, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x44045) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'mptcp_pm\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '-!'}, @NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\\[!'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003050000007ac1d2d8a51bfe39f2597b29e0001e07000000000000", @ANYRES32, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40440f0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000f4ab00e97800000000000000000a00040f00000000060007000400000004000b00158d40ffc3e48c08d0fbb076d7a2c30d5a355af84d562ee1e59f14d567464b3b1af28813f28004819530b482b7dcd26d3066115b4370d7d868925ccd07bf64fea3bd091163a5d837a50d3ab47aae4b0a03a2de9e95b3c5600f0b9d23866d79cdf4fb2f26569bad1d"], 0x24}}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 2.812765042s ago: executing program 0 (id=1711): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}]}}}]}, 0x54}}, 0x4000000) r1 = socket$inet6(0xa, 0x0, 0x3e) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$inet(0x2, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x1}) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[], 0x9) getsockopt$inet_pktinfo(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000140)=""/93, 0x5d}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r7, 0x28, 0x6, &(0x7f0000002080)=""/4116, &(0x7f00000000c0)=0x1014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() write$cgroup_pid(r2, &(0x7f0000000180), 0x12) 2.811848973s ago: executing program 3 (id=1712): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x488, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x45c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xab31acdac142b632}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PRATE64={0xc, 0x5, 0x34038eb156557610}, @TCA_TBF_RATE64={0xc, 0x4, 0x75522638a1d5a23c}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0xe, 0xabf9, 0xfff9, 0xfffffffc}, {0x10, 0x2, 0x2916, 0x401}, 0x3, 0x2, 0x16b1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x1ff, 0x400, 0x40, 0xfffff6cc, 0xf, 0x10000, 0x9, 0x5, 0x8, 0x980, 0x4, 0x7, 0x6, 0x4, 0x4, 0x4, 0x5, 0x7, 0x5, 0x5, 0x80000000, 0xffffffff, 0x2, 0x6, 0x1, 0x8000, 0x101, 0x3, 0x86, 0x8, 0x0, 0x7, 0x1, 0x9, 0x6, 0x6, 0x3, 0x6, 0x4, 0x2, 0x8000, 0x81, 0x7, 0x7, 0xfffffffc, 0xfffffff6, 0xb7, 0x1, 0xa65, 0x5, 0xfaa8, 0xffff7fff, 0xcd26, 0x2, 0x80000001, 0x406000bb, 0x1, 0xd, 0x80000001, 0xfffffffd, 0x2, 0x0, 0xffff, 0x400, 0xe79d, 0x9, 0x272, 0x5d, 0xdf, 0x9, 0x81, 0x7, 0x7bb, 0x2, 0x9, 0x7eaf, 0x85, 0x2, 0xfb5f, 0x1, 0x2, 0x0, 0x21817b87, 0x1000, 0x200, 0xc91, 0x3, 0x3, 0xa8, 0x491, 0x7, 0x4e, 0x100, 0x1, 0x9, 0xfffffffc, 0x0, 0x2, 0x7fffffff, 0x5, 0x3, 0x8, 0x8001, 0xfff, 0x200, 0xfffffffc, 0x0, 0x0, 0x6, 0xfffffff8, 0x7, 0x8001, 0x6, 0x6, 0xb, 0x6, 0x10, 0x6, 0xf64f, 0x1, 0x7, 0xc34f, 0x1, 0x8000, 0x0, 0x9, 0x3c4e, 0x3e8000, 0x294, 0x9, 0x3, 0xa, 0x1, 0x2, 0x999e1ab, 0x1, 0x5, 0x4, 0x5f00, 0x582, 0x3abe, 0x6c, 0x1520, 0x7fff, 0x0, 0x3, 0x0, 0x3, 0x80, 0x6, 0xfffffffe, 0x2, 0xa, 0x800, 0x2, 0x0, 0x4, 0x8, 0x1, 0x4, 0x0, 0x8, 0x1, 0x5, 0x80, 0xff0000, 0x1, 0x9, 0xfffffffa, 0x5, 0x7, 0x0, 0x8, 0x5, 0x1000, 0x800, 0x0, 0x61, 0x9, 0x2, 0x8, 0x5, 0x2, 0x6, 0x2, 0x8, 0x8, 0x4, 0x7ff, 0x2, 0x7, 0x7f, 0x7, 0x5b7c3f9c, 0x8, 0x15fe, 0xfb, 0x4e8, 0xff, 0xc6c6, 0x6, 0x0, 0x7, 0x1, 0xfffffff9, 0x8, 0x4, 0x800, 0x1, 0x7fff, 0xb, 0x3, 0x5, 0xb1, 0x9, 0x3, 0x9, 0x6, 0xe, 0xfffffffc, 0x7f, 0x4428a761, 0x234, 0x3, 0x3, 0x1, 0x5, 0x8, 0xffff0001, 0x3, 0x3, 0x6, 0x80000001, 0x0, 0x7, 0x6, 0x59c, 0x0, 0x4, 0x1ff, 0x81, 0x0, 0x8476, 0x80000000, 0x8, 0x6, 0x4, 0xfff, 0xfb, 0x21e70, 0x11, 0xff, 0x8000, 0xf9, 0xf3e]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000f100800000004003792779a8e3c719953d2b51bd830047d5d01432e9bd2207d522d15661446896cf3d01325ea690230fe93e060dcfeda8a5556d852a1d7372f8b767d2a501347096ae88f931be37f71891189dcb1f30cba3911e29d11fb13398589d5ff5ad38162a26c03f623eb243a31e4d178eb1ad8980f886a797ed6d9526e0e0c788503eae855bc101539e0579f26d81a4d2b3192b49695c5df87f9cb9863b22e8ef909f8d9538dcb65f2c8754e2cdaccbd16a95778e5f53e728f648f26a793ce023aac31b74681dbc02283744705955971d0d474fa87dedf5d531727f27e2143c8b8923d72dba17b12dcd9d1038702e078981b6d775d5ed887dbe9f25794777ef1a3184377adde9ae0224bb6afd"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e00800b9cce380fbc03f1300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) 2.805708893s ago: executing program 1 (id=1713): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffd75, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.626607337s ago: executing program 1 (id=1714): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000004000)=[{{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/46, 0x2e}, {&(0x7f0000000ac0)=""/166, 0xa6}, {&(0x7f0000000b80)=""/219, 0xdb}], 0x4, &(0x7f0000000cc0)=""/69, 0x45}, 0x8}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d40)=""/37, 0x25}, {&(0x7f0000000d80)=""/233, 0xe9}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000f80)=""/188, 0xbc}], 0x4, &(0x7f0000001080)=""/112, 0x70}, 0x6}, {{&(0x7f0000001100)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000001180)=""/203, 0xcb}, {&(0x7f0000001280)=""/248, 0xf8}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/244, 0xf4}], 0x4, &(0x7f0000003f00)=""/198, 0xc6}, 0xc}], 0x3, 0x0, &(0x7f00000040c0)={0x77359400}) r1 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x44800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) close(r11) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 2.164158069s ago: executing program 3 (id=1715): r0 = socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0xfffffffe, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x40) (async) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x45004) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c00"], 0x20}, 0x20000890) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003040000002cbd7000fbdbdf25020018000000007f7b0000fe070200000000"], 0x20}, 0x1, 0x7}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) 2.134447983s ago: executing program 2 (id=1716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x50}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9f"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24008000) 1.935683691s ago: executing program 2 (id=1717): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2c, 0x2, 0x3b36) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5, [@broadcast, @remote, @remote, @empty, @local]}, 0x24) r2 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2121) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f14"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.87668216s ago: executing program 3 (id=1718): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000540)=0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x4}, 0x68) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_emit_ethernet(0x62, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}, {@empty, 0xe}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={0x0, @nl=@unspec, @ax25={0x3, @default, 0x1}, @xdp={0x2c, 0x3, r7, 0x33}, 0x6, 0x0, 0x0, 0x0, 0xeaa3, &(0x7f0000000340)='bond_slave_1\x00', 0x2, 0x4, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.876196207s ago: executing program 4 (id=1719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x40, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [], "ab0924172f9c2a1d"}}}}}}, 0x76) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800060000000c"], 0x4c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xdc, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f391c88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754d9c4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x249b276d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b316be}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x472f1f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d57e01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x114bc896}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x774fd986}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0003000006000000240012800519830067656e6576750000080100000809000000000000060005004e2100c3b2891bbb8019424b0c7e2b00"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x318c, 0x0, 0x0, 0x0, 0xa3}, @generic={0x7, 0xd, 0xe, 0x7f, 0xda}, @generic={0x2, 0x6, 0x0, 0x5, 0x200}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @exit, @generic={0x20, 0x1, 0x3, 0x45, 0x48b}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x80, 0x19, &(0x7f0000000240)=""/25, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0x1], &(0x7f00000002c0)=[{0x3, 0x1, 0xa, 0x7}, {0x4, 0x3, 0xe}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x3, 0xc, 0x9}, {0x4, 0x2, 0xe, 0x5}, {0x0, 0x4, 0x9, 0x6}, {0x1, 0x4, 0x9, 0x9}], 0x10, 0xc}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="4c0000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000002c002b8008000800", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r10, @ANYBLOB="080003000a00000008000100", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @empty, @local}, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc23000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f00000000c0), 0x0}, 0x20) 1.814137828s ago: executing program 0 (id=1720): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r2}, 0x38) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB='L\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x74b0dc4e}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000029c0)={r7, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, &(0x7f0000000240)=0x9c) 1.578213675s ago: executing program 3 (id=1721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback={0x1000000}, 0xd}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x480}, {r3, 0x500}, {r3, 0x105}, {r4, 0x400}, {r1, 0x120d}, {r6, 0x2008}, {r6, 0x8023}, {r2, 0x80}, {r5, 0x16}, {r7, 0x5000}], 0xa, 0x101) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.516404216s ago: executing program 1 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9f"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24008000) 1.25672611s ago: executing program 4 (id=1723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xc0, 0x8, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0xfd9}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x22, 0x7, 0x1, 0x0, "58b84469911e326ad931c1c337c2a61c71c6df2406056ac40b78c4e0f5ac"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8080}, 0x20004000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, 0x0, 0x48000) socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x2000012, 0x57, 0x0, &(0x7f0000000c40)="63eced8e46898579faebe4431986", 0x0, 0xfffffffe, 0x0, 0xfffffffffffffd69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x11) 1.25549949s ago: executing program 1 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000e86d29852d800000000000000000000085000000610000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x174, 0x0, 0x1, 0x70bd30, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x150, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce58405008000080000000000060000325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x3, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00043bbd7000fbdbdf2500fffff50800050001000000"], 0x1c}}, 0x8010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000640)="f8a5ffece0692da2b89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e68382732f8e4ae645cf8c760a5ccd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140)=[{r5, 0xa0}], 0x1, 0x8) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xe0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_DELAY_DIST={0x52, 0x2, "4ede9be73b8ba616589dcd567e5aa63fbc11e5074037f5bb79f4c57e451f11b9decaf4c58fd9c1ffbfef9d264a829fb5dfd4ca05fed02f8dcda806a5dd04431fe9ef377478e50d763518f4f7c0f5"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'macvlan0\x00', 0x0}) socket$inet(0x2, 0x1, 0x100) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f00000000c0)) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000304f9fffff7fbdbdf2500007400", @ANYRES32=r8, @ANYBLOB="089805000450030008001300", @ANYRES32=r10, @ANYBLOB="1400617000000024000e00020000000000000005771fbb50000000060000000000000007000200"/56], 0x60}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 996.161156ms ago: executing program 4 (id=1725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "a4c5f94e0bdda716", "7123664e961295f342a3132c08f09eeb", "7d226214", "81d4b69dc1d6fb6b"}, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x844, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x818, 0x2, [@TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x8006, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x0, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0x56, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x1, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x6, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x101, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) socket(0x2b, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}}, 0x20000000) 819.813613ms ago: executing program 0 (id=1726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0xfffffffffffffe22, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 668.437598ms ago: executing program 1 (id=1727): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000240)="2c26d1726c7b62805bb3c9417b1a86f20cd957d7613cb4639ef202acadcf344ed04d6e34b2dc3793792b630277fae0e4583dff5518b408f01bffdb7c8a4cfaa0301c2ed6eb7bb7948da6742b101de6189e301056f9640efd240a7be93dded1eb0ea290fe6ec309f6e4138a17bf554801cd18f0889adee6e45b") r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d0001800000000000080000000800", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x78, r5, 0x1ce023abdf4ad0ff, 0x70bd2a, 0x25dfd9ff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4041000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002100850000003700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 603.602623ms ago: executing program 4 (id=1728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9f"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24008000) 450.182714ms ago: executing program 4 (id=1729): r0 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0xffffffff, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4048810}, 0x40010) 171.878475ms ago: executing program 4 (id=1730): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000300)=""/224, 0x63}], 0x2}, 0x2}], 0x1, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x4, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115e5, 0x5019}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x6}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r4, &(0x7f0000000200)=""/162, 0xa2, 0x2, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20008222}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1d2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}]}, &(0x7f0000000640)=0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 164.826482ms ago: executing program 1 (id=1731): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 111.611434ms ago: executing program 2 (id=1732): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2090302}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xe2c0}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb0df}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8f}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x44000001) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2090302}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xe2c0}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb0df}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8f}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x44000001) (async) 0s ago: executing program 0 (id=1733): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x49, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x8040) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getuid() sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="781300001e0021002bbd7000000000000900000005002a000000438068ccbcac08004f00ac1414bb08003900aff4f7aeb2e1fb30e65e84aa3e9a35abc5ca6f71e612372347a9b744ef05000000000000000000009d4d221813bc0ccb39c984df18d3d925c391", @ANYRES32=r6, @ANYBLOB="090006002d28c55b00000000fe005380b42b9ef8260b665619983f11074a1dc61d6efe3219d3f547948e7b27f12d26154b29171fab50ab393f57e19916844b3641c205c3a174376ef642941d89c64eee079338818013d5cc3bc4aed6382c82ad2a3321bae4dc2e75df15c47f85dc47ffd53aee73d3ac537114336f16de0b5a5b3655f0fba2a697e22bcbabf57bcc9ef8118e40a900a5b55e2da450d54f9223138ceb9ad602b453cb8f8d2bc0fa738563c01829d29188a5596579b47c30a2a853abaee6ee9d50980da3d04ebece0475fb49859a93f9d0fa27d48d10ac19134f65da77790eaeb3114fa5a3bcf2003a3b700ebe05992e758eb0955b05532ac0fc593cc1c67abc9c03e4347b0000dcb17d96b6350cee57108f26817fd74fd8f9b1fd3d6310c055613e890517f06ccf9cef559aef8cd8dd484278013326de71138adebc115b0d735b3e8b6d900c35c05851f6c12771137124e3e201dc9cfdee5954dcfd02a97b00a14061fa9db83d7e0b160dffa17d51715d7d01e2787b735b634a3bf0b955888eec172c347abc07363d9a8ec155a02d1b2ae27d16c865806917c88b9f6f3bd4b6cabab4ea8fa5badb5021536d8448c132c52db4fd5c539b46d0645a469daf7691648fb060d951411b50359ad6c4173c792154602f6d5d8785817cf908ff8cc055dd14fe940c47babb2766166e712a36e8de97f5227451610dc2096571f51803f1fc40c2da866fecd01b388bdde8b3aace3262c671ff82cb2bbb3fbe1d7405a4434106b2a4451e96ff57b99fb90ef3e46b5acea1008533a15fffec75bdf2c218c1fc3dde84357982cf5f6101588f29e12a3832027bccfd6e9fb55f2b60116685231a6c4ed934d651298d517be86459c21440b347ac1763d5ac7d3d2fe1f4e912dfed846e2e098dc69c7283f68c9bf395df70852eb07fb0fec93b003b03f9c3966fb0486b4364b66c13a198499e743c769865a0f2e16c3dcfedfc0b052f9cf927d7f645b291445c29d5344337079a0fc3aa007b6ebcbb3487960b4cd7406da742082516d02cce666f15c62b7d9fbe5dba64a6b26390b81fd4a656fd68cbc13cbac3149e9168a7d8127936949bed164e7e7ca578716582d91b9bb709d6dc76f5567b1cf031cae6fbcc50c54f398e179bda3254ed1fc6f3abf80d78666852ca5d9988274ccfdb3cf6426065981aea4ba35774c74f689e818eb54395d91e9d5b745d5da72518fc6735d9201c4c16616c00be95b340edcdb184ae4bdb8a8edef825ae2452cab85e9c8433729bd2d81f6eccc65a226586a255e7ffda26513f07e7a966f11efbf2bebdb571561a31c262740c35bb52934947e062a5c6687e964b47ef3d18d8c69a8f9aaabcdb04090aa7aded6a8554f8282a0cb7b78c207034f05d229dafc22dafe879c26ac5309a0d2de19ac26deaa22c98924ecf86de51caecda9214841e5b9cf33672fa24c8a96aec13836f80f0c99bedbc421ee3dd91da389d8de0e30c56d94ab6c4f56bd051df9bf4b26e78d07c209e286e814dcdbf57381ad8f1b74652822b0dae661f738fd4d97c0146771f1d6e432d9d03046acb0a10034e9454b48a2aef0e6d5fd07c21b70650064290bf6d96177f3360955fda698a671144ff9c66e433eb478406047a439cd2dd9008f2f4ca3d913ee4325e108fcbe2878ec39800eabc1bd7b65e3b28aacf30c8d39e242076bebc2b5526b64692d3c9f9304f27a16c7e1d328c3217e366faa50a047dcb1f72b2f37057391933ebff90c0cd570ac32732b8d2542a0f16fccfe4f2020e35f1de2f98788ba5c56c9d07f0780973b555e6914fff62711f28f03e28502b7925113c09300660f630cdd806e53b5a65c5a35adf49e5185327159974476138e15f7a13947f3e5b01b7a8924d4236ba938fa0a9ee05988347784a5e1595d43d9769aae33a4be154bc1cdc5a961637c55b16b085161b40173a9905b9215e82cb3acd26f0adc9290916da52fd2dfca7815f80f0387d124b8426e498698026414498edbc2cd8dee454fc6c6ccc0efa6c65b854c1d00633d49f49cb79fbda6e3afb5612009f6b4ad01b4c3859c505438e267bc33c1ddef4964c7172cda8ffd4878fe38f146e1d02cb7d67bca6c25f20532e5747837e0f3626e2f20cf25359cc571bf0bd90657c19b7ac7b7b4f1ee4794ae4200927b09be509cfa6d787cf121426335c06ff9cc7f4f4c5caefb673372e66690440bfa1d7b3ede264003b7585f450c0af5deecd6797017238c35b05f697e511fa0e0e638c57ea038c9cc5d573e705a4a536bc393b3cd51f6298423739a8aa595bf2069d19ad45061d6587c86e1985b7b624b19e41583a23f5cc743e57af3f65d790a670a671be95d968baeef2df6a1f51dca08f61eb939851e63cd1845818f98aea70e83a864404c88c4146490f41e484d5c305fda337d90915d589fe29038eb0e13defaed9a9a1976def60150c861ee5e95a549c11552bac4cdb580f1118872b4a74475a6486d281e20043953cb05c204b11c1104e1a5941039bbd35e05a1ab3f1a74c8054d016e8a3251e4eac4de9084180e66cc73a3085ed6a5b980c45755afd727dbaf98026dcad56b1184133e33524b37294470a26fb97eb3a0646c2a7ca728420853aec2b824fc02be9e899f346ebec3efc04e390c9f839cdc6ebf17859fa1d4e883a9f463e8a8981608ad3237e6d2f0fce200d3b37eb3e8eaea974eb7d597f91e827718d4a0a65e885b8e720c552a43bf0e5ccbf4d81fa0730289afeaff2858f94f96fdb109c4552665995af6334ceab331bdb0121a4e6d75c81d49dfa355bd9213eba72720fcef7e881f53d5bd6d1eab8d7e2c07bea6b1d5cbd8de69ed622d867e7957c1044b65c7f5155b174e7764c253eb9833feeae0e3e01a269b0e21b17f5e4ed6424bafe762c6fdcb12cb4911297506f1d4f42692b62dcd2c8ad445f5eda0213aca353956930209b28056e6c8f808676e8e38370b6d16c6f8a2bb9a2c2a8bb29fd32eeeb45065d61b2645bd7013a3de767a6d16da4a434ccb9fd6e9b872306d4896851c84ce1ec1e4e7e5997e4427cff6936f5fec0b0c6f3d8643e0e06c3bb02713b7260c482fe6a24496b26e629e999aa51a50f5b806bcae12fd4b53092dae9585b13566def35cc40356b2cc1cc6918d27453d37efb11b2f1a169d2e7587822f867a86c55f1e1388ac1abd49d325c61af3ee64d25a627e7cdce0247785b776dbb2836d95dfdc7dddfc23f6583c4fa80e7624d153ab5974ae09ce5d0b0d26a43810f8035f81d7fe5273e73e819bb2dbdf77afa43fda02ffe8c926aa43feb41f1078a3fa27e38e8fbb8b20799fb6f302dbff87faca47a49a7c77279b6c6f40758f8cae4c605f381c890d53d7ab211c3146a01ceac2026617714a40ca857550a54cf0bccf0bc51f11dd4fb7d55084f5d365977d2ad60592761794cf1d752dec3a3dc178da61702e3aa28fc17b1a34dcee2fe0927ac660a45a63596ce8cac2015141bf912d1f944195e11cd1c12b135766bb25195e01d59e1ae263b53b9b4fc6bb0575cfdd53408ce34315fd179a00865b459e3a5371bfe65cdb6e4413cbdc4a3eaacb9a3cfd3de8d48ac1f723e375d2837ba3d223d098697c58cd247cff97c34d59183a7a07c934b47ae156a9003ccae6b6426f6579179f21cdf5c9a4c0957769f300648f22c7f956c5a6364545d16cd026df2f65cfe3cc5cf998ed4e000e305ac3e04afdc2cf5d0fa1cafe9c6db05ae8a97e779f2040695eb7973f1557096fe2839250045d8900212a4c9351e40a8c427a31174f8529924baca195adc300a6209daad0c3cdd81f44f67e8b88157d854ab875f87437783716dd5e19eda595e77cb15ecf46cb3c36bf70a906ecfc6e9077dbbec67b6752e11d35c8069a336b809ffd30319e2c20978302c80d337fc31fbd4e64c5bbd85fbfca799706dd73c5c0ad7f0cc4469ba19698a16220a2765a65d4d3b52c9ff4f3fa96f7780d5a3d112468192cd94902d3f53d8fbf8fe099b63950649e557269b8d463ce917e751e87befa7d20d934c4973b27dde8a31377e66b926de16546e985466633a5caadcb0d483892aa3cb5459c519a591d9f357a4fa64ec0e8b1ae991c440b096017f9a994648309a181c721084ebbc29ed5b0a109d54f6a23469fee6088e8fa50e6e740a829accb2e2b3f3303b94dc6cd2b2564c603822025a5ab0b72629bcc2e19e7f755e314d766b268c36f94c0242125c51eb1d73e1cde3981492143b809c1739c624d13ed68888dd2407664ce6ced9d571f293ef6377a5b07a3be96bf17c1d572516bfd5d8ec73f272bf68a524a3b02111240b3e08e01779aa73ffbf9e20e4aeb7487bbb79474d23c343699dba3d939387d8477df9d228aeb1e90fed7a134eb1b3050613ec6346ba8b2e6ac2789bba9188594e2f498a7844ae4baf4068611fc7eefb225066e081e6284d269c1283ad9be239d80b3ec64de1d5dbf18ba678d9a9edd4d9d0f570b62b977ddc0beec50091826647b2ad56916fadeb03a0cb19c43a6562863d84fdeb26957d7b75e8f20962cb8bd78407bea93fb12ff60a2e6a40b3b23a510c7626b23686a68721466caca77a8523e9c934f05e2a93cbe4c5753467cde8ea45ad06cd2971a49527df49d135796ee9f9e1e8fd802fbe2b2016ff28b5067b559dc91183e18efc3039d2d9359eaefe6a6b5d3874b66af631d57b06428b7b6f9bd753f5d4842c6edff7ca2e8fb374a14ff87766af0498f2543cfa3aa637c93fe24750fdec0a70ba613f1afae686ade501dbfa38be0440862a115ce80991cee564252015cee1ffc7b439568a6c472d9459708bb8aa803567f696139359506cf480599e0b5add0f142fc9869e76e2445169df1adac7dcc625c419f506ad527afe55ee84bae9ddb8219e807e554afbb9cb1cad1b9b5259bfe9e3dfb0459de512a00f60afab8afe9877499c9b085e9757ad9e3e1b02419bc74ae737b747eb4640c0ce5384e150636fae7f880eb3d13f786b3ce0e8e16fcb0f793324ccedb8463ffb09b6abc49bf0b06b52088ce9b27e0266b477a0236b3498b425ecfcb478b5140d2fb8e2c95e01ed644234188d62937698e37da4378de91741a95f93e16855d745df2681ff43d30bff3e3a0bd410172a5d2e46bef6ae67465a2652bc38510b9c6dbad9c86d2b31c4a82c4fb40c091bb6d9236d05378e7955fe8752593a38238fa850d2b7d9dc6ec49e05b1d4a726e029b4727a2cc7ba0bc61e01a9dcd45029e74b6455436195530b30e83cb5af9735acc82e9f79fdff9828686106e19e1d38f6db1c828d9d817aa7e685f6625de07f1febac4d27fc8d5fd98a02f01475b14c6b317e93aed12ed819a455d5fdb8d96ead88727baa1651fe4f724f4aa1d2ed37a1ffa8c1ddd30805498bee1c17d65083d11780107455034d20a6758172cd9c65b953732a9e525af2da20d66b58a85bf23a38f7f8ecd2278894b94908aa4df5307b61de90847161ff8dac6889a96417e1c4c13ec00e7e7f73913720553a338a179380fbf85841d73c637694f92cf1d7000907d817113c249627f67ea755f698848a52b07762dabcbbe835f55181e9eeadc4dea0c73967dd756018dbffec7adef0200bfbc27719d22ac6275e1ba3c25bfe0ee9275f8e0266d5d936414424bf41661b10ee4eb448dffe60dda1b8914de54acd504ba83b371eb7e29e7d998abbad4d749f444b5981d99c730853888e8a57f69dd511996e75aef5feddbd4adcaa0a546d0377f73694f30a1fedf2cea0ebcea603beacc45c302dc8ee2c6a9e61b4bb6224e1782fbcff539cc56943118ad164f41357928e2de0ee213cc2588db344ef9cb3098c7bda3c359737134158bc7c8c6e9bb841c672f43d7078c1d1357661aa57ddcd77ea85aa6e30dee43fad3eecb28c7e47f89b1cc47570f1886290ada4a7eb0d39bfbae0703d12fa6a2a9734b88a0f1d6ecf55aff0c3d3fc92948833e93ec6f3a40521c67c3be9749e52e6d3fd92094d4f52bab925801885ec791a53f5cef76bc9c2efcdba332a7e0585f6512ddaf8403e7ef48643c234fde72ffbf3c97175f31d23038117a5e256e84f5140b19cd601e61a7112138d9fbb75b22f5ddfb43f41022a54fb03c8ba25e61973fa74e0b71d9ba2f0f4362c1c7281f3d46cbd24c4821f403961de7423cdfc4234da4ed02f9f2b495f2d26c75a57863b1dd02591eb40605bb908c6929755458db39c25258536912b3b8409865ee22aa9b32e6d437a1f9a7bf986fc67dde80bc7e57c6e5ddeec3f88f88ed75466b27ada526bdff17296ee76b65090c7f4bb390996e2230432ab8d08f9d2cb4473d5e42ae80670fbfe54c710ef5180651b3eed4acb0287326414a046efcd2194f38d1a5d1425894847abfc9061e48e19e5a60c2af6d7fe44e1d42cf1505a820176800c0078000300000000000000e55c6a5f8c05fb31e83ccc1fa1bce2fda9918be43e53c7199156f2b9ddc3286861b85661d9a2f0672a3e323cdafbc80bea5639d3358cfa133a84225208f115cec77b7180958d722c0eae89a990a97a921b882104e6d2367950e8e1de31baa5362b59b60f50b7e684dd740050e120a09c1dbcca85355a71fc55fecef850b7ec1a08d650c744e8b367063f9dc62a095de78d9aeb0400df80809f77dd98f213e854a70029a54aebb0800ce8c39f30e60c9c2f51709883beb2c2714804816812519a929f98a1a9d0fe1ceabe0e76ceb160423279cde9926d81e4636f7201526df1aa924ab3160311bdfec24469034bc54b94e19377f8cfd31a4666d09216fa3dfe7b6c9a22a76ad959b50800420000000000b70bfdc4404033e54bc0b0498ceb582e73898c57a8755e7c6b0c341a3a46007199fb083274290e2d4e93c8fb0f38d149921663eb75c27e4f5f257f929094042e9caea4a248e8a9aec8961e73bcd08b275d7fc9769e00f7d7e8e108febc428d12f2f7000000"], 0x1378}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@local, @in=@rand_addr=0x64010102, 0x4e22, 0x4, 0x4e22, 0x7, 0xa, 0x0, 0x80, 0x73}, {0x7b1, 0x3, 0x4, 0xffffffff, 0x80000001, 0x3, 0x1, 0x69}, {0x9, 0x9, 0x8}, 0x53, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast1, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x1, 0x0, 0x6, 0x0, 0xff, 0xf6}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.057377][ T7771] netlink_rcv_skb+0x232/0x4b0 [ 189.057403][ T7771] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.057439][ T7771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.057474][ T7771] ? bpf_lsm_capable+0x9/0x20 [ 189.057504][ T7771] ? security_capable+0x7e/0x2c0 [ 189.057545][ T7771] nfnetlink_rcv+0x2c0/0x27b0 [ 189.057589][ T7771] ? __local_bh_enable_ip+0xd0/0x130 [ 189.057621][ T7771] ? lockdep_hardirqs_on+0x7a/0x110 [ 189.057650][ T7771] ? __dev_queue_xmit+0x2b6/0x3950 [ 189.057675][ T7771] ? __local_bh_enable_ip+0xd0/0x130 [ 189.057703][ T7771] ? __dev_queue_xmit+0x2b6/0x3950 [ 189.057727][ T7771] ? __dev_queue_xmit+0x1fe5/0x3950 [ 189.057750][ T7771] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 189.057781][ T7771] ? __dev_queue_xmit+0x2b6/0x3950 [ 189.057812][ T7771] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.057852][ T7771] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.057886][ T7771] ? ref_tracker_free+0x693/0x840 [ 189.057914][ T7771] ? __pfx_ref_tracker_free+0x10/0x10 [ 189.057957][ T7771] ? skb_clone+0x246/0x3a0 [ 189.057986][ T7771] ? __netlink_deliver_tap+0x807/0x850 [ 189.058008][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.058035][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.058062][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.058098][ T7771] netlink_unicast+0x75c/0x8e0 [ 189.058141][ T7771] netlink_sendmsg+0x813/0xb40 [ 189.058173][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.058199][ T7771] ? aa_sock_msg_perm+0xf1/0x1b0 [ 189.058222][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.058251][ T7771] ____sys_sendmsg+0x972/0x9f0 [ 189.058274][ T7771] ? __might_fault+0xaf/0x130 [ 189.058304][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.058338][ T7771] ? import_iovec+0x73/0xa0 [ 189.058367][ T7771] ___sys_sendmsg+0x2a5/0x360 [ 189.058390][ T7771] ? __lock_acquire+0x6b5/0x2cf0 [ 189.058429][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.058492][ T7771] ? __fget_files+0x2a/0x420 [ 189.058522][ T7771] ? __fget_files+0x3a0/0x420 [ 189.058555][ T7771] __x64_sys_sendmsg+0x1bd/0x2a0 [ 189.058583][ T7771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.058617][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 189.058654][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.058677][ T7771] do_syscall_64+0x15f/0xf80 [ 189.058705][ T7771] ? trace_irq_disable+0x3b/0x140 [ 189.058734][ T7771] ? clear_bhb_loop+0x40/0x90 [ 189.058760][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.058781][ T7771] RIP: 0033:0x7f494c79cdd9 [ 189.058802][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.058819][ T7771] RSP: 002b:00007f494d603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.058841][ T7771] RAX: ffffffffffffffda RBX: 00007f494ca15fa0 RCX: 00007f494c79cdd9 [ 189.058857][ T7771] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 189.058870][ T7771] RBP: 00007f494d603090 R08: 0000000000000000 R09: 0000000000000000 [ 189.058883][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.058895][ T7771] R13: 00007f494ca16038 R14: 00007f494ca15fa0 R15: 00007ffe035296d8 [ 189.058929][ T7771] [ 189.558867][ T7775] pim6reg: entered allmulticast mode [ 189.883630][ T7797] bond2: (slave lo): Releasing backup interface [ 189.949841][ T7797] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 190.018778][ T7797] team0: Port device veth1 removed [ 190.033657][ T7797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.068145][ T7806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.213087][ T7808] team0: Unable to change to the same mode the team is in [ 190.492187][ T7820] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.538108][ T7825] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.408613][ T7852] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 191.418669][ T7852] netlink: 228 bytes leftover after parsing attributes in process `syz.0.472'. [ 191.621489][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 191.708519][ T7863] netlink: 'syz.4.474': attribute type 13 has an invalid length. [ 191.733915][ T7863] netlink: 'syz.4.474': attribute type 17 has an invalid length. [ 191.895439][ T7863] gretap0: refused to change device tx_queue_len [ 191.911543][ T7863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.188831][ T7896] veth3: entered allmulticast mode [ 193.919470][ T7934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.959018][ T7934] team0: Port device bond3 added [ 194.013841][ T7938] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 194.041753][ T7938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.064055][ T7945] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 194.074948][ T7945] syzkaller1: linktype set to 825 [ 194.348361][ T7957] netlink: 'syz.3.492': attribute type 3 has an invalid length. [ 194.422118][ T7964] veth0: entered promiscuous mode [ 194.574427][ T7980] __nla_validate_parse: 4 callbacks suppressed [ 194.574448][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 194.723587][ T7991] bond0: entered promiscuous mode [ 195.209489][ T7964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.426707][ T7986] bond0: left promiscuous mode [ 195.471291][ T7986] veth0: left promiscuous mode [ 195.888008][ T8042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.506'. [ 196.086613][ T8044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.117632][ T8044] team0: Port device bond1 added [ 196.352299][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.510'. [ 196.557939][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 196.596190][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 196.643949][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 196.685217][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 197.246916][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 197.288279][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 197.696733][ T8111] ipt_REJECT: ECHOREPLY no longer supported. [ 198.527268][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 198.635641][ T8152] bond0: entered promiscuous mode [ 198.662463][ T8152] dummy0: entered promiscuous mode [ 198.718518][ T8152] hsr1: entered promiscuous mode [ 199.133701][ T8175] dvmrp0: entered allmulticast mode [ 199.175270][ T8183] netlink: 'syz.1.539': attribute type 8 has an invalid length. [ 199.493116][ T8198] netlink: zone id is out of range [ 199.520805][ T8198] netlink: zone id is out of range [ 199.547036][ T8198] netlink: zone id is out of range [ 199.569908][ T8198] netlink: zone id is out of range [ 199.585929][ T8198] netlink: zone id is out of range [ 199.624549][ T8198] netlink: zone id is out of range [ 199.667433][ T8198] netlink: zone id is out of range [ 199.703301][ T8198] netlink: zone id is out of range [ 199.716475][ T8198] netlink: zone id is out of range [ 199.789464][ T8198] netlink: zone id is out of range [ 199.872568][ T8210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.925371][ T8210] team0: Port device bond3 added [ 199.949965][ T8219] __nla_validate_parse: 1 callbacks suppressed [ 199.949985][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 200.348084][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.551'. [ 200.553811][ T8243] ip6t_srh: unknown srh match flags 4000 [ 200.622700][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 200.646317][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 200.675016][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 200.843689][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 200.991526][ T8259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.019622][ T8259] team0: Port device bond2 added [ 201.036766][ T8263] netlink: 204 bytes leftover after parsing attributes in process `syz.3.561'. [ 201.099081][ T8263] netlink: 84 bytes leftover after parsing attributes in process `syz.3.561'. [ 202.268745][ T8295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.279900][ T8295] team0: Port device bond4 added [ 202.564501][ T8310] tipc: Enabling of bearer rejected, failed to enable media [ 202.879392][ T8315] netlink: 56 bytes leftover after parsing attributes in process `syz.1.575'. [ 203.866710][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 203.918861][ T8357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.952868][ T8357] team0: Port device bond5 added [ 203.971171][ T8347] tipc: Enabling of bearer rejected, failed to enable media [ 204.012571][ T8363] vlan0: entered promiscuous mode [ 204.407713][ T8383] netlink: 'syz.2.590': attribute type 30 has an invalid length. [ 204.544512][ T8383] netlink: 'syz.2.590': attribute type 30 has an invalid length. [ 204.816391][ T8396] xt_l2tp: missing protocol rule (udp|l2tpip) [ 204.971652][ T8400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.981957][ T8400] team0: Port device bond4 added [ 204.993006][ T8396] net_ratelimit: 9 callbacks suppressed [ 204.993029][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.054836][ T8394] __nla_validate_parse: 5 callbacks suppressed [ 205.054858][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 205.099011][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.600'. [ 205.171007][ T8414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.180848][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'. [ 205.214113][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 205.336683][ T8410] netlink: 'syz.1.600': attribute type 2 has an invalid length. [ 205.381384][ T8410] netlink: 'syz.1.600': attribute type 2 has an invalid length. [ 205.395582][ T8409] netlink: 128 bytes leftover after parsing attributes in process `syz.1.600'. [ 205.523161][ T8409] netlink: 256 bytes leftover after parsing attributes in process `syz.1.600'. [ 205.544770][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 206.052108][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 206.167244][ T8448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.610'. [ 206.649395][ T8457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.698137][ T8457] team0: Port device bond3 added [ 206.754872][ T8465] team0: No ports can be present during mode change [ 206.966873][ T8476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.619'. [ 207.174756][ T8486] sctp: [Deprecated]: syz.2.623 (pid 8486) Use of int in max_burst socket option deprecated. [ 207.174756][ T8486] Use struct sctp_assoc_value instead [ 207.864872][ T8507] syzkaller0: entered promiscuous mode [ 207.886401][ T8507] syzkaller0: entered allmulticast mode [ 208.113725][ T8531] FAULT_INJECTION: forcing a failure. [ 208.113725][ T8531] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.165627][ T8531] CPU: 1 UID: 0 PID: 8531 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 208.165656][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.165668][ T8531] Call Trace: [ 208.165677][ T8531] [ 208.165686][ T8531] dump_stack_lvl+0xe8/0x150 [ 208.165725][ T8531] should_fail_ex+0x412/0x560 [ 208.165764][ T8531] _copy_from_user+0x2d/0xb0 [ 208.165791][ T8531] ___sys_sendmsg+0x1c6/0x360 [ 208.165814][ T8531] ? __lock_acquire+0x6b5/0x2cf0 [ 208.165851][ T8531] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.165913][ T8531] ? __fget_files+0x2a/0x420 [ 208.165935][ T8531] ? __fget_files+0x3a0/0x420 [ 208.165965][ T8531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.165992][ T8531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.166027][ T8531] ? __pfx_ksys_write+0x10/0x10 [ 208.166063][ T8531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.166086][ T8531] do_syscall_64+0x15f/0xf80 [ 208.166115][ T8531] ? trace_irq_disable+0x3b/0x140 [ 208.166143][ T8531] ? clear_bhb_loop+0x40/0x90 [ 208.166170][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.166192][ T8531] RIP: 0033:0x7f7f7af9cdd9 [ 208.166211][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.166229][ T8531] RSP: 002b:00007f7f7bed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.166251][ T8531] RAX: ffffffffffffffda RBX: 00007f7f7b215fa0 RCX: 00007f7f7af9cdd9 [ 208.166267][ T8531] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000003 [ 208.166280][ T8531] RBP: 00007f7f7bed7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.166293][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.166306][ T8531] R13: 00007f7f7b216038 R14: 00007f7f7b215fa0 R15: 00007ffd74493de8 [ 208.166340][ T8531] [ 211.734659][ T8558] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 211.959951][ T8565] __nla_validate_parse: 3 callbacks suppressed [ 211.959994][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 211.987648][ T8566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.003504][ T8566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.526103][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 212.659038][ T8599] netlink: 32 bytes leftover after parsing attributes in process `syz.3.656'. [ 212.835938][ T8609] netlink: 'syz.2.658': attribute type 39 has an invalid length. [ 213.046613][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 213.680140][ T8618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.719583][ T8618] team0: Port device bond3 added [ 213.734570][ T8642] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 214.095416][ T8621] syzkaller0: entered promiscuous mode [ 214.111183][ T8621] syzkaller0: entered allmulticast mode [ 214.423522][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 217.517245][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 217.524678][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 217.532426][ T5163] Bluetooth: hci1: command 0x0406 tx timeout [ 217.535337][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 217.838594][ T8669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.671'. [ 218.686006][ T8656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.828266][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 218.859238][ T8673] team0: No ports can be present during mode change [ 218.956713][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 218.985158][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 219.017285][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 219.044521][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 219.334601][ T8692] tipc: Started in network mode [ 219.384664][ T8692] tipc: Node identity 568d43640dd3, cluster identity 4711 [ 219.426147][ T8692] tipc: Enabled bearer , priority 0 [ 219.457999][ T8702] syzkaller0: entered promiscuous mode [ 219.483970][ T8702] syzkaller0: entered allmulticast mode [ 219.584601][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 219.617723][ T8692] netlink: 64 bytes leftover after parsing attributes in process `syz.3.680'. [ 219.619519][ T8705] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 219.638002][ T8705] netlink: 'syz.0.683': attribute type 2 has an invalid length. [ 219.681259][ T8692] tipc: Resetting bearer [ 219.711263][ T8691] tipc: Resetting bearer [ 219.770293][ T8691] tipc: Disabling bearer [ 220.143172][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 220.179930][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 220.258692][ T8736] FAULT_INJECTION: forcing a failure. [ 220.258692][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 220.274735][ T8736] CPU: 0 UID: 0 PID: 8736 Comm: syz.1.693 Not tainted syzkaller #0 PREEMPT(full) [ 220.274763][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.274775][ T8736] Call Trace: [ 220.274783][ T8736] [ 220.274792][ T8736] dump_stack_lvl+0xe8/0x150 [ 220.274831][ T8736] should_fail_ex+0x412/0x560 [ 220.274872][ T8736] should_failslab+0xa8/0x100 [ 220.274900][ T8736] ? skb_clone+0x212/0x3a0 [ 220.274924][ T8736] kmem_cache_alloc_noprof+0x87/0x650 [ 220.274948][ T8736] ? dev_queue_xmit_nit+0x2d/0xad0 [ 220.274976][ T8736] skb_clone+0x212/0x3a0 [ 220.274999][ T8736] ? dev_queue_xmit_nit+0x268/0xad0 [ 220.275022][ T8736] dev_queue_xmit_nit+0x29a/0xad0 [ 220.275044][ T8736] ? dev_queue_xmit_nit+0x2d/0xad0 [ 220.275082][ T8736] dev_hard_start_xmit+0x1c1/0x830 [ 220.275126][ T8736] __dev_queue_xmit+0x14d9/0x3950 [ 220.275151][ T8736] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 220.275183][ T8736] ? __dev_queue_xmit+0x2b6/0x3950 [ 220.275224][ T8736] ? __pfx___dev_queue_xmit+0x10/0x10 [ 220.275262][ T8736] ? __copy_skb_header+0xa3/0x4a0 [ 220.275309][ T8736] ? skb_clone+0x246/0x3a0 [ 220.275338][ T8736] __netlink_deliver_tap+0x5ad/0x850 [ 220.275374][ T8736] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.275398][ T8736] netlink_deliver_tap+0x19c/0x1b0 [ 220.275429][ T8736] netlink_unicast+0x730/0x8e0 [ 220.275482][ T8736] netlink_sendmsg+0x813/0xb40 [ 220.275512][ T8736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.275538][ T8736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 220.275562][ T8736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.275592][ T8736] ____sys_sendmsg+0x972/0x9f0 [ 220.275615][ T8736] ? __might_fault+0xaf/0x130 [ 220.275646][ T8736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.275681][ T8736] ? import_iovec+0x73/0xa0 [ 220.275711][ T8736] ___sys_sendmsg+0x2a5/0x360 [ 220.275733][ T8736] ? __lock_acquire+0x6b5/0x2cf0 [ 220.275770][ T8736] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.275832][ T8736] ? __fget_files+0x2a/0x420 [ 220.275853][ T8736] ? __fget_files+0x3a0/0x420 [ 220.275885][ T8736] __x64_sys_sendmsg+0x1bd/0x2a0 [ 220.275910][ T8736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.275944][ T8736] ? __pfx_ksys_write+0x10/0x10 [ 220.275980][ T8736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.276004][ T8736] do_syscall_64+0x15f/0xf80 [ 220.276033][ T8736] ? trace_irq_disable+0x3b/0x140 [ 220.276062][ T8736] ? clear_bhb_loop+0x40/0x90 [ 220.276089][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.276110][ T8736] RIP: 0033:0x7f16b079cdd9 [ 220.276131][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.276148][ T8736] RSP: 002b:00007f16b1616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.276170][ T8736] RAX: ffffffffffffffda RBX: 00007f16b0a15fa0 RCX: 00007f16b079cdd9 [ 220.276185][ T8736] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000003 [ 220.276198][ T8736] RBP: 00007f16b1616090 R08: 0000000000000000 R09: 0000000000000000 [ 220.276210][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.276222][ T8736] R13: 00007f16b0a16038 R14: 00007f16b0a15fa0 R15: 00007ffeea2f25d8 [ 220.276256][ T8736] [ 220.686202][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.695357][ T8740] team0: Port device bond4 added [ 220.826536][ T8744] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 220.923761][ T8744] bond5: entered promiscuous mode [ 220.929927][ T8744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.038782][ T8746] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 221.321835][ T8764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.794899][ T8781] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.823200][ T8781] team0: Port device bond6 added [ 221.933231][ T8796] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 222.094489][ T8665] udevd[8665]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 222.123018][ T8785] syzkaller0: entered promiscuous mode [ 222.137772][ T8785] syzkaller0: entered allmulticast mode [ 222.147897][ T140] syzkaller0: tun_net_xmit 48 [ 223.348525][ T8833] Bluetooth: MGMT ver 1.23 [ 225.641095][ T8832] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 225.692482][ T8832] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 225.754424][ T8832] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 225.863956][ T8832] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 225.878193][ T8839] __nla_validate_parse: 11 callbacks suppressed [ 225.878214][ T8839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.722'. [ 225.927183][ T8832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 226.145744][ T8840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.206312][ T8840] team0: Port device bond6 added [ 226.596590][ T8866] Bluetooth: MGMT ver 1.23 [ 226.740521][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 226.776243][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 226.869517][ T8875] netlink: 272 bytes leftover after parsing attributes in process `syz.2.728'. [ 226.935873][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 226.969871][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 227.887059][ T8913] netlink: 'syz.1.741': attribute type 39 has an invalid length. [ 227.931870][ T8917] netlink: 'syz.1.741': attribute type 39 has an invalid length. [ 227.951277][ T8916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 227.986112][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 228.014806][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 228.097896][ T8923] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 228.176677][ T8923] netlink: 'syz.3.742': attribute type 2 has an invalid length. [ 228.300128][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 228.725215][ T30] audit: type=1107 audit(1777067555.325:2): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 229.174341][ T8964] syzkaller0: entered promiscuous mode [ 229.199891][ T8964] syzkaller0: entered allmulticast mode [ 233.141320][ T8993] syzkaller1: entered promiscuous mode [ 233.154136][ T8993] syzkaller1: entered allmulticast mode [ 233.434722][ T9020] __nla_validate_parse: 1 callbacks suppressed [ 233.434740][ T9020] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.766'. [ 233.738582][ T9042] netlink: 27 bytes leftover after parsing attributes in process `syz.4.772'. [ 233.772526][ T9042] netlink: 27 bytes leftover after parsing attributes in process `syz.4.772'. [ 234.187669][ T9062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.814966][ T9084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.784'. [ 234.948679][ T9092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'. [ 235.024499][ T9092] netlink: 'syz.1.786': attribute type 12 has an invalid length. [ 235.040164][ T9098] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 235.347120][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 235.382551][ T9109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.790'. [ 235.405367][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 235.527291][ T9103] syzkaller0: entered promiscuous mode [ 235.554690][ T9103] syzkaller0: entered allmulticast mode [ 236.209096][ T9120] bond7: option lp_interval: invalid value (0) [ 236.238419][ T9120] bond7: option lp_interval: allowed values 1 - 2147483647 [ 236.265338][ T9120] bond7 (unregistering): Released all slaves [ 236.454912][ T9117] syzkaller0: entered promiscuous mode [ 236.479879][ T9117] syzkaller0: entered allmulticast mode [ 236.507962][ T9115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.792'. [ 236.582522][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 239.909413][ T9176] __nla_validate_parse: 1 callbacks suppressed [ 239.909433][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 239.938199][ T9180] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.807'. [ 239.948861][ T9180] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.807'. [ 240.141404][ T9185] netlink: 64 bytes leftover after parsing attributes in process `syz.0.808'. [ 240.628087][ T9197] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.682321][ T9197] team0: Port device bond7 added [ 240.738212][ T9200] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 241.246864][ T9217] xt_hashlimit: max too large, truncated to 1048576 [ 241.285062][ T9217] xt_bpf: check failed: parse error [ 241.406021][ T9219] FAULT_INJECTION: forcing a failure. [ 241.406021][ T9219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.441243][ T9219] CPU: 1 UID: 0 PID: 9219 Comm: syz.1.816 Not tainted syzkaller #0 PREEMPT(full) [ 241.441286][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.441310][ T9219] Call Trace: [ 241.441318][ T9219] [ 241.441327][ T9219] dump_stack_lvl+0xe8/0x150 [ 241.441380][ T9219] should_fail_ex+0x412/0x560 [ 241.441421][ T9219] _copy_from_user+0x2d/0xb0 [ 241.441448][ T9219] ___sys_sendmsg+0x1c6/0x360 [ 241.441472][ T9219] ? __lock_acquire+0x6b5/0x2cf0 [ 241.441510][ T9219] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.441572][ T9219] ? __fget_files+0x2a/0x420 [ 241.441594][ T9219] ? __fget_files+0x3a0/0x420 [ 241.441628][ T9219] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.441656][ T9219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.441690][ T9219] ? __pfx_ksys_write+0x10/0x10 [ 241.441726][ T9219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.441750][ T9219] do_syscall_64+0x15f/0xf80 [ 241.441780][ T9219] ? trace_irq_disable+0x3b/0x140 [ 241.441808][ T9219] ? clear_bhb_loop+0x40/0x90 [ 241.441835][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.441857][ T9219] RIP: 0033:0x7f16b079cdd9 [ 241.441877][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.441895][ T9219] RSP: 002b:00007f16b1616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.441918][ T9219] RAX: ffffffffffffffda RBX: 00007f16b0a15fa0 RCX: 00007f16b079cdd9 [ 241.441934][ T9219] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 241.441947][ T9219] RBP: 00007f16b1616090 R08: 0000000000000000 R09: 0000000000000000 [ 241.441961][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.441973][ T9219] R13: 00007f16b0a16038 R14: 00007f16b0a15fa0 R15: 00007ffeea2f25d8 [ 241.442008][ T9219] [ 241.870476][ T9229] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 242.074065][ T9229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.124967][ T9233] bond4: (slave ip6erspan0): making interface the new active one [ 242.138725][ T9233] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 242.176742][ T9237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.187730][ T9237] team0: Port device bond2 added [ 242.206631][ T9241] ipvlan2: entered promiscuous mode [ 242.255478][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 242.390283][ T9233] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 242.416231][ T9233] team0: Port device veth1 added [ 242.431394][ T9241] ipvlan2: entered promiscuous mode [ 242.509361][ T9241] ipvlan2: entered promiscuous mode [ 242.577633][ T9241] ipvlan2: entered promiscuous mode [ 242.627406][ T9241] ipvlan2: entered promiscuous mode [ 242.687264][ T9241] ipvlan2: entered promiscuous mode [ 242.748955][ T9241] ipvlan2: entered promiscuous mode [ 242.807443][ T9241] ipvlan2: entered promiscuous mode [ 242.878094][ T9241] ipvlan2: entered promiscuous mode [ 242.938175][ T9241] ipvlan2: entered promiscuous mode [ 251.402345][ T9261] sctp: [Deprecated]: syz.4.829 (pid 9261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.402345][ T9261] Use struct sctp_sack_info instead [ 251.517573][ T9269] FAULT_INJECTION: forcing a failure. [ 251.517573][ T9269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.545548][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT(full) [ 251.545577][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.545589][ T9269] Call Trace: [ 251.545598][ T9269] [ 251.545615][ T9269] dump_stack_lvl+0xe8/0x150 [ 251.545655][ T9269] should_fail_ex+0x412/0x560 [ 251.545696][ T9269] _copy_from_user+0x2d/0xb0 [ 251.545722][ T9269] __copy_msghdr+0x3c5/0x5b0 [ 251.545751][ T9269] ___sys_sendmsg+0x213/0x360 [ 251.545773][ T9269] ? __lock_acquire+0x6b5/0x2cf0 [ 251.545810][ T9269] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.545872][ T9269] ? __fget_files+0x2a/0x420 [ 251.545893][ T9269] ? __fget_files+0x3a0/0x420 [ 251.545927][ T9269] __x64_sys_sendmsg+0x1bd/0x2a0 [ 251.545954][ T9269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.545989][ T9269] ? __pfx_ksys_write+0x10/0x10 [ 251.546024][ T9269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.546048][ T9269] do_syscall_64+0x15f/0xf80 [ 251.546077][ T9269] ? trace_irq_disable+0x3b/0x140 [ 251.546105][ T9269] ? clear_bhb_loop+0x40/0x90 [ 251.546132][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.546153][ T9269] RIP: 0033:0x7f16b079cdd9 [ 251.546173][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.546190][ T9269] RSP: 002b:00007f16b1616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.546213][ T9269] RAX: ffffffffffffffda RBX: 00007f16b0a15fa0 RCX: 00007f16b079cdd9 [ 251.546228][ T9269] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 251.546240][ T9269] RBP: 00007f16b1616090 R08: 0000000000000000 R09: 0000000000000000 [ 251.546252][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.546264][ T9269] R13: 00007f16b0a16038 R14: 00007f16b0a15fa0 R15: 00007ffeea2f25d8 [ 251.546298][ T9269] [ 251.768303][ T9273] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 252.344427][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 252.438114][ T9295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.458230][ T9298] netlink: 'syz.1.838': attribute type 21 has an invalid length. [ 252.488326][ T9295] team0: Port device bond7 added [ 252.738146][ T9304] netlink: 'syz.4.839': attribute type 16 has an invalid length. [ 252.785459][ T9304] netlink: 'syz.4.839': attribute type 17 has an invalid length. [ 252.887161][ T9304] bridge0: left promiscuous mode [ 252.930867][ T9304] bridge0: left allmulticast mode [ 253.021137][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.710255][ T9342] FAULT_INJECTION: forcing a failure. [ 253.710255][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.771930][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.4.850 Not tainted syzkaller #0 PREEMPT(full) [ 253.771959][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.771971][ T9342] Call Trace: [ 253.771979][ T9342] [ 253.771988][ T9342] dump_stack_lvl+0xe8/0x150 [ 253.772027][ T9342] should_fail_ex+0x412/0x560 [ 253.772066][ T9342] _copy_from_user+0x2d/0xb0 [ 253.772092][ T9342] __sys_connect+0x156/0x450 [ 253.772127][ T9342] ? __pfx___sys_connect+0x10/0x10 [ 253.772173][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 253.772205][ T9342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.772228][ T9342] __x64_sys_connect+0x7a/0x90 [ 253.772261][ T9342] do_syscall_64+0x15f/0xf80 [ 253.772290][ T9342] ? trace_irq_disable+0x3b/0x140 [ 253.772318][ T9342] ? clear_bhb_loop+0x40/0x90 [ 253.772343][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.772363][ T9342] RIP: 0033:0x7f494c79cdd9 [ 253.772383][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.772400][ T9342] RSP: 002b:00007f494d603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 253.772421][ T9342] RAX: ffffffffffffffda RBX: 00007f494ca15fa0 RCX: 00007f494c79cdd9 [ 253.772436][ T9342] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000004 [ 253.772457][ T9342] RBP: 00007f494d603090 R08: 0000000000000000 R09: 0000000000000000 [ 253.772470][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.772481][ T9342] R13: 00007f494ca16038 R14: 00007f494ca15fa0 R15: 00007ffe035296d8 [ 253.772514][ T9342] [ 254.037939][ T9344] xt_hashlimit: max too large, truncated to 1048576 [ 254.154476][ T9348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.165589][ T9348] team0: Port device bond5 added [ 254.481206][ T9371] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 254.537541][ T9371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.454471][ T9412] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 255.468758][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 255.517469][ T9413] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 255.543179][ T9412] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.154406][ T9354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.313767][ T9426] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 257.331648][ T9426] syzkaller1: linktype set to 768 [ 257.354615][ T9426] syzkaller1: tun_chr_ioctl cmd 2149084802 [ 257.407643][ T9431] sctp: [Deprecated]: syz.2.877 (pid 9431) Use of int in max_burst socket option deprecated. [ 257.407643][ T9431] Use struct sctp_assoc_value instead [ 257.477337][ T9436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.514632][ T9428] netlink: 'syz.4.876': attribute type 2 has an invalid length. [ 257.541622][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 257.698580][ T9428] bond8: option primary_reselect: invalid value (133) [ 257.735053][ T9428] bond8 (unregistering): Released all slaves [ 257.765522][ T9452] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 257.789562][ T9453] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 257.874197][ T9457] FAULT_INJECTION: forcing a failure. [ 257.874197][ T9457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.943682][ T9457] CPU: 1 UID: 0 PID: 9457 Comm: syz.1.883 Not tainted syzkaller #0 PREEMPT(full) [ 257.943716][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.943731][ T9457] Call Trace: [ 257.943741][ T9457] [ 257.943760][ T9457] dump_stack_lvl+0xe8/0x150 [ 257.943805][ T9457] should_fail_ex+0x412/0x560 [ 257.943852][ T9457] _copy_to_user+0x31/0xb0 [ 257.943884][ T9457] simple_read_from_buffer+0xe1/0x170 [ 257.943916][ T9457] proc_fail_nth_read+0x1bb/0x230 [ 257.943948][ T9457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.943979][ T9457] ? rw_verify_area+0x2a6/0x4d0 [ 257.944009][ T9457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.944039][ T9457] vfs_read+0x20c/0xa70 [ 257.944075][ T9457] ? __pfx___mutex_lock+0x10/0x10 [ 257.944112][ T9457] ? __pfx_vfs_read+0x10/0x10 [ 257.944144][ T9457] ? __fget_files+0x2a/0x420 [ 257.944175][ T9457] ? __fget_files+0x3a0/0x420 [ 257.944199][ T9457] ? __fget_files+0x2a/0x420 [ 257.944236][ T9457] ksys_read+0x150/0x270 [ 257.944270][ T9457] ? __pfx_ksys_read+0x10/0x10 [ 257.944311][ T9457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.944338][ T9457] do_syscall_64+0x15f/0xf80 [ 257.944370][ T9457] ? trace_irq_disable+0x3b/0x140 [ 257.944403][ T9457] ? clear_bhb_loop+0x40/0x90 [ 257.944433][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.944457][ T9457] RIP: 0033:0x7f16b075d60e [ 257.944479][ T9457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.944499][ T9457] RSP: 002b:00007f16b1615fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.944524][ T9457] RAX: ffffffffffffffda RBX: 00007f16b16166c0 RCX: 00007f16b075d60e [ 257.944542][ T9457] RDX: 000000000000000f RSI: 00007f16b16160a0 RDI: 0000000000000004 [ 257.944557][ T9457] RBP: 00007f16b1616090 R08: 0000000000000000 R09: 0000000000000000 [ 257.944571][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.944589][ T9457] R13: 00007f16b0a16038 R14: 00007f16b0a15fa0 R15: 00007ffeea2f25d8 [ 257.944629][ T9457] [ 258.353413][ T9453] netlink: 830 bytes leftover after parsing attributes in process `syz.4.876'. [ 258.450024][ T9465] netlink: 148 bytes leftover after parsing attributes in process `syz.1.884'. [ 258.479519][ T9467] netlink: 148 bytes leftover after parsing attributes in process `syz.1.884'. [ 258.686942][ T9471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.886'. [ 259.056370][ T9493] team0: No ports can be present during mode change [ 259.546672][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 259.573270][ T9518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.900'. [ 259.678113][ T9522] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 259.703184][ T9522] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 259.967591][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 259.992765][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 260.212287][ T9545] team0: No ports can be present during mode change [ 260.236179][ T9547] bridge0: left allmulticast mode [ 260.519273][ T9554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.123193][ T9568] nbd: must specify an index to disconnect [ 261.149448][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.914'. [ 261.194299][ T9568] xt_bpf: check failed: parse error [ 261.611342][ T9585] netlink: 'syz.1.917': attribute type 83 has an invalid length. [ 261.747759][ T9597] team0: No ports can be present during mode change [ 261.937020][ T9602] Can't find ip_set type hash:ip,por [ 262.430502][ T9638] ip6tnl1: entered promiscuous mode [ 262.449213][ T9638] ip6tnl1: entered allmulticast mode [ 262.553743][ T9637] ip6tnl1: entered promiscuous mode [ 262.559474][ T9637] ip6tnl1: entered allmulticast mode [ 262.767867][ T9640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.178877][ T9659] netlink: 'syz.0.938': attribute type 4 has an invalid length. [ 263.198336][ T9652] __nla_validate_parse: 5 callbacks suppressed [ 263.198357][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 263.481564][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.942'. [ 263.639164][ T9676] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 263.794594][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 263.847403][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 263.945622][ T9678] syzkaller1: entered promiscuous mode [ 263.962703][ T9678] syzkaller1: entered allmulticast mode [ 264.106636][ T9699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.947'. [ 264.273619][ T9701] 8021q: VLANs not supported on ip_vti0 [ 264.346332][ T9703] openvswitch: netlink: IP tunnel dst address not specified [ 264.509343][ T9710] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.565735][ T9710] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.770582][ T9729] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.954'. [ 264.781975][ T9729] netlink: ct family unspecified [ 265.019390][ T9737] batadv_slave_0: entered promiscuous mode [ 265.181936][ T9735] batadv_slave_0: left promiscuous mode [ 265.207407][ T9694] infiniband !yz!: set down [ 265.227088][ T9694] infiniband !yz!: added team_slave_0 [ 265.299770][ T9757] openvswitch: netlink: Multiple metadata blocks provided [ 265.300880][ T9694] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 265.351419][ T9694] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 265.409058][ T9694] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 265.496231][ T9694] RDS/IB: !yz!: added [ 265.516163][ T9694] smc: adding ib device !yz! with port count 1 [ 265.533782][ T9694] smc: ib device !yz! port 1 has no pnetid [ 265.924931][ T9773] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.967'. [ 266.096700][ T9778] FAULT_INJECTION: forcing a failure. [ 266.096700][ T9778] name failslab, interval 1, probability 0, space 0, times 0 [ 266.132158][ T9778] CPU: 1 UID: 0 PID: 9778 Comm: syz.2.969 Not tainted syzkaller #0 PREEMPT(full) [ 266.132187][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.132201][ T9778] Call Trace: [ 266.132209][ T9778] [ 266.132218][ T9778] dump_stack_lvl+0xe8/0x150 [ 266.132257][ T9778] should_fail_ex+0x412/0x560 [ 266.132297][ T9778] should_failslab+0xa8/0x100 [ 266.132328][ T9778] __kmalloc_noprof+0xe8/0x760 [ 266.132354][ T9778] ? ip_options_get+0x51/0x4c0 [ 266.132374][ T9778] ? look_up_lock_class+0x57/0x110 [ 266.132409][ T9778] ip_options_get+0x51/0x4c0 [ 266.132434][ T9778] ? __lock_acquire+0x6b5/0x2cf0 [ 266.132471][ T9778] ip_cmsg_send+0x591/0xa70 [ 266.132515][ T9778] udp_sendmsg+0xbf2/0x21a0 [ 266.132563][ T9778] ? __pfx_udp_sendmsg+0x10/0x10 [ 266.132602][ T9778] ? ip4_datagram_release_cb+0x978/0xbe0 [ 266.132632][ T9778] ? reacquire_held_locks+0x104/0x190 [ 266.132655][ T9778] ? release_sock+0x2f/0x260 [ 266.132694][ T9778] ? inet_sendmsg+0x14f/0x370 [ 266.132721][ T9778] ? inet_sendmsg+0x14f/0x370 [ 266.132746][ T9778] ? __local_bh_enable_ip+0xd0/0x130 [ 266.132778][ T9778] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.132806][ T9778] ? inet_sendmsg+0x14f/0x370 [ 266.132827][ T9778] ? __local_bh_enable_ip+0xd0/0x130 [ 266.132857][ T9778] ? inet_sendmsg+0x29c/0x370 [ 266.132895][ T9778] ____sys_sendmsg+0x80a/0x9f0 [ 266.132927][ T9778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.132960][ T9778] ? import_iovec+0x73/0xa0 [ 266.132988][ T9778] ___sys_sendmsg+0x2a5/0x360 [ 266.133017][ T9778] ? __lock_acquire+0x6b5/0x2cf0 [ 266.133055][ T9778] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.133119][ T9778] ? __fget_files+0x2a/0x420 [ 266.133152][ T9778] ? __fget_files+0x3a0/0x420 [ 266.133186][ T9778] __x64_sys_sendmsg+0x1bd/0x2a0 [ 266.133213][ T9778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.133247][ T9778] ? __pfx_ksys_write+0x10/0x10 [ 266.133284][ T9778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.133308][ T9778] do_syscall_64+0x15f/0xf80 [ 266.133337][ T9778] ? trace_irq_disable+0x3b/0x140 [ 266.133365][ T9778] ? clear_bhb_loop+0x40/0x90 [ 266.133391][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.133412][ T9778] RIP: 0033:0x7f7f7af9cdd9 [ 266.133433][ T9778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.133450][ T9778] RSP: 002b:00007f7f7bed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.133473][ T9778] RAX: ffffffffffffffda RBX: 00007f7f7b215fa0 RCX: 00007f7f7af9cdd9 [ 266.133488][ T9778] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 266.133502][ T9778] RBP: 00007f7f7bed7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.133515][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.133527][ T9778] R13: 00007f7f7b216038 R14: 00007f7f7b215fa0 R15: 00007ffd74493de8 [ 266.133561][ T9778] [ 266.808504][ T9794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 267.038683][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 267.125289][ T9804] netlink: 1 bytes leftover after parsing attributes in process `syz.4.977'. [ 267.369483][ T9817] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 267.465965][ T9817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.562851][ T9816] bond3: (slave ip6erspan0): making interface the new active one [ 267.607144][ T9816] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 267.768146][ T9825] FAULT_INJECTION: forcing a failure. [ 267.768146][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.792868][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.983'. [ 267.806066][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(full) [ 267.806095][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.806108][ T9825] Call Trace: [ 267.806116][ T9825] [ 267.806125][ T9825] dump_stack_lvl+0xe8/0x150 [ 267.806165][ T9825] should_fail_ex+0x412/0x560 [ 267.806206][ T9825] _copy_to_user+0x31/0xb0 [ 267.806235][ T9825] simple_read_from_buffer+0xe1/0x170 [ 267.806265][ T9825] proc_fail_nth_read+0x1bb/0x230 [ 267.806291][ T9825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.806319][ T9825] ? rw_verify_area+0x2a6/0x4d0 [ 267.806345][ T9825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.806371][ T9825] vfs_read+0x20c/0xa70 [ 267.806407][ T9825] ? __pfx___mutex_lock+0x10/0x10 [ 267.806440][ T9825] ? __pfx_vfs_read+0x10/0x10 [ 267.806468][ T9825] ? __fget_files+0x2a/0x420 [ 267.806494][ T9825] ? __fget_files+0x3a0/0x420 [ 267.806514][ T9825] ? __fget_files+0x2a/0x420 [ 267.806545][ T9825] ksys_read+0x150/0x270 [ 267.806573][ T9825] ? __pfx_ksys_read+0x10/0x10 [ 267.806608][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.806629][ T9825] do_syscall_64+0x15f/0xf80 [ 267.806657][ T9825] ? trace_irq_disable+0x3b/0x140 [ 267.806686][ T9825] ? clear_bhb_loop+0x40/0x90 [ 267.806712][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.806733][ T9825] RIP: 0033:0x7f25c6d5d60e [ 267.806753][ T9825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.806771][ T9825] RSP: 002b:00007f25c4ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.806792][ T9825] RAX: ffffffffffffffda RBX: 00007f25c4ff66c0 RCX: 00007f25c6d5d60e [ 267.806808][ T9825] RDX: 000000000000000f RSI: 00007f25c4ff60a0 RDI: 0000000000000004 [ 267.806820][ T9825] RBP: 00007f25c4ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.806832][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.806844][ T9825] R13: 00007f25c7016038 R14: 00007f25c7015fa0 R15: 00007fff81308128 [ 267.806878][ T9825] [ 268.517688][ T9841] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 268.656259][ T9847] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 268.806324][ T9850] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.821064][ T9850] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 268.958598][ T9857] bond7: (slave gretap1): making interface the new active one [ 268.995726][ T9857] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 269.018961][ T9867] netlink: 72 bytes leftover after parsing attributes in process `syz.4.996'. [ 269.051247][ T9847] macvlan2: entered promiscuous mode [ 269.057166][ T9847] macvlan2: entered allmulticast mode [ 269.065631][ T9847] bond7: entered promiscuous mode [ 269.073221][ T9847] gretap1: entered promiscuous mode [ 269.083135][ T9847] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.100512][ T9847] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 269.114808][ T9847] bond7: left promiscuous mode [ 269.122726][ T9847] gretap1: left promiscuous mode [ 269.144607][ T9866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.996'. [ 269.358370][ T9875] tipc: Started in network mode [ 269.376859][ T9875] tipc: Node identity 080211, cluster identity 4711 [ 269.402895][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 269.405886][ T9875] tipc: Enabled bearer , priority 0 [ 269.482185][ T9875] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 269.518281][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 269.533356][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 269.628659][ T9875] tipc: Resetting bearer [ 269.637235][ T9890] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 269.949254][ T9890] bond4: entered promiscuous mode [ 269.993122][ T9890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.331623][ T9890] bond4: (slave veth3): making interface the new active one [ 270.377983][ T9890] veth3: entered promiscuous mode [ 270.451364][ T9890] bond4: (slave veth3): Enslaving as an active interface with an up link [ 270.575659][ T809] tipc: Node number set to 134353152 [ 271.083498][ T9928] syz.2.1009 uses old SIOCAX25GETINFO [ 271.515010][ T9944] team0: Port device veth1 removed [ 271.569219][ T9944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.987136][ T9954] syzkaller1: entered promiscuous mode [ 272.013206][ T9954] syzkaller1: entered allmulticast mode [ 272.319540][ T9977] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 272.604534][ T9988] tipc: Started in network mode [ 272.609631][ T9988] tipc: Node identity 0a8837c5b0cf, cluster identity 4711 [ 272.641197][ T9988] tipc: Enabled bearer , priority 0 [ 272.676275][ T9997] netlink: 'syz.4.1023': attribute type 21 has an invalid length. [ 272.864612][ T9980] syzkaller0: entered promiscuous mode [ 272.878871][ T9980] syzkaller0: entered allmulticast mode [ 272.898737][ T9980] tipc: Resetting bearer [ 272.958246][T10006] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 272.963921][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1023'. [ 272.994868][ T9979] tipc: Resetting bearer [ 276.117875][ T9979] tipc: Disabling bearer [ 276.254003][T10016] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 276.417433][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 276.448448][T10012] syzkaller0: entered promiscuous mode [ 276.465325][T10012] syzkaller0: entered allmulticast mode [ 276.482846][ T5906] tipc: Node number set to 3125229509 [ 280.037265][T10027] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 280.374405][T10072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.685373][T10084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1039'. [ 280.874758][T10090] FAULT_INJECTION: forcing a failure. [ 280.874758][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 280.912817][T10090] CPU: 0 UID: 0 PID: 10090 Comm: syz.2.1040 Not tainted syzkaller #0 PREEMPT(full) [ 280.912845][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.912857][T10090] Call Trace: [ 280.912864][T10090] [ 280.912872][T10090] dump_stack_lvl+0xe8/0x150 [ 280.912910][T10090] should_fail_ex+0x412/0x560 [ 280.912948][T10090] should_failslab+0xa8/0x100 [ 280.912979][T10090] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 280.913004][T10090] ? __alloc_skb+0x186/0x7d0 [ 280.913023][T10090] ? __alloc_skb+0x1d0/0x7d0 [ 280.913039][T10090] ? __local_bh_enable_ip+0xd0/0x130 [ 280.913073][T10090] __alloc_skb+0x1d0/0x7d0 [ 280.913096][T10090] netlink_sendmsg+0x5d4/0xb40 [ 280.913126][T10090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.913152][T10090] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.913175][T10090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.913204][T10090] ____sys_sendmsg+0x972/0x9f0 [ 280.913227][T10090] ? __might_fault+0xaf/0x130 [ 280.913256][T10090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.913289][T10090] ? import_iovec+0x73/0xa0 [ 280.913316][T10090] ___sys_sendmsg+0x2a5/0x360 [ 280.913339][T10090] ? __lock_acquire+0x6b5/0x2cf0 [ 280.913376][T10090] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.913438][T10090] ? __fget_files+0x2a/0x420 [ 280.913460][T10090] ? __fget_files+0x3a0/0x420 [ 280.913494][T10090] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.913521][T10090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.913556][T10090] ? __pfx_ksys_write+0x10/0x10 [ 280.913593][T10090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.913617][T10090] do_syscall_64+0x15f/0xf80 [ 280.913668][T10090] ? trace_irq_disable+0x3b/0x140 [ 280.913708][T10090] ? clear_bhb_loop+0x40/0x90 [ 280.913735][T10090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.913757][T10090] RIP: 0033:0x7f7f7af9cdd9 [ 280.913777][T10090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.913796][T10090] RSP: 002b:00007f7f7beb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.913820][T10090] RAX: ffffffffffffffda RBX: 00007f7f7b216090 RCX: 00007f7f7af9cdd9 [ 280.913836][T10090] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 280.913850][T10090] RBP: 00007f7f7beb6090 R08: 0000000000000000 R09: 0000000000000000 [ 280.913863][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.913875][T10090] R13: 00007f7f7b216128 R14: 00007f7f7b216090 R15: 00007ffd74493de8 [ 280.913911][T10090] [ 281.612391][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 281.793944][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1047'. [ 281.855800][T10112] ip6gre1: entered promiscuous mode [ 281.890960][T10112] ip6gre1: entered allmulticast mode [ 282.004043][T10131] FAULT_INJECTION: forcing a failure. [ 282.004043][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.107742][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.2.1051 Not tainted syzkaller #0 PREEMPT(full) [ 282.107774][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.107788][T10131] Call Trace: [ 282.107796][T10131] [ 282.107806][T10131] dump_stack_lvl+0xe8/0x150 [ 282.107846][T10131] should_fail_ex+0x412/0x560 [ 282.107885][T10131] _copy_from_iter+0x1d3/0x1670 [ 282.107912][T10131] ? rcu_is_watching+0x15/0xb0 [ 282.107941][T10131] ? __pfx__copy_from_iter+0x10/0x10 [ 282.107971][T10131] ? netlink_sendmsg+0x650/0xb40 [ 282.107992][T10131] ? skb_put+0x11b/0x210 [ 282.108017][T10131] netlink_sendmsg+0x6c0/0xb40 [ 282.108048][T10131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.108073][T10131] ? aa_sock_msg_perm+0xf1/0x1b0 [ 282.108097][T10131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.108127][T10131] ____sys_sendmsg+0x972/0x9f0 [ 282.108150][T10131] ? __might_fault+0xaf/0x130 [ 282.108181][T10131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.108215][T10131] ? import_iovec+0x73/0xa0 [ 282.108243][T10131] ___sys_sendmsg+0x2a5/0x360 [ 282.108266][T10131] ? __lock_acquire+0x6b5/0x2cf0 [ 282.108302][T10131] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.108381][T10131] ? __fget_files+0x2a/0x420 [ 282.108404][T10131] ? __fget_files+0x3a0/0x420 [ 282.108436][T10131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 282.108464][T10131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.108498][T10131] ? __pfx_ksys_write+0x10/0x10 [ 282.108534][T10131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.108566][T10131] do_syscall_64+0x15f/0xf80 [ 282.108595][T10131] ? trace_irq_disable+0x3b/0x140 [ 282.108625][T10131] ? clear_bhb_loop+0x40/0x90 [ 282.108651][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.108674][T10131] RIP: 0033:0x7f7f7af9cdd9 [ 282.108695][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.108714][T10131] RSP: 002b:00007f7f7beb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.108737][T10131] RAX: ffffffffffffffda RBX: 00007f7f7b216090 RCX: 00007f7f7af9cdd9 [ 282.108753][T10131] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 282.108767][T10131] RBP: 00007f7f7beb6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.108780][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.108793][T10131] R13: 00007f7f7b216128 R14: 00007f7f7b216090 R15: 00007ffd74493de8 [ 282.108828][T10131] [ 282.454388][T10140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.624020][T10146] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1055'. [ 282.649250][T10142] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 282.677562][T10142] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 282.718450][T10142] tipc: Resetting bearer [ 282.786927][T10149] erspan0: entered promiscuous mode [ 282.995206][T10153] xfrm1: entered allmulticast mode [ 283.233214][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 283.249858][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 283.446820][ T140] tipc: Resetting bearer [ 283.661426][T10182] FAULT_INJECTION: forcing a failure. [ 283.661426][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.719238][T10182] CPU: 1 UID: 0 PID: 10182 Comm: syz.3.1066 Not tainted syzkaller #0 PREEMPT(full) [ 283.719269][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.719283][T10182] Call Trace: [ 283.719291][T10182] [ 283.719300][T10182] dump_stack_lvl+0xe8/0x150 [ 283.719340][T10182] should_fail_ex+0x412/0x560 [ 283.719380][T10182] _copy_from_iter+0x1d3/0x1670 [ 283.719421][T10182] ? rcu_is_watching+0x15/0xb0 [ 283.719451][T10182] ? __pfx__copy_from_iter+0x10/0x10 [ 283.719482][T10182] ? netlink_sendmsg+0x650/0xb40 [ 283.719504][T10182] ? skb_put+0x11b/0x210 [ 283.719530][T10182] netlink_sendmsg+0x6c0/0xb40 [ 283.719563][T10182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.719589][T10182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 283.719614][T10182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.719644][T10182] ____sys_sendmsg+0x972/0x9f0 [ 283.719673][T10182] ? __might_fault+0xaf/0x130 [ 283.719702][T10182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.719734][T10182] ? import_iovec+0x73/0xa0 [ 283.719763][T10182] ___sys_sendmsg+0x2a5/0x360 [ 283.719785][T10182] ? __lock_acquire+0x6b5/0x2cf0 [ 283.719823][T10182] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.719882][T10182] ? __fget_files+0x2a/0x420 [ 283.719906][T10182] ? __fget_files+0x3a0/0x420 [ 283.719938][T10182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 283.719966][T10182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.720001][T10182] ? __pfx_ksys_write+0x10/0x10 [ 283.720037][T10182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.720061][T10182] do_syscall_64+0x15f/0xf80 [ 283.720090][T10182] ? trace_irq_disable+0x3b/0x140 [ 283.720120][T10182] ? clear_bhb_loop+0x40/0x90 [ 283.720147][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.720169][T10182] RIP: 0033:0x7f25c6d9cdd9 [ 283.720189][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.720208][T10182] RSP: 002b:00007f25c4fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.720232][T10182] RAX: ffffffffffffffda RBX: 00007f25c7016090 RCX: 00007f25c6d9cdd9 [ 283.720248][T10182] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 283.720261][T10182] RBP: 00007f25c4fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 283.720274][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.720287][T10182] R13: 00007f25c7016128 R14: 00007f25c7016090 R15: 00007fff81308128 [ 283.720322][T10182] [ 284.467741][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1072'. [ 284.539477][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 284.806712][T10218] bond8: (slave vcan0): refused to change device type [ 285.847904][T10245] FAULT_INJECTION: forcing a failure. [ 285.847904][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 285.888830][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.2.1082 Not tainted syzkaller #0 PREEMPT(full) [ 285.888860][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.888874][T10245] Call Trace: [ 285.888882][T10245] [ 285.888891][T10245] dump_stack_lvl+0xe8/0x150 [ 285.888931][T10245] should_fail_ex+0x412/0x560 [ 285.888972][T10245] should_failslab+0xa8/0x100 [ 285.889005][T10245] __kmalloc_noprof+0xe8/0x760 [ 285.889033][T10245] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 285.889071][T10245] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 285.889103][T10245] ? kernel_text_address+0xa5/0xe0 [ 285.889137][T10245] genl_family_rcv_msg_doit+0xd9/0x330 [ 285.889168][T10245] ? __asan_memcpy+0x40/0x70 [ 285.889195][T10245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.889234][T10245] ? apparmor_capable+0x126/0x170 [ 285.889266][T10245] ? bpf_lsm_capable+0x9/0x20 [ 285.889296][T10245] ? security_capable+0x7e/0x2c0 [ 285.889337][T10245] genl_rcv_msg+0x61c/0x7a0 [ 285.889374][T10245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.889401][T10245] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 285.889428][T10245] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 285.889458][T10245] ? __pfx_nl802154_post_doit+0x10/0x10 [ 285.889510][T10245] netlink_rcv_skb+0x232/0x4b0 [ 285.889534][T10245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.889565][T10245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.889610][T10245] ? down_read+0x270/0x2e0 [ 285.889641][T10245] ? genl_rcv+0xd/0x40 [ 285.889669][T10245] genl_rcv+0x28/0x40 [ 285.889693][T10245] netlink_unicast+0x75c/0x8e0 [ 285.889735][T10245] netlink_sendmsg+0x813/0xb40 [ 285.889768][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.889795][T10245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.889819][T10245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.889848][T10245] ____sys_sendmsg+0x972/0x9f0 [ 285.889873][T10245] ? __might_fault+0xaf/0x130 [ 285.889905][T10245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.889940][T10245] ? import_iovec+0x73/0xa0 [ 285.889970][T10245] ___sys_sendmsg+0x2a5/0x360 [ 285.889993][T10245] ? __lock_acquire+0x6b5/0x2cf0 [ 285.890031][T10245] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.890097][T10245] ? __fget_files+0x2a/0x420 [ 285.890119][T10245] ? __fget_files+0x3a0/0x420 [ 285.890153][T10245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 285.890182][T10245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.890218][T10245] ? __pfx_ksys_write+0x10/0x10 [ 285.890255][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.890279][T10245] do_syscall_64+0x15f/0xf80 [ 285.890308][T10245] ? trace_irq_disable+0x3b/0x140 [ 285.890338][T10245] ? clear_bhb_loop+0x40/0x90 [ 285.890365][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.890387][T10245] RIP: 0033:0x7f7f7af9cdd9 [ 285.890407][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.890426][T10245] RSP: 002b:00007f7f7beb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.890449][T10245] RAX: ffffffffffffffda RBX: 00007f7f7b216090 RCX: 00007f7f7af9cdd9 [ 285.890465][T10245] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 285.890479][T10245] RBP: 00007f7f7beb6090 R08: 0000000000000000 R09: 0000000000000000 [ 285.890499][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.890512][T10245] R13: 00007f7f7b216128 R14: 00007f7f7b216090 R15: 00007ffd74493de8 [ 285.890548][T10245] [ 286.396628][T10254] netlink: 'syz.0.1084': attribute type 44 has an invalid length. [ 286.426157][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 286.750704][T10244] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 286.955010][T10280] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 287.009367][T10280] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1092'. [ 287.082006][T10280] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 287.215478][T10292] delete_channel: no stack [ 287.275333][T10292] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 287.360099][T10288] bond9: Removing last ns target with arp_interval on [ 287.421390][T10297] FAULT_INJECTION: forcing a failure. [ 287.421390][T10297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.478533][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'. [ 287.503561][T10297] CPU: 1 UID: 0 PID: 10297 Comm: syz.1.1098 Not tainted syzkaller #0 PREEMPT(full) [ 287.503597][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.503611][T10297] Call Trace: [ 287.503619][T10297] [ 287.503628][T10297] dump_stack_lvl+0xe8/0x150 [ 287.503669][T10297] should_fail_ex+0x412/0x560 [ 287.503710][T10297] _copy_from_user+0x2d/0xb0 [ 287.503737][T10297] ___sys_sendmsg+0x1c6/0x360 [ 287.503761][T10297] ? __lock_acquire+0x6b5/0x2cf0 [ 287.503799][T10297] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.503831][T10297] ? __lock_acquire+0x6b5/0x2cf0 [ 287.503893][T10297] ? __fget_files+0x2a/0x420 [ 287.503916][T10297] ? __fget_files+0x3a0/0x420 [ 287.503950][T10297] __x64_sys_sendmsg+0x1bd/0x2a0 [ 287.503973][T10297] ? ktime_get+0x1f5/0x220 [ 287.504005][T10297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.504028][T10297] ? clockevents_program_event+0x491/0x630 [ 287.504076][T10297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.504107][T10297] do_syscall_64+0x15f/0xf80 [ 287.504140][T10297] ? clear_bhb_loop+0x40/0x90 [ 287.504167][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.504189][T10297] RIP: 0033:0x7f16b079cdd9 [ 287.504210][T10297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.504229][T10297] RSP: 002b:00007f16b1616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.504252][T10297] RAX: ffffffffffffffda RBX: 00007f16b0a15fa0 RCX: 00007f16b079cdd9 [ 287.504268][T10297] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000003 [ 287.504282][T10297] RBP: 00007f16b1616090 R08: 0000000000000000 R09: 0000000000000000 [ 287.504296][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.504308][T10297] R13: 00007f16b0a16038 R14: 00007f16b0a15fa0 R15: 00007ffeea2f25d8 [ 287.504344][T10297] [ 287.866642][T10290] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 288.073840][T10292] bond6: entered promiscuous mode [ 288.080289][T10292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.156634][T10293] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.191117][T10293] bond6: (slave bond7): making interface the new active one [ 288.218528][T10293] bond7: entered promiscuous mode [ 288.248915][T10293] bond6: (slave bond7): Enslaving as an active interface with an up link [ 288.463952][T10327] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1105'. [ 288.483221][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 288.494643][T10327] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1105'. [ 288.628913][T10331] tipc: Enabled bearer , priority 0 [ 288.639073][T10331] syzkaller0: entered promiscuous mode [ 288.646515][T10331] syzkaller0: entered allmulticast mode [ 288.665047][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 288.693114][T10331] tipc: Resetting bearer [ 288.804848][T10331] tipc: Resetting bearer [ 288.894575][T10331] tipc: Disabling bearer [ 288.960467][T10349] FAULT_INJECTION: forcing a failure. [ 288.960467][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 289.041689][T10349] CPU: 0 UID: 0 PID: 10349 Comm: syz.2.1110 Not tainted syzkaller #0 PREEMPT(full) [ 289.041718][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.041732][T10349] Call Trace: [ 289.041740][T10349] [ 289.041751][T10349] dump_stack_lvl+0xe8/0x150 [ 289.041791][T10349] should_fail_ex+0x412/0x560 [ 289.041831][T10349] should_failslab+0xa8/0x100 [ 289.041863][T10349] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 289.041890][T10349] ? __alloc_skb+0x186/0x7d0 [ 289.041911][T10349] ? __alloc_skb+0x1d0/0x7d0 [ 289.041929][T10349] ? __local_bh_enable_ip+0xd0/0x130 [ 289.041972][T10349] __alloc_skb+0x1d0/0x7d0 [ 289.041998][T10349] netlink_sendmsg+0x5d4/0xb40 [ 289.042033][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.042059][T10349] ? aa_sock_msg_perm+0xf1/0x1b0 [ 289.042084][T10349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.042115][T10349] ____sys_sendmsg+0x972/0x9f0 [ 289.042139][T10349] ? __might_fault+0xaf/0x130 [ 289.042170][T10349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.042204][T10349] ? import_iovec+0x73/0xa0 [ 289.042241][T10349] ___sys_sendmsg+0x2a5/0x360 [ 289.042265][T10349] ? __lock_acquire+0x6b5/0x2cf0 [ 289.042301][T10349] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.042371][T10349] ? __fget_files+0x2a/0x420 [ 289.042393][T10349] ? __fget_files+0x3a0/0x420 [ 289.042426][T10349] __x64_sys_sendmsg+0x1bd/0x2a0 [ 289.042454][T10349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.042489][T10349] ? __pfx_ksys_write+0x10/0x10 [ 289.042526][T10349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.042549][T10349] do_syscall_64+0x15f/0xf80 [ 289.042579][T10349] ? trace_irq_disable+0x3b/0x140 [ 289.042608][T10349] ? clear_bhb_loop+0x40/0x90 [ 289.042635][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.042656][T10349] RIP: 0033:0x7f7f7af9cdd9 [ 289.042676][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.042696][T10349] RSP: 002b:00007f7f7bed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.042719][T10349] RAX: ffffffffffffffda RBX: 00007f7f7b215fa0 RCX: 00007f7f7af9cdd9 [ 289.042735][T10349] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000003 [ 289.042748][T10349] RBP: 00007f7f7bed7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.042761][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.042774][T10349] R13: 00007f7f7b216038 R14: 00007f7f7b215fa0 R15: 00007ffd74493de8 [ 289.042806][T10349] [ 289.446196][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1113'. [ 289.766122][T10363] syzkaller0: entered promiscuous mode [ 289.779888][T10363] syzkaller0: entered allmulticast mode [ 290.434480][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 290.436244][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 290.500019][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 293.135230][T10379] macvtap1: entered promiscuous mode [ 293.142976][T10379] macvtap1: entered allmulticast mode [ 293.326192][T10404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1126'. [ 293.907001][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.943310][T10420] syzkaller1: entered promiscuous mode [ 293.963101][T10430] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 293.975075][T10420] syzkaller1: entered allmulticast mode [ 294.039085][T10430] bond5: entered promiscuous mode [ 294.047174][T10430] bond5: entered allmulticast mode [ 294.054603][T10430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.421009][T10447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1134'. [ 294.693373][T10458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1136'. [ 294.758916][T10460] netlink: 400 bytes leftover after parsing attributes in process `syz.1.1137'. [ 294.815717][T10460] Bluetooth: MGMT ver 1.23 [ 294.893691][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1138'. [ 295.080377][T10471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1140'. [ 295.585726][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 295.604016][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 295.632037][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1146'. [ 296.008686][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'. [ 296.230636][T10525] netlink: 'syz.4.1156': attribute type 26 has an invalid length. [ 296.367100][T10533] team0: No ports can be present during mode change [ 297.114893][T10572] openvswitch: netlink: Missing valid actions attribute. [ 297.141324][T10572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.585870][T10577] team0: No ports can be present during mode change [ 297.956305][T10595] xt_TCPMSS: Only works on TCP SYN packets [ 297.986980][T10601] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 298.360801][T10617] __nla_validate_parse: 14 callbacks suppressed [ 298.360826][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1180'. [ 299.030297][T10641] openvswitch: netlink: Key type 299 is out of range max 32 [ 299.183943][T10644] team0: No ports can be present during mode change [ 299.442448][T10660] netlink: 'syz.0.1187': attribute type 68 has an invalid length. [ 299.902697][T10666] syzkaller0: entered promiscuous mode [ 299.930308][T10666] syzkaller0: entered allmulticast mode [ 299.946639][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 300.056310][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1193'. [ 300.387715][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 300.451729][T10690] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 300.490524][T10693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1195'. [ 300.530483][T10697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1195'. [ 300.639237][T10700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.657134][T10702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.511516][T10735] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 304.625282][T10735] bond8: entered promiscuous mode [ 304.653297][T10735] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.195673][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 305.277112][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 306.396936][T10772] team0: No ports can be present during mode change [ 306.461471][T10774] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 306.498049][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 306.800586][T10782] xt_hashlimit: size too large, truncated to 1048576 [ 306.854949][T10782] xt_hashlimit: max too large, truncated to 1048576 [ 306.907035][T10793] sch_fq: defrate 0 ignored. [ 307.037799][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 307.095484][T10798] geneve1€: entered promiscuous mode [ 307.133195][T10800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1224'. [ 307.175052][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 307.338792][ T30] audit: type=1800 audit(1777067633.935:3): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1225" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1183 res=0 errno=0 [ 307.877562][T10832] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 307.928951][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 307.953138][T10824] bond9: Unable to set down delay as MII monitoring is disabled [ 307.996341][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 308.053228][T10824] bond9 (unregistering): Released all slaves [ 308.087761][T10842] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 308.234264][T10834] gretap0: entered promiscuous mode [ 308.269900][T10834] gretap0: left promiscuous mode [ 308.305323][T10824] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1232'. [ 308.416779][T10832] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.505086][T10843] bond9: (slave veth3): Enslaving as an active interface with a down link [ 308.532218][T10846] bond9: (slave dummy0): making interface the new active one [ 308.544182][T10846] dummy0: entered promiscuous mode [ 308.561928][T10846] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 308.613368][T10824] bond9: (slave dummy0): Releasing active interface [ 308.637474][T10824] dummy0 (unregistering): left promiscuous mode [ 308.823657][T10859] batman_adv: batadv0: Adding interface: vlan2 [ 308.831804][T10859] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.866637][T10859] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 309.389393][T10880] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 309.400745][T10880] syzkaller1: entered promiscuous mode [ 309.407252][T10880] syzkaller1: entered allmulticast mode [ 310.842561][T10830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.055223][T10905] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 311.114710][T10908] team0: No ports can be present during mode change [ 311.381610][T10926] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1253'. [ 311.504152][T10926] xfrm0: entered allmulticast mode [ 311.544653][T10926] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 312.358844][ T6466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.403110][T10959] batman_adv: batadv0: Adding interface: macvtap2 [ 312.411055][T10959] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.501239][T10959] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 312.551574][ T6466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.636335][ T6466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.773179][ T6466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.028887][T10989] sctp: [Deprecated]: syz.0.1263 (pid 10989) Use of int in max_burst socket option. [ 313.028887][T10989] Use struct sctp_assoc_value instead [ 313.306499][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 313.585417][T11015] netlink: 'syz.2.1269': attribute type 10 has an invalid length. [ 313.629317][T11015] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 313.852944][T11018] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 314.424192][T11045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1275'. [ 315.086165][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1280'. [ 315.507241][T11075] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 316.138491][T11094] bridge0: left promiscuous mode [ 316.168896][T11094] bridge0: left allmulticast mode [ 316.214683][T11094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.422262][T11113] FAULT_INJECTION: forcing a failure. [ 316.422262][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 316.443253][T11105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.503479][T11113] CPU: 0 UID: 0 PID: 11113 Comm: syz.3.1290 Not tainted syzkaller #0 PREEMPT(full) [ 316.503510][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.503539][T11113] Call Trace: [ 316.503547][T11113] [ 316.503557][T11113] dump_stack_lvl+0xe8/0x150 [ 316.503597][T11113] should_fail_ex+0x412/0x560 [ 316.503639][T11113] should_failslab+0xa8/0x100 [ 316.503668][T11113] ? skb_clone+0x212/0x3a0 [ 316.503694][T11113] kmem_cache_alloc_noprof+0x87/0x650 [ 316.503721][T11113] ? __netlink_lookup+0xc6/0x8b0 [ 316.503751][T11113] skb_clone+0x212/0x3a0 [ 316.503787][T11113] __netlink_deliver_tap+0x404/0x850 [ 316.503826][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.503850][T11113] netlink_deliver_tap+0x19c/0x1b0 [ 316.503875][T11113] netlink_unicast+0x730/0x8e0 [ 316.503919][T11113] netlink_sendmsg+0x813/0xb40 [ 316.503952][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.503980][T11113] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.504005][T11113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.504034][T11113] ____sys_sendmsg+0x972/0x9f0 [ 316.504059][T11113] ? __might_fault+0xaf/0x130 [ 316.504091][T11113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.504125][T11113] ? import_iovec+0x73/0xa0 [ 316.504155][T11113] ___sys_sendmsg+0x2a5/0x360 [ 316.504177][T11113] ? __lock_acquire+0x6b5/0x2cf0 [ 316.504214][T11113] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.504278][T11113] ? __fget_files+0x2a/0x420 [ 316.504300][T11113] ? __fget_files+0x3a0/0x420 [ 316.504334][T11113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 316.504362][T11113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.504398][T11113] ? __pfx_ksys_write+0x10/0x10 [ 316.504444][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.504469][T11113] do_syscall_64+0x15f/0xf80 [ 316.504497][T11113] ? trace_irq_disable+0x3b/0x140 [ 316.504526][T11113] ? clear_bhb_loop+0x40/0x90 [ 316.504551][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.504573][T11113] RIP: 0033:0x7f25c6d9cdd9 [ 316.504592][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.504610][T11113] RSP: 002b:00007f25c4ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.504634][T11113] RAX: ffffffffffffffda RBX: 00007f25c7015fa0 RCX: 00007f25c6d9cdd9 [ 316.504649][T11113] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 316.504663][T11113] RBP: 00007f25c4ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.504677][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.504690][T11113] R13: 00007f25c7016038 R14: 00007f25c7015fa0 R15: 00007fff81308128 [ 316.504723][T11113] [ 316.576123][T11113] team0: No ports can be present during mode change [ 316.989152][T11124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.206336][T11141] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1296'. [ 317.240783][T11139] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1295'. [ 317.387745][T11143] xt_TCPMSS: Only works on TCP SYN packets [ 317.422335][T11150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1298'. [ 317.587511][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 317.679878][T11160] netlink: 'syz.3.1300': attribute type 6 has an invalid length. [ 317.733123][T11163] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1300'. [ 318.068794][T11180] FAULT_INJECTION: forcing a failure. [ 318.068794][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 318.139413][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.2.1305 Not tainted syzkaller #0 PREEMPT(full) [ 318.139443][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.139456][T11180] Call Trace: [ 318.139465][T11180] [ 318.139474][T11180] dump_stack_lvl+0xe8/0x150 [ 318.139513][T11180] should_fail_ex+0x412/0x560 [ 318.139568][T11180] should_failslab+0xa8/0x100 [ 318.139598][T11180] ? skb_clone+0x212/0x3a0 [ 318.139624][T11180] kmem_cache_alloc_noprof+0x87/0x650 [ 318.139650][T11180] ? __netlink_lookup+0xc6/0x8b0 [ 318.139679][T11180] skb_clone+0x212/0x3a0 [ 318.139708][T11180] __netlink_deliver_tap+0x404/0x850 [ 318.139745][T11180] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.139770][T11180] netlink_deliver_tap+0x19c/0x1b0 [ 318.139794][T11180] netlink_unicast+0x730/0x8e0 [ 318.139840][T11180] netlink_sendmsg+0x813/0xb40 [ 318.139873][T11180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.139900][T11180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.139926][T11180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.139955][T11180] ____sys_sendmsg+0x972/0x9f0 [ 318.139979][T11180] ? __might_fault+0xaf/0x130 [ 318.140009][T11180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.140043][T11180] ? import_iovec+0x73/0xa0 [ 318.140073][T11180] ___sys_sendmsg+0x2a5/0x360 [ 318.140095][T11180] ? __lock_acquire+0x6b5/0x2cf0 [ 318.140132][T11180] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.140193][T11180] ? __fget_files+0x2a/0x420 [ 318.140215][T11180] ? __fget_files+0x3a0/0x420 [ 318.140249][T11180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.140276][T11180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.140311][T11180] ? __pfx_ksys_write+0x10/0x10 [ 318.140348][T11180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.140371][T11180] do_syscall_64+0x15f/0xf80 [ 318.140401][T11180] ? trace_irq_disable+0x3b/0x140 [ 318.140429][T11180] ? clear_bhb_loop+0x40/0x90 [ 318.140455][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.140475][T11180] RIP: 0033:0x7f7f7af9cdd9 [ 318.140495][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.140514][T11180] RSP: 002b:00007f7f7bed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.140545][T11180] RAX: ffffffffffffffda RBX: 00007f7f7b215fa0 RCX: 00007f7f7af9cdd9 [ 318.140561][T11180] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 318.140575][T11180] RBP: 00007f7f7bed7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.140588][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.140600][T11180] R13: 00007f7f7b216038 R14: 00007f7f7b215fa0 R15: 00007ffd74493de8 [ 318.140636][T11180] [ 318.292557][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1306'. [ 318.563948][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 318.611612][T11180] team0: No ports can be present during mode change [ 318.640366][T11187] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1304'. [ 318.829271][T11194] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 318.882793][T11189] tipc: Resetting bearer [ 319.106150][ T6470] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.144625][ T6470] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.234150][ T6470] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.275939][ T6470] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.311373][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 319.345860][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 320.147569][T11253] FAULT_INJECTION: forcing a failure. [ 320.147569][T11253] name failslab, interval 1, probability 0, space 0, times 0 [ 320.180315][T11253] CPU: 0 UID: 0 PID: 11253 Comm: syz.1.1318 Not tainted syzkaller #0 PREEMPT(full) [ 320.180345][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.180358][T11253] Call Trace: [ 320.180367][T11253] [ 320.180376][T11253] dump_stack_lvl+0xe8/0x150 [ 320.180416][T11253] should_fail_ex+0x412/0x560 [ 320.180458][T11253] should_failslab+0xa8/0x100 [ 320.180490][T11253] __kmalloc_noprof+0xe8/0x760 [ 320.180519][T11253] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 320.180558][T11253] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 320.180599][T11253] genl_family_rcv_msg_doit+0xd9/0x330 [ 320.180637][T11253] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.180677][T11253] ? apparmor_capable+0x126/0x170 [ 320.180708][T11253] ? bpf_lsm_capable+0x9/0x20 [ 320.180737][T11253] ? security_capable+0x7e/0x2c0 [ 320.180779][T11253] genl_rcv_msg+0x61c/0x7a0 [ 320.180815][T11253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.180843][T11253] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 320.180890][T11253] ? __pfx_ref_tracker_free+0x10/0x10 [ 320.180927][T11253] netlink_rcv_skb+0x232/0x4b0 [ 320.180951][T11253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.180981][T11253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.181021][T11253] ? down_read+0x270/0x2e0 [ 320.181051][T11253] ? genl_rcv+0xd/0x40 [ 320.181078][T11253] genl_rcv+0x28/0x40 [ 320.181112][T11253] netlink_unicast+0x75c/0x8e0 [ 320.181157][T11253] netlink_sendmsg+0x813/0xb40 [ 320.181192][T11253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.181225][T11253] ? aa_sock_msg_perm+0xf1/0x1b0 [ 320.181250][T11253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.181280][T11253] ____sys_sendmsg+0x972/0x9f0 [ 320.181306][T11253] ? __might_fault+0xaf/0x130 [ 320.181338][T11253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.181374][T11253] ? import_iovec+0x73/0xa0 [ 320.181404][T11253] ___sys_sendmsg+0x2a5/0x360 [ 320.181440][T11253] ? __lock_acquire+0x6b5/0x2cf0 [ 320.181478][T11253] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.181540][T11253] ? __fget_files+0x2a/0x420 [ 320.181562][T11253] ? __fget_files+0x3a0/0x420 [ 320.181598][T11253] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.181627][T11253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.181672][T11253] ? __pfx_ksys_write+0x10/0x10 [ 320.181710][T11253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.181735][T11253] do_syscall_64+0x15f/0xf80 [ 320.181766][T11253] ? trace_irq_disable+0x3b/0x140 [ 320.181795][T11253] ? clear_bhb_loop+0x40/0x90 [ 320.181823][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.181845][T11253] RIP: 0033:0x7f16b079cdd9 [ 320.181867][T11253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.181886][T11253] RSP: 002b:00007f16b1616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.181910][T11253] RAX: ffffffffffffffda RBX: 00007f16b0a15fa0 RCX: 00007f16b079cdd9 [ 320.181926][T11253] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 320.181940][T11253] RBP: 00007f16b1616090 R08: 0000000000000000 R09: 0000000000000000 [ 320.181955][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.181968][T11253] R13: 00007f16b0a16038 R14: 00007f16b0a15fa0 R15: 00007ffeea2f25d8 [ 320.182004][T11253] [ 320.703205][T11262] netlink: 'syz.2.1320': attribute type 8 has an invalid length. [ 320.804250][T11267] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 320.835991][T11267] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 321.578298][T11288] netlink: 'syz.1.1326': attribute type 28 has an invalid length. [ 322.019932][T11302] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 322.198676][T11310] team0: No ports can be present during mode change [ 322.236168][T11310] FAULT_INJECTION: forcing a failure. [ 322.236168][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 322.298943][T11310] CPU: 0 UID: 0 PID: 11310 Comm: syz.0.1332 Not tainted syzkaller #0 PREEMPT(full) [ 322.298970][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.298982][T11310] Call Trace: [ 322.298990][T11310] [ 322.298997][T11310] dump_stack_lvl+0xe8/0x150 [ 322.299033][T11310] should_fail_ex+0x412/0x560 [ 322.299069][T11310] should_failslab+0xa8/0x100 [ 322.299097][T11310] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 322.299215][T11310] ? __alloc_skb+0x1d0/0x7d0 [ 322.299237][T11310] ? __local_bh_enable_ip+0xd0/0x130 [ 322.299275][T11310] __alloc_skb+0x1d0/0x7d0 [ 322.299295][T11310] ? netlink_ack_tlv_len+0x6c/0x210 [ 322.299320][T11310] netlink_ack+0x146/0xa50 [ 322.299367][T11310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.299401][T11310] ? __pfx_ref_tracker_free+0x10/0x10 [ 322.299438][T11310] netlink_rcv_skb+0x2b6/0x4b0 [ 322.299463][T11310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.299495][T11310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.299536][T11310] ? down_read+0x270/0x2e0 [ 322.299569][T11310] ? genl_rcv+0xd/0x40 [ 322.299599][T11310] genl_rcv+0x28/0x40 [ 322.299625][T11310] netlink_unicast+0x75c/0x8e0 [ 322.299673][T11310] netlink_sendmsg+0x813/0xb40 [ 322.299708][T11310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.299736][T11310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 322.299761][T11310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.299792][T11310] ____sys_sendmsg+0x972/0x9f0 [ 322.299817][T11310] ? __might_fault+0xaf/0x130 [ 322.299850][T11310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.299887][T11310] ? import_iovec+0x73/0xa0 [ 322.299920][T11310] ___sys_sendmsg+0x2a5/0x360 [ 322.299943][T11310] ? __lock_acquire+0x6b5/0x2cf0 [ 322.299984][T11310] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.300052][T11310] ? __fget_files+0x2a/0x420 [ 322.300076][T11310] ? __fget_files+0x3a0/0x420 [ 322.300109][T11310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 322.300139][T11310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.300225][T11310] ? __pfx_ksys_write+0x10/0x10 [ 322.300265][T11310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.300289][T11310] do_syscall_64+0x15f/0xf80 [ 322.300319][T11310] ? trace_irq_disable+0x3b/0x140 [ 322.300348][T11310] ? clear_bhb_loop+0x40/0x90 [ 322.300375][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.300397][T11310] RIP: 0033:0x7f2e5079cdd9 [ 322.300418][T11310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.300437][T11310] RSP: 002b:00007f2e51616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.300462][T11310] RAX: ffffffffffffffda RBX: 00007f2e50a15fa0 RCX: 00007f2e5079cdd9 [ 322.300479][T11310] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 322.300493][T11310] RBP: 00007f2e51616090 R08: 0000000000000000 R09: 0000000000000000 [ 322.300506][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.300519][T11310] R13: 00007f2e50a16038 R14: 00007f2e50a15fa0 R15: 00007ffc8c943de8 [ 322.300554][T11310] [ 322.718593][T11324] sctp: [Deprecated]: syz.2.1331 (pid 11324) Use of int in maxseg socket option. [ 322.718593][T11324] Use struct sctp_assoc_value instead [ 323.052980][T11324] __nla_validate_parse: 5 callbacks suppressed [ 323.053000][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 323.169958][T11328] tipc: Enabling of bearer rejected, failed to enable media [ 323.458194][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 323.995164][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 324.627543][T11369] pim6reg: entered allmulticast mode [ 324.727022][T11379] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1340'. [ 325.574697][T11406] IPv6: Can't replace route, no match found [ 325.629640][T11407] tipc: Enabled bearer , priority 0 [ 325.699104][T11410] syzkaller0: entered promiscuous mode [ 325.753262][T11410] syzkaller0: entered allmulticast mode [ 325.876881][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 325.944292][T11407] tipc: Resetting bearer [ 326.027931][T11427] €Â0: renamed from batadv_slave_1 (while UP) [ 326.123697][T11431] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 326.327220][T11400] tipc: Resetting bearer [ 326.392625][T11400] tipc: Disabling bearer [ 326.652127][T11441] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 326.662025][T11439] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1345'. [ 327.051966][T11449] dvmrp6: entered allmulticast mode [ 327.310432][T11455] nbd: couldn't find device at index 0 [ 327.976912][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 328.035643][T11478] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 328.124243][T11483] xt_hashlimit: size too large, truncated to 1048576 [ 328.161541][T11480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.454808][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1363'. [ 329.154176][T11524] team0: No ports can be present during mode change [ 329.277919][T11527] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 329.380480][T11527] team0: Device vxcan1 is of different type [ 329.707028][T11532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.937195][T11548] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 329.946070][T11548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1378'. [ 330.179137][T11556] netlink: 'syz.1.1380': attribute type 7 has an invalid length. [ 330.712324][T11563] syzkaller1: entered promiscuous mode [ 330.721396][T11563] syzkaller1: entered allmulticast mode [ 331.063037][T11557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.093685][T11557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.293900][T11602] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1386'. [ 331.504828][T11557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.557018][T11557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.572946][T11607] sctp: [Deprecated]: syz.2.1388 (pid 11607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.572946][T11607] Use struct sctp_sack_info instead [ 331.614959][T11609] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.646512][T11609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.655103][T11609] IPv6: NLM_F_CREATE should be set when creating new route [ 331.664404][T11609] IPv6: NLM_F_CREATE should be set when creating new route [ 331.672126][T11609] IPv6: NLM_F_CREATE should be set when creating new route [ 331.733293][T11610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.797720][T11557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.870068][T11557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.948412][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 331.963191][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 332.040360][T11632] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 332.060893][T11632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.118812][T11628] tipc: Invalid UDP bearer configuration [ 332.118872][T11628] tipc: Enabling of bearer rejected, failed to enable media [ 332.240238][T11557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.291848][T11557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.447032][T11647] netlink: 'syz.4.1397': attribute type 5 has an invalid length. [ 332.499803][T11647] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1397'. [ 332.575875][T11653] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 332.609241][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.631989][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.765624][ T57] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.798138][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.933889][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.951880][T11676] nbd: couldn't find a device at index 0 [ 332.969713][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.047051][ T140] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.083208][ T140] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.347757][ T6464] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.395094][ T6464] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.753437][T11703] netlink: 'syz.0.1405': attribute type 13 has an invalid length. [ 333.809632][T11703] netlink: 'syz.0.1405': attribute type 17 has an invalid length. [ 333.897480][T11707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.186784][T11703] 0ªX¹¦À: left allmulticast mode [ 334.204851][T11703] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 334.840411][T11741] netlink: 'syz.1.1416': attribute type 27 has an invalid length. [ 335.306751][T11754] syzkaller0: entered promiscuous mode [ 335.330338][T11754] syzkaller0: entered allmulticast mode [ 335.510224][ T6464] wlan1: Trigger new scan to find an IBSS to join [ 335.814194][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1423'. [ 335.849598][T11781] bond10: option tlb_dynamic_lb: invalid value (5) [ 335.876502][T11781] bond10 (unregistering): Released all slaves [ 335.940322][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1423'. [ 336.003303][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 336.188160][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 336.243526][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 336.280312][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 336.291314][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 336.331499][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1427'. [ 336.667394][T11821] xt_CT: No such helper "snmp" [ 336.867229][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 337.118033][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 337.139406][T11847] netlink: 'syz.4.1438': attribute type 26 has an invalid length. [ 337.152472][T11843] team0: No ports can be present during mode change [ 337.161179][T11846] netlink: 'syz.4.1438': attribute type 26 has an invalid length. [ 337.174473][T11849] SET target dimension over the limit! [ 337.195726][T11847] netlink: 'syz.4.1438': attribute type 26 has an invalid length. [ 337.400071][T11857] netlink: 'syz.0.1440': attribute type 15 has an invalid length. [ 337.497417][T11862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.544353][T11826] delete_channel: no stack [ 338.185228][T11895] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 338.555499][ T140] wlan1: Trigger new scan to find an IBSS to join [ 338.764465][T11910] x_tables: duplicate underflow at hook 1 [ 338.928421][T11923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.964768][T11952] team0: No ports can be present during mode change [ 340.581746][T11928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.623654][T11928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.836224][T11989] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 341.003121][T11989] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.031746][T11973] syzkaller0: entered promiscuous mode [ 341.044585][ T5935] IPVS: starting estimator thread 0... [ 341.059030][T11973] syzkaller0: entered allmulticast mode [ 341.094007][T12002] x_tables: duplicate underflow at hook 3 [ 341.142701][T11928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.154930][T11928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.171720][T11999] IPVS: using max 31 ests per chain, 74400 per kthread [ 341.334017][T11928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.348335][T11928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.421733][T12010] __nla_validate_parse: 10 callbacks suppressed [ 341.421757][T12010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1472'. [ 341.511979][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.363408][T11928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.401523][T11928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.536324][T12010] netlink: 'syz.4.1472': attribute type 12 has an invalid length. [ 342.575719][T12021] team0: No ports can be present during mode change [ 342.805979][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 342.832029][T12026] bond10: option xmit_hash_policy: invalid value (10) [ 342.851467][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 342.857260][T12026] bond10 (unregistering): Released all slaves [ 342.882882][T12037] xt_TCPMSS: Only works on TCP SYN packets [ 342.903979][T12040] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.002535][ T6464] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.016458][ T6464] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.071740][ T6464] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.091372][ T6464] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.133342][ T6464] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.153657][ T6464] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.228644][ T6464] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.247969][ T6464] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.741022][T12062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.836721][T12066] veth0_macvtap: left promiscuous mode [ 344.323366][T12100] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 344.446021][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'. [ 344.607262][T12109] syzkaller0: entered promiscuous mode [ 344.637767][T12109] syzkaller0: entered allmulticast mode [ 345.143455][ T30] audit: type=1800 audit(1777067671.735:4): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1500" name="memory.events" dev="tmpfs" ino=1666 res=0 errno=0 [ 345.817746][T12168] xt_ecn: cannot match TCP bits for non-tcp packets [ 346.175359][ T5507] veth0_macvtap: entered promiscuous mode [ 346.441551][T12185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.591012][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1510'. [ 346.735056][T12195] netlink: 'syz.0.1513': attribute type 17 has an invalid length. [ 346.840438][T12202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 347.071713][T12215] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 347.989131][T12255] netlink: 'syz.2.1525': attribute type 33 has an invalid length. [ 348.018015][T12255] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1525'. [ 348.045586][T12255] `: renamed from team0 (while UP) [ 348.151334][T12259] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1524'. [ 348.640948][T12272] netlink: 'syz.1.1527': attribute type 1 has an invalid length. [ 348.651015][T12272] netlink: 'syz.1.1527': attribute type 2 has an invalid length. [ 348.854771][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 349.027829][T12281] netlink: 173788 bytes leftover after parsing attributes in process `syz.1.1529'. [ 350.242796][T12226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.553942][T12286] netlink: 'syz.1.1531': attribute type 9 has an invalid length. [ 350.589395][T12286] netlink: 'syz.1.1531': attribute type 7 has an invalid length. [ 350.623577][T12286] netlink: 'syz.1.1531': attribute type 8 has an invalid length. [ 350.825461][T12307] xt_hashlimit: size too large, truncated to 1048576 [ 353.209150][T12373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.974615][T12426] raw_sendmsg: syz.0.1554 forgot to set AF_INET. Fix it! [ 355.450529][T12442] Bluetooth: MGMT ver 1.23 [ 355.543390][T12430] syzkaller1: entered promiscuous mode [ 355.563560][T12430] syzkaller1: entered allmulticast mode [ 356.017262][T12456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.602676][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 357.085546][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1567'. [ 357.311269][T12497] sctp: [Deprecated]: syz.3.1570 (pid 12497) Use of int in maxseg socket option. [ 357.311269][T12497] Use struct sctp_assoc_value instead [ 357.399265][T12499] openvswitch: netlink: IP tunnel dst address not specified [ 357.643687][T12497] tipc: Enabled bearer , priority 0 [ 357.880506][T12511] IPv6: NLM_F_REPLACE set, but no existing node found! [ 358.062388][T12489] tipc: Disabling bearer [ 358.196170][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 358.359329][T12521] batadv_slave_1: entered promiscuous mode [ 358.391534][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 358.644475][T12521] batadv_slave_1 (unregistering): left promiscuous mode [ 358.893211][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 358.932809][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 358.984754][T12541] netlink: 'syz.4.1582': attribute type 5 has an invalid length. [ 359.202003][T12552] ip6erspan0: entered promiscuous mode [ 359.219513][T12552] ip6erspan0: entered allmulticast mode [ 359.591389][T12561] vlan3: entered allmulticast mode [ 359.613045][T12561] bridge_slave_0: entered allmulticast mode [ 359.630584][T12561] bridge0: port 1(vlan3) entered blocking state [ 359.650896][T12561] bridge0: port 1(vlan3) entered disabled state [ 359.685721][T12561] vlan3: entered promiscuous mode [ 359.703502][T12561] bridge_slave_0: entered promiscuous mode [ 359.764090][T12563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.867942][T12574] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1589'. [ 359.908542][T12574] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1589'. [ 360.059909][T12581] nftables ruleset with unbound chain [ 360.492413][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 360.606264][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 361.102875][T12627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.333444][T12637] dummy0: entered promiscuous mode [ 361.560983][T12648] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 361.714376][T12646] netlink: 'syz.2.1604': attribute type 11 has an invalid length. [ 362.007011][T12665] syzkaller0: entered promiscuous mode [ 362.026082][T12665] syzkaller0: entered allmulticast mode [ 362.622587][T12685] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.888818][T12690] __nla_validate_parse: 1 callbacks suppressed [ 362.888839][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 362.926477][T12690] netlink: 'syz.1.1615': attribute type 13 has an invalid length. [ 362.946359][T12690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1615'. [ 362.974197][T12696] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1616'. [ 363.058910][T12696] gretap1: entered allmulticast mode [ 363.106392][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 363.401163][T12706] bond9: entered promiscuous mode [ 363.406742][T12706] bond9: entered allmulticast mode [ 368.216380][T12723] gtp1: entered promiscuous mode [ 368.222383][T12723] gtp1: entered allmulticast mode [ 368.236463][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 368.486958][T12736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.720131][T12742] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 369.467400][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1632'. [ 369.874175][T12788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.672216][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 371.010914][T12830] nr0: tun_chr_ioctl cmd 1074025677 [ 371.017453][T12830] nr0: linktype set to 774 [ 371.039274][T12830] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 371.236162][T12839] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 371.250877][T12830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.371833][T12852] bridge6: entered allmulticast mode [ 371.653570][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'. [ 371.938481][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 372.132140][T12894] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1658'. [ 372.500534][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 372.857328][T12876] lec:lec_atm_close: lec0: Shut down! [ 372.946310][T12930] openvswitch: netlink: Invalid VLAN frame [ 373.174212][T12941] netlink: 'syz.4.1669': attribute type 62 has an invalid length. [ 373.367624][T12947] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1670'. [ 373.607882][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1674'. [ 373.666977][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1674'. [ 373.764588][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 373.811627][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 373.866292][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'. [ 373.877701][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1676'. [ 374.092981][T12978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1676'. [ 374.397715][T12989] pimreg: entered allmulticast mode [ 374.444629][T12989] pimreg: left allmulticast mode [ 374.614627][T12998] netlink: 'syz.4.1682': attribute type 9 has an invalid length. [ 374.720248][ T5935] lec:lec_start_xmit: lec0:No lecd attached [ 376.177613][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1692'. [ 376.230259][T13060] openvswitch: netlink: Flow key attr not present in new flow. [ 376.306088][T13056] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1692'. [ 376.370241][T13056] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 376.797625][T13076] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 377.084446][T13086] nbd: must specify at least one socket [ 377.267034][T13093] netlink: 'syz.0.1699': attribute type 3 has an invalid length. [ 377.590755][T13107] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 377.658331][T13107] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.830886][T13116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.263051][T13125] syzkaller0: entered promiscuous mode [ 378.269527][T13125] syzkaller0: entered allmulticast mode [ 378.390905][T13130] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 378.449567][T13130] bond9: entered promiscuous mode [ 378.456970][T13130] 8021q: adding VLAN 0 to HW filter on device bond9 [ 378.519593][T13130] __nla_validate_parse: 4 callbacks suppressed [ 378.519616][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1709'. [ 378.607461][T13130] bond9: entered allmulticast mode [ 378.767049][T13154] xt_hashlimit: size too large, truncated to 1048576 [ 378.803184][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1709'. [ 379.642780][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1719'. [ 379.670090][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 379.697976][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1720'. [ 379.732223][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1720'. [ 379.887695][T13201] netlink: 'syz.1.1722': attribute type 4 has an invalid length. [ 379.909692][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 379.921081][ C0] lec:lec_tx_timeout: lec0 [ 379.926312][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.934826][T13200] netlink: 'syz.3.1721': attribute type 2 has an invalid length. [ 379.990289][T13200] netlink: 'syz.3.1721': attribute type 2 has an invalid length. [ 380.119301][T13203] macsec1: entered promiscuous mode [ 380.147329][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 380.343970][T13212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1724'. [ 380.604909][T13215] nbd1: detected capacity change from 0 to 63 [ 380.625933][ T50] block nbd1: Receive control failed (result -32) [ 380.646198][T13217] netlink: 'syz.0.1726': attribute type 13 has an invalid length. [ 380.695050][T12994] block nbd1: Dead connection, failed to find a fallback [ 380.747648][T12994] block nbd1: shutting down sockets [ 380.768588][T12994] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 380.805857][T13223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1727'. [ 380.838494][T12994] Buffer I/O error on dev nbd1, logical block 0, async page read [ 380.866809][T12994] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 380.930464][T12994] Buffer I/O error on dev nbd1, logical block 1, async page read [ 380.931460][T13217] netlink: 'syz.0.1726': attribute type 13 has an invalid length. [ 380.954945][T12994] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 380.992401][T12994] Buffer I/O error on dev nbd1, logical block 2, async page read [ 381.020630][T12994] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.059347][T12994] Buffer I/O error on dev nbd1, logical block 3, async page read [ 381.108715][T12994] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.157312][T12994] Buffer I/O error on dev nbd1, logical block 0, async page read [ 381.206110][T12994] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.245687][T12994] Buffer I/O error on dev nbd1, logical block 1, async page read [ 381.270769][T12994] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.287297][T12994] Buffer I/O error on dev nbd1, logical block 2, async page read [ 381.330670][T12994] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.384247][T12994] Buffer I/O error on dev nbd1, logical block 3, async page read [ 381.416595][T12994] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.447823][T13235] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 381.461012][T13235] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 381.461028][T12994] Buffer I/O error on dev nbd1, logical block 0, async page read [ 381.470260][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.2.1732 Not tainted syzkaller #0 PREEMPT(full) [ 381.470291][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 381.470306][T13235] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 381.470361][T13235] Code: 4b f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f7 c8 b6 f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 da c8 b6 f8 4d 8b 1f 4c 89 f7 89 [ 381.470380][T13235] RSP: 0018:ffffc9000525f0a8 EFLAGS: 00010202 [ 381.535009][T13235] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff8880514c1ec0 [ 381.543123][T13235] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888057f0f240 [ 381.552174][T13235] RBP: 0000000000000002 R08: ffff88807b8a9eeb R09: 1ffff1100f7153dd [ 381.560638][T13235] R10: dffffc0000000000 R11: ffffed100f7153de R12: dffffc0000000000 [ 381.568996][T13235] R13: dffffc0000000000 R14: ffff888057f0f240 R15: 0000000000000068 [ 381.577696][T13235] FS: 00007f7f7bed76c0(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 381.587445][T13235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.594901][T13235] CR2: 0000000000000000 CR3: 000000005070a000 CR4: 00000000003526f0 [ 381.603501][T13235] Call Trace: [ 381.606923][T13235] [ 381.610179][T13235] udp_tunnel_sock_release+0x6f/0x80 [ 381.615966][T13235] rxe_net_del+0x1eb/0x2e0 [ 381.621307][T13235] rxe_dellink+0x15/0x20 [ 381.625665][T13235] nldev_dellink+0x304/0x3d0 [ 381.630905][T13235] ? __pfx_nldev_dellink+0x10/0x10 [ 381.639099][T13235] ? apparmor_capable+0x126/0x170 [ 381.645411][T13235] ? bpf_lsm_capable+0x9/0x20 [ 381.650822][T13235] ? security_capable+0x7e/0x2c0 [ 381.656945][T13235] ? __pfx_nldev_dellink+0x10/0x10 [ 381.662800][T13235] rdma_nl_rcv+0x6d1/0xa10 [ 381.668081][T13235] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 381.673691][T13235] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.679022][T13235] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.684700][T13235] netlink_unicast+0x75c/0x8e0 [ 381.691250][T13235] netlink_sendmsg+0x813/0xb40 [ 381.696449][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.702167][T13235] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.707150][T13235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.712483][T13235] ____sys_sendmsg+0x972/0x9f0 [ 381.717752][T13235] ? __might_fault+0xaf/0x130 [ 381.722746][T13235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.728851][T13235] ? import_iovec+0x73/0xa0 [ 381.733915][T13235] ___sys_sendmsg+0x2a5/0x360 [ 381.739113][T13235] ? __lock_acquire+0x6b5/0x2cf0 [ 381.744359][T13235] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.750222][T13235] ? futex_wait+0x2a2/0x390 [ 381.755285][T13235] ? __fget_files+0x2a/0x420 [ 381.760423][T13235] ? __fget_files+0x3a0/0x420 [ 381.765740][T13235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.771939][T13235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.777748][T13235] ? rcu_is_watching+0x15/0xb0 [ 381.782821][T13235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.788936][T13235] do_syscall_64+0x15f/0xf80 [ 381.793874][T13235] ? trace_irq_disable+0x3b/0x140 [ 381.799316][T13235] ? clear_bhb_loop+0x40/0x90 [ 381.804396][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.810422][T13235] RIP: 0033:0x7f7f7af9cdd9 [ 381.815490][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.838005][T13235] RSP: 002b:00007f7f7bed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.847185][T13235] RAX: ffffffffffffffda RBX: 00007f7f7b215fa0 RCX: 00007f7f7af9cdd9 [ 381.856561][T13235] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000003 [ 381.866226][T13235] RBP: 00007f7f7b032d69 R08: 0000000000000000 R09: 0000000000000000 [ 381.875208][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.884091][T13235] R13: 00007f7f7b216038 R14: 00007f7f7b215fa0 R15: 00007ffd74493de8 [ 381.893096][T13235] [ 381.896250][T13235] Modules linked in: [ 381.901307][T13235] ---[ end trace 0000000000000000 ]--- [ 381.907972][T12994] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.910392][T13235] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 381.928756][T12994] Buffer I/O error on dev nbd1, logical block 1, async page read [ 381.932325][T13235] Code: 4b f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f7 c8 b6 f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 da c8 b6 f8 4d 8b 1f 4c 89 f7 89 [ 381.962179][T12994] ldm_validate_partition_table(): Disk read failed. [ 381.981240][T12994] Dev nbd1: unable to read RDB block 0 [ 381.992848][T13237] smc: removing ib device !yz! [ 382.000303][T12994] nbd1: unable to read partition table [ 382.047985][T12994] ldm_validate_partition_table(): Disk read failed. [ 382.075278][T13235] RSP: 0018:ffffc9000525f0a8 EFLAGS: 00010202 [ 382.096136][T12994] Dev nbd1: unable to read RDB block 0 [ 382.098408][T13235] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff8880514c1ec0 [ 382.113402][T13235] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888057f0f240 [ 382.122819][T13235] RBP: 0000000000000002 R08: ffff88807b8a9eeb R09: 1ffff1100f7153dd [ 382.131904][T12994] nbd1: unable to read partition table [ 382.156706][T13235] R10: dffffc0000000000 R11: ffffed100f7153de R12: dffffc0000000000 [ 382.176573][T13235] R13: dffffc0000000000 R14: ffff888057f0f240 R15: 0000000000000068 [ 382.198854][T13235] FS: 00007f7f7bed76c0(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 382.220754][T13235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.236501][T13235] CR2: 00007f8047e56e9c CR3: 000000005070a000 CR4: 00000000003526f0 [ 382.320953][T13235] Kernel panic - not syncing: Fatal exception [ 382.328672][T13235] Kernel Offset: disabled [ 382.333553][T13235] Rebooting in 86400 seconds..